$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: EneDArOE1lJLOMXAtVgnnVpFckMPHPYfWeCeSPI5ljo= Subject key identifier: 13:77:C6:1F:07:15:2E:D9:23:A7:91:AB:96:B1:58:BF:D5:CD:82:11 Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 369DDCC24F785DDA6849A430F9FAFDDDCB0BC61B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:34:24 +0000 Manifest this update: Tue 12 May 2026 21:29:24 +0000 Manifest next update: Wed 13 May 2026 23:11:24 +0000 Files and hashes: 1: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: dIO19yHZOk2QD9qqI1hxsn1J1IXxvTGlpOBE/Wt+WGY=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9d:dc:c2:4f:78:5d:da:68:49:a4:30:f9:fa:fd:dd:cb:0b:c6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: May 12 21:29:24 2026 GMT Not After : May 13 23:11:24 2026 GMT Subject: CN=1377C61F07152ED923A791AB96B158BFD5CD8211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:f6:ab:a4:b1:f8:96:fd:db:2a:49:a4:46: ea:89:b9:90:66:88:95:21:5a:e0:0a:d7:43:ee:d8: 01:e7:1a:bf:40:74:f5:16:00:65:83:4f:21:1c:99: a1:d1:49:1a:b8:93:f3:26:82:62:3f:c2:ff:90:e3: 35:1c:78:78:d9:2b:50:ee:55:f8:50:db:71:b0:7a: a8:c6:71:d5:02:39:8c:dc:39:50:e0:96:96:61:a2: 14:55:54:f2:8b:ec:97:17:20:0a:d9:3c:3b:98:9f: e6:b0:2c:65:71:47:2c:88:46:23:d6:c7:0f:97:bd: 28:ba:3b:bb:f6:90:c7:e4:40:aa:ae:49:18:e6:06: 6e:04:ee:80:9f:d3:c9:5e:71:5f:49:0e:bd:fc:4a: e1:94:c5:df:1a:4a:10:ad:a2:af:cd:8c:29:cc:e7: 65:d5:eb:4b:14:e1:d8:a4:d9:f5:2b:2f:85:e3:1f: 2d:41:a7:dd:95:d9:02:de:ea:f2:63:cd:44:f5:9b: b2:9a:f3:ae:68:a3:c1:87:cd:82:80:2b:12:e0:49: e0:75:82:56:75:76:e6:a2:98:73:dc:03:0d:1b:93: fd:76:1a:60:74:39:a0:a9:56:c1:63:77:3a:65:25: cc:41:d8:c5:3f:5e:41:70:67:23:c2:de:3f:97:c6: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:77:C6:1F:07:15:2E:D9:23:A7:91:AB:96:B1:58:BF:D5:CD:82:11 X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:80:35:58:57:d5:fd:40:3b:7e:98:5e:19:1c:2b:46:0d:5b: 67:50:c8:6e:e6:ee:3c:22:49:23:ca:2b:52:6e:ab:bf:5b:57: 2b:7b:aa:71:4b:b0:71:1b:db:1f:29:31:c6:82:06:bd:42:27: ec:05:47:84:d7:30:04:af:10:49:fa:23:a1:8f:fd:f7:60:c8: ac:7f:60:eb:0b:97:1a:e9:48:e2:0b:66:a9:a2:0b:11:65:25: 7b:72:40:55:55:e2:19:1c:d6:45:4c:69:21:14:83:9d:98:50: cd:de:7c:fa:c8:6c:fe:f7:0f:f3:ab:fe:67:97:b7:c2:b2:9b: a0:17:fe:4d:07:16:6c:bf:30:b1:ac:e8:8e:48:27:42:05:86: b2:9d:42:e4:86:e5:9d:46:05:e9:65:32:93:fd:50:b6:4a:28: b1:96:ad:06:18:97:d3:94:e4:f8:80:f0:b3:9b:ee:05:4c:ca: fa:09:23:80:21:5f:02:98:3a:9e:13:b4:c9:e2:46:74:c7:c2: 0a:cf:c4:6f:45:0b:f4:38:eb:6c:ed:06:46:40:75:5b:3b:ea: 13:c8:7b:52:7d:39:86:8b:71:91:e9:7b:bf:f8:eb:60:26:f4: cc:53:e8:7a:b3:f7:bf:a1:c6:3f:81:a2:af:a1:4d:74:ab:17: 0e:5f:8c:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNp3cwk94XdpoSaQw+fr93csLxhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA1MTIyMTI5MjRaFw0yNjA1MTMyMzExMjRaMDMxMTAvBgNV BAMTKDEzNzdDNjFGMDcxNTJFRDkyM0E3OTFBQjk2QjE1OEJGRDVDRDgyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDvarpLH4lv3bKkmkRuqJuZBm iJUhWuAK10Pu2AHnGr9AdPUWAGWDTyEcmaHRSRq4k/MmgmI/wv+Q4zUceHjZK1Du VfhQ23GweqjGcdUCOYzcOVDglpZhohRVVPKL7JcXIArZPDuYn+awLGVxRyyIRiPW xw+XvSi6O7v2kMfkQKquSRjmBm4E7oCf08lecV9JDr38SuGUxd8aShCtoq/NjCnM 52XV60sU4dik2fUrL4XjHy1Bp92V2QLe6vJjzUT1m7Ka865oo8GHzYKAKxLgSeB1 glZ1duaimHPcAw0bk/12GmB0OaCpVsFjdzplJcxB2MU/XkFwZyPC3j+XxpwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE3fGHwcVLtkjp5GrlrFYv9XNghEwHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGANVhX1f1AO36YXhkcK0YNW2dQyG7m7jwi SSPKK1Juq79bVyt7qnFLsHEb2x8pMcaCBr1CJ+wFR4TXMASvEEn6I6GP/fdgyKx/ YOsLlxrpSOILZqmiCxFlJXtyQFVV4hkc1kVMaSEUg52YUM3efPrIbP73D/Or/meX t8Kym6AX/k0HFmy/MLGs6I5IJ0IFhrKdQuSG5Z1GBellMpP9ULZKKLGWrQYYl9OU 5PiA8LOb7gVMyvoJI4AhXwKYOp4TtMniRnTHwgrPxG9FC/Q462ztBkZAdVs76hPI e1J9OYaLcZHpe7/462Am9MxT6Hqz97+hxj+Boq+hTXSrFw5fjHA= -----END CERTIFICATE-----Generated at Wed May 13 03:51:20 2026 by rpki-client