$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: FJAxXhUiR6Hzac02mYFfgITiBI87KNFHkGGcsersf/s= Subject key identifier: FA:AB:DC:F4:86:96:80:51:52:39:C0:0F:95:E0:95:62:16:45:45:6A Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 7AD0BDCDAEB4844449EAE918472E2C07BFDD9789 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 0137 Signing time: Wed 15 Apr 2026 04:21:03 +0000 Manifest this update: Wed 15 Apr 2026 04:16:03 +0000 Manifest next update: Sat 18 Apr 2026 12:26:03 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: vGh2St9nX3pCTUIzzPcvPvpTzzNgw/FhkJ2xWSsEdQ0=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: u9WTdQv8x+b8FS+UJMBllY7uFEbfiaIL7mK2HkPfoy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d0:bd:cd:ae:b4:84:44:49:ea:e9:18:47:2e:2c:07:bf:dd:97:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Apr 15 04:16:03 2026 GMT Not After : Apr 18 12:26:03 2026 GMT Subject: CN=FAABDCF4869680515239C00F95E095621645456A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:6b:59:39:f3:0d:e5:1f:ff:68:ed:9a:ae: a1:40:b6:a8:09:e0:52:67:a9:ad:4e:54:88:f1:41: fe:de:92:1a:2d:4d:3b:5e:f0:47:e3:00:9e:f5:59: a4:f1:74:c4:10:de:5a:23:fb:b2:01:4e:c9:0e:2c: 0d:28:46:8c:0c:1c:73:ab:ce:12:94:cc:1a:e6:a6: 45:15:22:39:f7:30:01:bf:b5:fc:b6:c7:84:9a:45: cb:09:98:b0:8c:c6:5c:9d:5d:34:8f:ac:f8:7d:ee: dc:cf:6b:bf:e1:fb:f7:95:3b:6d:e8:de:cd:fd:c8: 87:5b:bb:a4:4e:50:ff:64:5e:5b:eb:dd:45:fd:31: 58:dd:ec:57:b9:fc:0c:8b:3c:93:3e:d6:7b:a7:ee: 1b:74:da:59:0e:25:03:82:b4:7d:bf:39:fe:45:10: 31:0c:36:af:ea:8e:da:84:23:5c:2f:c0:39:a9:21: c2:6a:1e:18:c0:6e:6e:aa:af:00:7c:df:ec:32:39: 11:5e:5e:2e:95:54:21:03:33:6c:7d:a0:83:fc:0d: 53:e9:72:48:f2:b8:69:38:6e:3f:76:eb:57:c5:59: 51:72:7f:87:83:53:41:06:58:42:be:28:b1:18:d2: 95:3c:86:44:09:42:7b:f6:bc:e8:ac:c3:c0:3f:6d: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AB:DC:F4:86:96:80:51:52:39:C0:0F:95:E0:95:62:16:45:45:6A X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:77:59:6d:06:09:de:06:2c:66:3a:98:c2:16:fe:16:b6:c4: 0d:d6:28:ff:fd:fe:c1:05:c1:9a:f8:63:2b:20:cf:9c:b8:b5: 8a:d5:cf:3d:19:9e:74:9a:32:61:6c:3c:3d:a8:4c:60:dd:e7: 62:bd:fe:81:a5:ca:4d:25:81:53:c1:da:6e:d8:12:34:dc:e1: cf:90:7a:55:a7:b9:5a:d3:5b:02:4c:74:64:ee:02:59:8a:d2: c6:4b:9d:34:40:47:f7:f1:53:d4:dd:d2:fd:ee:56:6b:b0:2a: 4f:b4:ce:1b:0a:17:b2:8d:bc:58:00:55:64:61:76:23:50:37: b9:ac:f7:a5:a9:f9:8d:75:cf:2d:ce:66:eb:96:51:02:bf:b7: 39:f5:be:ef:d5:01:41:10:ca:e2:17:81:08:2a:ce:e2:0d:f4: d9:59:27:46:25:21:a6:44:49:9b:d4:11:6c:16:fc:cd:13:a8: 2e:f9:ed:17:56:29:91:cb:31:71:a4:1d:81:e4:6b:40:ea:f6: a5:ab:2b:d2:50:80:6a:47:39:91:d5:6b:0a:d0:5f:86:ff:12: 79:78:65:8f:90:7a:58:e7:f5:ea:d8:0a:71:c1:2b:e6:69:e3: 51:d5:ab:99:53:04:b7:16:56:b9:f6:92:3b:d1:d1:cb:6f:bd: 61:e8:a1:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetC9za60hERJ6ukYRy4sB7/dl4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNjA0MTUwNDE2MDNaFw0yNjA0MTgxMjI2MDNaMDMxMTAvBgNV BAMTKEZBQUJEQ0Y0ODY5NjgwNTE1MjM5QzAwRjk1RTA5NTYyMTY0NTQ1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6GtZOfMN5R//aO2arqFAtqgJ 4FJnqa1OVIjxQf7ekhotTTte8EfjAJ71WaTxdMQQ3loj+7IBTskOLA0oRowMHHOr zhKUzBrmpkUVIjn3MAG/tfy2x4SaRcsJmLCMxlydXTSPrPh97tzPa7/h+/eVO23o 3s39yIdbu6ROUP9kXlvr3UX9MVjd7Fe5/AyLPJM+1nun7ht02lkOJQOCtH2/Of5F EDEMNq/qjtqEI1wvwDmpIcJqHhjAbm6qrwB83+wyORFeXi6VVCEDM2x9oIP8DVPp ckjyuGk4bj9261fFWVFyf4eDU0EGWEK+KLEY0pU8hkQJQnv2vOisw8A/bW3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+qvc9IaWgFFSOcAPleCVYhZFRWowHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMx3WW0GCd4GLGY6mMIW/ha2xA3WKP/9/sEF wZr4Yysgz5y4tYrVzz0ZnnSaMmFsPD2oTGDd52K9/oGlyk0lgVPB2m7YEjTc4c+Q elWnuVrTWwJMdGTuAlmK0sZLnTRAR/fxU9Td0v3uVmuwKk+0zhsKF7KNvFgAVWRh diNQN7ms96Wp+Y11zy3OZuuWUQK/tzn1vu/VAUEQyuIXgQgqzuIN9NlZJ0YlIaZE SZvUEWwW/M0TqC757RdWKZHLMXGkHYHka0Dq9qWrK9JQgGpHOZHVawrQX4b/Enl4 ZY+Qeljn9erYCnHBK+Zp41HVq5lTBLcWVrn2kjvR0ctvvWHooU4= -----END CERTIFICATE-----Generated at Fri Apr 17 13:53:45 2026 by rpki-client