$ rpki-client -vvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: dozDc4QiIYzI6twDWuglJgzfbZL0fMGDps6/KIPketE= Subject key identifier: 42:93:65:DD:64:6A:9D:D8:A5:6A:B4:F2:DE:47:7A:B0:02:FA:34:D3 Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 30ADF6712964BD6A8EC46FBE3FE55916D527F6C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:41 +0000 Manifest this update: Tue 12 May 2026 20:32:41 +0000 Manifest next update: Wed 13 May 2026 23:45:41 +0000 Files and hashes: 1: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 2: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: rxhly31LKaN0ttSqUVZogPBGGXd2L94JKSAscDL9Inc=) 3: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) 4: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) 5: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ad:f6:71:29:64:bd:6a:8e:c4:6f:be:3f:e5:59:16:d5:27:f6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: May 12 20:32:41 2026 GMT Not After : May 13 23:45:41 2026 GMT Subject: CN=429365DD646A9DD8A56AB4F2DE477AB002FA34D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:e5:36:d0:cb:6c:6e:6c:ed:7c:ec:a7:66: e3:9a:b7:77:79:ce:7c:93:ca:9e:c3:a3:74:8e:4d: 61:68:ee:7d:26:a8:77:2d:db:93:69:f5:c7:41:8e: df:57:25:ef:98:f6:a3:72:96:da:35:cd:45:61:2d: 9d:a9:c9:f2:df:6b:34:07:9a:d4:e8:67:14:2f:99: 03:a7:77:5e:89:e7:a0:ff:39:f9:98:33:90:5a:f8: 00:45:26:31:14:fe:cd:54:7b:71:2f:8a:ec:39:e3: 61:40:78:6b:1e:d4:fb:06:25:d3:3a:d7:0e:9f:c6: b4:8d:4d:5e:61:23:3c:e5:4b:bc:ce:4a:99:ef:81: 39:b9:9e:52:91:f0:79:53:c6:a6:d2:06:d9:95:01: 50:bf:b2:ec:02:c1:71:f5:58:fb:16:94:3b:2e:ab: 87:92:62:f2:69:9a:b7:6a:d7:9a:73:d6:1d:73:6b: 46:28:43:a1:0c:0a:e6:85:df:8f:c7:d5:e1:5c:8b: 9a:e1:c2:3c:35:74:6d:ec:49:03:16:9a:7d:af:bc: 98:7e:cc:71:a6:37:0e:26:5d:29:57:fa:1f:ea:17: bb:dc:0a:e9:0b:21:17:da:d5:e1:fe:41:27:cd:b3: 8d:5f:3a:7d:9b:c2:14:ef:e5:1d:3f:6d:49:38:ad: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:65:DD:64:6A:9D:D8:A5:6A:B4:F2:DE:47:7A:B0:02:FA:34:D3 X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0b:b0:64:cd:13:10:c7:cd:9f:40:3d:e9:3f:b1:49:aa:46: 2c:f8:78:c8:ea:4a:7b:11:2d:ff:87:e4:bd:e1:9c:15:5b:08: 81:81:35:07:18:78:e7:bf:d1:0e:20:41:bd:b9:31:78:a1:e9: 96:f5:82:49:ac:8c:a4:1a:40:c8:6f:48:31:6a:c4:53:fc:84: 85:cc:9a:5b:84:71:e8:25:5f:c9:fa:a2:21:07:e1:47:f6:6f: 6a:3f:b3:6b:b5:20:15:43:ec:d8:d9:16:01:87:97:4c:1a:b5: ff:b8:e9:b4:39:3e:ef:d9:f0:1a:3f:6b:08:a3:9d:cc:5c:4e: 8d:cd:a9:f7:24:99:67:7f:1c:36:ae:4a:69:57:d7:c9:ac:58: f4:84:47:48:01:f9:21:75:0d:03:67:e6:69:0d:d5:96:5e:6c: ce:1f:fe:d8:a9:e8:74:81:ab:5c:63:79:44:6e:88:43:9c:f3: 08:22:9c:5a:b0:0e:22:0b:79:11:8a:17:15:a5:aa:7b:a3:72: 39:7d:50:b0:97:1d:10:7c:ee:01:9b:bf:7c:24:40:77:61:ea: f8:1b:07:c6:60:9e:87:39:94:6c:33:c1:7c:f6:2a:11:7a:9c: cc:ff:7a:06:f4:b7:c6:74:fa:4d:ba:6d:04:83:93:6e:98:bc: fc:29:68:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMK32cSlkvWqOxG++P+VZFtUn9sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA1MTIyMDMyNDFaFw0yNjA1MTMyMzQ1NDFaMDMxMTAvBgNV BAMTKDQyOTM2NURENjQ2QTlERDhBNTZBQjRGMkRFNDc3QUIwMDJGQTM0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcuU20MtsbmztfOynZuOat3d5 znyTyp7Do3SOTWFo7n0mqHct25Np9cdBjt9XJe+Y9qNylto1zUVhLZ2pyfLfazQH mtToZxQvmQOnd16J56D/OfmYM5Ba+ABFJjEU/s1Ue3Eviuw542FAeGse1PsGJdM6 1w6fxrSNTV5hIzzlS7zOSpnvgTm5nlKR8HlTxqbSBtmVAVC/suwCwXH1WPsWlDsu q4eSYvJpmrdq15pz1h1za0YoQ6EMCuaF34/H1eFci5rhwjw1dG3sSQMWmn2vvJh+ zHGmNw4mXSlX+h/qF7vcCukLIRfa1eH+QSfNs41fOn2bwhTv5R0/bUk4rZQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpNl3WRqndilarTy3kd6sAL6NNMwHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQLsGTNExDHzZ9APek/sUmqRiz4eMjqSnsR Lf+H5L3hnBVbCIGBNQcYeOe/0Q4gQb25MXih6Zb1gkmsjKQaQMhvSDFqxFP8hIXM mluEceglX8n6oiEH4Uf2b2o/s2u1IBVD7NjZFgGHl0watf+46bQ5Pu/Z8Bo/awij ncxcTo3NqfckmWd/HDauSmlX18msWPSER0gB+SF1DQNn5mkN1ZZebM4f/tip6HSB q1xjeURuiEOc8wginFqwDiILeRGKFxWlqnujcjl9ULCXHRB87gGbv3wkQHdh6vgb B8Zgnoc5lGwzwXz2KhF6nMz/egb0t8Z0+k26bQSDk26YvPwpaKI= -----END CERTIFICATE-----Generated at Wed May 13 02:12:54 2026 by rpki-client