$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: UGE7N6iSR28kBct+BGpF9wFA3cH8QROk43q355r/joY= Subject key identifier: 45:9A:31:1E:B0:6E:74:91:CD:CF:C2:0A:18:C9:45:CB:B2:3D:BA:D0 Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 2725B258C8346CEB21D378264300E2BA615DD29C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: 019A Signing time: Thu 16 Apr 2026 10:22:01 +0000 Manifest this update: Thu 16 Apr 2026 10:17:01 +0000 Manifest next update: Sun 19 Apr 2026 15:54:01 +0000 Files and hashes: 1: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: dQqh/UiHoQw/70mJd+ZId7SvE382IQVHD0RnWmbxwtI=) 2: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 3qwvc0M9032XGDH7vraV4T7cy4QhAdHQHEpVds7HICk=) 3: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: ki0hIXEeGo8cU77Xr7lKfx7zoFMhB4mSH2tdcqcaUcQ=) 4: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: +gimbK3/x9cDaqtnNHI71zcfjEixLAsbip0JOfEKGx0=) 5: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: RiJQOn+iteWsGaHDQ7CJgxTOw5x3cmMgsW4Cbj99H/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:25:b2:58:c8:34:6c:eb:21:d3:78:26:43:00:e2:ba:61:5d:d2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Apr 16 10:17:01 2026 GMT Not After : Apr 19 15:54:01 2026 GMT Subject: CN=459A311EB06E7491CDCFC20A18C945CBB23DBAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:67:ed:b8:6c:49:b5:ed:d8:d8:5d:50:34: 1f:a3:92:df:53:3e:82:55:f0:15:3b:47:9b:ad:99: bc:9f:82:f9:75:8d:6a:fc:04:3c:96:ed:0c:d3:7e: 6b:33:65:92:f2:29:00:9c:ea:a9:e4:0f:64:8e:28: 2c:d4:2e:b1:f9:b8:b2:e7:44:11:ba:d0:ce:f2:8a: e3:9f:d3:8f:f1:7d:25:c4:59:de:94:60:68:dd:72: 71:c9:ca:c4:2d:f1:ae:b4:79:4d:f6:3e:8b:0e:46: 1b:a3:36:a0:35:ed:95:e7:87:4a:1e:64:e7:1f:ec: 59:2f:cb:1e:47:35:3e:31:b8:ad:20:59:c0:69:95: 53:c1:f7:8d:ee:91:20:ff:8a:35:78:3e:55:ac:47: 24:eb:6f:88:8a:ba:d5:b5:02:89:65:96:0a:f8:cb: 12:60:1c:4f:4c:37:34:64:ae:bf:c9:71:04:9e:88: c3:a2:3b:1a:f8:91:2d:dc:1a:4d:07:de:96:b6:e2: 07:0f:8c:26:07:f5:8d:cf:68:81:bc:ee:93:52:a8: fb:60:f0:89:9c:79:ef:50:ae:0c:19:3b:ae:f6:33: 06:eb:f7:e8:30:45:32:41:0e:f2:2b:e2:cd:3c:80: 23:34:96:be:ae:2f:86:6d:19:c0:fd:3a:14:25:7b: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9A:31:1E:B0:6E:74:91:CD:CF:C2:0A:18:C9:45:CB:B2:3D:BA:D0 X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c2:24:a6:e9:7e:83:f1:12:dd:36:99:19:1a:2f:67:49:22: 0b:d6:a3:4b:e7:ff:e2:07:30:a9:1c:61:94:95:85:0f:b7:eb: bf:6a:34:da:62:94:da:04:2d:df:23:46:50:da:16:1a:37:79: 37:fd:75:c5:19:23:c4:dc:f2:7d:99:28:26:05:ce:e8:cc:28: 9c:17:b7:ee:e8:80:a4:c5:fe:fa:68:a3:23:5a:6c:f3:c0:61: 3f:16:4d:d1:09:e1:3a:9a:46:2f:c6:cc:ab:0c:11:67:d3:3c: 86:54:85:23:2a:d6:bb:5c:69:54:24:96:65:a8:60:3e:92:d7: c8:31:9b:4a:0d:e6:65:ee:76:36:09:b6:2d:1d:46:1c:46:01: f6:c3:d9:6a:b9:48:d8:79:8e:a2:f7:b8:c1:cb:e1:29:c0:fc: 6e:08:d6:ce:ff:90:07:ed:dc:50:4d:95:81:8b:f1:ca:ea:d8: 12:2a:fa:c9:1c:58:6e:60:21:18:f7:79:c8:bf:49:c5:88:b4: 50:2d:cd:be:10:4b:c3:6d:f1:2f:bb:2f:80:92:8f:1b:ae:98: be:53:91:aa:df:14:8c:b6:c7:4f:4f:85:50:a9:80:4c:06:07: 75:09:00:66:f0:08:79:8c:fc:e0:5b:fb:70:b7:d2:9e:26:87: d1:48:a8:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyWyWMg0bOsh03gmQwDiumFd0pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNjA0MTYxMDE3MDFaFw0yNjA0MTkxNTU0MDFaMDMxMTAvBgNV BAMTKDQ1OUEzMTFFQjA2RTc0OTFDRENGQzIwQTE4Qzk0NUNCQjIzREJBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivWftuGxJte3Y2F1QNB+jkt9T PoJV8BU7R5utmbyfgvl1jWr8BDyW7QzTfmszZZLyKQCc6qnkD2SOKCzULrH5uLLn RBG60M7yiuOf04/xfSXEWd6UYGjdcnHJysQt8a60eU32PosORhujNqA17ZXnh0oe ZOcf7Fkvyx5HNT4xuK0gWcBplVPB943ukSD/ijV4PlWsRyTrb4iKutW1Aolllgr4 yxJgHE9MNzRkrr/JcQSeiMOiOxr4kS3cGk0H3pa24gcPjCYH9Y3PaIG87pNSqPtg 8Imcee9QrgwZO672Mwbr9+gwRTJBDvIr4s08gCM0lr6uL4ZtGcD9OhQle4aXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURZoxHrBudJHNz8IKGMlFy7I9utAwHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7CJKbpfoPxEt02mRkaL2dJIgvWo0vn/+IH MKkcYZSVhQ+3679qNNpilNoELd8jRlDaFho3eTf9dcUZI8Tc8n2ZKCYFzujMKJwX t+7ogKTF/vpooyNabPPAYT8WTdEJ4TqaRi/GzKsMEWfTPIZUhSMq1rtcaVQklmWo YD6S18gxm0oN5mXudjYJti0dRhxGAfbD2Wq5SNh5jqL3uMHL4SnA/G4I1s7/kAft 3FBNlYGL8crq2BIq+skcWG5gIRj3eci/ScWItFAtzb4QS8Nt8S+7L4CSjxuumL5T karfFIy2x09PhVCpgEwGB3UJAGbwCHmM/OBb+3C30p4mh9FIqKA= -----END CERTIFICATE-----Generated at Fri Apr 17 22:45:09 2026 by rpki-client