$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: ZaJapx9yOettEbI2FiIq1keXVC1GTpeG3iO9c9Fxwrs= Subject key identifier: 31:AB:97:11:25:10:54:2E:B0:F3:CE:CB:4E:EC:A9:31:C6:55:9C:54 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 7B1588EABA2A4ABE9CC4FF2CB62FC04E45A104B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 0180 Signing time: Sun 19 Apr 2026 02:32:11 +0000 Manifest this update: Sun 19 Apr 2026 02:27:11 +0000 Manifest next update: Wed 22 Apr 2026 06:56:11 +0000 Files and hashes: 1: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: GHsBLUEzu/HtO6Q7+c9YuvhLc4WhYjA2D1oAHt/2X0g=) 2: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) 3: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 4: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:15:88:ea:ba:2a:4a:be:9c:c4:ff:2c:b6:2f:c0:4e:45:a1:04:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Apr 19 02:27:11 2026 GMT Not After : Apr 22 06:56:11 2026 GMT Subject: CN=31AB97112510542EB0F3CECB4EECA931C6559C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:6d:62:f7:e8:00:f9:52:14:c5:98:7f:b6: 32:15:2c:64:f7:eb:c6:d7:68:8a:fd:df:e1:b7:af: fd:d6:3d:20:6a:b0:48:8e:d2:a7:9e:07:94:c8:bf: dc:ae:f5:5d:6c:56:21:97:45:b0:ef:c4:6e:17:3f: e1:3d:1d:ef:e2:f1:13:84:cd:ec:f2:bf:4b:e2:19: ac:84:c4:d2:92:d0:64:bf:26:28:8a:a7:ff:91:2b: 31:4e:55:66:a6:1a:28:76:af:44:19:99:b0:f3:0b: 7f:78:e3:9c:c5:7f:85:2f:bd:b8:f4:ef:a4:48:92: 1c:ac:86:d1:7a:90:31:8f:35:ab:bc:1d:6a:17:2d: 63:b6:92:b4:f9:a5:da:b4:2c:f9:96:08:d0:d5:67: d5:d3:3d:52:cd:c3:fa:0e:13:35:00:d0:4f:54:d9: eb:70:35:9a:c0:fe:76:df:ed:c9:91:cb:f2:26:f1: 20:ab:ce:71:17:4e:cd:0b:09:43:da:70:b2:ac:5c: c0:4c:35:0b:14:77:b8:21:88:a7:de:a4:a5:6a:4d: b5:5b:34:40:3b:59:b0:90:bc:a3:ba:2b:b5:23:1f: dc:96:0d:0c:0b:b2:e4:9b:ee:15:db:5c:a0:5c:ef: 76:b6:ef:a7:1c:af:1b:b9:8b:34:c0:2d:6f:26:99: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AB:97:11:25:10:54:2E:B0:F3:CE:CB:4E:EC:A9:31:C6:55:9C:54 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:02:b3:01:63:2d:2b:6b:d7:cf:28:82:49:39:8c:9d:83:3d: d6:8f:76:76:10:e2:e2:9c:6e:20:65:7e:59:41:fe:65:e3:6d: 75:a7:2e:d2:4a:5b:9b:8b:25:0d:f0:5c:32:17:7f:1c:78:86: 08:6f:0a:87:61:f9:05:e2:9b:9d:de:9f:47:df:32:2b:a4:e9: 44:1c:65:f7:ed:42:23:7b:83:38:82:94:a1:bb:2b:ad:39:fd: 65:ed:8d:d4:b5:2b:33:91:cf:71:86:b6:24:91:ae:97:b1:2b: e5:26:af:21:4a:da:6e:6c:89:48:1e:55:be:a6:55:bd:d0:ed: 4e:1c:b7:dd:f7:32:76:27:ae:5d:54:7c:1d:01:6d:01:ed:43: 8a:ae:30:27:80:27:64:44:a4:b3:1d:b7:b7:c9:97:c9:02:12: 2f:8d:9f:37:26:2c:24:73:e0:49:96:c5:9c:3f:a4:a4:6b:39: be:7b:b3:73:e0:37:b0:55:4e:86:5a:4c:e9:46:a6:10:f2:17: 71:b5:3c:42:19:cb:a5:f1:45:78:a4:45:48:b0:24:85:46:b7: cd:fe:00:6a:bf:6c:73:91:a0:e7:de:73:c0:6c:50:a6:2e:5f: 82:df:61:59:46:05:ed:df:50:53:71:8f:d4:72:83:f8:9a:fa: 68:7f:ad:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexWI6roqSr6cxP8sti/ATkWhBLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNjA0MTkwMjI3MTFaFw0yNjA0MjIwNjU2MTFaMDMxMTAvBgNV BAMTKDMxQUI5NzExMjUxMDU0MkVCMEYzQ0VDQjRFRUNBOTMxQzY1NTlDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+T21i9+gA+VIUxZh/tjIVLGT3 68bXaIr93+G3r/3WPSBqsEiO0qeeB5TIv9yu9V1sViGXRbDvxG4XP+E9He/i8ROE zezyv0viGayExNKS0GS/JiiKp/+RKzFOVWamGih2r0QZmbDzC39445zFf4Uvvbj0 76RIkhyshtF6kDGPNau8HWoXLWO2krT5pdq0LPmWCNDVZ9XTPVLNw/oOEzUA0E9U 2etwNZrA/nbf7cmRy/Im8SCrznEXTs0LCUPacLKsXMBMNQsUd7ghiKfepKVqTbVb NEA7WbCQvKO6K7UjH9yWDQwLsuSb7hXbXKBc73a276ccrxu5izTALW8mmXy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMauXESUQVC6w887LTuypMcZVnFQwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUCswFjLStr188ogkk5jJ2DPdaPdnYQ4uKc biBlfllB/mXjbXWnLtJKW5uLJQ3wXDIXfxx4hghvCodh+QXim53en0ffMiuk6UQc ZfftQiN7gziClKG7K605/WXtjdS1KzORz3GGtiSRrpexK+UmryFK2m5siUgeVb6m Vb3Q7U4ct933MnYnrl1UfB0BbQHtQ4quMCeAJ2REpLMdt7fJl8kCEi+NnzcmLCRz 4EmWxZw/pKRrOb57s3PgN7BVToZaTOlGphDyF3G1PEIZy6XxRXikRUiwJIVGt83+ AGq/bHORoOfec8BsUKYuX4LfYVlGBe3fUFNxj9Ryg/ia+mh/raI= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:59 2026 by rpki-client