$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: zc2DPPH/805LnbVM8O/QhT2hTf+bZtM0LdkLSziOPfc= Subject key identifier: 41:A8:79:0D:9A:75:D7:C5:37:F2:5C:78:70:8E:06:9B:38:D2:88:6F Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 57DA881C184911E4C9E239784F295B5E076DD976 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 0242 Signing time: Fri 17 Apr 2026 04:10:52 +0000 Manifest this update: Fri 17 Apr 2026 04:05:52 +0000 Manifest next update: Mon 20 Apr 2026 06:43:52 +0000 Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=) 2: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: x+feupJI/zrcCPWVZQ//eELUnpQljnSpmtVXK8vl0y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:da:88:1c:18:49:11:e4:c9:e2:39:78:4f:29:5b:5e:07:6d:d9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Apr 17 04:05:52 2026 GMT Not After : Apr 20 06:43:52 2026 GMT Subject: CN=41A8790D9A75D7C537F25C78708E069B38D2886F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d6:1d:20:3f:99:71:33:cd:9c:6c:92:b2:ee: e5:e5:d4:94:50:fb:8b:40:8b:f9:52:2b:b4:bc:41: e2:be:20:3b:e4:4b:dc:12:90:04:8e:bb:12:da:d4: 27:dd:e0:1c:ba:26:f0:5e:2c:18:91:d0:6b:1b:a6: 3c:a4:c6:1e:98:b8:d8:37:21:23:ea:a2:e1:36:ac: 02:57:04:59:24:03:c3:b8:f9:3f:98:a4:e0:af:f5: c6:1b:a4:ef:30:8b:0b:66:86:89:92:37:45:d6:ab: c1:58:8a:74:e4:41:c6:20:44:96:de:9d:ad:ed:4b: 5a:f9:f5:dd:15:a0:f3:72:7f:09:3e:f9:5a:44:ff: 9f:ea:67:3f:46:2d:2d:67:9a:64:7a:f1:d9:dc:32: ae:1f:28:65:f0:7f:ab:6a:4b:cb:10:e6:01:5b:7e: 7c:31:84:94:99:04:3f:be:47:20:70:5c:62:d4:8a: d8:e5:1b:76:eb:30:5a:25:bb:71:1b:c5:74:46:88: af:77:38:4e:8f:b0:4d:c8:d2:34:5a:73:55:e8:b3: fd:e1:8d:98:91:95:aa:c7:c5:85:bf:d7:ea:a8:de: e6:ae:fa:69:14:6d:46:4a:d4:0d:7f:fe:75:7f:53: 00:f4:9d:44:69:09:41:d5:81:13:d2:77:0d:6e:91: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:79:0D:9A:75:D7:C5:37:F2:5C:78:70:8E:06:9B:38:D2:88:6F X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8a:05:4a:3e:dd:82:16:d9:78:48:d9:71:c3:57:50:ab:88: 67:aa:97:a1:8c:3f:af:bb:0d:94:45:98:31:34:42:93:5b:08: c3:ba:ae:62:fb:e7:d0:38:e4:9e:21:51:f8:f8:1c:c6:87:46: 8b:53:bc:0a:70:df:36:bd:d7:71:a7:b8:e7:07:47:de:d6:46: a3:83:b8:d7:95:6b:d4:f9:8d:07:7f:9f:f8:bb:c3:2e:0f:79: 9e:13:ae:95:a9:1e:45:ea:e3:13:c0:a3:e0:6c:7d:72:d2:3e: ce:af:5e:e4:4e:9a:6a:2e:58:de:64:bf:5d:1e:a3:70:1d:a5: de:fc:3f:7b:d1:cd:97:32:45:fb:7d:a8:12:31:f6:1b:2b:02: 6f:ee:5d:9f:ad:2d:a9:de:91:be:99:7d:c5:90:56:64:59:f5: 10:74:79:23:8b:e4:f4:de:89:f2:c0:34:2e:7f:0f:25:50:d1: 68:4f:ba:fb:a9:65:34:5d:a3:50:1f:72:0f:6b:2f:17:61:90: d7:b4:5f:fe:74:55:11:8e:ee:df:95:53:4b:b6:8d:7a:87:40: f5:e3:6c:20:81:8a:1c:46:4b:97:49:e9:73:7a:34:31:6b:dd: c0:2c:be:50:35:24:53:71:23:53:e2:38:11:0c:41:3c:64:c1: 02:ef:af:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9qIHBhJEeTJ4jl4TylbXgdt2XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNjA0MTcwNDA1NTJaFw0yNjA0MjAwNjQzNTJaMDMxMTAvBgNV BAMTKDQxQTg3OTBEOUE3NUQ3QzUzN0YyNUM3ODcwOEUwNjlCMzhEMjg4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo1h0gP5lxM82cbJKy7uXl1JRQ +4tAi/lSK7S8QeK+IDvkS9wSkASOuxLa1Cfd4By6JvBeLBiR0Gsbpjykxh6YuNg3 ISPqouE2rAJXBFkkA8O4+T+YpOCv9cYbpO8wiwtmhomSN0XWq8FYinTkQcYgRJbe na3tS1r59d0VoPNyfwk++VpE/5/qZz9GLS1nmmR68dncMq4fKGXwf6tqS8sQ5gFb fnwxhJSZBD++RyBwXGLUitjlG3brMFolu3EbxXRGiK93OE6PsE3I0jRac1Xos/3h jZiRlarHxYW/1+qo3uau+mkUbUZK1A1//nV/UwD0nURpCUHVgRPSdw1ukWYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQah5DZp118U38lx4cI4GmzjSiG8wHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqKBUo+3YIW2XhI2XHDV1CriGeql6GMP6+7 DZRFmDE0QpNbCMO6rmL759A45J4hUfj4HMaHRotTvApw3za913GnuOcHR97WRqOD uNeVa9T5jQd/n/i7wy4PeZ4TrpWpHkXq4xPAo+BsfXLSPs6vXuROmmouWN5kv10e o3Adpd78P3vRzZcyRft9qBIx9hsrAm/uXZ+tLanekb6ZfcWQVmRZ9RB0eSOL5PTe ifLANC5/DyVQ0WhPuvupZTRdo1Afcg9rLxdhkNe0X/50VRGO7t+VU0u2jXqHQPXj bCCBihxGS5dJ6XN6NDFr3cAsvlA1JFNxI1PiOBEMQTxkwQLvr1M= -----END CERTIFICATE-----Generated at Fri Apr 17 23:06:20 2026 by rpki-client