$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: my0LiZ77MK8xhFKaY4CpxogIB1ncOh8a77h4eFhF3IU= Subject key identifier: B4:A8:C9:93:64:2D:F4:53:4D:A7:FF:87:79:E2:50:DD:F8:87:C2:5B Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 5964B2FDC9DE39048F363F7BFF4073E1C02B4FCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 09:31:17 +0000 Manifest this update: Sun 01 Mar 2026 09:26:17 +0000 Manifest next update: Wed 04 Mar 2026 16:03:17 +0000 Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) 3: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: c2Ix9yLeTkYd5kG0WRN9cdAY1Hs8CHmgRSk9lBoGs5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:64:b2:fd:c9:de:39:04:8f:36:3f:7b:ff:40:73:e1:c0:2b:4f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Mar 1 09:26:17 2026 GMT Not After : Mar 4 16:03:17 2026 GMT Subject: CN=B4A8C993642DF4534DA7FF8779E250DDF887C25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:84:41:79:7e:6a:98:11:ad:c6:4f:8f:4d: ea:e1:08:f2:77:fc:ed:64:5e:38:56:4d:de:85:c5: 57:8c:4c:36:c6:bb:24:f1:3c:44:a1:25:95:3f:67: f8:9e:80:97:b1:a6:09:39:75:bf:d7:2c:d1:fe:7d: 88:7b:6e:a1:e3:e4:2e:5e:18:4c:51:b6:00:cd:20: bf:84:e8:19:bd:bb:39:9d:b6:19:fb:6c:12:3b:a3: ac:1d:34:68:b2:dc:8a:0a:46:26:db:57:16:06:c5: e0:56:6a:d0:51:7a:db:64:b3:9b:47:30:1c:60:01: b3:9c:b0:8d:e7:48:18:3e:5d:16:fa:34:8b:c6:94: 5f:e9:11:a4:9f:42:ef:1c:ab:6e:1c:12:e7:3d:dc: b0:4c:d1:dc:fb:b9:fb:0a:ca:f7:f7:31:55:71:ae: f6:e8:b8:5f:f7:57:5d:a8:29:d9:01:07:05:af:ab: d8:22:e5:7f:98:99:fc:3f:2d:4c:6c:7b:12:f8:d9: bd:04:e4:cd:44:50:1e:0d:c6:cb:b6:75:50:7a:d0: fb:94:8a:c4:30:99:6f:01:60:b4:ce:34:c3:b8:f9: 3f:08:b3:6e:ad:1f:ba:2c:7c:eb:0c:a4:a7:ec:a0: 2a:57:f4:1a:69:78:7f:ea:89:12:24:47:55:32:46: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A8:C9:93:64:2D:F4:53:4D:A7:FF:87:79:E2:50:DD:F8:87:C2:5B X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:07:28:45:49:c4:82:75:92:cc:45:e5:4e:04:b9:60:6d:45: c6:4a:1f:9f:fe:90:0a:47:b8:ec:9c:5c:fc:5c:49:b0:9a:91: f1:16:0e:ef:17:4b:72:ec:5c:43:ef:41:03:13:e0:7f:f6:a2: 7a:e7:d5:c1:c2:e3:a7:61:e0:59:2c:bd:6a:70:09:86:b9:7f: 19:d0:bb:dd:16:84:fe:ce:a6:6f:df:7b:41:04:ee:64:ca:ec: 5b:5d:e2:2b:d7:28:60:dd:cb:06:75:a6:4c:f7:01:0d:c2:4c: 5d:ce:4d:0f:36:da:40:83:26:42:83:2b:26:e2:9e:eb:68:c2: 82:9b:68:7d:65:b5:c4:0f:c3:2f:ba:15:04:b3:3e:14:fe:ab: 6a:f3:ab:58:9d:14:88:30:d3:95:ef:42:e7:7f:9a:95:2f:2a: f6:a3:1e:e6:3c:68:fd:dc:ad:6e:26:24:79:77:17:76:0a:21: 42:88:88:bd:a5:43:50:74:48:20:7b:b6:b9:ca:2b:c2:16:0f: 32:6e:ba:eb:d8:7a:44:d0:43:b1:7c:48:68:2a:41:a2:ce:2e: b9:28:05:f1:82:21:76:a4:8b:6d:56:65:e0:9b:81:d4:21:74: a1:b1:b5:7a:b7:2f:bf:4b:1a:4d:12:82:bf:b8:d0:04:b6:b8: 55:7e:ae:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWSy/cneOQSPNj97/0Bz4cArT8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNjAzMDEwOTI2MTdaFw0yNjAzMDQxNjAzMTdaMDMxMTAvBgNV BAMTKEI0QThDOTkzNjQyREY0NTM0REE3RkY4Nzc5RTI1MERERjg4N0MyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVoRBeX5qmBGtxk+PTerhCPJ3 /O1kXjhWTd6FxVeMTDbGuyTxPEShJZU/Z/iegJexpgk5db/XLNH+fYh7bqHj5C5e GExRtgDNIL+E6Bm9uzmdthn7bBI7o6wdNGiy3IoKRibbVxYGxeBWatBRettks5tH MBxgAbOcsI3nSBg+XRb6NIvGlF/pEaSfQu8cq24cEuc93LBM0dz7ufsKyvf3MVVx rvbouF/3V12oKdkBBwWvq9gi5X+Ymfw/LUxsexL42b0E5M1EUB4Nxsu2dVB60PuU isQwmW8BYLTONMO4+T8Is26tH7osfOsMpKfsoCpX9BppeH/qiRIkR1UyRoldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKjJk2Qt9FNNp/+HeeJQ3fiHwlswHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIHKEVJxIJ1ksxF5U4EuWBtRcZKH5/+kApH uOycXPxcSbCakfEWDu8XS3LsXEPvQQMT4H/2onrn1cHC46dh4FksvWpwCYa5fxnQ u90WhP7Opm/fe0EE7mTK7Ftd4ivXKGDdywZ1pkz3AQ3CTF3OTQ822kCDJkKDKybi nutowoKbaH1ltcQPwy+6FQSzPhT+q2rzq1idFIgw05XvQud/mpUvKvajHuY8aP3c rW4mJHl3F3YKIUKIiL2lQ1B0SCB7trnKK8IWDzJuuuvYekTQQ7F8SGgqQaLOLrko BfGCIXaki21WZeCbgdQhdKGxtXq3L79LGk0Sgr+40AS2uFV+rpg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:55:20 2026 by rpki-client