$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json) Hash identifier: QX05LK4Z4We2V9fqowO5ZFZnarRNE6GbfWK3kRkHHQQ= Subject key identifier: 42:A6:1A:B6:C5:DF:4E:89:42:00:96:81:F1:45:A9:21:DC:30:BF:EF Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 34D2EE145CA943C856B567460421FB782FA88515 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft Manifest number: 0131 Signing time: Wed 22 Apr 2026 08:40:52 +0000 Manifest this update: Wed 22 Apr 2026 08:35:52 +0000 Manifest next update: Sat 25 Apr 2026 08:42:52 +0000 Files and hashes: 1: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: BXaBTNuz4H6crqnT0RHKAHp/OidPCgqp5C1MWxIP2dI=) 2: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: MO784yIIV7U51Tb2lyJRinggaCk22EcI9qQq6Cn0qMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 08:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d2:ee:14:5c:a9:43:c8:56:b5:67:46:04:21:fb:78:2f:a8:85:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Apr 22 08:35:52 2026 GMT Not After : Apr 25 08:42:52 2026 GMT Subject: CN=42A61AB6C5DF4E8942009681F145A921DC30BFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fc:65:ff:07:b1:ba:cb:2f:b4:db:2a:b9:62: 8e:aa:9e:77:84:a4:42:a3:c4:61:8d:3b:37:1f:2f: b5:d6:a1:4f:63:07:ab:f9:3c:c9:ac:28:c2:49:62: d8:ba:f7:53:aa:e6:a9:c2:7b:bf:c1:3a:fd:f2:eb: d7:a5:5b:d9:ed:22:bf:0f:8f:71:63:d5:ba:dc:48: b7:b2:e0:2b:5c:ac:fc:9e:92:d5:d0:40:79:2c:c0: b9:7a:9d:11:c4:15:82:91:c3:b1:76:61:af:11:31: 30:ba:78:27:25:a5:52:7c:7b:a7:b3:45:d8:af:f0: b4:7b:c8:c1:a6:63:0f:df:d3:3c:87:fc:62:ed:85: 6c:fe:ed:71:28:b5:39:29:a8:e4:3e:03:2f:d7:f9: e9:12:a1:3d:ef:38:23:54:dc:b5:0c:cd:82:a1:69: 48:51:13:6a:5d:d5:d8:c5:4c:a5:57:d4:9a:5a:cd: ff:8e:b5:f2:6e:27:d1:81:ef:eb:ac:b7:4f:10:06: f3:36:bd:46:26:5c:1b:d3:e7:ed:a8:f6:27:09:da: 5b:5d:4a:97:39:d3:65:55:10:17:57:0e:fa:a6:c0: c5:f3:9c:b8:28:a6:45:c4:8e:f7:4c:b5:96:4e:2b: cd:92:b9:11:18:c3:50:40:7a:0f:38:ce:e4:f2:69: 6d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:1A:B6:C5:DF:4E:89:42:00:96:81:F1:45:A9:21:DC:30:BF:EF X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:52:c8:37:e5:7c:d2:b3:0b:15:20:96:19:93:a1:c1:09:84: 10:2a:b4:bd:35:83:e3:14:f6:eb:90:ba:11:ed:24:c9:3a:23: a5:5f:0f:bd:4d:55:81:61:2e:3f:bb:b5:b1:7e:f9:20:ee:ea: 13:43:02:45:5d:07:c0:e6:9c:44:94:9f:c9:cd:f9:b7:8b:2a: f9:60:d9:70:d4:11:7c:6d:e4:b0:aa:a0:c5:da:a4:5a:8f:3d: 83:56:79:8c:be:21:56:e8:3f:e3:0c:59:00:51:e5:e2:fb:cb: a8:49:c3:79:af:1a:f1:37:93:6e:69:60:74:6b:d6:1d:88:75: 24:2f:fe:68:b0:54:3c:65:4a:8a:ed:d0:40:47:95:c0:6d:65: e0:88:7e:71:a8:3e:96:72:a1:db:f5:1e:95:0c:fd:ec:e1:bb: 1d:16:b8:1c:07:63:da:57:5f:5f:f3:62:b5:c3:64:9b:d6:b8: b0:40:26:e5:70:39:2f:d7:82:66:4c:3c:ef:0f:b4:e0:d7:51: 70:b2:00:15:76:df:f3:7b:d2:43:ca:e4:67:a3:d8:01:f1:2e: 86:21:b0:e8:5e:a5:8e:39:dd:26:c8:02:91:5c:ef:97:8f:cb: 05:d5:bb:36:ce:69:7d:f2:ec:31:d9:44:72:fc:a2:f9:65:5a: e8:77:59:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNLuFFypQ8hWtWdGBCH7eC+ohRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNjA0MjIwODM1NTJaFw0yNjA0MjUwODQyNTJaMDMxMTAvBgNV BAMTKDQyQTYxQUI2QzVERjRFODk0MjAwOTY4MUYxNDVBOTIxREMzMEJGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/GX/B7G6yy+02yq5Yo6qnneE pEKjxGGNOzcfL7XWoU9jB6v5PMmsKMJJYti691Oq5qnCe7/BOv3y69elW9ntIr8P j3Fj1brcSLey4CtcrPyektXQQHkswLl6nRHEFYKRw7F2Ya8RMTC6eCclpVJ8e6ez Rdiv8LR7yMGmYw/f0zyH/GLthWz+7XEotTkpqOQ+Ay/X+ekSoT3vOCNU3LUMzYKh aUhRE2pd1djFTKVX1Jpazf+OtfJuJ9GB7+ust08QBvM2vUYmXBvT5+2o9icJ2ltd Spc502VVEBdXDvqmwMXznLgopkXEjvdMtZZOK82SuREYw1BAeg84zuTyaW0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqYatsXfTolCAJaB8UWpIdwwv+8wHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzEvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcx QzEwQTc5RTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpSyDflfNKzCxUglhmTocEJhBAqtL01g+MU 9uuQuhHtJMk6I6VfD71NVYFhLj+7tbF++SDu6hNDAkVdB8DmnESUn8nN+beLKvlg 2XDUEXxt5LCqoMXapFqPPYNWeYy+IVboP+MMWQBR5eL7y6hJw3mvGvE3k25pYHRr 1h2IdSQv/miwVDxlSort0EBHlcBtZeCIfnGoPpZyodv1HpUM/ezhux0WuBwHY9pX X1/zYrXDZJvWuLBAJuVwOS/XgmZMPO8PtODXUXCyABV23/N70kPK5Gej2AHxLoYh sOhepY453SbIApFc75ePywXVuzbOaX3y7DHZRHL8ovllWuh3WUg= -----END CERTIFICATE-----Generated at Wed Apr 22 10:27:49 2026 by rpki-client