$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: Lte9QDZ2hMxPwZTpVtpGkQF+QNl1gd8PlI/yimxy+/0= Subject key identifier: 77:82:73:EE:EA:D8:58:8A:73:EA:1A:21:F5:FD:1C:F8:D7:FC:64:36 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 59D269A82F4B49C7C0B9B0F81637BC2DCB58854A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0566 Signing time: Thu 16 Apr 2026 10:41:00 +0000 Manifest this update: Thu 16 Apr 2026 10:36:00 +0000 Manifest next update: Sun 19 Apr 2026 19:16:00 +0000 Files and hashes: 1: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) 2: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 3: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: KFsH8SpA0fhLfvCzIMRxMLhYwJQLHN1Gp5zN/lDDw/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d2:69:a8:2f:4b:49:c7:c0:b9:b0:f8:16:37:bc:2d:cb:58:85:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Apr 16 10:36:00 2026 GMT Not After : Apr 19 19:16:00 2026 GMT Subject: CN=778273EEEAD8588A73EA1A21F5FD1CF8D7FC6436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:60:91:b9:f1:18:a7:e6:f5:82:fc:e7:96: 6d:46:fc:23:28:63:49:89:d8:5c:4a:b1:87:cd:50: af:14:8c:a7:64:62:ad:a4:9b:b0:bb:eb:65:9c:4f: 58:a1:f7:4f:56:d8:ef:a7:d3:91:f2:b2:3f:45:4c: 1e:d0:fb:81:49:6d:e3:e5:b0:36:ac:f7:f7:df:31: a3:c6:9e:3f:83:6c:aa:ff:b6:6b:71:59:a7:06:27: 5a:53:51:be:16:7f:99:1a:d2:f5:c0:f2:46:cf:ae: 8e:9a:06:0b:20:32:2d:1d:19:78:8a:91:97:dc:7a: 65:98:70:0c:b3:53:9c:35:71:6f:e3:66:33:f0:b0: 00:43:1f:fe:36:ce:04:7f:a0:ee:55:f1:27:af:34: 0e:36:4f:28:dd:a7:76:64:a7:77:ec:87:4e:cc:ac: 31:65:21:55:e0:e1:ee:82:97:57:a1:f1:b7:d6:31: 2f:11:c1:46:27:1d:8b:6d:44:5b:38:b1:59:5b:fa: 2a:99:02:4e:9f:4b:4d:f3:66:72:53:71:a9:d3:73: 22:43:d9:4e:28:47:ad:6d:b3:e5:51:31:f7:c4:eb: cc:7d:1a:10:98:7f:4a:f9:b5:66:60:91:1f:4e:31: 8f:16:5c:31:51:69:44:04:ee:d0:77:cd:77:25:18: 5d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:82:73:EE:EA:D8:58:8A:73:EA:1A:21:F5:FD:1C:F8:D7:FC:64:36 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:95:bb:3e:2a:13:89:b0:b9:00:b7:15:27:72:12:a1:50:8f: 31:e8:16:8a:ae:19:30:55:8e:62:7a:86:82:af:30:b7:97:4c: 05:73:1a:8e:8d:d2:4a:1d:08:bd:27:93:1c:e0:66:cf:48:73: 96:3f:15:7d:ba:66:89:6b:16:89:83:ac:d7:7b:e9:d8:64:e7: d4:19:66:31:39:03:b0:05:23:6e:87:f2:36:57:ca:79:71:05: a5:f2:f2:93:1b:57:53:49:74:90:29:b8:8f:a6:c5:19:91:82: 59:6c:4e:ae:fb:ed:d3:79:ca:dd:ae:8a:45:4a:e8:4d:31:3e: ec:bc:15:72:b8:cb:a2:fa:63:a0:8d:71:69:34:66:1c:25:43: 61:ff:a8:24:ac:53:bc:f0:10:86:d3:d2:e2:16:07:5f:ad:8e: 2e:25:f8:4e:8c:e7:7b:97:01:b1:13:7b:df:9c:51:59:6b:5d: d2:44:6f:7f:29:a5:a3:97:3d:d3:b2:07:46:a1:8c:40:91:9a: a2:de:4e:ff:42:53:30:0e:52:70:28:b0:d3:b0:34:22:49:96: f0:fa:21:91:34:ba:9b:4a:fc:84:ce:fa:00:3e:6f:5f:a7:de: 34:07:48:60:c9:9c:4b:e6:f4:4a:49:dc:f9:d3:67:78:82:90: a1:24:d9:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdJpqC9LScfAubD4Fje8LctYhUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNjA0MTYxMDM2MDBaFw0yNjA0MTkxOTE2MDBaMDMxMTAvBgNV BAMTKDc3ODI3M0VFRUFEODU4OEE3M0VBMUEyMUY1RkQxQ0Y4RDdGQzY0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOGCRufEYp+b1gvznlm1G/CMo Y0mJ2FxKsYfNUK8UjKdkYq2km7C762WcT1ih909W2O+n05Hysj9FTB7Q+4FJbePl sDas9/ffMaPGnj+DbKr/tmtxWacGJ1pTUb4Wf5ka0vXA8kbPro6aBgsgMi0dGXiK kZfcemWYcAyzU5w1cW/jZjPwsABDH/42zgR/oO5V8SevNA42Tyjdp3Zkp3fsh07M rDFlIVXg4e6Cl1eh8bfWMS8RwUYnHYttRFs4sVlb+iqZAk6fS03zZnJTcanTcyJD 2U4oR61ts+VRMffE68x9GhCYf0r5tWZgkR9OMY8WXDFRaUQE7tB3zXclGF2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd4Jz7urYWIpz6hoh9f0c+Nf8ZDYwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKVuz4qE4mwuQC3FSdyEqFQjzHoFoquGTBV jmJ6hoKvMLeXTAVzGo6N0kodCL0nkxzgZs9Ic5Y/FX26ZolrFomDrNd76dhk59QZ ZjE5A7AFI26H8jZXynlxBaXy8pMbV1NJdJApuI+mxRmRgllsTq777dN5yt2uikVK 6E0xPuy8FXK4y6L6Y6CNcWk0ZhwlQ2H/qCSsU7zwEIbT0uIWB1+tji4l+E6M53uX AbETe9+cUVlrXdJEb38ppaOXPdOyB0ahjECRmqLeTv9CUzAOUnAosNOwNCJJlvD6 IZE0uptK/ITO+gA+b1+n3jQHSGDJnEvm9EpJ3PnTZ3iCkKEk2ZY= -----END CERTIFICATE-----Generated at Sat Apr 18 06:28:15 2026 by rpki-client