$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: q3RsvDbtA2f6cbaJvFUNSix92K22HjeRuX6fFiCAv7c= Subject key identifier: C7:49:14:E5:95:BD:E5:58:3C:10:37:7D:29:CC:33:B9:1D:29:EE:06 Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 62C586871EA6F72344D3920D339159655EB8E821 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:02:06 +0000 Manifest this update: Wed 23 Sep 2026 16:57:06 +0000 Manifest next update: Thu 24 Sep 2026 17:46:06 +0000 Files and hashes: 1: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 2: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) 3: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) 4: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: HYs6LiaqQKvSyvgQze340ZVUe3pVhb7ORJT0iYxQw3Q=) 5: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c5:86:87:1e:a6:f7:23:44:d3:92:0d:33:91:59:65:5e:b8:e8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: Sep 23 16:57:06 2026 GMT Not After : Sep 24 17:46:06 2026 GMT Subject: CN=C74914E595BDE5583C10377D29CC33B91D29EE06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:56:ca:4b:d4:83:fa:6d:59:5f:e3:93:97: 04:cb:79:85:71:b7:5f:b8:9a:00:1b:ff:60:6a:90: 0c:b7:be:b2:67:45:76:82:6b:c7:2b:a1:eb:dc:ee: 7a:a4:a0:ad:bb:79:b3:e9:f5:d8:25:8c:e7:d3:f0: c5:88:37:f5:b0:ec:70:2e:5f:c1:d9:63:f4:4c:99: cf:ba:63:1e:cf:d2:c0:f1:28:8f:ab:1f:81:dd:15: 55:9f:37:57:ec:74:38:44:c2:f6:f8:71:98:ed:0a: 11:92:0e:b1:45:9e:ca:f3:25:52:2e:dd:8b:dd:97: 69:8a:f3:39:6d:ce:66:76:96:f1:16:65:d3:35:cf: 10:9e:e1:f7:1e:e6:e2:c9:e8:b2:8d:a0:fa:e7:82: 47:ea:5e:eb:b4:32:17:9d:fe:2b:b8:26:ce:6e:e0: c4:ce:f4:3c:b2:34:ad:ab:dd:5f:9d:3a:d9:6a:7d: 43:bf:28:ad:85:78:ff:2a:16:93:0c:07:74:e7:35: b8:54:f2:d6:8d:91:e7:18:4f:c5:51:00:be:39:68: cd:ee:d3:c3:cc:fa:ff:ab:fa:bb:db:7c:5f:28:95: 16:b3:0e:d4:58:3d:e4:03:1b:7f:67:7c:0d:10:1c: e6:f7:9f:3f:75:d6:8e:f2:ac:da:c4:f6:10:63:3e: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:49:14:E5:95:BD:E5:58:3C:10:37:7D:29:CC:33:B9:1D:29:EE:06 X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:41:d6:3b:a1:74:c3:d5:82:70:6e:7b:c4:24:27:e5:c1:7e: c3:e9:e2:64:fc:92:ca:fb:6c:9c:d0:b4:5a:4f:53:ee:7b:ab: 57:fa:96:de:5b:1e:cc:6f:af:d3:d4:4e:20:e8:22:96:2c:a4: 1a:12:34:b4:44:29:f6:15:bc:fa:35:31:b9:4e:b0:08:9f:22: d3:be:f0:81:24:e8:df:63:3b:02:ab:cd:95:09:94:29:1d:c1: 3b:9f:cd:b3:54:61:fb:d3:6b:a9:67:9e:53:5e:58:00:b8:d5: 18:9d:bd:0c:ea:f4:1b:21:99:bc:8f:a5:c5:2d:52:16:47:48: 57:7e:17:ce:f2:bb:ee:69:6b:dc:95:c2:dd:41:18:2d:ca:ec: 08:b5:84:8e:06:94:f3:38:c5:a6:4b:ef:60:26:5c:07:6c:19: b2:85:08:66:12:63:c2:2a:df:e6:61:06:ba:73:ac:d0:24:6b: 27:e7:b9:7b:62:ed:e0:2e:d6:5e:c9:2c:9c:1c:5f:10:7d:82: 78:27:b1:86:9f:57:e6:f5:78:e3:3a:28:85:7f:77:d2:e8:96: 64:39:be:1d:04:a6:80:b2:72:07:c4:94:3a:36:cb:76:57:67: b3:f1:3b:87:71:37:d9:2a:df:0a:21:44:54:71:74:d4:e5:8f: d5:d7:70:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsWGhx6m9yNE05INM5FZZV646CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA5MjMxNjU3MDZaFw0yNjA5MjQxNzQ2MDZaMDMxMTAvBgNV BAMTKEM3NDkxNEU1OTVCREU1NTgzQzEwMzc3RDI5Q0MzM0I5MUQyOUVFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoB1bKS9SD+m1ZX+OTlwTLeYVx t1+4mgAb/2BqkAy3vrJnRXaCa8croevc7nqkoK27ebPp9dgljOfT8MWIN/Ww7HAu X8HZY/RMmc+6Yx7P0sDxKI+rH4HdFVWfN1fsdDhEwvb4cZjtChGSDrFFnsrzJVIu 3Yvdl2mK8zltzmZ2lvEWZdM1zxCe4fce5uLJ6LKNoPrngkfqXuu0Mhed/iu4Js5u 4MTO9DyyNK2r3V+dOtlqfUO/KK2FeP8qFpMMB3TnNbhU8taNkecYT8VRAL45aM3u 08PM+v+r+rvbfF8olRazDtRYPeQDG39nfA0QHOb3nz911o7yrNrE9hBjProXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx0kU5ZW95Vg8EDd9KcwzuR0p7gYwHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBB1juhdMPVgnBue8QkJ+XBfsPp4mT8ksr7 bJzQtFpPU+57q1f6lt5bHsxvr9PUTiDoIpYspBoSNLREKfYVvPo1MblOsAifItO+ 8IEk6N9jOwKrzZUJlCkdwTufzbNUYfvTa6lnnlNeWAC41RidvQzq9BshmbyPpcUt UhZHSFd+F87yu+5pa9yVwt1BGC3K7Ai1hI4GlPM4xaZL72AmXAdsGbKFCGYSY8Iq 3+ZhBrpzrNAkayfnuXti7eAu1l7JLJwcXxB9gngnsYafV+b1eOM6KIV/d9LolmQ5 vh0EpoCycgfElDo2y3ZXZ7PxO4dxN9kq3wohRFRxdNTlj9XXcL8= -----END CERTIFICATE-----Generated at Wed Sep 23 23:18:47 2026 by rpki-client