
$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft
File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json)
Hash identifier: 6Sr/j+LKd9RKColRsc0hmEXkwYnPHPNbFCyVNmZ9T9I=
Subject key identifier: DE:CD:0A:85:16:AB:E8:4E:1A:CF:36:75:12:8F:5B:48:97:99:6A:8E
Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9
Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9
Certificate serial: 487C154983C16EA1918A639379FEA75EAF749441
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft
Manifest number: 02D1
Signing time: Sat 28 Feb 2026 16:51:43 +0000
Manifest this update: Sat 28 Feb 2026 16:46:43 +0000
Manifest next update: Tue 03 Mar 2026 20:29:43 +0000
Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: 0KuXALBCRJ9IqxhIiYLXKKa0o4ntTTFp27XXPaiuyhA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl
rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 20:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7c:15:49:83:c1:6e:a1:91:8a:63:93:79:fe:a7:5e:af:74:94:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9
Validity
Not Before: Feb 28 16:46:43 2026 GMT
Not After : Mar 3 20:29:43 2026 GMT
Subject: CN=DECD0A8516ABE84E1ACF3675128F5B4897996A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:38:a8:fa:0a:7a:a7:10:a4:b6:ff:41:ec:
7b:8f:46:4c:c4:4b:8f:50:ae:88:b5:92:4d:17:c7:
ed:a8:06:25:ff:64:00:99:6c:38:4d:67:c3:42:49:
77:e3:22:91:de:d1:06:3d:1b:4c:87:28:4b:ec:a7:
d6:91:7c:8b:6a:f0:6f:0a:f3:8c:8a:86:6b:ec:0c:
c3:0b:40:1d:a4:4f:2a:ef:04:d2:86:28:19:a0:00:
b9:00:fe:94:a0:d5:5e:a0:20:bb:28:d3:de:fd:fe:
5e:a6:72:c1:4e:28:f1:17:b9:a5:6e:34:0d:1a:a7:
20:e9:25:32:63:1d:4a:40:d7:27:d5:3c:2d:11:1c:
91:ad:ae:12:11:fb:da:8d:86:88:d8:5d:56:a2:71:
6c:5b:c6:32:52:7a:21:4c:a5:b6:2f:56:ab:6a:59:
67:23:03:c2:84:3a:4e:53:9d:d4:26:62:2b:b8:72:
48:54:40:24:0f:09:f8:19:21:0b:98:ad:7a:05:20:
ca:f2:97:02:2d:b4:12:2e:b6:a8:ed:7f:ad:08:51:
88:95:fc:0e:df:a4:ad:1f:de:4f:85:1a:c1:48:5b:
07:f5:f7:21:c3:95:da:11:8c:a3:13:80:ea:61:4e:
dc:0b:9d:ac:b2:64:77:8e:dc:c4:6e:d3:0b:f9:33:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:0A:85:16:AB:E8:4E:1A:CF:36:75:12:8F:5B:48:97:99:6A:8E
X509v3 Authority Key Identifier:
keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ad:76:b5:f5:c3:26:cf:1f:5b:24:fb:4f:87:a4:fa:9e:41:
b3:ce:28:99:6e:bb:c7:07:27:db:6d:4a:b7:f4:41:67:9f:f5:
16:61:37:69:77:99:77:bc:80:d5:6a:83:65:90:a7:8b:a4:85:
ab:84:be:33:f1:5f:be:07:11:87:9e:39:60:36:ac:03:17:37:
82:3b:7e:ba:87:11:fb:32:6f:45:ea:27:9f:00:11:5e:0b:28:
70:4f:60:b0:96:d8:15:21:f9:40:51:72:ed:fc:f0:ac:d0:fc:
1b:5c:f4:ac:e0:36:e9:4d:c8:6f:3c:3f:51:4a:06:88:55:4f:
c1:cc:64:bc:41:7b:36:f9:cc:2e:3e:8b:de:26:62:08:51:84:
6d:fa:94:39:70:1b:2e:b8:91:79:68:1d:67:cf:59:50:bf:2d:
7f:f7:62:4b:6e:d5:39:ec:3e:06:e7:06:9e:05:1d:39:87:e5:
19:b2:19:cb:64:da:0d:7a:a2:da:f2:08:94:bd:21:ab:2b:c4:
ca:db:2e:9c:a4:f9:49:ac:32:7c:67:6c:a1:dd:a1:62:86:58:
6a:e8:2d:1c:76:ea:19:20:4a:ef:3a:5a:ce:13:3a:38:5d:df:
a7:b0:32:11:c0:33:c8:55:4b:40:e9:e2:e5:6e:33:6e:c4:c8:
bd:6a:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:00 2026 by rpki-client