$ rpki-client -vvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: j7WVNslWVTx2rfEtrS+hfdHY6bopK2d441Zss8n5j7k= Subject key identifier: 37:FD:79:5F:A4:F0:0F:F2:91:DB:67:14:49:79:4B:29:23:5C:10:1A Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 35DFBD67F71FFAF8C355EC2DBBC8D47519E6E5D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:05:48 +0000 Manifest this update: Thu 23 Jul 2026 21:00:48 +0000 Manifest next update: Fri 24 Jul 2026 23:23:48 +0000 Files and hashes: 1: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) 2: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 3: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: zwZe5eetFDfwVYhfZ9NeXtHHLt5RQXo5qn+h/HF3Kg8=) 4: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) 5: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:df:bd:67:f7:1f:fa:f8:c3:55:ec:2d:bb:c8:d4:75:19:e6:e5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: Jul 23 21:00:48 2026 GMT Not After : Jul 24 23:23:48 2026 GMT Subject: CN=37FD795FA4F00FF291DB671449794B29235C101A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:d7:7a:7e:63:be:9a:a6:91:26:84:6d:15: 86:98:25:c3:46:e9:e8:99:4a:54:f9:e0:4a:91:b8: 9f:ec:bc:e5:c7:2c:db:fd:cc:70:ef:e8:43:12:35: 26:c2:ba:8e:dc:59:92:b9:73:f9:91:f3:bf:51:e2: d9:e0:15:2c:4a:4d:69:e0:7e:b8:61:67:67:e9:e9: c3:bb:29:00:e0:65:66:1d:84:59:a9:3f:c8:11:3b: 9a:e2:41:b5:d4:b8:be:10:ec:7c:b3:e4:99:8b:b5: df:f1:33:0c:f1:b0:ff:a0:40:5b:b1:99:be:74:2c: 04:4c:2e:cb:77:c4:0c:f8:75:eb:cf:c3:9e:a1:3d: a2:18:11:63:ed:fb:34:57:68:c7:d8:3e:c3:5d:0f: 92:e7:f1:9f:2b:d0:67:58:51:46:0d:7b:56:c7:0f: 66:98:75:57:3e:a5:09:0f:48:71:e0:55:b6:85:d9: a8:52:f0:5f:78:54:d0:82:d4:57:49:67:40:eb:44: 86:94:7d:62:16:b1:b3:a8:5f:da:19:32:50:63:e9: 9b:42:0b:e9:38:8d:4c:25:07:b2:64:d9:9f:48:54: ea:e9:1f:3c:83:27:eb:04:85:2a:12:54:5e:7b:c5: 59:cd:d8:07:10:cf:a0:a0:3b:62:ae:9c:7f:93:a3: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FD:79:5F:A4:F0:0F:F2:91:DB:67:14:49:79:4B:29:23:5C:10:1A X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:91:98:21:56:50:39:2d:9f:53:c3:1b:60:1a:24:f3:d5:8a: 81:d1:fc:02:ee:32:14:8c:8b:75:cb:ae:55:9f:f8:7e:c9:e3: 26:ba:3b:3d:e9:f7:a8:f7:35:56:9f:4c:df:b6:29:e3:db:c2: 5e:c3:d7:f4:29:47:f0:28:87:18:ea:e7:8c:0e:03:5c:6f:96: 23:0a:f4:4c:72:5f:4f:fc:22:85:31:a5:a0:5c:9a:6d:1c:10: fe:02:b4:b6:b5:18:a6:d2:b3:d8:ae:61:55:5f:e5:af:ec:37: 05:b7:1f:75:a6:0f:a2:63:e9:70:c4:e3:7f:96:85:78:b4:04: e8:5b:36:e5:ac:09:c6:85:54:c9:e1:f0:3a:d3:6d:9b:9f:a7: c0:a4:b2:75:13:39:84:3f:0a:23:d9:d3:e4:e9:6f:52:db:7c: ac:66:9c:96:88:46:c7:c5:f5:99:12:58:bc:eb:3c:c0:e0:4e: 5a:55:72:8c:ca:47:4c:b2:43:e5:37:b6:ac:44:55:3d:ae:04: ff:ee:2b:07:55:b7:c8:21:a6:67:89:71:a9:7e:cb:1a:7c:c0: 6f:42:5b:cd:d5:79:12:7c:e1:4f:43:ed:e8:ef:59:8f:44:91: 54:88:50:13:1b:3b:7b:48:9e:3d:91:c9:d7:a6:29:4f:7a:02: 3b:33:65:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNd+9Z/cf+vjDVewtu8jUdRnm5dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA3MjMyMTAwNDhaFw0yNjA3MjQyMzIzNDhaMDMxMTAvBgNV BAMTKDM3RkQ3OTVGQTRGMDBGRjI5MURCNjcxNDQ5Nzk0QjI5MjM1QzEwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62td6fmO+mqaRJoRtFYaYJcNG 6eiZSlT54EqRuJ/svOXHLNv9zHDv6EMSNSbCuo7cWZK5c/mR879R4tngFSxKTWng frhhZ2fp6cO7KQDgZWYdhFmpP8gRO5riQbXUuL4Q7Hyz5JmLtd/xMwzxsP+gQFux mb50LARMLst3xAz4devPw56hPaIYEWPt+zRXaMfYPsNdD5Ln8Z8r0GdYUUYNe1bH D2aYdVc+pQkPSHHgVbaF2ahS8F94VNCC1FdJZ0DrRIaUfWIWsbOoX9oZMlBj6ZtC C+k4jUwlB7Jk2Z9IVOrpHzyDJ+sEhSoSVF57xVnN2AcQz6CgO2KunH+To6MtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/15X6TwD/KR22cUSXlLKSNcEBowHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKRmCFWUDktn1PDG2AaJPPVioHR/ALuMhSM i3XLrlWf+H7J4ya6Oz3p96j3NVafTN+2KePbwl7D1/QpR/Aohxjq54wOA1xvliMK 9ExyX0/8IoUxpaBcmm0cEP4CtLa1GKbSs9iuYVVf5a/sNwW3H3WmD6Jj6XDE43+W hXi0BOhbNuWsCcaFVMnh8DrTbZufp8CksnUTOYQ/CiPZ0+Tpb1LbfKxmnJaIRsfF 9ZkSWLzrPMDgTlpVcozKR0yyQ+U3tqxEVT2uBP/uKwdVt8ghpmeJcal+yxp8wG9C W83VeRJ84U9D7ejvWY9EkVSIUBMbO3tInj2RydemKU96AjszZRM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:39:44 2026 by rpki-client