$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: 5c8Jgac8ag6JcpKwohlKXmH32yc7uJRRCXx+Dcvv7e8= Subject key identifier: A0:FE:D7:CD:28:C6:48:08:84:42:EF:A4:C9:2B:E7:0B:98:83:1B:C6 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 08A8C5B346CE4A12ADE3326305854487A3E5D8DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 0264 Signing time: Sat 18 Apr 2026 18:41:09 +0000 Manifest this update: Sat 18 Apr 2026 18:36:09 +0000 Manifest next update: Wed 22 Apr 2026 04:45:09 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: qP2bgcnw1JyPR9OUIbKtux1iBC/0Ot7nRDEnQdzQoBg=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: wYNa6rd/dtO703cZD6u8xpc4ciKefYn3NvgU9j9tLAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a8:c5:b3:46:ce:4a:12:ad:e3:32:63:05:85:44:87:a3:e5:d8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Apr 18 18:36:09 2026 GMT Not After : Apr 22 04:45:09 2026 GMT Subject: CN=A0FED7CD28C648088442EFA4C92BE70B98831BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:92:c7:f2:01:f3:e2:c2:46:4d:0b:a3:0d: f6:1e:6a:d9:96:0f:0a:59:00:ef:b6:59:4f:8c:46: 04:7e:92:c2:7f:21:db:90:25:50:ca:d1:5a:4e:8c: 18:37:73:2a:87:b5:d7:2d:91:00:4f:7c:65:f2:0b: ba:25:05:22:bd:36:71:e2:21:d6:3c:d9:32:31:ef: 87:3e:01:84:fc:65:2a:06:ca:63:3c:0e:14:d8:18: 48:b3:15:25:28:09:47:ff:8c:46:06:c9:5e:32:5f: 5d:5f:42:df:d5:33:3a:76:76:37:b0:01:f8:ad:55: 6c:ec:80:d7:5a:0b:69:3a:4b:98:79:0e:16:5e:0c: 3d:78:27:cd:8b:0e:9f:32:e1:57:64:4a:38:e0:f9: ab:d1:ca:95:c2:1c:cc:d6:3c:39:29:f2:ae:d9:a4: ba:f8:d0:58:2f:1a:ab:55:06:c1:da:91:aa:27:4b: df:64:76:b8:0b:c3:d8:7e:73:e1:35:ae:2a:ce:21: 44:74:76:b7:b5:0d:1d:bf:d4:a6:10:c9:88:bf:7e: 20:14:1e:7b:45:bb:b5:3c:56:8f:47:2b:bd:f5:70: e3:67:c3:6e:61:b8:37:16:6a:df:eb:b7:ba:06:e8: 84:15:e4:f0:e5:72:37:e2:d1:b6:02:5c:b4:10:97: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FE:D7:CD:28:C6:48:08:84:42:EF:A4:C9:2B:E7:0B:98:83:1B:C6 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:36:cb:ca:ed:08:14:e2:94:f1:62:a1:11:f5:a4:da:06:bb: 01:66:bb:42:a9:10:1f:cb:97:f6:40:30:c2:27:f9:db:9d:85: 9c:8b:d1:4c:91:8f:80:2e:e3:b3:7d:28:9e:35:2b:a1:81:5f: 9e:07:23:0c:05:8f:43:32:2e:fb:3f:40:56:5c:5b:1d:f7:69: 82:b5:7d:30:dd:66:11:73:d4:38:d0:db:82:84:7d:5a:61:15: 25:9c:04:46:f3:05:81:62:b0:e0:12:cd:7f:b7:35:41:17:ea: fe:0b:72:00:e8:3a:86:51:3f:95:72:75:31:5a:fb:e0:c1:57: 56:85:71:a5:80:e6:52:26:3f:0b:42:c5:f3:42:88:fb:16:4c: 7b:f4:81:5f:1b:ba:48:89:85:96:cd:37:97:10:92:b2:cf:a6: 28:99:e5:be:a4:62:02:f5:f0:7b:fd:a4:02:33:cf:c9:b2:0d: 84:df:96:34:ac:b3:b2:4a:50:11:b5:fa:3a:42:7a:7b:d5:06: e1:3b:3c:79:7a:aa:ea:3d:36:9a:14:9d:76:0b:09:0d:85:f0: 51:e2:18:7d:a9:e6:6b:fb:8f:d5:a6:a8:e5:30:70:6a:fb:1f: 44:9e:a0:54:7e:8a:4b:a7:d2:b1:3e:52:4d:25:54:8e:d6:26: 07:87:ae:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKjFs0bOShKt4zJjBYVEh6Pl2N0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNjA0MTgxODM2MDlaFw0yNjA0MjIwNDQ1MDlaMDMxMTAvBgNV BAMTKEEwRkVEN0NEMjhDNjQ4MDg4NDQyRUZBNEM5MkJFNzBCOTg4MzFCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCni5LH8gHz4sJGTQujDfYeatmW DwpZAO+2WU+MRgR+ksJ/IduQJVDK0VpOjBg3cyqHtdctkQBPfGXyC7olBSK9NnHi IdY82TIx74c+AYT8ZSoGymM8DhTYGEizFSUoCUf/jEYGyV4yX11fQt/VMzp2djew AfitVWzsgNdaC2k6S5h5DhZeDD14J82LDp8y4VdkSjjg+avRypXCHMzWPDkp8q7Z pLr40FgvGqtVBsHakaonS99kdrgLw9h+c+E1rirOIUR0dre1DR2/1KYQyYi/fiAU HntFu7U8Vo9HK731cONnw25huDcWat/rt7oG6IQV5PDlcjfi0bYCXLQQl7SrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoP7XzSjGSAiEQu+kySvnC5iDG8YwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIE2y8rtCBTilPFioRH1pNoGuwFmu0KpEB/L l/ZAMMIn+dudhZyL0UyRj4Au47N9KJ41K6GBX54HIwwFj0MyLvs/QFZcWx33aYK1 fTDdZhFz1DjQ24KEfVphFSWcBEbzBYFisOASzX+3NUEX6v4LcgDoOoZRP5VydTFa ++DBV1aFcaWA5lImPwtCxfNCiPsWTHv0gV8bukiJhZbNN5cQkrLPpiiZ5b6kYgL1 8Hv9pAIzz8myDYTfljSss7JKUBG1+jpCenvVBuE7PHl6quo9NpoUnXYLCQ2F8FHi GH2p5mv7j9WmqOUwcGr7H0SeoFR+ikun0rE+Uk0lVI7WJgeHrlA= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:33 2026 by rpki-client