$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: q7S4VNQ7AlVfcw8rPEGZsbvEDMkwHLUzoBs9EWQwtXk= Subject key identifier: 45:04:35:C0:F5:0A:41:B3:1D:53:67:8D:AD:4E:AD:E2:65:DD:54:2D Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 69DAA64DAD5BEBD1BF62DFCE1AF016ED095727F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 02E7 Signing time: Sun 19 Apr 2026 08:51:47 +0000 Manifest this update: Sun 19 Apr 2026 08:46:47 +0000 Manifest next update: Wed 22 Apr 2026 16:01:47 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: FoppADmkw7dbkbfAaJ4DszOfQJWmAI4XYzf02KlZeRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:da:a6:4d:ad:5b:eb:d1:bf:62:df:ce:1a:f0:16:ed:09:57:27:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Apr 19 08:46:47 2026 GMT Not After : Apr 22 16:01:47 2026 GMT Subject: CN=450435C0F50A41B31D53678DAD4EADE265DD542D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:db:1c:17:09:98:91:bb:5c:bf:4d:89:33: 1b:17:36:18:54:44:72:cc:ce:c6:81:a5:61:99:13: bc:f8:5b:24:36:13:9a:8c:21:b2:44:66:95:5f:33: 07:77:35:a7:67:ca:10:50:f7:a3:4f:16:d6:10:a5: 03:a2:aa:bd:64:93:91:6e:44:44:2b:3d:81:a5:74: 50:c8:70:a1:d2:81:27:bc:12:83:f6:c3:f8:52:22: 9d:a6:e2:c3:7a:61:3d:28:34:ed:a7:2e:b0:4b:2a: cb:14:19:47:3e:15:27:c0:26:dd:57:f4:10:83:f6: db:7b:a7:ee:22:4b:04:cd:de:92:24:c6:5f:b4:8a: 9c:e8:02:71:95:6b:37:d2:a9:de:36:dc:36:b7:3a: 29:e7:93:c9:47:2f:cd:f1:7a:5f:85:01:27:93:a8: 6e:77:0d:f4:b5:a7:29:59:0c:7a:3b:87:97:2a:95: 01:76:cd:b6:7d:40:d8:7a:2c:57:f4:fc:f4:8d:fc: 4e:56:37:42:24:a8:75:31:28:7d:6f:65:86:41:f1: 9f:0f:7f:7d:2d:84:36:25:c8:c0:b4:74:b3:c4:fe: df:18:4f:e4:61:a1:e9:2c:3d:09:26:c2:f5:e8:2f: 3f:74:b4:81:b5:39:7a:9b:d7:cc:de:c0:55:19:d9: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:35:C0:F5:0A:41:B3:1D:53:67:8D:AD:4E:AD:E2:65:DD:54:2D X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:84:2d:71:1d:de:cd:a6:41:44:d7:5f:8f:b0:98:cb:3f: 85:ee:9b:13:ab:55:02:d2:ec:23:b8:3e:b0:36:6c:41:b6:dc: f2:0c:f9:71:ea:3a:7a:00:42:bb:fb:ae:30:ee:dc:3a:73:d9: 19:83:a5:b3:44:17:f8:ce:74:8c:23:5a:93:26:46:34:c6:59: 08:ee:04:a7:14:eb:95:4f:10:d4:78:36:27:93:98:4e:b6:e6: e7:70:d7:e3:e3:82:81:ff:13:6a:83:98:76:71:77:6f:82:3a: 4c:ec:7e:c3:14:06:26:3b:e4:8b:10:b2:01:98:0a:b3:7f:f9: f4:5a:11:8f:df:c8:70:40:70:aa:f7:90:fd:8e:00:32:0e:b0: 59:87:e1:f1:78:10:d3:10:0e:3a:0d:b1:c1:93:2d:ff:e1:48: 63:7b:61:0d:5a:df:26:cc:f4:eb:d6:be:eb:d1:8f:48:53:87: 65:b7:5d:5e:cc:9d:b9:14:41:75:ed:64:d6:2a:14:71:bd:e2: 10:8b:04:bb:04:3a:36:45:b2:06:bb:07:8d:bc:32:57:43:e6: 78:3d:b8:d6:3f:8b:fc:44:35:1f:9f:d2:1d:c4:c5:a8:b0:92: 90:53:57:a5:9b:83:27:5f:95:d1:36:b5:6f:91:85:62:a1:63: 15:c8:1a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadqmTa1b69G/Yt/OGvAW7QlXJ/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNjA0MTkwODQ2NDdaFw0yNjA0MjIxNjAxNDdaMDMxMTAvBgNV BAMTKDQ1MDQzNUMwRjUwQTQxQjMxRDUzNjc4REFENEVBREUyNjVERDU0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4E9scFwmYkbtcv02JMxsXNhhU RHLMzsaBpWGZE7z4WyQ2E5qMIbJEZpVfMwd3NadnyhBQ96NPFtYQpQOiqr1kk5Fu REQrPYGldFDIcKHSgSe8EoP2w/hSIp2m4sN6YT0oNO2nLrBLKssUGUc+FSfAJt1X 9BCD9tt7p+4iSwTN3pIkxl+0ipzoAnGVazfSqd423Da3Oinnk8lHL83xel+FASeT qG53DfS1pylZDHo7h5cqlQF2zbZ9QNh6LFf0/PSN/E5WN0IkqHUxKH1vZYZB8Z8P f30thDYlyMC0dLPE/t8YT+RhoeksPQkmwvXoLz90tIG1OXqb18zewFUZ2eLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURQQ1wPUKQbMdU2eNrU6t4mXdVC0wHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4uhC1xHd7NpkFE11+PsJjLP4XumxOrVQLS 7CO4PrA2bEG23PIM+XHqOnoAQrv7rjDu3Dpz2RmDpbNEF/jOdIwjWpMmRjTGWQju BKcU65VPENR4NieTmE625udw1+PjgoH/E2qDmHZxd2+COkzsfsMUBiY75IsQsgGY CrN/+fRaEY/fyHBAcKr3kP2OADIOsFmH4fF4ENMQDjoNscGTLf/hSGN7YQ1a3ybM 9OvWvuvRj0hTh2W3XV7MnbkUQXXtZNYqFHG94hCLBLsEOjZFsga7B428MldD5ng9 uNY/i/xENR+f0h3ExaiwkpBTV6WbgydfldE2tW+RhWKhYxXIGv0= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:19 2026 by rpki-client