$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: ORVmlST9osnomSCytjfiRe6lGANn0Mi6Hl309U/xxLk= Subject key identifier: 3B:9A:E0:D8:64:21:B7:A0:68:78:49:D1:84:92:5E:02:27:54:5E:85 Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 612787EC26DE6FFBD68B15579EA74C7B045956FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 022D Signing time: Mon 02 Mar 2026 02:50:51 +0000 Manifest this update: Mon 02 Mar 2026 02:45:51 +0000 Manifest next update: Thu 05 Mar 2026 03:09:51 +0000 Files and hashes: 1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: b8RALAwbkjgzUB6jbLTXT3Pgj1KOQLn2xfhc+mQ5xC8=) 2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:27:87:ec:26:de:6f:fb:d6:8b:15:57:9e:a7:4c:7b:04:59:56:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Mar 2 02:45:51 2026 GMT Not After : Mar 5 03:09:51 2026 GMT Subject: CN=3B9AE0D86421B7A0687849D184925E0227545E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:d5:52:f5:be:46:68:69:36:86:dd:95:0f: 41:e2:9d:cd:9a:18:21:b0:f4:3f:42:d1:eb:e3:36: f8:ae:7b:b0:24:9e:67:01:34:dd:31:ce:37:82:2f: 50:29:c1:05:df:9e:8e:a2:e9:9f:9d:3f:68:90:a3: 94:77:66:55:c5:c2:d0:a0:f1:25:c0:9c:b0:1a:38: 1c:36:f5:e9:c1:89:be:15:7f:8c:74:ad:b7:78:a3: 05:d5:f2:70:a2:be:cf:97:e6:c8:e8:7e:58:0b:7a: 0b:bc:d0:fb:cf:a0:aa:2a:82:1d:c1:f9:99:ed:77: 2b:bd:db:45:aa:38:fc:af:09:4b:71:f6:fc:f5:03: 31:1a:b4:e7:2f:70:73:5e:94:70:b5:56:41:97:a9: 05:09:61:ca:2a:e7:73:d7:0e:00:72:7d:86:b0:48: 20:4b:cb:db:72:b5:51:e1:24:1b:d3:15:c8:72:a2: 31:94:1c:20:a1:1e:cd:d9:48:61:62:8c:20:ea:a3: af:d5:c1:e5:3e:91:e1:37:fe:54:6c:b1:ac:15:2c: c1:8c:e5:dd:9d:e3:05:f2:6b:cc:19:6e:3c:53:37: 28:81:66:78:90:0a:ed:17:5d:68:2e:9a:03:11:31: 19:79:3c:da:64:6f:0e:2f:34:da:0d:6a:41:67:50: 4d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:E0:D8:64:21:B7:A0:68:78:49:D1:84:92:5E:02:27:54:5E:85 X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:15:a3:3a:56:16:c7:05:b7:5f:f9:b8:43:1e:fe:5e:71:dd: 87:fd:54:3b:62:e2:6f:d7:32:6f:a5:62:38:5b:43:4a:af:63: 8f:ff:45:58:ce:51:3a:23:7b:d8:4d:08:35:dc:e8:97:fb:03: 65:fc:09:08:1f:61:cf:88:eb:63:c3:e7:f4:f7:8a:32:f9:1b: ba:f7:ec:01:e3:5d:73:49:1c:74:28:fe:66:f8:20:32:96:67: ec:df:c2:76:dc:ea:d0:97:e8:55:43:8f:4a:16:d9:04:2e:e4: 1e:43:d0:1e:af:cf:88:c6:19:80:ac:02:91:87:26:3a:2d:67: 28:b1:1b:22:24:b9:9e:87:40:ea:88:f7:c3:15:40:6f:82:11: 4a:77:2d:eb:fa:3b:c1:3f:ff:67:1f:5a:8c:0d:8f:0e:8f:55: 30:f3:94:61:fc:6d:9f:65:4c:a0:ef:de:b1:03:b3:87:09:c2: d9:07:bb:73:be:84:9b:4f:e7:2c:29:02:1b:f0:8a:08:d8:1f: 26:6b:fb:8c:eb:60:de:50:10:26:1b:38:b4:09:62:7e:b9:bc: dd:55:51:f4:b5:ef:25:0f:c8:d9:24:a4:cc:6c:e5:8b:c6:d3: cd:6a:4c:4c:a5:33:74:b8:12:20:22:16:d3:2b:d2:ce:16:f5: e6:7f:1c:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSeH7Cbeb/vWixVXnqdMewRZVv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNjAzMDIwMjQ1NTFaFw0yNjAzMDUwMzA5NTFaMDMxMTAvBgNV BAMTKDNCOUFFMEQ4NjQyMUI3QTA2ODc4NDlEMTg0OTI1RTAyMjc1NDVFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsNVS9b5GaGk2ht2VD0Hinc2a GCGw9D9C0evjNviue7AknmcBNN0xzjeCL1ApwQXfno6i6Z+dP2iQo5R3ZlXFwtCg 8SXAnLAaOBw29enBib4Vf4x0rbd4owXV8nCivs+X5sjoflgLegu80PvPoKoqgh3B +Zntdyu920WqOPyvCUtx9vz1AzEatOcvcHNelHC1VkGXqQUJYcoq53PXDgByfYaw SCBLy9tytVHhJBvTFchyojGUHCChHs3ZSGFijCDqo6/VweU+keE3/lRssawVLMGM 5d2d4wXya8wZbjxTNyiBZniQCu0XXWgumgMRMRl5PNpkbw4vNNoNakFnUE33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5rg2GQht6BoeEnRhJJeAidUXoUwHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcVozpWFscFt1/5uEMe/l5x3Yf9VDti4m/X Mm+lYjhbQ0qvY4//RVjOUToje9hNCDXc6Jf7A2X8CQgfYc+I62PD5/T3ijL5G7r3 7AHjXXNJHHQo/mb4IDKWZ+zfwnbc6tCX6FVDj0oW2QQu5B5D0B6vz4jGGYCsApGH JjotZyixGyIkuZ6HQOqI98MVQG+CEUp3Lev6O8E//2cfWowNjw6PVTDzlGH8bZ9l TKDv3rEDs4cJwtkHu3O+hJtP5ywpAhvwigjYHyZr+4zrYN5QECYbOLQJYn65vN1V UfS17yUPyNkkpMxs5YvG081qTEylM3S4EiAiFtMr0s4W9eZ/HP8= -----END CERTIFICATE-----Generated at Mon Mar 2 19:30:44 2026 by rpki-client