$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: e2gdltXslM4URQr72doelNpwRj2UmmY84aQXcE6jMmA= Subject key identifier: F2:6E:3B:C1:EC:5F:85:F5:0E:AC:68:B4:A9:37:28:82:8D:2B:36:2B Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 2A22595FBD80B248BBC9C31BF260CBE27687553E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 0565 Signing time: Sat 18 Apr 2026 04:01:21 +0000 Manifest this update: Sat 18 Apr 2026 03:56:21 +0000 Manifest next update: Tue 21 Apr 2026 08:28:21 +0000 Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=) 2: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: MB0j5PpL8NUVI7yEbT6o1YqAq5G7mm9Y0772fTHJ/C0=) 3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:22:59:5f:bd:80:b2:48:bb:c9:c3:1b:f2:60:cb:e2:76:87:55:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Apr 18 03:56:21 2026 GMT Not After : Apr 21 08:28:21 2026 GMT Subject: CN=F26E3BC1EC5F85F50EAC68B4A93728828D2B362B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:5c:aa:c7:fd:f2:6f:2e:f8:48:80:8d:c7: e1:6b:93:ad:b3:7f:22:12:da:89:a7:33:de:3d:95: 79:54:7e:e7:40:60:43:a9:21:ee:a7:9e:4d:61:d1: 76:96:8d:a5:7f:7d:dc:ef:ba:93:7f:a7:19:bd:e6: f8:b3:92:78:a2:ab:25:55:ed:07:d7:03:44:14:17: b5:cc:bb:79:68:2f:64:08:42:69:a4:3e:06:92:fa: 59:e1:45:6c:67:48:ef:69:fd:89:23:57:4a:f3:c2: 69:25:6f:16:00:d4:1a:56:27:2f:68:1c:ed:0d:12: b3:c8:24:36:98:49:93:dd:e7:21:ac:5f:17:98:eb: 58:b9:af:61:7e:aa:d4:c3:ba:81:c1:ca:88:cf:df: 64:24:51:3d:8a:9a:93:7f:4f:1b:c7:8e:7d:5e:50: 4e:5d:64:a3:9e:59:dd:c5:3f:56:25:95:a8:9e:53: 25:90:b5:e8:9a:82:3a:10:18:37:0c:06:82:d1:0d: 12:96:14:80:67:b6:92:34:50:3c:97:18:c5:b0:de: 1e:b8:ed:29:fb:24:fd:20:b5:77:c0:66:e5:a5:83: 25:08:d8:78:b3:f0:43:dc:8b:c0:2b:bd:39:c6:1d: 5d:57:6f:40:ea:36:6a:73:0f:4b:a0:76:62:04:48: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:3B:C1:EC:5F:85:F5:0E:AC:68:B4:A9:37:28:82:8D:2B:36:2B X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3f:d1:91:75:45:ab:e4:91:75:e9:57:c8:33:ae:60:fc:2b: 76:1f:6d:76:59:42:58:ee:44:d6:c3:ac:4e:c0:03:3a:d0:75: df:67:c2:74:81:38:2f:17:22:7e:fe:3e:b6:cd:82:da:45:d5: f4:2d:a1:db:30:db:30:0a:ed:e8:2f:9f:69:84:41:7f:1c:7a: dc:82:fb:24:5c:81:ca:e8:50:16:76:95:f9:e7:86:30:9d:f9: b3:84:68:82:e9:64:0b:c0:f3:91:cc:57:8f:c8:d1:cc:0b:de: 0a:46:cb:85:ba:a4:6b:aa:33:22:20:a2:54:5b:65:d8:7c:62: d4:4a:42:8f:ef:bb:68:ee:b1:ff:30:c0:3f:b9:4c:f6:7e:41: a9:01:14:37:e2:b4:d1:87:92:61:77:fd:d3:ba:82:3d:fe:05: f5:a6:bf:9f:4f:af:08:73:09:59:47:b7:0d:15:ef:c7:4e:7b: 62:17:9b:38:15:67:d3:c0:97:e2:cf:1a:87:91:65:2c:fe:9b: 62:bc:1c:70:56:e9:52:4f:2e:9e:87:fc:33:fa:4f:c8:fb:f3: 51:24:62:86:e1:00:f9:6c:94:2e:a7:1a:87:14:82:2c:8a:f3: 30:92:a5:5c:4f:4a:b5:ff:b3:e5:65:17:12:fa:1c:45:12:b2: 11:c8:7e:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiJZX72Aski7ycMb8mDL4naHVT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNjA0MTgwMzU2MjFaFw0yNjA0MjEwODI4MjFaMDMxMTAvBgNV BAMTKEYyNkUzQkMxRUM1Rjg1RjUwRUFDNjhCNEE5MzcyODgyOEQyQjM2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjFyqx/3yby74SICNx+Frk62z fyIS2omnM949lXlUfudAYEOpIe6nnk1h0XaWjaV/fdzvupN/pxm95vizkniiqyVV 7QfXA0QUF7XMu3loL2QIQmmkPgaS+lnhRWxnSO9p/YkjV0rzwmklbxYA1BpWJy9o HO0NErPIJDaYSZPd5yGsXxeY61i5r2F+qtTDuoHByojP32QkUT2KmpN/TxvHjn1e UE5dZKOeWd3FP1YllaieUyWQteiagjoQGDcMBoLRDRKWFIBntpI0UDyXGMWw3h64 7Sn7JP0gtXfAZuWlgyUI2Hiz8EPci8ArvTnGHV1Xb0DqNmpzD0ugdmIESHIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8m47wexfhfUOrGi0qTcogo0rNiswHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4/0ZF1RavkkXXpV8gzrmD8K3YfbXZZQlju RNbDrE7AAzrQdd9nwnSBOC8XIn7+PrbNgtpF1fQtodsw2zAK7egvn2mEQX8cetyC +yRcgcroUBZ2lfnnhjCd+bOEaILpZAvA85HMV4/I0cwL3gpGy4W6pGuqMyIgolRb Zdh8YtRKQo/vu2jusf8wwD+5TPZ+QakBFDfitNGHkmF3/dO6gj3+BfWmv59Prwhz CVlHtw0V78dOe2IXmzgVZ9PAl+LPGoeRZSz+m2K8HHBW6VJPLp6H/DP6T8j781Ek YobhAPlslC6nGocUgiyK8zCSpVxPSrX/s+VlFxL6HEUSshHIftc= -----END CERTIFICATE-----Generated at Sun Apr 19 15:48:25 2026 by rpki-client