$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: mQ1Ai481ORBB/l8OSnPxa7/KfNJnZ5Av/LpV0iEMHyw= Subject key identifier: 44:C5:F1:2F:C6:1D:E6:8B:BE:BE:10:27:87:90:E9:18:BD:79:AA:C0 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 79BB17B31DBF779471224D71274AF92DFFFEFAD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 030E Signing time: Wed 15 Apr 2026 16:22:20 +0000 Manifest this update: Wed 15 Apr 2026 16:17:20 +0000 Manifest next update: Sun 19 Apr 2026 00:37:20 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: yWqWFKNU2mbcmZVmWqMn5jkSToxlBgoAh1aTOVwrQB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 00:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bb:17:b3:1d:bf:77:94:71:22:4d:71:27:4a:f9:2d:ff:fe:fa:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Apr 15 16:17:20 2026 GMT Not After : Apr 19 00:37:20 2026 GMT Subject: CN=44C5F12FC61DE68BBEBE10278790E918BD79AAC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:05:fb:50:58:5c:e1:e8:3b:17:df:d1:c4: 84:e5:7a:2e:b1:d5:fc:9d:08:a7:30:f5:cc:7a:ab: 1a:c3:0c:38:5d:10:f6:fa:c4:af:17:ac:63:f2:6e: 85:3e:21:c1:eb:4e:12:a3:cb:57:81:bb:d7:aa:65: 80:1d:66:a6:a9:f1:ba:d6:6b:6b:be:ff:ec:67:90: 40:57:3a:24:9d:f2:ce:b6:7d:b8:8f:cf:a6:62:97: 2a:62:1b:02:f4:cb:ff:e1:5b:ef:04:f1:db:2c:e7: ed:a7:14:e7:ee:d1:10:16:3e:0a:2a:49:38:76:57: 07:60:ae:75:50:24:ea:1c:07:52:73:3a:00:c0:4c: 4f:af:68:f0:21:b3:33:5f:18:a6:56:f0:1c:35:9b: 3f:95:c3:6c:3c:67:da:ed:8a:b8:02:88:10:74:3e: 5a:b8:8b:be:4a:5e:6b:90:1a:2e:f1:4e:20:13:8f: fc:93:1c:90:7a:19:58:1e:2d:ab:4b:23:83:87:41: ae:89:f3:97:bb:9f:04:6a:4c:71:86:d6:a5:f9:59: 9d:0e:b7:62:ce:66:a3:09:ba:5a:4f:f7:5a:40:88: f2:45:a2:90:78:c7:f4:78:86:b5:51:0a:66:42:10: 6d:30:b1:47:16:36:e9:7a:a4:94:b5:81:8e:f0:8d: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:F1:2F:C6:1D:E6:8B:BE:BE:10:27:87:90:E9:18:BD:79:AA:C0 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9b:a4:97:3c:5f:25:c3:76:a5:23:49:c7:ad:f6:d9:49:f7: d3:b7:52:e0:9d:45:c1:55:a0:a2:a4:c4:d1:53:e6:72:77:36: 25:ec:9c:9c:c7:74:5c:2c:c6:be:0f:94:3e:7e:70:ee:3d:6d: f6:b6:a9:6d:9f:dd:99:d7:6b:05:eb:d2:1a:8a:2b:19:1f:16: 03:2b:3a:b0:a5:39:b6:86:b0:51:c7:b3:63:7e:5d:35:51:b6: 74:0e:1a:86:9f:59:2d:d2:e3:76:70:3a:ba:c2:2b:31:90:b9: 1d:8b:7f:88:33:2d:0e:a1:7d:07:fe:32:e2:a8:c5:c3:ec:fd: 59:9c:98:69:87:bf:26:d9:43:b8:bc:a5:dc:c4:3b:f3:af:f9: 59:3c:ec:16:65:4b:0f:b4:e5:d1:0b:4e:59:06:ba:e6:68:86: c7:01:95:80:62:54:6d:c1:a4:3c:b8:56:da:6d:88:d0:cc:3e: 7e:16:2b:5a:78:e3:6b:4a:75:60:d9:f8:fc:4b:30:6c:55:b4: e1:06:fd:2e:9a:f0:a3:cf:49:c4:59:a8:f7:b9:e0:37:09:f7: a1:04:78:49:a4:f2:5e:06:a6:f3:37:6f:19:09:f6:9f:41:e7: 57:99:48:b8:a0:11:67:f4:43:19:6e:06:52:87:28:1d:31:f1: b9:6c:e3:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebsXsx2/d5RxIk1xJ0r5Lf/++tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNjA0MTUxNjE3MjBaFw0yNjA0MTkwMDM3MjBaMDMxMTAvBgNV BAMTKDQ0QzVGMTJGQzYxREU2OEJCRUJFMTAyNzg3OTBFOTE4QkQ3OUFBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqQX7UFhc4eg7F9/RxITlei6x 1fydCKcw9cx6qxrDDDhdEPb6xK8XrGPyboU+IcHrThKjy1eBu9eqZYAdZqap8brW a2u+/+xnkEBXOiSd8s62fbiPz6ZilypiGwL0y//hW+8E8dss5+2nFOfu0RAWPgoq STh2VwdgrnVQJOocB1JzOgDATE+vaPAhszNfGKZW8Bw1mz+Vw2w8Z9rtirgCiBB0 Plq4i75KXmuQGi7xTiATj/yTHJB6GVgeLatLI4OHQa6J85e7nwRqTHGG1qX5WZ0O t2LOZqMJulpP91pAiPJFopB4x/R4hrVRCmZCEG0wsUcWNul6pJS1gY7wjZ37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMXxL8Yd5ou+vhAnh5DpGL15qsAwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFabpJc8XyXDdqUjScet9tlJ99O3UuCdRcFV oKKkxNFT5nJ3NiXsnJzHdFwsxr4PlD5+cO49bfa2qW2f3ZnXawXr0hqKKxkfFgMr OrClObaGsFHHs2N+XTVRtnQOGoafWS3S43ZwOrrCKzGQuR2Lf4gzLQ6hfQf+MuKo xcPs/VmcmGmHvybZQ7i8pdzEO/Ov+Vk87BZlSw+05dELTlkGuuZohscBlYBiVG3B pDy4VtptiNDMPn4WK1p442tKdWDZ+PxLMGxVtOEG/S6a8KPPScRZqPe54DcJ96EE eEmk8l4GpvM3bxkJ9p9B51eZSLigEWf0QxluBlKHKB0x8bls46U= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:15 2026 by rpki-client