$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: D8e2xDrqaies16SXo7sotVNsaIlUzzzHkLuWJh1qtjo= Subject key identifier: FE:F7:B2:FA:8F:9F:04:16:A1:B6:FF:14:23:6C:F4:91:D8:3E:CF:9B Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 25BA1477C9885F54BCC0B396DD4CE4610607EECF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 014F Signing time: Sat 25 Apr 2026 22:32:36 +0000 Manifest this update: Sat 25 Apr 2026 22:27:36 +0000 Manifest next update: Wed 29 Apr 2026 09:27:36 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: zkuKMztQVpFbP+vk6UzTgul838fsU3IH99wSxRmRYwI=) 2: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: 4QyMHwIb4unxf7f6Ytvxm2IH8Pb+Za2LNdrvsWi/PwU=) 3: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: SO5xBVrlUoLYhhClYcL1ic80BzUIAtIXFSuHANOZ2Dc=) 4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: H9WqLzpvYSuK/B/L3gCrtZiwzcm3LxndpPpvqu0Mgro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 09:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ba:14:77:c9:88:5f:54:bc:c0:b3:96:dd:4c:e4:61:06:07:ee:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Apr 25 22:27:36 2026 GMT Not After : Apr 29 09:27:36 2026 GMT Subject: CN=FEF7B2FA8F9F0416A1B6FF14236CF491D83ECF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:f9:2e:d3:90:49:5f:6b:29:cb:17:84:9f: 07:e7:19:c6:8e:b7:e7:2d:c0:7d:17:e2:27:a4:b9: 97:c1:43:d8:c1:95:28:bf:0d:e9:9f:98:24:ea:5e: 28:31:ba:a4:fc:b5:a0:4d:94:03:89:dc:c0:b8:bf: b1:c7:82:26:02:37:30:ba:ea:66:5d:b0:70:1e:17: 53:91:dc:94:74:be:d6:91:3f:03:43:2b:97:ed:ba: 37:07:20:38:57:d8:30:00:5d:9b:5c:2c:0c:a6:7b: f5:9c:71:d5:db:71:ca:da:6f:03:5c:89:78:47:22: 74:17:a1:42:f3:fb:87:e4:d9:78:4d:ec:35:39:06: 76:b1:6d:b6:56:28:b7:f4:7a:ef:aa:76:57:03:46: 9e:12:db:0f:fb:f0:5e:66:e0:4d:14:2d:38:7c:5f: 98:ac:cc:cf:fd:51:4d:22:45:7e:42:f6:17:1d:c1: 6b:a5:cb:1c:fa:56:f9:31:9f:7d:16:f1:04:4f:ab: 42:07:f7:f8:6c:60:72:d1:67:ed:dc:dd:6d:8e:cc: d3:0c:55:30:1a:b0:ee:26:52:7f:2f:84:10:35:a7: 8e:ac:49:a3:e4:ae:b5:85:14:2f:6f:e4:12:28:8f: f0:c4:89:a6:85:7f:9e:73:1a:b7:5f:0d:43:2c:b3: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F7:B2:FA:8F:9F:04:16:A1:B6:FF:14:23:6C:F4:91:D8:3E:CF:9B X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ae:36:51:f4:43:89:73:ca:7a:1c:16:ce:d4:28:e4:69:03: d5:51:91:75:c4:0e:02:1d:e1:4a:32:6a:d6:71:3f:f3:26:e7: 40:96:33:e1:05:57:23:f5:17:ef:55:ae:fc:95:14:b9:53:8f: 86:c0:6d:bd:5c:fc:e6:35:56:e2:21:54:25:d2:a5:a0:29:12: e9:fe:7d:b8:99:eb:17:f2:e0:ae:97:39:1c:dd:e7:cc:52:2c: c8:c5:f2:8d:5b:12:8b:14:07:e7:4a:2c:69:f8:95:8e:2a:40: ad:34:0c:03:ea:13:36:04:a1:30:c7:32:6e:52:15:5b:87:db: 37:cf:61:0d:5e:66:2a:5e:ca:81:ce:a7:14:da:53:17:33:2a: d0:bb:e2:61:85:93:4f:b6:c9:e7:79:48:b3:23:cd:b6:c7:04: 22:ff:65:70:cb:24:85:74:df:58:f2:93:c6:57:1c:34:e2:d6: 31:a2:b2:35:c7:96:a3:f0:0a:d3:a7:8f:65:3b:bb:a4:c6:cd: 6b:3a:4f:1d:d3:69:a5:2d:4f:10:b1:7e:4e:32:58:37:d9:2d: 25:a6:d6:82:80:91:9b:16:66:86:51:7e:f8:eb:28:08:54:e9: 1f:06:39:72:47:4e:9c:0a:81:d3:7b:63:85:97:18:0f:21:a5: 3f:47:7c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJboUd8mIX1S8wLOW3UzkYQYH7s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNjA0MjUyMjI3MzZaFw0yNjA0MjkwOTI3MzZaMDMxMTAvBgNV BAMTKEZFRjdCMkZBOEY5RjA0MTZBMUI2RkYxNDIzNkNGNDkxRDgzRUNGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvvku05BJX2spyxeEnwfnGcaO t+ctwH0X4iekuZfBQ9jBlSi/DemfmCTqXigxuqT8taBNlAOJ3MC4v7HHgiYCNzC6 6mZdsHAeF1OR3JR0vtaRPwNDK5ftujcHIDhX2DAAXZtcLAyme/WccdXbccrabwNc iXhHInQXoULz+4fk2XhN7DU5BnaxbbZWKLf0eu+qdlcDRp4S2w/78F5m4E0ULTh8 X5iszM/9UU0iRX5C9hcdwWulyxz6Vvkxn30W8QRPq0IH9/hsYHLRZ+3c3W2OzNMM VTAasO4mUn8vhBA1p46sSaPkrrWFFC9v5BIoj/DEiaaFf55zGrdfDUMss3fNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/vey+o+fBBahtv8UI2z0kdg+z5swHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGuNlH0Q4lzynocFs7UKORpA9VRkXXEDgId 4UoyatZxP/Mm50CWM+EFVyP1F+9VrvyVFLlTj4bAbb1c/OY1VuIhVCXSpaApEun+ fbiZ6xfy4K6XORzd58xSLMjF8o1bEosUB+dKLGn4lY4qQK00DAPqEzYEoTDHMm5S FVuH2zfPYQ1eZipeyoHOpxTaUxczKtC74mGFk0+2yed5SLMjzbbHBCL/ZXDLJIV0 31jyk8ZXHDTi1jGisjXHlqPwCtOnj2U7u6TGzWs6Tx3TaaUtTxCxfk4yWDfZLSWm 1oKAkZsWZoZRfvjrKAhU6R8GOXJHTpwKgdN7Y4WXGA8hpT9HfJY= -----END CERTIFICATE-----Generated at Tue Apr 28 04:22:18 2026 by rpki-client