$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: 5nRCqGi5IME1O5R0DwNpJRdmKOZ6HYrS2D/E8xzTf2g= Subject key identifier: E5:BA:73:95:81:1C:4E:E4:E7:B7:1E:D1:A3:AC:41:28:32:AC:D1:59 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 0F34F442ECC5E816E625A50B78AD0D4F29739D10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 013A Signing time: Wed 22 Apr 2026 01:41:04 +0000 Manifest this update: Wed 22 Apr 2026 01:36:04 +0000 Manifest next update: Sat 25 Apr 2026 10:22:04 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: pbP7oc0fGLAQy1SWFllRjhWg7RmDuEcyksjsSCQYCzw=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: vGh2St9nX3pCTUIzzPcvPvpTzzNgw/FhkJ2xWSsEdQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:34:f4:42:ec:c5:e8:16:e6:25:a5:0b:78:ad:0d:4f:29:73:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Apr 22 01:36:04 2026 GMT Not After : Apr 25 10:22:04 2026 GMT Subject: CN=E5BA7395811C4EE4E7B71ED1A3AC412832ACD159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:9e:d3:1f:11:bc:84:8c:ed:2d:81:f0:88: e5:40:33:bb:da:d5:6e:a2:af:69:53:2e:c7:99:24: d0:15:55:b9:6b:c4:87:cb:78:e4:c4:f4:e4:a1:65: e0:42:1d:3f:83:12:3e:82:e7:09:81:58:18:87:90: f8:5b:42:ba:c0:3f:b8:94:ae:bc:98:02:fe:b9:dd: 28:e9:ad:35:32:c9:30:37:d8:07:83:4a:4a:a8:89: 23:7d:b6:50:dd:2f:56:30:28:6a:e2:e9:c4:fb:92: b9:ed:f8:34:3e:1f:54:f3:10:c0:09:13:94:b2:3b: 40:f6:d1:85:8e:8b:6c:86:9e:2c:77:07:53:fc:ea: 94:ed:41:1d:e8:06:c4:3a:a8:52:1a:0b:94:a7:a9: fe:40:61:5a:ac:c5:db:ca:0e:b6:c1:f7:51:3e:a0: f4:ac:2c:8c:30:22:56:e0:b3:f0:ff:48:99:a0:c9: 79:31:ae:9c:a8:d7:cd:72:77:3b:6b:e4:43:d9:c7: 9b:ff:e3:55:fc:cc:99:a4:fa:7b:64:4f:7b:be:a7: 57:f3:67:89:a9:64:45:0f:20:79:79:45:7d:be:98: 04:47:a4:ff:c3:f3:6f:b6:c9:9c:ec:69:3e:c3:08: 1b:64:86:79:6c:2c:2f:7d:8d:14:34:4c:3d:9d:d5: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:73:95:81:1C:4E:E4:E7:B7:1E:D1:A3:AC:41:28:32:AC:D1:59 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:dd:4e:55:d3:47:5a:6c:2a:ac:81:d8:4c:a9:66:ee:f2:ed: 66:fc:b0:44:62:ce:64:55:93:73:c0:03:59:9f:24:9f:9a:1b: 20:d6:e7:7b:55:14:a1:a7:7d:42:cb:2d:91:2a:de:cf:fb:39: f9:b1:83:09:0a:ab:7f:7b:f3:47:3e:a7:71:30:12:cf:94:0d: fc:fa:87:cb:ec:e5:2f:ad:fe:94:4d:04:65:ff:fb:6d:77:e5: c4:47:ad:5c:75:89:e9:0d:a2:05:53:16:df:ea:bd:ef:08:b3: 94:10:75:45:30:6a:89:02:96:1c:ba:5f:49:a1:5e:96:76:d0: c5:cb:0e:bc:6f:40:cd:05:17:d9:1b:47:a2:ce:95:b3:be:71: 18:40:90:8b:45:82:05:53:32:49:8d:ed:e6:b0:14:e4:f8:27: 79:b8:53:28:72:c0:04:b3:fa:95:45:42:ae:cb:eb:66:29:21: e9:c0:ba:41:b7:fd:3f:c9:b8:be:a7:61:42:db:eb:c2:da:a9: 08:e4:c5:4c:8a:4e:37:ae:60:26:2b:b4:2d:a5:3f:94:82:fc: 3d:e3:13:aa:b4:ad:cd:f7:c9:88:4d:76:9a:0b:c0:b8:23:6e: e4:86:55:af:c1:6f:93:50:d8:6e:34:de:95:b4:a3:fa:98:f4: 3c:2c:ce:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzT0QuzF6BbmJaULeK0NTylznRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNjA0MjIwMTM2MDRaFw0yNjA0MjUxMDIyMDRaMDMxMTAvBgNV BAMTKEU1QkE3Mzk1ODExQzRFRTRFN0I3MUVEMUEzQUM0MTI4MzJBQ0QxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDZ7THxG8hIztLYHwiOVAM7va 1W6ir2lTLseZJNAVVblrxIfLeOTE9OShZeBCHT+DEj6C5wmBWBiHkPhbQrrAP7iU rryYAv653SjprTUyyTA32AeDSkqoiSN9tlDdL1YwKGri6cT7krnt+DQ+H1TzEMAJ E5SyO0D20YWOi2yGnix3B1P86pTtQR3oBsQ6qFIaC5Snqf5AYVqsxdvKDrbB91E+ oPSsLIwwIlbgs/D/SJmgyXkxrpyo181ydztr5EPZx5v/41X8zJmk+ntkT3u+p1fz Z4mpZEUPIHl5RX2+mARHpP/D82+2yZzsaT7DCBtkhnlsLC99jRQ0TD2d1eopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5bpzlYEcTuTntx7Ro6xBKDKs0VkwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjdTlXTR1psKqyB2EypZu7y7Wb8sERizmRV k3PAA1mfJJ+aGyDW53tVFKGnfULLLZEq3s/7OfmxgwkKq39780c+p3EwEs+UDfz6 h8vs5S+t/pRNBGX/+2135cRHrVx1iekNogVTFt/qve8Is5QQdUUwaokClhy6X0mh XpZ20MXLDrxvQM0FF9kbR6LOlbO+cRhAkItFggVTMkmN7eawFOT4J3m4UyhywASz +pVFQq7L62YpIenAukG3/T/JuL6nYULb68LaqQjkxUyKTjeuYCYrtC2lP5SC/D3j E6q0rc33yYhNdpoLwLgjbuSGVa/Bb5NQ2G403pW0o/qY9DwszpY= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:36 2026 by rpki-client