$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json) Hash identifier: 5cK10L6ieRvDZxw10oGqEt5185dBF7jGGI6Eb+SNr9c= Subject key identifier: 9D:31:F8:69:6B:00:95:CA:D8:47:1A:1B:1D:BD:B8:94:A7:76:1B:00 Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 704DD2E1E603708A069C803303844110D3500A2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:18 +0000 Manifest this update: Tue 12 May 2026 20:53:18 +0000 Manifest next update: Wed 13 May 2026 22:17:18 +0000 Files and hashes: 1: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: NAIZm27/DLjUH0Iiizhd7AcY0h6TcMGgT6wH1ZMjztk=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4d:d2:e1:e6:03:70:8a:06:9c:80:33:03:84:41:10:d3:50:0a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: May 12 20:53:18 2026 GMT Not After : May 13 22:17:18 2026 GMT Subject: CN=9D31F8696B0095CAD8471A1B1DBDB894A7761B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:3f:71:3d:7c:25:ce:8d:3e:88:75:fc:87: bb:aa:10:48:6f:bd:7f:07:13:69:2d:c2:f7:05:55: e9:21:97:b0:26:41:63:7e:b2:c8:7d:57:7d:e8:54: 68:57:58:5c:d9:ab:3b:fd:2d:0f:a4:67:4f:6e:d4: e1:29:18:40:e1:c3:1c:6d:c7:e5:eb:82:a9:e1:8d: a6:ec:1a:96:ac:06:a2:32:df:dd:1d:75:63:c4:de: fd:27:ae:f6:49:ca:94:bb:8f:8c:77:c2:79:de:64: 75:15:9c:21:73:d8:04:83:96:d2:8e:b2:19:12:07: f0:7a:08:6d:89:e3:af:36:b3:90:77:cc:0b:1b:8f: 73:61:2f:66:a6:d6:72:aa:07:e6:0a:e9:65:2d:2f: cf:d7:e3:7a:e5:6f:01:e5:2a:0a:45:59:20:8f:8e: ca:59:26:31:88:f7:c5:ce:18:41:63:fe:ad:12:1e: 47:9c:bb:6a:0e:d8:b8:4b:6f:8a:0e:82:27:41:de: a5:ec:96:d3:3d:a2:c9:f9:8b:63:a3:3f:f1:e5:af: 1d:0e:75:8a:0c:39:cf:91:ec:8c:02:a2:e4:e1:11: 0d:b0:25:5a:cd:b6:7d:32:49:d1:ad:31:10:4e:a2: 50:c8:a0:43:ff:05:4d:f9:f9:64:db:ad:c2:1a:93: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:31:F8:69:6B:00:95:CA:D8:47:1A:1B:1D:BD:B8:94:A7:76:1B:00 X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:7e:a9:b0:c4:ef:0a:44:4f:c1:a8:22:f0:33:f2:cc:8d:7b: d0:f1:ee:4d:1a:40:49:b1:f6:d8:4a:44:0e:47:8f:6d:b2:b8: c4:99:02:52:53:a2:48:2d:1b:f3:53:20:40:38:0c:c7:ca:29: 29:e8:c3:80:51:2c:ed:48:df:c0:20:64:0f:c8:7f:68:ce:6e: 80:17:ee:af:b4:1a:6c:5c:49:e7:7f:8d:01:a5:22:d2:28:86: 01:c8:1e:0d:d2:9b:f4:75:da:32:6c:28:bc:c3:f8:b2:4d:50: 30:ef:fa:8e:d1:0f:2f:53:5e:93:45:77:a6:d9:5b:4d:4b:f6: b7:f0:9d:aa:35:fc:df:5f:1f:79:1f:95:1b:20:f7:9a:3a:45: d3:38:68:4f:81:61:b6:3a:7f:2e:ed:ea:06:3a:9b:b7:14:41: 35:57:74:e3:96:d0:fb:9d:0a:52:3e:9f:46:84:8d:cd:4f:9b: f3:b7:6f:79:fc:89:07:6d:15:72:2b:28:88:c6:64:15:10:42: 06:66:37:11:7a:f9:8f:f5:de:c2:d3:fb:6a:ce:c4:f2:7c:c0: b0:36:10:46:cd:fc:de:23:aa:44:46:2b:1a:30:59:6d:23:7c: 0c:46:4b:80:57:51:bb:e3:c5:f2:ed:a4:11:12:8c:a2:6f:ed: e8:f5:6a:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcE3S4eYDcIoGnIAzA4RBENNQCi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA1MTIyMDUzMThaFw0yNjA1MTMyMjE3MThaMDMxMTAvBgNV BAMTKDlEMzFGODY5NkIwMDk1Q0FEODQ3MUExQjFEQkRCODk0QTc3NjFCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GT9xPXwlzo0+iHX8h7uqEEhv vX8HE2ktwvcFVekhl7AmQWN+ssh9V33oVGhXWFzZqzv9LQ+kZ09u1OEpGEDhwxxt x+XrgqnhjabsGpasBqIy390ddWPE3v0nrvZJypS7j4x3wnneZHUVnCFz2ASDltKO shkSB/B6CG2J4682s5B3zAsbj3NhL2am1nKqB+YK6WUtL8/X43rlbwHlKgpFWSCP jspZJjGI98XOGEFj/q0SHkecu2oO2LhLb4oOgidB3qXsltM9osn5i2OjP/Hlrx0O dYoMOc+R7IwCouThEQ2wJVrNtn0ySdGtMRBOolDIoEP/BU35+WTbrcIak1eFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTH4aWsAlcrYRxobHb24lKd2GwAwHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUx REZBODk3Q0UxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALl+qbDE7wpET8GoIvAz8syNe9Dx7k0aQEmx 9thKRA5Hj22yuMSZAlJTokgtG/NTIEA4DMfKKSnow4BRLO1I38AgZA/If2jOboAX 7q+0GmxcSed/jQGlItIohgHIHg3Sm/R12jJsKLzD+LJNUDDv+o7RDy9TXpNFd6bZ W01L9rfwnao1/N9fH3kflRsg95o6RdM4aE+BYbY6fy7t6gY6m7cUQTVXdOOW0Pud ClI+n0aEjc1Pm/O3b3n8iQdtFXIrKIjGZBUQQgZmNxF6+Y/13sLT+2rOxPJ8wLA2 EEbN/N4jqkRGKxowWW0jfAxGS4BXUbvjxfLtpBESjKJv7ej1akE= -----END CERTIFICATE-----Generated at Wed May 13 01:37:21 2026 by rpki-client