$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json) Hash identifier: 1RkOoA/bncxFvCD8IoICIz+DcaYYccNaMic2IJhyuiQ= Subject key identifier: B4:20:B7:2D:27:7E:C1:98:56:A9:E2:CB:AB:B6:59:B2:1D:71:8B:FD Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 10F078BED50C23C7C8A3B1FC27ED0A58874418B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:27:42 +0000 Manifest this update: Wed 23 Sep 2026 21:22:42 +0000 Manifest next update: Fri 25 Sep 2026 00:35:42 +0000 Files and hashes: 1: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: aIF3mcGyLfql+wusmqgrSXx+stmdCxDc86xhod6gCvQ=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f0:78:be:d5:0c:23:c7:c8:a3:b1:fc:27:ed:0a:58:87:44:18:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: Sep 23 21:22:42 2026 GMT Not After : Sep 25 00:35:42 2026 GMT Subject: CN=B420B72D277EC19856A9E2CBABB659B21D718BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:40:47:30:54:7c:ac:3d:53:7b:89:c8:3b: 2e:fe:4f:73:49:01:35:a2:a1:d2:44:10:7c:dc:33: d5:19:3e:24:0f:db:9f:fe:1f:f9:2b:c9:3e:31:cb: db:57:83:8e:f7:a3:df:28:24:a7:78:b8:7e:8a:6e: 04:71:b2:ca:f1:6f:7f:5c:51:1c:56:eb:46:45:1f: 00:ee:d3:9e:0c:86:1e:af:95:77:47:fa:9b:5f:44: a2:f4:4a:3b:e3:30:31:7b:98:76:47:a8:2a:2e:8d: 59:1c:52:48:d7:d7:0b:6e:a3:d1:48:89:4d:55:ec: cf:76:cd:0f:66:e0:d7:27:9f:05:d1:a3:58:bf:f4: e4:1d:6d:d9:59:b1:fa:f3:46:fb:a0:e6:15:96:c7: 9f:44:d9:55:a3:d0:a8:7c:d1:9c:9e:8e:cb:7c:f5: 02:19:66:58:c0:a5:24:ac:f7:f6:6e:ac:7d:7a:16: 2c:85:e2:d9:a0:2b:24:6c:24:4c:9d:03:44:76:0b: 03:96:ac:89:25:8f:aa:60:5d:55:af:85:23:57:f3: 07:69:e7:2d:6d:83:58:67:91:6a:79:6e:63:ef:3d: 73:4d:6c:67:51:dc:87:ba:11:b4:e3:c7:43:53:2b: a0:a7:4d:0b:da:ef:6c:26:ce:49:c1:02:1f:7c:5e: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:20:B7:2D:27:7E:C1:98:56:A9:E2:CB:AB:B6:59:B2:1D:71:8B:FD X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:9c:0d:08:9f:1d:36:d0:11:c0:9c:de:71:5c:c4:f7:69:bb: c6:68:58:b5:cb:15:c2:d7:23:67:68:35:52:eb:d5:73:64:92: 0b:29:16:ad:fe:65:93:d9:cb:cd:33:f7:96:7a:b6:48:1c:2f: 83:b3:f9:26:00:91:ac:e5:74:53:a5:26:36:a9:b2:3b:7d:12: 2a:3c:02:b8:f9:e6:67:6c:c5:50:dd:7a:e5:8f:91:32:eb:a0: 2f:a0:88:24:41:c7:b8:49:78:90:06:2d:3e:39:b0:50:df:06: 0d:e6:ec:c2:ab:6e:9b:9b:d5:a5:48:71:04:7e:13:9b:5a:e2: a7:94:34:18:5a:c5:4c:17:4e:5d:dc:b3:9f:9a:6c:85:a0:66: 69:05:22:e9:05:96:50:2d:62:ec:41:88:0f:64:61:e2:90:8b: 86:c8:3d:03:b5:75:9b:52:3b:ba:e1:09:32:62:51:7f:bb:1b: 77:05:ab:8b:1e:d2:c4:51:8b:cc:a1:bf:dd:82:ca:40:d8:c5: c2:e9:bf:1c:c7:11:e9:7f:42:4f:45:ee:69:d6:fc:a5:0b:0f: 04:1b:43:6c:70:4e:3e:be:ee:8e:32:33:e1:b3:25:a3:81:1b: cf:c8:4d:62:ec:66:7e:14:25:c7:28:be:d4:28:33:d7:1e:77: 05:cc:80:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPB4vtUMI8fIo7H8J+0KWIdEGLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA5MjMyMTIyNDJaFw0yNjA5MjUwMDM1NDJaMDMxMTAvBgNV BAMTKEI0MjBCNzJEMjc3RUMxOTg1NkE5RTJDQkFCQjY1OUIyMUQ3MThCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpEBHMFR8rD1Te4nIOy7+T3NJ ATWiodJEEHzcM9UZPiQP25/+H/kryT4xy9tXg473o98oJKd4uH6KbgRxssrxb39c URxW60ZFHwDu054Mhh6vlXdH+ptfRKL0SjvjMDF7mHZHqCoujVkcUkjX1wtuo9FI iU1V7M92zQ9m4NcnnwXRo1i/9OQdbdlZsfrzRvug5hWWx59E2VWj0Kh80Zyejst8 9QIZZljApSSs9/ZurH16FiyF4tmgKyRsJEydA0R2CwOWrIklj6pgXVWvhSNX8wdp 5y1tg1hnkWp5bmPvPXNNbGdR3Ie6EbTjx0NTK6CnTQva72wmzknBAh98Xs/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCC3LSd+wZhWqeLLq7ZZsh1xi/0wHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUx REZBODk3Q0UxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALucDQifHTbQEcCc3nFcxPdpu8ZoWLXLFcLX I2doNVLr1XNkkgspFq3+ZZPZy80z95Z6tkgcL4Oz+SYAkazldFOlJjapsjt9Eio8 Arj55mdsxVDdeuWPkTLroC+giCRBx7hJeJAGLT45sFDfBg3m7MKrbpub1aVIcQR+ E5ta4qeUNBhaxUwXTl3cs5+abIWgZmkFIukFllAtYuxBiA9kYeKQi4bIPQO1dZtS O7rhCTJiUX+7G3cFq4se0sRRi8yhv92CykDYxcLpvxzHEel/Qk9F7mnW/KULDwQb Q2xwTj6+7o4yM+GzJaOBG8/ITWLsZn4UJccovtQoM9cedwXMgLA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:52:14 2026 by rpki-client