$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: GerR873IDzUxMkEYmfU+Uimfc130NXMuI3gQMRG1Uxk= Subject key identifier: 17:A2:21:64:D5:D9:0C:11:FC:15:84:99:07:49:95:FA:37:43:BC:FA Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 29DF760C0DE3DE760A32A68A0EBB7D2FE7378287 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:11:59 +0000 Manifest this update: Fri 24 Jul 2026 02:06:59 +0000 Manifest next update: Sat 25 Jul 2026 03:48:59 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: 5EvruLBNSAVPD9rhIUp2sgGO0l1cxlFHLpEgjT7FBPg=) 2: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: EubjWOBdG6iWX022qCaQkEAAyaVE6Y9/OYb1oDUyhIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:df:76:0c:0d:e3:de:76:0a:32:a6:8a:0e:bb:7d:2f:e7:37:82:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: Jul 24 02:06:59 2026 GMT Not After : Jul 25 03:48:59 2026 GMT Subject: CN=17A22164D5D90C11FC158499074995FA3743BCFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:2f:b7:04:d3:99:13:36:7e:03:c2:b1:94: aa:a0:1e:a7:92:d2:1b:fc:40:5d:8d:83:a6:c8:27: e9:f9:b2:f1:02:83:3b:07:b9:f2:73:f2:36:e7:45: 4e:29:bb:ea:9a:45:6c:c2:68:0b:7d:42:ae:41:85: af:00:b9:7b:88:ef:84:41:04:0f:cc:5a:de:2a:11: 0c:0a:30:08:53:f1:57:9d:f8:33:da:85:83:c6:61: 00:76:13:a6:f8:16:4b:b6:18:89:4c:57:b6:44:6f: ac:a6:ec:d3:4c:c1:e1:b4:a9:a3:ef:c3:15:a7:a0: 30:f4:e3:73:b8:06:bc:6e:4c:e9:19:ba:e2:b8:e2: 41:b2:9a:4f:29:84:b9:2b:00:10:3c:58:1a:35:9e: e5:b5:bd:77:09:e8:66:8c:e8:a6:3a:4b:71:11:52: f6:c0:30:aa:1f:b9:43:71:0d:e4:c9:ef:98:4c:d9: f1:c9:b1:f3:1d:24:f2:83:75:b4:ac:f6:b2:d0:c6: 21:cf:70:6f:b8:5e:56:4a:16:a6:d4:c3:bb:58:35: 4a:f1:36:bf:60:39:f8:a3:c5:e4:58:da:10:70:e2: 14:0c:70:76:e3:fe:38:2b:b3:6c:b2:82:b2:c9:bd: b0:a4:78:c3:20:a4:12:bc:4e:81:45:43:d9:da:75: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A2:21:64:D5:D9:0C:11:FC:15:84:99:07:49:95:FA:37:43:BC:FA X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3f:b4:c5:cd:6f:a8:ce:26:44:45:d6:97:13:73:4a:61:7c: fc:ab:87:f8:80:a5:07:85:78:66:a3:66:eb:a0:61:86:20:bd: 6a:b8:ae:f7:8a:6e:52:10:3e:17:59:45:e9:de:ed:7a:83:8b: a6:96:d7:e0:da:a4:c5:bc:50:3b:7d:65:e6:ec:36:b5:f7:c9: c8:62:8b:8d:7c:e7:61:de:88:4b:08:36:32:67:6c:6e:50:f4: 67:86:a7:7c:d6:12:3e:54:6b:a2:18:90:29:05:7c:8e:6f:11: 8d:b5:eb:61:84:9c:20:8f:50:e1:4e:8f:2f:69:c3:21:ca:d8: 5f:f9:5a:45:b1:e5:fd:47:f8:1e:45:7e:9e:80:fc:8d:ce:f3: db:35:13:f9:28:d4:2a:db:6d:bd:ce:42:31:b5:9c:26:15:ba: 15:34:b0:cd:2e:c3:dc:e1:74:85:d0:8f:fd:e4:b7:b0:4c:a1: fa:d1:cf:70:e0:01:2f:34:ea:ad:3a:4d:e9:63:c7:6c:f2:5a: 80:68:30:3b:08:31:e1:40:d1:df:e8:97:05:85:0a:bb:d9:73: db:0b:95:f2:13:7f:d3:c4:85:c6:57:ec:71:0c:2c:86:38:56: 24:0b:5d:c3:39:23:46:ff:4e:05:06:5b:d5:d1:a9:2a:d6:66: dd:2e:e1:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKd92DA3j3nYKMqaKDrt9L+c3gocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjA3MjQwMjA2NTlaFw0yNjA3MjUwMzQ4NTlaMDMxMTAvBgNV BAMTKDE3QTIyMTY0RDVEOTBDMTFGQzE1ODQ5OTA3NDk5NUZBMzc0M0JDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxS+3BNOZEzZ+A8KxlKqgHqeS 0hv8QF2Ng6bIJ+n5svECgzsHufJz8jbnRU4pu+qaRWzCaAt9Qq5Bha8AuXuI74RB BA/MWt4qEQwKMAhT8Ved+DPahYPGYQB2E6b4Fku2GIlMV7ZEb6ym7NNMweG0qaPv wxWnoDD043O4BrxuTOkZuuK44kGymk8phLkrABA8WBo1nuW1vXcJ6GaM6KY6S3ER UvbAMKofuUNxDeTJ75hM2fHJsfMdJPKDdbSs9rLQxiHPcG+4XlZKFqbUw7tYNUrx Nr9gOfijxeRY2hBw4hQMcHbj/jgrs2yygrLJvbCkeMMgpBK8ToFFQ9nadanFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6IhZNXZDBH8FYSZB0mV+jdDvPowHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY/tMXNb6jOJkRF1pcTc0phfPyrh/iApQeF eGajZuugYYYgvWq4rveKblIQPhdZRene7XqDi6aW1+DapMW8UDt9ZebsNrX3ychi i41852HeiEsINjJnbG5Q9GeGp3zWEj5Ua6IYkCkFfI5vEY2162GEnCCPUOFOjy9p wyHK2F/5WkWx5f1H+B5Ffp6A/I3O89s1E/ko1Crbbb3OQjG1nCYVuhU0sM0uw9zh dIXQj/3kt7BMofrRz3DgAS806q06Teljx2zyWoBoMDsIMeFA0d/olwWFCrvZc9sL lfITf9PEhcZX7HEMLIY4ViQLXcM5I0b/TgUGW9XRqSrWZt0u4fw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:04 2026 by rpki-client