$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: wJC+aKZIcrAI+PkjCFwBZI+y9b5vsaH0pFgpjE23KOA= Subject key identifier: C6:6C:4B:61:AF:5B:E5:AA:B5:6E:3F:82:6C:79:01:80:F2:D3:3A:2F Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 14EB9FC5A1EEF52ABCA851FFF0E7C045923D9DA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 70 Signing time: Sat 18 Apr 2026 21:11:56 +0000 Manifest this update: Sat 18 Apr 2026 21:06:56 +0000 Manifest next update: Wed 22 Apr 2026 02:01:56 +0000 Files and hashes: 1: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: nY72FBzvgCuqkB80HnKmBlTdAPTkP60CkThGS8HBON0=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:eb:9f:c5:a1:ee:f5:2a:bc:a8:51:ff:f0:e7:c0:45:92:3d:9d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Apr 18 21:06:56 2026 GMT Not After : Apr 22 02:01:56 2026 GMT Subject: CN=C66C4B61AF5BE5AAB56E3F826C790180F2D33A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a1:1a:1b:ca:1b:4c:19:ae:dc:b8:68:35:95: fa:16:ed:f8:dd:2e:0d:9e:c1:88:84:69:e0:3d:ea: 59:33:54:79:13:5b:ea:91:72:7c:18:43:3d:08:c0: 77:f5:59:55:4b:11:1f:14:fd:c6:c4:1c:b0:73:f5: 26:1a:b6:93:da:d6:af:65:4c:00:50:b2:5d:72:b7: 11:30:f4:36:aa:52:17:92:a0:54:58:fe:1e:51:6a: 82:8d:8b:63:9d:9d:e5:da:0d:d5:ff:28:72:1b:f8: b0:ad:a9:72:e6:4b:0a:a9:db:49:7c:af:09:e3:f1: bb:c6:21:7c:ed:b4:82:9c:c3:c6:75:b6:b8:69:2e: 0d:5f:15:38:a5:4b:df:b1:50:6b:0a:cc:6d:01:4f: a2:df:be:96:a2:cd:99:da:67:c0:67:67:7c:87:20: 69:8f:4a:96:6f:9b:91:29:5b:1b:8f:c7:27:90:af: 29:44:1e:cb:11:28:a8:8f:0d:9b:fe:67:18:7b:07: de:a2:f0:c6:81:da:a5:af:a5:98:34:8c:97:fa:60: 61:9c:90:4c:b5:88:11:dd:83:02:ed:d4:dd:5b:ee: b1:a1:45:27:00:87:36:4a:cc:51:47:da:fc:29:aa: 1c:c2:63:74:e8:a9:5d:82:e9:df:1f:7f:dd:ad:64: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6C:4B:61:AF:5B:E5:AA:B5:6E:3F:82:6C:79:01:80:F2:D3:3A:2F X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:54:34:71:b5:d7:d3:3d:d2:0a:48:1d:24:5a:9e:36:eb:94: 9e:71:06:7a:ba:60:76:89:ba:79:53:6e:5c:71:22:f0:a1:00: 41:ba:57:a7:c3:07:6f:e0:1f:77:3d:22:57:71:fe:cb:b3:a7: 9b:e2:f3:0b:0f:54:ba:9f:3b:ce:af:99:5b:bf:bd:6b:e4:e7: f9:e0:88:d4:df:1f:48:4f:b4:2e:29:a7:42:58:16:f4:d3:33: 49:4f:ff:ee:02:41:13:c6:90:7a:18:50:c8:14:8c:51:21:71: b7:7d:65:c0:1e:f8:a3:2e:aa:f6:81:c4:51:6d:20:2e:a6:7f: 4d:8d:d4:ec:0c:65:3d:4d:40:df:b6:51:85:ad:04:c9:18:16: a3:8f:e7:71:f1:af:a0:4e:9d:02:30:f6:9c:87:b0:f2:4d:cd: ee:5a:a1:7f:77:84:00:36:4a:d7:11:60:8b:f3:7e:ea:e8:8d: f1:13:f3:7f:8b:f4:9d:0f:6b:e1:3f:38:63:bf:71:29:11:50: a3:66:0f:f1:cc:b2:85:7a:a3:b1:08:32:75:28:80:9a:bd:36: ae:6f:02:e9:fc:c8:68:47:e5:99:d0:e0:67:e6:98:ea:41:15: b8:a4:95:06:f4:47:f9:fe:3f:e6:8a:78:99:0d:7c:e1:07:1e: 4d:aa:24:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOufxaHu9Sq8qFH/8OfARZI9naQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNjA0MTgyMTA2NTZaFw0yNjA0MjIwMjAxNTZaMDMxMTAvBgNV BAMTKEM2NkM0QjYxQUY1QkU1QUFCNTZFM0Y4MjZDNzkwMTgwRjJEMzNBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoRobyhtMGa7cuGg1lfoW7fjd Lg2ewYiEaeA96lkzVHkTW+qRcnwYQz0IwHf1WVVLER8U/cbEHLBz9SYatpPa1q9l TABQsl1ytxEw9DaqUheSoFRY/h5RaoKNi2OdneXaDdX/KHIb+LCtqXLmSwqp20l8 rwnj8bvGIXzttIKcw8Z1trhpLg1fFTilS9+xUGsKzG0BT6LfvpaizZnaZ8BnZ3yH IGmPSpZvm5EpWxuPxyeQrylEHssRKKiPDZv+Zxh7B96i8MaB2qWvpZg0jJf6YGGc kEy1iBHdgwLt1N1b7rGhRScAhzZKzFFH2vwpqhzCY3ToqV2C6d8ff92tZE4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmxLYa9b5aq1bj+CbHkBgPLTOi8wHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtUNHG119M90gpIHSRanjbrlJ5xBnq6YHaJ unlTblxxIvChAEG6V6fDB2/gH3c9Ildx/suzp5vi8wsPVLqfO86vmVu/vWvk5/ng iNTfH0hPtC4pp0JYFvTTM0lP/+4CQRPGkHoYUMgUjFEhcbd9ZcAe+KMuqvaBxFFt IC6mf02N1OwMZT1NQN+2UYWtBMkYFqOP53Hxr6BOnQIw9pyHsPJNze5aoX93hAA2 StcRYIvzfurojfET83+L9J0Pa+E/OGO/cSkRUKNmD/HMsoV6o7EIMnUogJq9Nq5v Aun8yGhH5ZnQ4GfmmOpBFbiklQb0R/n+P+aKeJkNfOEHHk2qJFk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:40 2026 by rpki-client