$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: tva3VYBrAR2qlctvXwq2qKVa1diMgF0J5FeyqPwQn+c= Subject key identifier: 49:28:CD:76:F4:B8:0C:3C:CA:97:48:10:EB:2C:F4:09:9C:B7:4E:3A Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 51F9ACF504CC907A8E83529AB835FA3C0970D6CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:00:52 +0000 Manifest this update: Thu 23 Jul 2026 16:55:52 +0000 Manifest next update: Fri 24 Jul 2026 19:45:52 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) 2: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: 1jqXknhs4tL97b0uX5Id2/Hglb/RIyAYAoiUZ2CRuPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f9:ac:f5:04:cc:90:7a:8e:83:52:9a:b8:35:fa:3c:09:70:d6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Jul 23 16:55:52 2026 GMT Not After : Jul 24 19:45:52 2026 GMT Subject: CN=4928CD76F4B80C3CCA974810EB2CF4099CB74E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:df:bb:1a:04:51:64:99:53:41:57:b6:d2: f2:50:f0:ae:77:05:cf:65:ea:82:7f:2a:0c:49:ac: 4b:09:27:7d:5e:19:8e:48:db:9e:f9:0c:ad:8b:14: 4b:e9:65:a2:57:14:fe:af:0a:0c:0e:d3:58:2f:a2: 3f:09:7c:0f:1e:6c:34:8f:7e:2b:2d:48:35:62:08: 75:f3:cb:78:34:c1:35:10:66:66:07:8e:cd:94:4d: 87:f3:d2:f1:ba:c0:68:08:e5:f2:e7:9b:39:ce:1e: 8f:78:80:a2:56:8b:aa:18:5f:15:1f:6a:70:95:2b: e3:87:70:fe:99:75:3b:64:4b:e0:5a:70:53:2e:7a: d7:3a:6e:3b:fc:1d:bb:f2:ab:3a:58:17:d4:8e:64: ec:f6:c8:88:77:99:b6:a7:af:d4:97:f5:a7:11:45: 9d:6c:f2:d2:4a:b8:20:f7:2b:4c:95:26:8e:83:1b: c4:62:34:ec:ed:8a:27:52:98:7c:69:a5:26:b8:94: 64:2d:2c:00:c8:02:84:59:e1:13:24:84:97:b6:34: f3:ee:8b:0f:89:fb:9f:0c:c3:fe:82:8b:52:21:4d: 3c:40:3e:42:1e:ac:81:64:8e:41:ca:0c:f2:a6:9f: 19:be:5d:bc:3c:f2:f3:db:07:95:2d:a7:91:65:73: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:28:CD:76:F4:B8:0C:3C:CA:97:48:10:EB:2C:F4:09:9C:B7:4E:3A X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c8:f5:dc:0e:3c:91:9f:7d:0a:f7:93:a5:3b:e2:09:d5:74: 87:9a:e7:1a:57:ac:80:8d:5e:0c:a7:27:f0:08:2b:ac:10:6a: 6c:64:d6:31:83:91:ae:9b:44:0f:8a:ee:73:63:80:6f:2b:a5: 1c:4e:14:f9:b2:a9:34:79:49:c5:09:14:a9:bc:e7:3d:78:5a: 3d:4e:5b:55:d4:f1:bf:36:1e:e1:92:60:48:a6:d8:da:51:97: c4:1d:25:cc:9d:85:69:70:67:74:77:91:5f:22:6a:65:94:a8: 9d:97:b6:d4:2e:c1:78:9a:09:93:7e:17:ca:07:f8:2b:fb:74: 0a:5f:64:63:fe:97:ee:cc:08:07:4f:fa:bb:9e:ba:dd:9b:e9: e7:65:49:74:c2:b4:ba:d8:d2:5d:5e:22:4a:30:91:a4:51:71: 53:90:68:ed:69:23:ae:0f:2b:ce:cf:cd:43:73:e9:0c:0d:0e: 76:22:1d:e5:ed:9d:86:47:4d:fc:e6:b0:5c:57:94:9a:76:f1: 5f:f8:8f:87:b8:49:25:99:60:31:ea:b0:dc:30:73:5e:ce:5a: 97:a9:46:66:07:7c:8e:06:af:c6:f9:48:72:b8:1a:ba:fc:8b: 5f:6a:8f:85:be:60:4a:56:ac:39:fd:b8:32:51:e1:2a:aa:8e: 72:8e:f1:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfms9QTMkHqOg1KauDX6PAlw1s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA3MjMxNjU1NTJaFw0yNjA3MjQxOTQ1NTJaMDMxMTAvBgNV BAMTKDQ5MjhDRDc2RjRCODBDM0NDQTk3NDgxMEVCMkNGNDA5OUNCNzRFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSd+7GgRRZJlTQVe20vJQ8K53 Bc9l6oJ/KgxJrEsJJ31eGY5I2575DK2LFEvpZaJXFP6vCgwO01gvoj8JfA8ebDSP fistSDViCHXzy3g0wTUQZmYHjs2UTYfz0vG6wGgI5fLnmznOHo94gKJWi6oYXxUf anCVK+OHcP6ZdTtkS+BacFMuetc6bjv8HbvyqzpYF9SOZOz2yIh3mbanr9SX9acR RZ1s8tJKuCD3K0yVJo6DG8RiNOztiidSmHxppSa4lGQtLADIAoRZ4RMkhJe2NPPu iw+J+58Mw/6Ci1IhTTxAPkIerIFkjkHKDPKmnxm+Xbw88vPbB5Utp5Flc4+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSSjNdvS4DDzKl0gQ6yz0CZy3TjowHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/I9dwOPJGffQr3k6U74gnVdIea5xpXrICN XgynJ/AIK6wQamxk1jGDka6bRA+K7nNjgG8rpRxOFPmyqTR5ScUJFKm85z14Wj1O W1XU8b82HuGSYEim2NpRl8QdJcydhWlwZ3R3kV8iamWUqJ2XttQuwXiaCZN+F8oH +Cv7dApfZGP+l+7MCAdP+rueut2b6edlSXTCtLrY0l1eIkowkaRRcVOQaO1pI64P K87PzUNz6QwNDnYiHeXtnYZHTfzmsFxXlJp28V/4j4e4SSWZYDHqsNwwc17OWpep RmYHfI4Gr8b5SHK4Grr8i19qj4W+YEpWrDn9uDJR4SqqjnKO8Yc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:47:05 2026 by rpki-client