$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: K+KGuxeNTFIR1poaL5FHOUCiVAVgnWwPeq80x7uEBVE= Subject key identifier: F9:AC:BB:25:18:52:23:B8:B9:8D:53:C2:2A:04:B8:9E:DD:A4:32:F2 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 02C368CBE58284833003F86F3D8EA5CE10B9CB72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 0124 Signing time: Thu 05 Mar 2026 11:41:00 +0000 Manifest this update: Thu 05 Mar 2026 11:36:00 +0000 Manifest next update: Sun 08 Mar 2026 23:23:00 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: e7KGUTrA7ScKNrcDw8jLtBxMdk9vGh8dBYs+9yV4AMQ=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c3:68:cb:e5:82:84:83:30:03:f8:6f:3d:8e:a5:ce:10:b9:cb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Mar 5 11:36:00 2026 GMT Not After : Mar 8 23:23:00 2026 GMT Subject: CN=F9ACBB25185223B8B98D53C22A04B89EDDA432F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:13:f5:05:3a:e3:30:04:38:01:a0:05:e0: 7d:37:d6:78:f2:8c:ac:0d:8b:73:8e:8c:f9:aa:e0: 76:67:8e:b2:ba:03:fb:14:1c:39:14:a1:47:16:19: 8a:18:fd:25:5b:25:c9:34:1d:1d:c6:15:d1:83:a3: 79:f8:08:cb:0f:14:4b:de:36:b9:02:a3:a1:61:17: a0:f8:e5:59:da:9c:75:00:5a:ea:be:7c:ef:cf:b0: a3:31:45:76:43:c2:48:fa:e6:f4:11:c3:9b:60:86: 40:12:38:9b:b6:0e:0a:e4:1b:87:35:0e:88:bf:ec: eb:ed:cf:93:ed:a9:cc:7b:34:a7:ab:fc:0c:f3:95: 02:ae:1d:54:ff:b0:3a:54:6a:ee:4d:12:9b:46:04: 4c:e2:2b:43:f4:44:0e:a6:32:69:27:93:0d:3b:10: 46:04:d0:14:e5:b3:df:f9:5a:de:6b:40:12:b8:81: e0:3d:f6:8f:7e:7d:be:c8:5b:99:5d:bb:91:6b:78: b5:93:7e:07:ec:fa:f3:11:70:64:d2:8c:4b:c1:b8: 01:cb:1a:07:23:3c:38:86:c6:fd:ac:4f:7c:72:55: 59:02:ec:11:8a:e1:66:9f:bc:1e:f5:b8:c9:e6:a8: c8:3d:e9:0b:ce:40:d4:d7:91:f1:31:d8:31:8d:bb: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AC:BB:25:18:52:23:B8:B9:8D:53:C2:2A:04:B8:9E:DD:A4:32:F2 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8b:fe:e5:6a:1f:86:ed:1b:65:6b:cd:d1:b3:2c:10:24:1e: be:e4:36:bc:2a:b4:e8:62:0d:17:73:a7:46:ec:5e:61:c8:8e: 7e:5a:89:ea:e9:73:91:fa:8a:a2:b3:43:6e:4b:1c:d5:ef:7f: 41:61:53:59:eb:1b:d8:cb:01:50:b4:d7:9d:43:a8:58:a7:3f: bb:90:4a:b2:ab:63:1f:dd:3f:d4:6e:cf:86:9c:46:83:95:c1: 0a:d7:42:e5:8c:53:3f:a0:49:7b:3c:89:73:c6:52:10:e1:a8: 2d:5a:45:df:3a:bc:04:d2:43:92:c8:53:d1:c7:1f:3a:44:38: c3:8e:e9:16:b2:bb:fd:40:02:b7:42:e5:ef:47:c8:23:74:25: 6d:87:dd:b3:2b:d6:64:d7:3c:45:91:70:4c:c8:6e:6f:78:75: e8:63:a9:ab:ae:ce:41:b5:83:4b:96:41:df:a8:3e:aa:6d:10: fb:b4:e0:a0:d7:70:18:40:7a:1d:3c:6f:af:2e:33:a6:58:8a: bf:cd:10:2a:f0:ca:ee:08:ca:26:10:34:c9:91:c7:d0:05:d4: 7f:07:9d:c8:52:e5:c8:a0:08:8a:de:b1:d3:3f:86:97:ab:fd: ac:f6:eb:f6:22:3f:b2:c4:6e:d0:a8:d4:99:3e:98:85:4a:54: dd:55:63:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAsNoy+WChIMwA/hvPY6lzhC5y3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNjAzMDUxMTM2MDBaFw0yNjAzMDgyMzIzMDBaMDMxMTAvBgNV BAMTKEY5QUNCQjI1MTg1MjIzQjhCOThENTNDMjJBMDRCODlFRERBNDMyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJahP1BTrjMAQ4AaAF4H031njy jKwNi3OOjPmq4HZnjrK6A/sUHDkUoUcWGYoY/SVbJck0HR3GFdGDo3n4CMsPFEve NrkCo6FhF6D45VnanHUAWuq+fO/PsKMxRXZDwkj65vQRw5tghkASOJu2DgrkG4c1 Doi/7Ovtz5Ptqcx7NKer/AzzlQKuHVT/sDpUau5NEptGBEziK0P0RA6mMmknkw07 EEYE0BTls9/5Wt5rQBK4geA99o9+fb7IW5ldu5FreLWTfgfs+vMRcGTSjEvBuAHL GgcjPDiGxv2sT3xyVVkC7BGK4WafvB71uMnmqMg96QvOQNTXkfEx2DGNu3xhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ay7JRhSI7i5jVPCKgS4nt2kMvIwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmL/uVqH4btG2VrzdGzLBAkHr7kNrwqtOhi DRdzp0bsXmHIjn5aierpc5H6iqKzQ25LHNXvf0FhU1nrG9jLAVC0151DqFinP7uQ SrKrYx/dP9Ruz4acRoOVwQrXQuWMUz+gSXs8iXPGUhDhqC1aRd86vATSQ5LIU9HH HzpEOMOO6Rayu/1AArdC5e9HyCN0JW2H3bMr1mTXPEWRcEzIbm94dehjqauuzkG1 g0uWQd+oPqptEPu04KDXcBhAeh08b68uM6ZYir/NECrwyu4IyiYQNMmRx9AF1H8H nchS5cigCIresdM/hper/az26/YiP7LEbtCo1Jk+mIVKVN1VY3g= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:18 2026 by rpki-client