$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: zuvD6A+juDKQwbbcR4Cq500IGcJjiGHGfSlXKGVFEn4= Subject key identifier: 36:3C:45:84:0B:1F:26:59:6B:B8:AB:D3:2B:5D:BF:66:61:87:BF:86 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 355D5DAD62C85082661CB5EDD783195C9F43719C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 01FE Signing time: Sun 01 Mar 2026 01:42:27 +0000 Manifest this update: Sun 01 Mar 2026 01:37:27 +0000 Manifest next update: Wed 04 Mar 2026 07:03:27 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: Bv8GvXAWpJuOQ2Ct96QK+mo1xI0B5ow3KRvIax0cz0Y=) 2: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: mw/3oGCmZT108E8Q0g0zeYGFegTybaMOkZzsMlFtGQ8=) 3: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=) 4: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: B02zznSj53vCPLSTA7DV+eRDCoVZUhQQ52W/39nkQeU=) 5: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: QMffE6ZO0oIBD+UPOSpX/URye6oY0aJnDmCuAJpKngs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5d:5d:ad:62:c8:50:82:66:1c:b5:ed:d7:83:19:5c:9f:43:71:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Mar 1 01:37:27 2026 GMT Not After : Mar 4 07:03:27 2026 GMT Subject: CN=363C45840B1F26596BB8ABD32B5DBF666187BF86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:47:2b:0d:5c:b7:03:21:cb:b4:f8:f5:a6:73: cd:df:7b:f5:83:80:1e:fb:04:ae:53:8d:ea:51:37: bb:80:1c:31:d8:33:91:ae:a8:57:14:d1:89:d4:8a: 00:b1:2d:4e:60:5f:b9:36:67:0a:40:62:a6:b6:27: 46:3c:0e:63:7d:0c:cf:58:4e:3c:37:5d:5e:b0:ab: 6d:1c:b7:05:6f:4c:e8:40:27:f8:95:89:80:7b:e5: 23:d5:15:40:98:0c:ae:2f:4f:59:a0:ae:41:c1:76: 11:8d:94:5c:3d:a5:db:75:19:d3:45:51:da:ba:ad: 20:b5:91:56:fe:3e:63:4b:d2:44:05:96:a5:2b:24: 66:0d:6c:4b:cc:9d:2a:37:e0:93:d0:b5:2d:41:09: fc:34:04:c6:c6:a6:79:a9:c4:42:33:59:e0:db:2e: 9f:fd:84:9b:1d:14:7c:d0:d5:91:7a:f1:35:0b:91: c7:16:e2:7c:89:92:5a:21:f1:91:ac:39:3e:46:2a: 79:76:98:9a:26:c0:f8:8d:c5:90:e5:97:92:9e:3a: 14:82:7a:d9:91:9e:ca:60:2b:54:f5:e4:c9:6b:ef: af:de:5e:c1:a0:0a:06:93:9e:82:c5:85:1c:7e:6f: 19:b0:61:7e:70:45:43:e9:2a:fd:24:b3:21:1d:2e: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:45:84:0B:1F:26:59:6B:B8:AB:D3:2B:5D:BF:66:61:87:BF:86 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c5:95:14:15:89:8e:dc:b7:b6:9d:21:cc:5b:60:a7:74:07: d1:86:8e:28:f6:c3:80:19:e4:39:df:2a:ae:93:e6:64:c0:06: 09:b5:87:b5:a2:c4:fd:b6:e4:04:dc:e0:9a:a7:4a:d5:5e:e8: 8f:9d:86:f8:2e:71:e7:ba:7b:66:e6:e2:39:0c:42:ed:ee:80: d5:5f:fa:30:65:63:7a:b1:4f:53:1e:31:e9:cd:06:bf:d9:77: 2a:41:ca:12:62:ea:82:a5:a8:cc:2e:5b:c8:07:ba:69:23:1f: dc:5f:c6:bb:6c:a4:12:50:5a:f2:0a:83:02:da:bd:37:30:5d: 38:c3:b3:79:29:7a:79:7a:48:e7:6d:35:55:0b:06:95:3e:6d: 84:b9:85:f2:46:b6:fe:34:20:7e:84:f8:54:ad:0d:5d:95:61: a2:f7:49:ca:96:a2:81:ad:6c:5f:9d:8f:13:fa:bf:0c:49:7a: f6:b8:a6:17:dc:6f:88:7d:5b:d0:61:98:81:88:a2:66:88:59: 57:f7:b7:0f:98:9c:48:ef:0e:33:b3:5d:b0:87:41:3a:06:a5: 8f:67:d6:6b:9d:80:89:ce:6e:be:47:68:13:65:6f:73:4d:49: c6:b6:20:9c:f7:bb:4f:02:44:67:01:da:c0:fb:ba:ed:a4:3f: de:f7:ad:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNV1drWLIUIJmHLXt14MZXJ9DcZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNjAzMDEwMTM3MjdaFw0yNjAzMDQwNzAzMjdaMDMxMTAvBgNV BAMTKDM2M0M0NTg0MEIxRjI2NTk2QkI4QUJEMzJCNURCRjY2NjE4N0JGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRysNXLcDIcu0+PWmc83fe/WD gB77BK5TjepRN7uAHDHYM5GuqFcU0YnUigCxLU5gX7k2ZwpAYqa2J0Y8DmN9DM9Y Tjw3XV6wq20ctwVvTOhAJ/iViYB75SPVFUCYDK4vT1mgrkHBdhGNlFw9pdt1GdNF Udq6rSC1kVb+PmNL0kQFlqUrJGYNbEvMnSo34JPQtS1BCfw0BMbGpnmpxEIzWeDb Lp/9hJsdFHzQ1ZF68TULkccW4nyJkloh8ZGsOT5GKnl2mJomwPiNxZDll5KeOhSC etmRnspgK1T15Mlr76/eXsGgCgaTnoLFhRx+bxmwYX5wRUPpKv0ksyEdLrHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjxFhAsfJllruKvTK12/ZmGHv4YwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLFlRQViY7ct7adIcxbYKd0B9GGjij2w4AZ 5DnfKq6T5mTABgm1h7WixP225ATc4JqnStVe6I+dhvgucee6e2bm4jkMQu3ugNVf +jBlY3qxT1MeMenNBr/ZdypByhJi6oKlqMwuW8gHumkjH9xfxrtspBJQWvIKgwLa vTcwXTjDs3kpenl6SOdtNVULBpU+bYS5hfJGtv40IH6E+FStDV2VYaL3ScqWooGt bF+djxP6vwxJeva4phfcb4h9W9BhmIGIomaIWVf3tw+YnEjvDjOzXbCHQToGpY9n 1mudgInObr5HaBNlb3NNSca2IJz3u08CRGcB2sD7uu2kP973rbw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:45:28 2026 by rpki-client