$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: VrPPwNgFh75fNO2VKzuWgGtLTSR/zoz7ChhLmYLk9s0= Subject key identifier: D5:91:A4:6A:12:6E:35:EE:E2:60:5B:77:47:6E:BE:37:32:11:75:93 Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 3F79B91C5490A4967E3290577F798BAB6ECB2B0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 5B Signing time: Mon 02 Mar 2026 04:42:00 +0000 Manifest this update: Mon 02 Mar 2026 04:37:00 +0000 Manifest next update: Thu 05 Mar 2026 16:17:00 +0000 Files and hashes: 1: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: PwlZP2LFwGBzQFv1WjqeD6ls7qeeBAMY4yEpij4BY+k=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:79:b9:1c:54:90:a4:96:7e:32:90:57:7f:79:8b:ab:6e:cb:2b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Mar 2 04:37:00 2026 GMT Not After : Mar 5 16:17:00 2026 GMT Subject: CN=D591A46A126E35EEE2605B77476EBE3732117593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:e5:f6:38:c1:f2:62:29:46:92:d2:66:0b: 83:a2:b0:42:07:ee:2c:b5:81:e1:8c:90:b1:41:13: d5:98:e8:f8:50:25:6b:a4:41:7b:9f:be:88:47:f8: 1a:c2:c1:23:fe:94:ae:fe:ec:a0:17:b6:11:f4:49: a6:af:d9:9b:fa:46:66:ae:5d:94:c1:4b:5f:54:01: 29:a2:7e:2b:ce:94:f7:ce:83:f4:55:cd:cc:99:72: 4f:2c:5f:56:dd:2b:bb:3b:ba:dc:56:0c:cd:79:ba: 1b:af:46:bd:bd:fc:41:88:7c:e5:7a:38:0c:12:66: 5a:dc:69:d4:c9:93:be:9f:06:79:65:35:24:d9:cc: e7:20:04:96:5e:46:e8:d2:40:b5:61:13:6c:c6:48: c2:81:fb:fc:46:64:eb:c4:58:41:9f:82:6b:57:56: 3d:43:29:81:5a:b2:46:60:2a:e1:45:0d:84:41:96: 78:c0:3f:11:00:e6:4d:85:e4:f6:90:bd:fc:b2:32: 53:fc:bf:93:bc:fa:bd:76:ec:7b:24:bc:33:4a:0e: 8d:a0:5b:88:7e:91:d4:2a:49:d2:93:22:b7:4e:12: 39:25:69:d3:a6:f7:93:6a:7a:24:eb:c5:b4:02:d1: 6b:c3:a6:55:7f:6d:40:df:d2:a1:01:b7:d9:d0:fb: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:91:A4:6A:12:6E:35:EE:E2:60:5B:77:47:6E:BE:37:32:11:75:93 X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2a:86:d8:34:80:fa:f8:6c:13:5e:3a:f8:a6:e3:c2:31:db: f9:a9:85:06:1c:94:0f:1c:83:2a:37:42:43:c8:66:30:92:ea: 81:65:25:f2:c4:68:5f:17:83:77:47:76:0e:25:26:b8:8c:11: ef:30:7b:7a:f7:45:89:c8:73:e1:bd:04:85:b2:68:8d:2e:72: 5b:05:49:9f:4d:81:29:6e:13:1c:ac:f3:74:a8:30:64:33:79: aa:03:85:1d:66:fb:d7:21:24:35:2d:f7:ff:73:0c:f3:f9:e1: 89:32:92:c0:f2:b6:ce:c7:9b:c5:b8:f3:e2:15:03:7e:04:b5: fd:98:8b:d8:17:34:a2:76:0f:13:6c:c0:d5:77:79:07:4b:4a: 6b:84:b3:56:82:ef:f7:4b:57:c2:d7:c3:77:88:47:3b:68:01: 93:0d:55:a8:0d:3c:6c:6e:e9:3c:9f:51:56:45:17:e3:a3:11: 54:1f:29:41:98:c6:66:a7:16:56:8c:88:c7:ec:f9:80:23:db: 03:13:fb:c6:1b:94:47:29:bb:89:1b:b3:40:90:6b:c2:6b:be: dd:e9:c1:19:1e:cf:a3:cf:28:81:69:1a:61:81:3a:4a:ab:ce: f1:17:4b:ac:77:69:0d:f3:41:b6:2b:d0:82:f0:8a:4f:a8:d2: 68:45:a6:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3m5HFSQpJZ+MpBXf3mLq27LKw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNjAzMDIwNDM3MDBaFw0yNjAzMDUxNjE3MDBaMDMxMTAvBgNV BAMTKEQ1OTFBNDZBMTI2RTM1RUVFMjYwNUI3NzQ3NkVCRTM3MzIxMTc1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMOX2OMHyYilGktJmC4OisEIH 7iy1geGMkLFBE9WY6PhQJWukQXufvohH+BrCwSP+lK7+7KAXthH0Saav2Zv6Rmau XZTBS19UASmifivOlPfOg/RVzcyZck8sX1bdK7s7utxWDM15uhuvRr29/EGIfOV6 OAwSZlrcadTJk76fBnllNSTZzOcgBJZeRujSQLVhE2zGSMKB+/xGZOvEWEGfgmtX Vj1DKYFaskZgKuFFDYRBlnjAPxEA5k2F5PaQvfyyMlP8v5O8+r127HskvDNKDo2g W4h+kdQqSdKTIrdOEjkladOm95NqeiTrxbQC0WvDplV/bUDf0qEBt9nQ+83xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZGkahJuNe7iYFt3R26+NzIRdZMwHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8qhtg0gPr4bBNeOvim48Ix2/mphQYclA8c gyo3QkPIZjCS6oFlJfLEaF8Xg3dHdg4lJriMEe8we3r3RYnIc+G9BIWyaI0uclsF SZ9NgSluExys83SoMGQzeaoDhR1m+9chJDUt9/9zDPP54YkyksDyts7Hm8W48+IV A34Etf2Yi9gXNKJ2DxNswNV3eQdLSmuEs1aC7/dLV8LXw3eIRztoAZMNVagNPGxu 6TyfUVZFF+OjEVQfKUGYxmanFlaMiMfs+YAj2wMT+8YblEcpu4kbs0CQa8Jrvt3p wRkez6PPKIFpGmGBOkqrzvEXS6x3aQ3zQbYr0ILwik+o0mhFppY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:16 2026 by rpki-client