$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: DAxfnAWw9TGN/Eku3x+162uAlIua1gfXw1sdXeB1qvs= Subject key identifier: 15:97:40:F4:33:43:F8:73:E4:0F:73:35:F0:CC:30:F9:BB:0D:06:A0 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 40FA5E3D3ECCE9EED1103C38CB2A40F29EFE2DA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 0122 Signing time: Sat 28 Feb 2026 20:11:08 +0000 Manifest this update: Sat 28 Feb 2026 20:06:08 +0000 Manifest next update: Wed 04 Mar 2026 00:20:08 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: RiQAU2rR/GFH2e9gHUxIsEMjS1UOaIAqgqEtwXluL3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fa:5e:3d:3e:cc:e9:ee:d1:10:3c:38:cb:2a:40:f2:9e:fe:2d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Feb 28 20:06:08 2026 GMT Not After : Mar 4 00:20:08 2026 GMT Subject: CN=159740F43343F873E40F7335F0CC30F9BB0D06A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:2d:40:46:a4:f0:0f:43:a4:5c:29:de:2a: de:8e:08:77:71:76:c1:6e:18:6f:b5:4b:e8:d8:7b: aa:3b:08:95:37:b0:a9:83:22:a5:31:1b:55:28:11: a3:0a:e9:df:78:26:07:af:56:bf:b9:00:47:d2:f5: f9:99:25:da:d7:26:18:5f:37:20:b8:66:ef:59:a3: 7e:fa:18:da:19:f4:3a:81:73:42:8d:dc:1e:92:1e: 45:f4:6f:f6:c4:b0:1d:2f:92:63:cd:c0:9e:b9:66: f5:1a:b4:a6:a5:c6:68:d4:cb:64:45:27:29:d9:39: d4:fb:a4:b5:87:e6:ee:11:55:ad:8d:88:c8:4e:4f: c3:a6:09:ae:0d:6e:39:e6:0e:80:81:f6:e4:1e:ff: a9:ea:42:05:5a:ec:1b:6c:ad:58:da:72:04:08:a3: 76:17:8f:a2:45:b3:89:bc:d7:6a:8d:8c:66:2d:90: 3b:cb:77:fe:f9:a0:97:eb:14:06:c2:3b:a1:93:d8: b9:a6:d6:57:bf:ba:5a:9d:c9:e9:6d:d5:f3:2e:1f: e3:f6:f4:29:71:a0:4a:57:4d:18:d7:69:8b:57:3d: b1:c9:bf:10:95:6c:c0:c9:69:cf:76:05:5d:2c:e3: dd:6e:de:0b:2b:d2:30:dd:c9:3b:80:28:53:5b:1f: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:97:40:F4:33:43:F8:73:E4:0F:73:35:F0:CC:30:F9:BB:0D:06:A0 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:b6:2e:54:ba:9b:bf:31:8d:4a:ca:e3:21:aa:e7:4a:e6:79: 1e:1b:c0:29:e6:49:3c:de:42:f9:81:68:21:f4:80:d5:4b:c5: 47:75:66:2c:c6:71:2a:05:c5:d4:ff:97:d4:43:52:f4:07:a9: 61:bc:cd:03:73:07:52:15:99:e1:d2:83:80:6e:e6:d3:22:37: 31:df:32:58:4c:b6:f9:2d:2d:bd:a3:0e:7e:90:af:19:95:a5: 8a:9f:be:f1:24:0a:cc:40:4a:6c:de:12:46:7a:5f:00:40:07: 83:48:f3:3d:1a:90:34:dc:ae:b1:ee:53:15:9a:6d:a2:31:d5: 8a:1b:8f:eb:4a:a0:b3:ab:24:b7:60:7e:32:30:cb:85:16:a4: 8b:45:61:24:75:fb:0d:13:1e:ba:67:37:ec:9c:a1:3f:2c:49: 43:ce:74:48:db:de:37:5c:85:38:4d:a7:df:33:0d:7e:f6:06: 41:3e:c6:e3:d7:88:f8:49:70:38:de:98:e8:06:e7:f4:ea:37: ea:64:4b:40:a1:35:f5:df:5f:2c:6f:e5:93:ce:44:d3:22:d3: 16:21:09:4a:71:9b:70:67:03:98:73:81:7e:04:e0:e6:73:26: fb:7a:43:c6:19:34:12:48:a0:1b:40:d4:5d:e6:37:b0:9e:84: ce:a5:0a:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPpePT7M6e7REDw4yypA8p7+LaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNjAyMjgyMDA2MDhaFw0yNjAzMDQwMDIwMDhaMDMxMTAvBgNV BAMTKDE1OTc0MEY0MzM0M0Y4NzNFNDBGNzMzNUYwQ0MzMEY5QkIwRDA2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiy1ARqTwD0OkXCneKt6OCHdx dsFuGG+1S+jYe6o7CJU3sKmDIqUxG1UoEaMK6d94JgevVr+5AEfS9fmZJdrXJhhf NyC4Zu9Zo376GNoZ9DqBc0KN3B6SHkX0b/bEsB0vkmPNwJ65ZvUatKalxmjUy2RF JynZOdT7pLWH5u4RVa2NiMhOT8OmCa4NbjnmDoCB9uQe/6nqQgVa7BtsrVjacgQI o3YXj6JFs4m812qNjGYtkDvLd/75oJfrFAbCO6GT2Lmm1le/ulqdyelt1fMuH+P2 9ClxoEpXTRjXaYtXPbHJvxCVbMDJac92BV0s491u3gsr0jDdyTuAKFNbH75hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFZdA9DND+HPkD3M18Mww+bsNBqAwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMS2LlS6m78xjUrK4yGq50rmeR4bwCnmSTze QvmBaCH0gNVLxUd1ZizGcSoFxdT/l9RDUvQHqWG8zQNzB1IVmeHSg4Bu5tMiNzHf MlhMtvktLb2jDn6QrxmVpYqfvvEkCsxASmzeEkZ6XwBAB4NI8z0akDTcrrHuUxWa baIx1Yobj+tKoLOrJLdgfjIwy4UWpItFYSR1+w0THrpnN+ycoT8sSUPOdEjb3jdc hThNp98zDX72BkE+xuPXiPhJcDjemOgG5/TqN+pkS0ChNfXfXyxv5ZPORNMi0xYh CUpxm3BnA5hzgX4E4OZzJvt6Q8YZNBJIoBtA1F3mN7CehM6lCrc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:23 2026 by rpki-client