$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: yyLTYBRzGb6XNXzeGVYp4/8LKTIw7O7U2R6Wns9Cp78= Subject key identifier: B8:8E:11:A1:C4:AF:C7:32:D8:D8:B6:4E:62:53:97:A4:05:C4:8B:6E Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 19BE8F7BF8F5E1FB58614A382BAC22217D217EF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 02FA Signing time: Sat 28 Feb 2026 08:12:15 +0000 Manifest this update: Sat 28 Feb 2026 08:07:15 +0000 Manifest next update: Tue 03 Mar 2026 17:47:15 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: fTS2GoaEK1saeLSBZYNOFOlZ3iJPPMDju30TllUSb8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:be:8f:7b:f8:f5:e1:fb:58:61:4a:38:2b:ac:22:21:7d:21:7e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Feb 28 08:07:15 2026 GMT Not After : Mar 3 17:47:15 2026 GMT Subject: CN=B88E11A1C4AFC732D8D8B64E625397A405C48B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:8b:d0:0c:50:8d:19:d0:9c:79:cc:f2:e3: a1:67:1e:72:b7:8f:5d:9a:2b:8d:3b:2f:4b:00:ba: a0:11:51:b2:ed:83:2d:73:af:81:81:91:71:76:6e: 2e:8d:f8:d2:91:73:7a:79:d6:26:33:ee:6a:34:3c: b4:14:06:bf:3d:3d:6f:5f:57:64:94:33:d7:e5:2f: 6b:da:a9:f6:54:12:93:63:cd:35:e0:7b:1f:76:66: 90:4f:0f:94:b1:31:0e:c7:8a:cf:85:73:f7:d6:82: df:19:27:1b:ee:47:84:76:f7:69:87:06:a3:a5:f4: e3:46:e6:49:4b:88:84:d7:70:11:b8:49:15:56:92: ce:03:44:f0:e4:62:a2:3b:bd:79:09:f9:88:a9:48: 5d:c6:7d:d2:83:a5:1e:f1:8e:0a:09:01:ce:43:cf: 11:69:b9:cc:56:e4:54:80:6b:7c:35:7b:3b:dd:c5: 54:b4:6e:74:9d:c0:b2:59:d9:30:57:9a:b8:ed:b8: ac:e3:f9:cf:91:fc:9f:f8:e3:26:72:28:86:ce:77: 3f:e9:48:2c:c6:95:1f:e7:c5:df:88:ca:bb:7c:70: 1d:ef:bc:41:6d:cd:34:24:ae:44:7a:be:36:30:1e: 99:f1:38:1b:4e:16:96:36:5b:fa:8f:e2:8a:ee:d6: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:11:A1:C4:AF:C7:32:D8:D8:B6:4E:62:53:97:A4:05:C4:8B:6E X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:11:46:59:a7:01:25:a0:21:25:d6:a4:19:0c:ad:52:ed:e0: 3b:91:4f:72:d9:ba:2b:5d:f3:54:25:ef:f8:3f:bd:ce:43:da: c4:b0:2f:4f:60:ae:93:ff:57:f0:14:44:a2:fa:7e:5b:59:7f: b2:76:cb:0f:46:67:d4:5b:90:38:23:71:12:4e:73:8a:b6:ba: 64:32:14:40:c0:7e:2a:1e:63:fa:a8:2b:d7:59:3f:23:2d:d9: 0b:3e:4d:fe:c2:ee:cf:08:b1:b4:cf:27:26:92:90:64:91:f9: 4f:18:21:31:72:ca:31:b2:1a:32:d6:53:d1:98:c0:ab:58:f4: 8f:91:55:b9:30:37:3a:90:b6:39:d3:38:1b:e9:91:ac:d4:c0: 89:10:b7:76:73:07:34:6d:74:e1:6b:9d:08:c9:3a:77:af:de: 57:b2:c2:8d:6e:fb:f8:2f:ee:6c:f6:b0:8e:eb:7b:8e:d7:3f: fa:c4:97:e5:5a:11:cd:52:90:32:40:de:d3:c1:69:8e:10:48: b0:9e:b1:cb:0b:ce:9f:b0:64:5b:16:05:6b:ad:04:ea:7b:92: ce:af:be:93:d8:8f:2f:d5:60:8f:f5:38:2b:59:d0:75:55:9e: 81:8d:17:28:a9:6f:f8:8d:89:a2:1b:88:bd:d8:21:1b:cc:ff: 53:35:19:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGb6Pe/j14ftYYUo4K6wiIX0hfvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNjAyMjgwODA3MTVaFw0yNjAzMDMxNzQ3MTVaMDMxMTAvBgNV BAMTKEI4OEUxMUExQzRBRkM3MzJEOEQ4QjY0RTYyNTM5N0E0MDVDNDhCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr74vQDFCNGdCceczy46FnHnK3 j12aK407L0sAuqARUbLtgy1zr4GBkXF2bi6N+NKRc3p51iYz7mo0PLQUBr89PW9f V2SUM9flL2vaqfZUEpNjzTXgex92ZpBPD5SxMQ7His+Fc/fWgt8ZJxvuR4R292mH BqOl9ONG5klLiITXcBG4SRVWks4DRPDkYqI7vXkJ+YipSF3GfdKDpR7xjgoJAc5D zxFpucxW5FSAa3w1ezvdxVS0bnSdwLJZ2TBXmrjtuKzj+c+R/J/44yZyKIbOdz/p SCzGlR/nxd+Iyrt8cB3vvEFtzTQkrkR6vjYwHpnxOBtOFpY2W/qP4oru1nIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuI4RocSvxzLY2LZOYlOXpAXEi24wHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFURRlmnASWgISXWpBkMrVLt4DuRT3LZuitd 81Ql7/g/vc5D2sSwL09grpP/V/AURKL6fltZf7J2yw9GZ9RbkDgjcRJOc4q2umQy FEDAfioeY/qoK9dZPyMt2Qs+Tf7C7s8IsbTPJyaSkGSR+U8YITFyyjGyGjLWU9GY wKtY9I+RVbkwNzqQtjnTOBvpkazUwIkQt3ZzBzRtdOFrnQjJOnev3leywo1u+/gv 7mz2sI7re47XP/rEl+VaEc1SkDJA3tPBaY4QSLCescsLzp+wZFsWBWutBOp7ks6v vpPYjy/VYI/1OCtZ0HVVnoGNFyipb/iNiaIbiL3YIRvM/1M1GXM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:07:26 2026 by rpki-client