$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: fkT1wFWU+LHeX33KdwkHOiFDXiQOR79fYgVfa0AjRxM= Subject key identifier: A9:58:0A:60:AF:8C:8B:87:58:4C:DF:43:8A:A1:50:90:F5:E4:52:72 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 27337C431FDFD13202CB2C399D1AB57F1DF6D1E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 0136 Signing time: Fri 27 Feb 2026 22:42:29 +0000 Manifest this update: Fri 27 Feb 2026 22:37:29 +0000 Manifest next update: Tue 03 Mar 2026 04:05:29 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: vhGwPIeQHVm4fhLgjWE4wzrdMz/jW8gJyiqwYuh747Q=) 2: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: zkuKMztQVpFbP+vk6UzTgul838fsU3IH99wSxRmRYwI=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: H9WqLzpvYSuK/B/L3gCrtZiwzcm3LxndpPpvqu0Mgro=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: SO5xBVrlUoLYhhClYcL1ic80BzUIAtIXFSuHANOZ2Dc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:33:7c:43:1f:df:d1:32:02:cb:2c:39:9d:1a:b5:7f:1d:f6:d1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Feb 27 22:37:29 2026 GMT Not After : Mar 3 04:05:29 2026 GMT Subject: CN=A9580A60AF8C8B87584CDF438AA15090F5E45272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:ad:35:5b:ca:26:69:12:75:69:08:00:66: 3a:c2:63:74:92:86:53:51:72:0e:1d:09:af:8c:a9: 23:f2:14:3b:71:ed:31:eb:9f:60:c0:97:b9:36:cf: 5e:8e:91:23:c9:01:56:30:f2:7a:eb:8e:63:6c:c6: 4e:49:bc:a5:f2:4d:db:9b:d2:06:78:47:96:27:f2: b4:27:47:51:2e:ea:85:1c:17:6e:73:18:2b:92:be: db:6a:00:bc:ed:9b:16:a1:b1:6a:07:c8:b5:e5:93: 3c:a2:fc:6b:1b:e9:5d:97:32:2a:21:0a:c2:41:b8: e4:c9:2b:85:4c:d5:41:2a:29:67:e0:1d:b0:b7:37: 7f:f6:26:de:bb:97:86:7a:f5:db:be:6d:00:b7:ef: 9e:b4:4d:b4:16:4c:6a:d3:2a:85:a9:f0:62:b5:e9: b5:bd:02:6f:8d:c4:97:02:86:35:54:b5:ed:ac:c8: 36:a5:33:0f:13:70:7d:08:68:36:fb:9a:e1:41:e4: d6:8c:f4:70:fb:23:e0:0a:95:17:8f:2f:fc:fc:72: 31:9a:04:69:a4:33:7a:56:7f:e4:b3:88:21:12:72: 76:03:7d:f6:90:5d:6c:90:c6:3a:7f:0f:2e:79:db: ae:8e:48:79:13:6b:24:ce:a4:70:7f:77:5a:c5:08: 58:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:0A:60:AF:8C:8B:87:58:4C:DF:43:8A:A1:50:90:F5:E4:52:72 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:87:92:e2:08:8a:68:d1:c8:e6:fc:68:71:ae:69:87:1b:cf: a5:1a:ce:54:34:2d:c7:99:ec:c5:00:3f:e3:c8:5e:de:c7:4c: 59:55:aa:d2:3c:cd:d0:a9:31:65:9e:19:8e:ec:0d:2a:bb:ab: c3:0b:0f:e5:ae:be:61:a1:e3:2a:62:52:40:18:da:79:d8:f9: e3:e5:47:1a:ed:ab:9b:d9:d6:24:ca:1f:05:f2:f0:f4:87:c4: 53:7b:63:b4:f1:2e:95:96:d4:06:7b:a6:60:28:6d:b6:e5:6e: a9:76:5e:e3:f6:a8:bd:53:24:81:da:94:e9:1c:29:1b:8e:8c: ef:b5:9b:6c:ed:d2:2f:c5:93:28:c5:a2:5f:bc:86:80:07:5b: fd:56:ed:57:5f:74:99:ce:e2:f1:88:c6:b2:98:25:96:18:fa: 56:f7:41:5a:a4:27:93:1c:3c:74:5a:b1:0f:4b:4b:ee:5c:1d: 58:eb:40:bf:81:65:0c:9c:7f:e9:d1:3c:cb:3f:9a:92:23:11: 42:c8:e1:5e:ca:ad:2e:55:8a:b8:6d:48:fe:60:9d:a2:c5:b5: 8a:e2:c8:23:c1:6a:19:ad:6c:52:ff:5a:cd:32:c2:a5:a4:3c: 10:37:67:c3:48:52:33:89:a7:d9:27:3f:2f:15:b8:7a:3e:58: 75:0b:88:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzN8Qx/f0TICyyw5nRq1fx320eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNjAyMjcyMjM3MjlaFw0yNjAzMDMwNDA1MjlaMDMxMTAvBgNV BAMTKEE5NTgwQTYwQUY4QzhCODc1ODRDREY0MzhBQTE1MDkwRjVFNDUyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNK01W8omaRJ1aQgAZjrCY3SS hlNRcg4dCa+MqSPyFDtx7THrn2DAl7k2z16OkSPJAVYw8nrrjmNsxk5JvKXyTdub 0gZ4R5Yn8rQnR1Eu6oUcF25zGCuSvttqALztmxahsWoHyLXlkzyi/Gsb6V2XMioh CsJBuOTJK4VM1UEqKWfgHbC3N3/2Jt67l4Z69du+bQC37560TbQWTGrTKoWp8GK1 6bW9Am+NxJcChjVUte2syDalMw8TcH0IaDb7muFB5NaM9HD7I+AKlRePL/z8cjGa BGmkM3pWf+SziCEScnYDffaQXWyQxjp/Dy55266OSHkTayTOpHB/d1rFCFjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqVgKYK+Mi4dYTN9DiqFQkPXkUnIwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6HkuIIimjRyOb8aHGuaYcbz6UazlQ0LceZ 7MUAP+PIXt7HTFlVqtI8zdCpMWWeGY7sDSq7q8MLD+WuvmGh4ypiUkAY2nnY+ePl Rxrtq5vZ1iTKHwXy8PSHxFN7Y7TxLpWW1AZ7pmAobbblbql2XuP2qL1TJIHalOkc KRuOjO+1m2zt0i/FkyjFol+8hoAHW/1W7VdfdJnO4vGIxrKYJZYY+lb3QVqkJ5Mc PHRasQ9LS+5cHVjrQL+BZQycf+nRPMs/mpIjEULI4V7KrS5VirhtSP5gnaLFtYri yCPBahmtbFL/Ws0ywqWkPBA3Z8NIUjOJp9knPy8VuHo+WHULiFg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:53:54 2026 by rpki-client