$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: ByUFJcxka9oPy77vgHpfaU28hnlq6eVDcbHKIlkTzI8= Subject key identifier: EE:92:68:D2:1D:AC:6B:F6:B0:0A:0B:AC:53:E9:7A:BA:2E:03:05:34 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 6F02F524A98CDA49070D399E17A370EBF6CB9A0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 024E Signing time: Sun 01 Mar 2026 06:42:53 +0000 Manifest this update: Sun 01 Mar 2026 06:37:53 +0000 Manifest next update: Wed 04 Mar 2026 09:50:53 +0000 Files and hashes: 1: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) 2: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: Hvv7UwvkVrPWh3voia32WktQRoGBCDKC14l0yd7usn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:02:f5:24:a9:8c:da:49:07:0d:39:9e:17:a3:70:eb:f6:cb:9a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Mar 1 06:37:53 2026 GMT Not After : Mar 4 09:50:53 2026 GMT Subject: CN=EE9268D21DAC6BF6B00A0BAC53E97ABA2E030534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:81:af:fd:76:f7:ed:1c:9a:f4:54:26:55: af:49:ae:ea:64:ae:18:3b:66:cc:f6:16:ad:28:f9: 05:61:b9:38:f3:76:ca:1b:a1:f8:57:0c:6e:6a:ce: f8:b5:3c:93:5b:ab:bb:71:df:0d:a8:0e:50:b4:34: 1a:3f:0e:98:5e:de:f3:a2:ca:f0:6d:62:26:96:99: 6d:7f:e0:e7:ac:c6:7e:d1:c5:72:44:e7:44:e3:4b: 1e:32:dd:6b:5f:96:3b:85:11:16:fb:d2:01:64:ee: c6:37:ab:5f:36:2c:09:4e:08:3b:10:f7:e1:4b:9a: e9:72:22:e6:0e:db:bf:5e:10:8c:c9:9a:5e:dc:ef: 21:24:fd:f1:34:11:e6:63:ec:ac:b2:52:d3:83:28: 94:0e:34:0c:d7:f1:c0:e0:56:3c:52:00:fb:7c:6e: 2a:16:4f:db:5e:3c:db:69:9b:7b:f5:44:12:20:02: 40:26:42:92:64:73:b2:ab:39:dd:41:d1:6b:32:45: a5:26:d5:33:5a:6b:38:f1:fc:a6:8b:7f:7a:63:5a: 83:0a:27:d5:cc:31:9c:d9:4f:30:a9:73:9d:34:cc: 65:68:a0:c5:e5:83:93:c8:c3:f0:07:92:ab:4f:2b: bf:4f:49:c5:21:41:f2:25:b5:f1:16:56:9b:37:96: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:92:68:D2:1D:AC:6B:F6:B0:0A:0B:AC:53:E9:7A:BA:2E:03:05:34 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:37:04:d4:c9:f9:2e:ea:89:02:48:96:c8:74:ba:e3:cc:68: a3:fb:09:14:d3:bb:d9:09:15:cf:b4:59:65:45:eb:b1:27:5c: 20:9b:61:46:b4:93:61:34:1a:7f:b1:75:14:f6:38:6f:7f:31: 4a:f0:4d:8f:25:0b:c5:63:23:f0:b1:16:2c:3c:8d:6b:48:a5: 04:36:5b:50:a7:07:2c:b5:14:31:5b:44:f5:dd:87:38:a9:7e: 01:b4:85:f3:a4:da:a1:7e:4c:e1:ef:72:de:30:fe:e5:99:a2: ab:48:40:75:d4:dd:58:ee:44:1f:1d:cd:ca:96:ba:e2:9e:4a: 47:23:e1:7d:23:08:41:01:55:bf:5d:76:e7:b4:4d:22:87:ae: 71:e3:67:a9:55:7a:0c:bd:a0:91:56:e7:eb:da:75:04:fb:00: 0b:fd:d0:ae:72:77:24:35:1c:11:81:5e:83:a9:5d:f2:2b:1f: cb:bd:95:ac:db:a8:c2:3d:ec:1d:17:5f:02:38:7f:af:f4:65: fe:ff:10:32:13:73:11:d0:6c:fb:93:b9:ea:b1:8b:cb:78:c1: c3:76:d2:25:0b:0a:54:47:dd:fc:1b:3e:73:44:49:af:47:1f: 89:05:ec:54:25:aa:91:aa:1d:94:53:57:a1:50:03:61:5e:c5: 99:f2:7f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwL1JKmM2kkHDTmeF6Nw6/bLmgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNjAzMDEwNjM3NTNaFw0yNjAzMDQwOTUwNTNaMDMxMTAvBgNV BAMTKEVFOTI2OEQyMURBQzZCRjZCMDBBMEJBQzUzRTk3QUJBMkUwMzA1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnIGv/Xb37Rya9FQmVa9Jrupk rhg7Zsz2Fq0o+QVhuTjzdsobofhXDG5qzvi1PJNbq7tx3w2oDlC0NBo/Dphe3vOi yvBtYiaWmW1/4Oesxn7RxXJE50TjSx4y3WtfljuFERb70gFk7sY3q182LAlOCDsQ 9+FLmulyIuYO279eEIzJml7c7yEk/fE0EeZj7KyyUtODKJQONAzX8cDgVjxSAPt8 bioWT9tePNtpm3v1RBIgAkAmQpJkc7KrOd1B0WsyRaUm1TNaazjx/KaLf3pjWoMK J9XMMZzZTzCpc500zGVooMXlg5PIw/AHkqtPK79PScUhQfIltfEWVps3liQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7pJo0h2sa/awCgusU+l6ui4DBTQwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU3BNTJ+S7qiQJIlsh0uuPMaKP7CRTTu9kJ Fc+0WWVF67EnXCCbYUa0k2E0Gn+xdRT2OG9/MUrwTY8lC8VjI/CxFiw8jWtIpQQ2 W1CnByy1FDFbRPXdhzipfgG0hfOk2qF+TOHvct4w/uWZoqtIQHXU3VjuRB8dzcqW uuKeSkcj4X0jCEEBVb9ddue0TSKHrnHjZ6lVegy9oJFW5+vadQT7AAv90K5ydyQ1 HBGBXoOpXfIrH8u9lazbqMI97B0XXwI4f6/0Zf7/EDITcxHQbPuTueqxi8t4wcN2 0iULClRH3fwbPnNESa9HH4kF7FQlqpGqHZRTV6FQA2FexZnyf4E= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:36 2026 by rpki-client