$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: XMYtExXJQscugrHTipNP38WM+PNYtk4J/ZfI8fADdDY= Subject key identifier: EE:FD:13:48:87:04:1A:E6:92:AE:D4:B3:E8:B3:F5:79:2B:BE:44:76 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 5907FC52B77EC66B3632768B4F12982620A715CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0551 Signing time: Sat 28 Feb 2026 13:40:58 +0000 Manifest this update: Sat 28 Feb 2026 13:35:58 +0000 Manifest next update: Tue 03 Mar 2026 17:34:58 +0000 Files and hashes: 1: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 2: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: SpkSMJ4QzRpuo28z5w0drimWFVI0szLaMNX6qAhUDug=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:07:fc:52:b7:7e:c6:6b:36:32:76:8b:4f:12:98:26:20:a7:15:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Feb 28 13:35:58 2026 GMT Not After : Mar 3 17:34:58 2026 GMT Subject: CN=EEFD134887041AE692AED4B3E8B3F5792BBE4476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:25:80:f7:29:b5:02:35:44:fc:ac:02:cf: d3:7a:36:24:3d:48:62:ae:63:d4:f2:1a:a6:6b:52: 75:31:54:da:dc:30:b9:f2:6a:2c:ba:fb:40:2e:bf: cf:26:14:cb:63:d6:d9:07:72:a7:01:39:1d:0d:b6: 83:75:b5:5c:c0:9b:0b:7d:12:6f:27:ae:ca:e4:b2: d0:1f:2e:d0:52:56:5e:20:87:88:75:f9:e8:8f:05: 6c:7f:cf:60:2d:fb:97:01:2d:03:96:1b:f0:97:f3: 2a:0e:ce:6b:83:52:33:dd:85:79:49:a8:77:c1:4a: 0d:84:17:85:3f:e2:f9:a3:21:0e:dd:8b:70:cb:ff: e2:64:40:a6:8c:51:58:bc:37:05:ea:f0:12:9d:93: 0c:9d:c9:6a:64:ff:2d:a1:93:22:f3:0b:b2:3f:30: c9:c1:33:ab:85:cd:d5:fc:4f:18:45:27:e2:ac:53: 7a:34:6f:1e:e1:61:9b:50:03:6c:7d:b2:53:f3:c9: 01:16:51:08:b2:b4:17:bb:35:56:7b:20:6c:7e:b7: 82:bd:41:7f:1a:20:66:0f:04:b1:07:79:12:a3:95: ba:fb:c3:69:f5:a8:3c:5e:cc:7c:d3:18:50:52:2e: 3b:70:b8:f6:c0:be:1d:a7:f1:03:9d:c7:7b:9a:9f: a2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FD:13:48:87:04:1A:E6:92:AE:D4:B3:E8:B3:F5:79:2B:BE:44:76 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:be:ca:75:3d:97:a5:11:0a:c3:16:29:d4:5a:83:e4:a6:c4: d9:c6:ce:2f:62:12:24:ec:b9:13:41:dc:b9:ec:2b:6d:c5:38: 81:14:8a:8b:48:b7:9b:6c:17:a8:8d:ce:3d:58:e0:b2:c2:72: ff:be:11:58:b8:4c:99:51:75:91:a9:7b:b5:34:aa:85:7b:3d: 5f:43:65:df:c4:a4:19:da:80:58:1d:8f:56:73:ee:d6:e6:13: d6:fa:26:07:49:f2:f5:a6:78:39:fc:45:a7:ed:37:97:35:ba: 67:c3:54:13:4a:5a:ef:70:2f:49:e7:73:f1:a3:3c:6d:9f:88: cb:1d:42:e8:9a:81:b3:d4:b0:63:1c:1e:52:31:ad:bc:c7:c3: b5:e3:13:72:75:2b:a1:c9:53:a1:77:58:54:f1:65:81:ef:fb: 0b:e7:38:a9:59:5b:e5:1f:c2:57:ad:11:af:a6:b5:3c:d6:87: a3:58:84:df:86:1a:d8:e2:4d:6f:3e:99:8e:95:20:c5:ed:34: 2f:2b:67:eb:bc:da:63:1e:a3:63:a7:2c:31:5c:51:1c:3a:ba: 2e:0d:ca:1d:9c:b0:9a:6f:a2:69:80:da:ac:32:ea:bf:f3:32: 7e:8d:6f:2a:a8:ff:4f:9c:97:92:70:52:83:b9:3d:a1:b1:13: 9a:9a:df:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQf8Urd+xms2MnaLTxKYJiCnFc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNjAyMjgxMzM1NThaFw0yNjAzMDMxNzM0NThaMDMxMTAvBgNV BAMTKEVFRkQxMzQ4ODcwNDFBRTY5MkFFRDRCM0U4QjNGNTc5MkJCRTQ0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW1CWA9ym1AjVE/KwCz9N6NiQ9 SGKuY9TyGqZrUnUxVNrcMLnyaiy6+0Auv88mFMtj1tkHcqcBOR0NtoN1tVzAmwt9 Em8nrsrkstAfLtBSVl4gh4h1+eiPBWx/z2At+5cBLQOWG/CX8yoOzmuDUjPdhXlJ qHfBSg2EF4U/4vmjIQ7di3DL/+JkQKaMUVi8NwXq8BKdkwydyWpk/y2hkyLzC7I/ MMnBM6uFzdX8TxhFJ+KsU3o0bx7hYZtQA2x9slPzyQEWUQiytBe7NVZ7IGx+t4K9 QX8aIGYPBLEHeRKjlbr7w2n1qDxezHzTGFBSLjtwuPbAvh2n8QOdx3uan6KpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7v0TSIcEGuaSrtSz6LP1eSu+RHYwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm+ynU9l6URCsMWKdRag+SmxNnGzi9iEiTs uRNB3LnsK23FOIEUiotIt5tsF6iNzj1Y4LLCcv++EVi4TJlRdZGpe7U0qoV7PV9D Zd/EpBnagFgdj1Zz7tbmE9b6JgdJ8vWmeDn8RaftN5c1umfDVBNKWu9wL0nnc/Gj PG2fiMsdQuiagbPUsGMcHlIxrbzHw7XjE3J1K6HJU6F3WFTxZYHv+wvnOKlZW+Uf wletEa+mtTzWh6NYhN+GGtjiTW8+mY6VIMXtNC8rZ+u82mMeo2OnLDFcURw6ui4N yh2csJpvommA2qwy6r/zMn6Nbyqo/0+cl5JwUoO5PaGxE5qa3wY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:39:52 2026 by rpki-client