$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: mbhdOA1XLRlyZggkzsRCYvbUXFNnG9zhqTL4TkMbqw8= Subject key identifier: 84:F5:F8:9E:6C:96:8D:77:09:4A:44:C8:37:F7:B9:56:3E:7A:4A:DD Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 3140335C5AD0F431211E2FA28CEDD70764AEE0C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 014F Signing time: Fri 17 Apr 2026 09:51:14 +0000 Manifest this update: Fri 17 Apr 2026 09:46:14 +0000 Manifest next update: Mon 20 Apr 2026 19:16:14 +0000 Files and hashes: 1: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: 27N3rCEmutiYlEk8kXZCl3GPpIDQODEjnFZDUIKCBkk=) 2: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: mMM3Ga6dl1jyFm9jC7xD9gwHLVLx1MdpyGbSVanE0js=) 3: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: RtMfLdiF1L4AbYNaTveOgEl8/CRYXZ0vqT8hwIYHkDE=) 4: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: PjUjDawQZltIi6DnOD85fZWZWWoit1qLtN64Q1jdUVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:40:33:5c:5a:d0:f4:31:21:1e:2f:a2:8c:ed:d7:07:64:ae:e0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Apr 17 09:46:14 2026 GMT Not After : Apr 20 19:16:14 2026 GMT Subject: CN=84F5F89E6C968D77094A44C837F7B9563E7A4ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:d0:64:25:79:5b:4e:1f:fb:35:7c:52:96: e4:54:52:bc:12:a9:29:71:52:28:60:b3:6f:e0:da: b3:fc:9a:30:a3:3e:03:a1:48:fc:5c:e2:05:5b:4c: 73:a3:5b:c0:4c:f0:74:d2:1c:78:df:90:51:3f:04: c7:25:f0:24:fd:bf:76:f2:13:ba:0e:7b:5c:6f:cb: c2:4d:47:f5:c8:70:1b:b0:c9:e9:59:c0:19:59:2c: ef:77:23:1a:cd:ec:2b:d9:05:b5:32:55:eb:d3:15: 22:5c:5a:7e:b3:c2:3a:35:29:28:85:78:58:8d:42: ac:09:0f:5f:8c:d5:5b:f0:85:05:27:67:e2:f2:ce: f3:98:eb:f1:64:5d:24:ac:59:41:ae:c1:37:f5:ca: a6:18:c1:68:8e:48:fb:e7:69:7c:55:06:dc:8a:44: 56:a6:69:1a:67:8a:c4:f4:e9:41:fc:6f:d4:0c:f7: c3:35:2b:f0:4f:72:53:cd:b2:e4:36:aa:c2:41:d0: 35:f3:94:35:31:7d:b7:e9:8b:3c:30:d2:be:a2:d8: 21:55:16:35:ad:00:49:f6:54:49:55:b5:05:53:a2: 66:7f:bb:33:30:b7:29:f2:ae:3a:23:fc:d9:bc:ac: 40:54:b5:aa:08:a6:92:40:56:2f:fd:76:ff:73:9a: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F5:F8:9E:6C:96:8D:77:09:4A:44:C8:37:F7:B9:56:3E:7A:4A:DD X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cc:0e:df:54:d4:c1:00:f7:5f:30:04:9c:09:69:6a:e4:85: 09:1f:60:af:1f:37:5b:d5:4e:40:75:1c:b4:66:a9:0a:aa:89: 3d:3c:19:6f:b9:67:24:6b:c4:07:5a:28:91:01:72:42:1a:56: d2:3d:7c:d7:8b:f9:0f:0f:28:b0:fd:bf:63:76:58:80:af:5a: f5:9e:2d:d9:5a:6e:82:79:68:c1:ac:bd:7d:44:08:fa:7b:37: df:1d:ed:28:6b:c7:78:f4:24:8a:32:b7:a4:71:a4:73:4e:2d: 43:d1:50:9c:2e:e0:e2:6c:9d:4a:91:16:95:e2:2c:77:d5:72: 53:3c:11:62:a7:fb:89:7d:b2:fb:36:41:07:1f:67:2f:22:dc: c7:77:fa:6c:1d:bd:fb:07:e9:6d:e4:4d:2a:64:4c:21:78:b3: 8e:79:b4:da:3f:89:9a:57:80:a4:1d:65:c3:51:d9:3e:6a:67: be:c1:b4:6d:bf:ff:fa:2f:64:bb:d5:96:b6:b0:3b:9c:ab:27: cd:89:1e:48:46:d3:81:76:99:e3:af:ef:82:48:39:e8:49:e1: fe:33:27:e9:2b:5d:df:e1:84:d5:52:37:b8:53:f1:07:b5:27: 99:37:ad:63:0f:d3:25:9f:c4:5a:f1:22:07:d1:7c:b2:a0:24: b3:4e:f6:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUAzXFrQ9DEhHi+ijO3XB2Su4MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNjA0MTcwOTQ2MTRaFw0yNjA0MjAxOTE2MTRaMDMxMTAvBgNV BAMTKDg0RjVGODlFNkM5NjhENzcwOTRBNDRDODM3RjdCOTU2M0U3QTRBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgYNBkJXlbTh/7NXxSluRUUrwS qSlxUihgs2/g2rP8mjCjPgOhSPxc4gVbTHOjW8BM8HTSHHjfkFE/BMcl8CT9v3by E7oOe1xvy8JNR/XIcBuwyelZwBlZLO93IxrN7CvZBbUyVevTFSJcWn6zwjo1KSiF eFiNQqwJD1+M1VvwhQUnZ+LyzvOY6/FkXSSsWUGuwTf1yqYYwWiOSPvnaXxVBtyK RFamaRpnisT06UH8b9QM98M1K/BPclPNsuQ2qsJB0DXzlDUxfbfpizww0r6i2CFV FjWtAEn2VElVtQVTomZ/uzMwtynyrjoj/Nm8rEBUtaoIppJAVi/9dv9zmqbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhPX4nmyWjXcJSkTIN/e5Vj56St0wHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnMDt9U1MEA918wBJwJaWrkhQkfYK8fN1vV TkB1HLRmqQqqiT08GW+5ZyRrxAdaKJEBckIaVtI9fNeL+Q8PKLD9v2N2WICvWvWe LdlaboJ5aMGsvX1ECPp7N98d7Shrx3j0JIoyt6RxpHNOLUPRUJwu4OJsnUqRFpXi LHfVclM8EWKn+4l9svs2QQcfZy8i3Md3+mwdvfsH6W3kTSpkTCF4s455tNo/iZpX gKQdZcNR2T5qZ77BtG2///ovZLvVlrawO5yrJ82JHkhG04F2meOv74JIOehJ4f4z J+krXd/hhNVSN7hT8Qe1J5k3rWMP0yWfxFrxIgfRfLKgJLNO9sg= -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:14 2026 by rpki-client