$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: vrErWaHDXSR+Bno49WxHEhzwmPXiYaXLU2mCV++316w= Subject key identifier: 18:A9:4C:2C:8A:5C:07:14:61:FA:9F:A8:23:4B:73:B3:34:3C:22:CA Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 563C056086E3F3F65C645C8B261C4A64057BCD9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: C5 Signing time: Wed 23 Sep 2026 10:18:55 +0000 Manifest this update: Wed 23 Sep 2026 10:13:55 +0000 Manifest next update: Thu 24 Sep 2026 10:30:55 +0000 Files and hashes: 1: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: SITNNBVliw9DZR2RTmkbF3IKdnwEvR3f9aqBoFvzYQc=) 2: 3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa (hash: gbvsVbre/1qZHWsiXoi/b+h75ZvQI1fjsMMqGabJRM8=) 3: 3130332e3138352e38322e302f32342d3234203d3e20313533363538.roa (hash: 3D6eYWuVv+VfyxKvhmmt+NlubugsC5IamNBQUUTxDDk=) 4: 3130332e3138352e38322e302f32332d3233203d3e203538383230.roa (hash: 5tF4qp3pthDfpaMIBTWAt6J465qcSCrI9I/iywJOOfs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3c:05:60:86:e3:f3:f6:5c:64:5c:8b:26:1c:4a:64:05:7b:cd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: Sep 23 10:13:55 2026 GMT Not After : Sep 24 10:30:55 2026 GMT Subject: CN=18A94C2C8A5C071461FA9FA8234B73B3343C22CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:2b:33:35:c8:20:8d:4d:ac:8d:fc:5e:7c: 91:9c:d5:f4:3e:45:44:71:6d:d8:9c:f6:71:94:c9: 9c:56:c1:6b:f4:6e:b7:69:13:98:e8:7c:d7:87:f9: 2b:75:c3:8d:f8:55:15:c8:b1:c1:39:9e:89:39:d1: 6b:02:1e:d8:b9:86:79:9b:bc:25:df:52:57:94:10: 66:48:9e:e2:f0:15:d6:c1:12:16:0c:37:10:d5:b2: 61:e5:a7:bc:40:92:72:5e:3a:0a:9b:08:9b:bf:fc: 58:6b:a1:0d:3b:25:3a:f3:2f:a0:94:a3:03:29:60: 46:e2:d9:b4:f3:bc:e0:12:4a:64:47:67:03:0b:dc: 3b:c1:97:06:f8:b1:42:8a:cb:02:a9:dd:a3:09:3c: 86:32:bd:9d:9c:d7:5e:b5:c8:6e:08:f9:14:28:60: 89:80:79:76:86:06:8f:15:25:b9:86:53:56:2c:03: 88:e9:9f:90:b1:0b:da:dc:74:82:c5:27:18:c3:98: 93:43:f0:5a:84:04:1d:51:e0:a6:32:a5:96:60:a1: a1:2b:21:26:b2:27:be:4c:be:ec:1c:c1:ce:b5:10: 3f:93:92:a4:26:0b:28:bc:5d:6f:37:c8:3b:7f:db: 41:e0:8d:47:f6:ef:73:e3:95:cf:c3:0f:0e:52:1e: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A9:4C:2C:8A:5C:07:14:61:FA:9F:A8:23:4B:73:B3:34:3C:22:CA X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0b:2b:e7:95:be:ff:03:63:47:74:4c:46:85:2c:1d:2c:81: f5:a8:9b:a9:e2:0c:ca:c6:7e:3b:95:e5:19:1e:a0:9a:ce:9d: ab:6b:c8:47:3b:0a:f2:64:77:db:b6:a9:a6:7e:01:28:02:54: bc:8a:15:ef:62:0b:80:19:a2:63:7f:e6:e3:1b:e3:28:7c:6c: d1:ef:92:34:93:5d:30:6d:48:b0:b4:a2:3f:5b:42:b6:5f:8d: 26:31:d7:b5:25:53:36:ce:dc:ff:8e:18:c0:b4:20:6a:2d:30: 59:59:d7:b0:31:c4:e1:9e:b8:4b:de:6f:93:1f:bc:7c:fa:f3: f3:d7:7c:e9:6a:ea:39:8f:0e:31:f0:a8:2a:ba:ea:36:41:80: c9:e3:c6:78:b7:46:a8:dc:6d:96:3d:87:e7:bf:86:35:14:56: f7:a7:03:ff:66:07:09:46:97:7a:20:15:6b:ca:4d:e4:6b:85: 02:e9:46:0b:51:39:8e:a9:05:a7:ee:82:1d:b0:d4:0e:dc:31: 7d:ff:d8:aa:cd:af:62:3a:39:05:37:1c:aa:6d:7c:74:ba:cd: a8:f3:92:d7:82:4f:5c:c4:26:b3:cb:ae:6c:a0:b2:3f:97:fe: d4:55:32:69:81:21:f5:66:47:4e:86:21:f3:3c:9a:04:ea:d6: 51:d6:c2:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjwFYIbj8/ZcZFyLJhxKZAV7zZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjA5MjMxMDEzNTVaFw0yNjA5MjQxMDMwNTVaMDMxMTAvBgNV BAMTKDE4QTk0QzJDOEE1QzA3MTQ2MUZBOUZBODIzNEI3M0IzMzQzQzIyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zSszNcggjU2sjfxefJGc1fQ+ RURxbdic9nGUyZxWwWv0brdpE5jofNeH+St1w434VRXIscE5nok50WsCHti5hnmb vCXfUleUEGZInuLwFdbBEhYMNxDVsmHlp7xAknJeOgqbCJu//FhroQ07JTrzL6CU owMpYEbi2bTzvOASSmRHZwML3DvBlwb4sUKKywKp3aMJPIYyvZ2c1161yG4I+RQo YImAeXaGBo8VJbmGU1YsA4jpn5CxC9rcdILFJxjDmJND8FqEBB1R4KYypZZgoaEr ISayJ75Mvuwcwc61ED+TkqQmCyi8XW83yDt/20HgjUf273Pjlc/DDw5SHiXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGKlMLIpcBxRh+p+oI0tzszQ8IsowHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4LK+eVvv8DY0d0TEaFLB0sgfWom6niDMrG fjuV5RkeoJrOnatryEc7CvJkd9u2qaZ+ASgCVLyKFe9iC4AZomN/5uMb4yh8bNHv kjSTXTBtSLC0oj9bQrZfjSYx17UlUzbO3P+OGMC0IGotMFlZ17AxxOGeuEveb5Mf vHz68/PXfOlq6jmPDjHwqCq66jZBgMnjxni3RqjcbZY9h+e/hjUUVvenA/9mBwlG l3ogFWvKTeRrhQLpRgtROY6pBafugh2w1A7cMX3/2KrNr2I6OQU3HKptfHS6zajz kteCT1zEJrPLrmygsj+X/tRVMmmBIfVmR06GIfM8mgTq1lHWwlA= -----END CERTIFICATE-----Generated at Thu Sep 24 03:40:51 2026 by rpki-client