$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: aEMniSwFrdE2YjQ1U+MsovcEOmZGubcsLmKUVLI3Azk= Subject key identifier: EC:0F:0B:66:1F:CE:7F:F4:91:F2:2F:65:BA:98:89:BE:04:31:12:28 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 0B31CE3D19C67A126B1DBAB306B1A7FB6E66322E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 0302 Signing time: Wed 18 Mar 2026 11:12:38 +0000 Manifest this update: Wed 18 Mar 2026 11:07:38 +0000 Manifest next update: Sat 21 Mar 2026 20:45:38 +0000 Files and hashes: 1: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=) 2: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: I7+EW+Bxu0hJ1uC7YDJO5qqRdB/nmuDDL8kKLAKQKbc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 20:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:31:ce:3d:19:c6:7a:12:6b:1d:ba:b3:06:b1:a7:fb:6e:66:32:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Mar 18 11:07:38 2026 GMT Not After : Mar 21 20:45:38 2026 GMT Subject: CN=EC0F0B661FCE7FF491F22F65BA9889BE04311228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:f9:16:20:3d:42:4c:3c:2d:15:a7:10:3e: 1d:ec:e4:1c:85:bd:74:25:c1:d4:de:f0:20:62:0e: cf:8e:14:65:bd:7b:0d:3e:36:0a:7e:ec:36:1e:67: 40:68:39:22:e3:80:f4:93:b8:ac:97:26:e0:8d:d3: f9:ab:6c:4d:a0:ad:36:ef:4d:de:62:c4:ad:ec:3c: d1:5d:31:5e:2a:e3:8e:3e:ce:96:29:f2:9c:32:3a: 91:eb:56:36:99:96:3f:46:b1:9d:bc:55:e7:d1:ec: 6b:f5:16:6d:4b:a5:59:8b:7f:e4:37:c7:f0:49:df: 6a:9c:35:3f:27:18:dc:7c:fa:72:8a:8b:0b:a4:b4: e5:a5:fa:b6:45:9a:c3:f0:72:29:cb:72:76:52:c0: 23:00:69:67:b6:6a:3f:0c:8b:07:ee:5b:fe:c7:19: e6:3a:f1:71:29:d5:d1:a8:5c:41:4e:d2:43:12:35: 73:27:e1:91:9d:f2:50:3e:b5:14:a0:97:2f:31:68: 38:4c:82:37:4a:6d:24:9d:d5:e8:4d:b6:8b:ad:df: 83:53:03:49:1b:98:a9:79:b7:5f:ac:a9:5b:0e:eb: b2:94:ba:3e:4c:05:03:f6:76:93:4c:86:b3:9c:b3: 8e:43:67:36:0a:6f:87:1e:95:ab:ab:30:ea:9b:e6: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0F:0B:66:1F:CE:7F:F4:91:F2:2F:65:BA:98:89:BE:04:31:12:28 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:eb:e0:da:8b:a7:97:56:b6:ab:03:c7:3b:94:0a:93:57:7a: 48:97:50:7e:b1:8e:c9:e0:f8:78:a6:8b:75:a5:f5:f8:bf:32: e3:9f:2c:ba:0d:9e:09:59:14:e0:f8:31:6b:ae:df:a1:2b:dd: f3:aa:47:4c:4a:0c:bb:dc:26:f4:b0:b3:fa:75:c5:e3:2a:53: b7:b8:50:ff:fe:81:44:14:7a:44:98:fb:be:de:0a:26:8c:2e: 82:c0:09:db:40:5f:5d:4d:a5:0f:1b:bd:26:f3:fd:0b:73:83: af:72:1a:fe:d0:85:0c:7b:e9:38:1e:58:d4:e7:2e:90:81:a2: 7d:b6:54:35:d9:77:23:9f:0b:b4:19:53:b8:08:4f:4f:93:ac: 03:90:eb:85:43:e2:a1:63:64:c5:20:38:19:dc:c5:22:4d:74: a1:65:ce:f3:e2:0c:31:f6:0e:53:ef:f2:76:20:63:37:8e:44: 12:45:42:a3:cd:70:e1:5c:db:36:01:b3:b2:fb:cb:c3:78:7c: 84:ee:2b:92:8e:a7:c0:f7:1d:71:f9:ea:00:44:11:d7:bb:e5: 13:3d:4d:00:ca:b6:45:15:19:4f:4b:47:6a:a8:51:c0:e8:4f: e4:16:40:36:0c:22:e0:84:9e:4c:b3:a9:4c:c4:5a:9e:ed:60: 24:3f:42:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzHOPRnGehJrHbqzBrGn+25mMi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNjAzMTgxMTA3MzhaFw0yNjAzMjEyMDQ1MzhaMDMxMTAvBgNV BAMTKEVDMEYwQjY2MUZDRTdGRjQ5MUYyMkY2NUJBOTg4OUJFMDQzMTEyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZfkWID1CTDwtFacQPh3s5ByF vXQlwdTe8CBiDs+OFGW9ew0+Ngp+7DYeZ0BoOSLjgPSTuKyXJuCN0/mrbE2grTbv Td5ixK3sPNFdMV4q444+zpYp8pwyOpHrVjaZlj9GsZ28VefR7Gv1Fm1LpVmLf+Q3 x/BJ32qcNT8nGNx8+nKKiwuktOWl+rZFmsPwcinLcnZSwCMAaWe2aj8MiwfuW/7H GeY68XEp1dGoXEFO0kMSNXMn4ZGd8lA+tRSgly8xaDhMgjdKbSSd1ehNtout34NT A0kbmKl5t1+sqVsO67KUuj5MBQP2dpNMhrOcs45DZzYKb4celaurMOqb5jZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7A8LZh/Of/SR8i9lupiJvgQxEigwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrr4NqLp5dWtqsDxzuUCpNXekiXUH6xjsng +Himi3Wl9fi/MuOfLLoNnglZFOD4MWuu36Er3fOqR0xKDLvcJvSws/p1xeMqU7e4 UP/+gUQUekSY+77eCiaMLoLACdtAX11NpQ8bvSbz/Qtzg69yGv7QhQx76TgeWNTn LpCBon22VDXZdyOfC7QZU7gIT0+TrAOQ64VD4qFjZMUgOBncxSJNdKFlzvPiDDH2 DlPv8nYgYzeORBJFQqPNcOFc2zYBs7L7y8N4fITuK5KOp8D3HXH56gBEEde75RM9 TQDKtkUVGU9LR2qoUcDoT+QWQDYMIuCEnkyzqUzEWp7tYCQ/Qv8= -----END CERTIFICATE-----Generated at Fri Mar 20 22:01:20 2026 by rpki-client