$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: ZvpLlEuLkt/75cO/wtQ9oEqDfhXkIonN7SxqKapn3Ms= Subject key identifier: 1B:BB:4D:AD:83:A4:E3:35:78:C3:FB:D9:22:00:01:37:4B:6E:C7:C0 Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 08980CE9827A35EA2175DEBDE9775586E5695CA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 12:25:58 +0000 Manifest this update: Fri 25 Sep 2026 12:20:58 +0000 Manifest next update: Sat 26 Sep 2026 15:56:58 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) 2: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: ihsbtOZms5ZRt0/XlQlNM7q9B9iWWazoDp1koq2Zjzs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:98:0c:e9:82:7a:35:ea:21:75:de:bd:e9:77:55:86:e5:69:5c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Sep 25 12:20:58 2026 GMT Not After : Sep 26 15:56:58 2026 GMT Subject: CN=1BBB4DAD83A4E33578C3FBD9220001374B6EC7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:ae:e6:43:b2:83:39:cf:24:d9:9f:aa:12: e5:1d:b9:79:85:20:c9:be:a1:67:16:57:1d:88:12: 29:82:2a:5d:8f:d9:af:a8:3d:ef:33:b7:50:b0:98: 1a:53:dd:62:c3:e9:25:1d:81:44:f6:9c:1c:65:54: 84:59:b2:5a:2a:52:4e:1a:55:b1:94:23:ce:71:da: 65:c4:c7:1b:61:95:c5:c8:f7:c6:e9:33:68:3b:53: 5e:04:b4:8e:ae:af:23:4f:e2:64:4b:5e:c6:24:47: 4d:c4:67:e8:ac:e9:d8:77:42:57:29:a9:ff:67:46: 19:5b:20:d6:60:21:0b:ef:86:1a:d8:8c:b4:6d:de: 06:66:f0:c0:35:b3:5f:fd:0d:b5:62:b3:35:c2:84: 67:90:05:68:1a:0a:83:d1:0b:f1:f6:47:1f:94:87: 19:35:6f:d9:91:27:8b:90:d1:ca:07:99:fd:15:f3: ce:68:4c:16:9b:3d:9e:e6:73:95:9b:73:ca:11:d6: a3:fb:f7:87:7b:63:95:31:29:aa:9e:06:1c:3d:0e: d9:fe:c0:00:00:8f:fa:e3:82:61:54:17:c0:67:40: 09:e5:c8:95:ab:49:00:c5:1e:fc:ef:bd:26:d9:a1: 11:7e:86:b2:58:2e:dd:8e:7d:32:c6:58:a8:dd:f2: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BB:4D:AD:83:A4:E3:35:78:C3:FB:D9:22:00:01:37:4B:6E:C7:C0 X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d3:2c:6c:7e:2b:89:de:17:e8:d1:0d:e8:e8:b1:9e:87:00: 60:8c:cf:06:1b:7f:ac:34:d9:fb:2b:38:89:dc:c1:90:f3:28: 4d:2f:91:33:f7:36:ab:4b:88:f7:0d:fe:b7:0b:3b:8c:44:ec: 5a:67:76:dd:6a:98:c7:77:dd:59:9a:c8:dc:59:55:1c:de:ce: 6e:65:f5:36:03:c9:08:f7:ba:91:4e:49:b3:e5:8c:3d:95:d4: 16:ea:45:b8:eb:1e:f1:2c:03:d6:0f:52:7f:8c:5f:39:43:35: 3c:6a:76:68:6b:3c:d0:78:9e:59:12:9b:71:b7:f3:45:37:b8: 21:34:6c:f1:0c:de:8a:58:dd:3e:7f:a1:4d:a5:82:1c:e3:39: ff:53:64:60:d9:31:80:d8:ff:23:5f:07:96:0a:ca:20:f6:ec: 8b:28:3e:13:1c:c3:27:33:2f:f9:58:78:a8:53:2a:85:5a:7c: b6:05:1b:ac:ec:99:1c:98:f7:e5:13:bb:68:83:83:f9:de:a1: cf:31:71:d0:ef:e7:2a:c1:26:13:39:48:f7:d5:73:21:0d:37: e0:09:5b:05:49:dd:95:f9:de:32:f1:58:d3:61:c2:a1:8e:67: 03:6f:0a:c1:34:f6:aa:17:b5:6e:14:a6:42:14:f7:83:dc:37: 67:b0:7a:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJgM6YJ6Neohdd696XdVhuVpXKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA5MjUxMjIwNThaFw0yNjA5MjYxNTU2NThaMDMxMTAvBgNV BAMTKDFCQkI0REFEODNBNEUzMzU3OEMzRkJEOTIyMDAwMTM3NEI2RUM3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlq7mQ7KDOc8k2Z+qEuUduXmF IMm+oWcWVx2IEimCKl2P2a+oPe8zt1CwmBpT3WLD6SUdgUT2nBxlVIRZsloqUk4a VbGUI85x2mXExxthlcXI98bpM2g7U14EtI6uryNP4mRLXsYkR03EZ+is6dh3Qlcp qf9nRhlbINZgIQvvhhrYjLRt3gZm8MA1s1/9DbViszXChGeQBWgaCoPRC/H2Rx+U hxk1b9mRJ4uQ0coHmf0V885oTBabPZ7mc5Wbc8oR1qP794d7Y5UxKaqeBhw9Dtn+ wAAAj/rjgmFUF8BnQAnlyJWrSQDFHvzvvSbZoRF+hrJYLt2OfTLGWKjd8hMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG7tNrYOk4zV4w/vZIgABN0tux8AwHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/TLGx+K4neF+jRDejosZ6HAGCMzwYbf6w0 2fsrOIncwZDzKE0vkTP3NqtLiPcN/rcLO4xE7Fpndt1qmMd33VmayNxZVRzezm5l 9TYDyQj3upFOSbPljD2V1BbqRbjrHvEsA9YPUn+MXzlDNTxqdmhrPNB4nlkSm3G3 80U3uCE0bPEM3opY3T5/oU2lghzjOf9TZGDZMYDY/yNfB5YKyiD27IsoPhMcwycz L/lYeKhTKoVafLYFG6zsmRyY9+UTu2iDg/neoc8xcdDv5yrBJhM5SPfVcyENN+AJ WwVJ3ZX53jLxWNNhwqGOZwNvCsE09qoXtW4UpkIU94PcN2ewen4= -----END CERTIFICATE-----Generated at Fri Sep 25 20:38:48 2026 by rpki-client