$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: Ft/+sHWuawoz4BBgUMujDcrHF2JhteVJUo64qg9JkhI= Subject key identifier: F8:58:A9:2B:FF:0E:64:A5:F8:D7:7B:F9:6A:F1:AC:C1:19:BE:D2:BF Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 0923784AA8ADAB0876020C9F862DDEA737F4B635 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:08:33 +0000 Manifest this update: Thu 23 Jul 2026 19:03:33 +0000 Manifest next update: Fri 24 Jul 2026 19:10:33 +0000 Files and hashes: 1: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) 2: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 3: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 4: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 5: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: FjmEVeONYm07+lHyTbt+McaR/jazQAxKExrohxn0mVU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:23:78:4a:a8:ad:ab:08:76:02:0c:9f:86:2d:de:a7:37:f4:b6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Jul 23 19:03:33 2026 GMT Not After : Jul 24 19:10:33 2026 GMT Subject: CN=F858A92BFF0E64A5F8D77BF96AF1ACC119BED2BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:98:da:b1:01:b6:ac:41:cd:4d:14:de:49: 71:06:63:57:e8:ab:60:e0:c4:1e:dd:dd:b7:01:d6: 97:af:5c:f3:b3:22:8c:78:36:fe:da:cb:79:f2:f8: 78:5e:d3:94:04:6b:e1:a7:b6:37:38:ca:f3:82:d6: 7b:88:43:44:31:e1:58:1f:be:a2:fb:0b:dc:2e:6b: a9:32:2a:9c:ae:37:12:61:0d:8d:96:53:4e:54:3a: e7:5c:bd:9c:8a:52:93:65:0e:4f:91:26:03:b7:c6: 70:68:81:a1:7a:d9:cc:db:cd:80:4f:f5:0f:32:06: 11:5c:cf:c0:6a:a6:31:ee:5f:ea:26:4e:33:69:1b: 47:bd:b3:1e:c2:b8:b3:a1:77:34:c1:87:18:fb:4a: bf:d4:6f:00:46:d2:d5:86:79:65:eb:3b:7e:03:09: 46:92:b8:f7:ec:78:2e:9c:ca:45:d9:47:d6:87:51: 13:08:78:8e:1d:d1:37:d1:7b:c7:d5:e9:09:94:7b: 76:da:83:bc:11:96:26:a6:68:f7:31:5b:01:6f:df: ab:c7:64:00:a5:69:b3:5f:ed:3a:ee:fc:0a:5b:e8: 7e:93:ba:cb:76:fb:a7:03:7a:64:ed:24:35:03:7b: 10:0d:ce:56:da:9b:af:74:c1:43:a8:af:4f:00:87: eb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:A9:2B:FF:0E:64:A5:F8:D7:7B:F9:6A:F1:AC:C1:19:BE:D2:BF X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1e:b9:f3:2f:3e:13:53:b0:fe:15:aa:21:50:e2:13:7b:d5: 64:80:a7:8b:8e:51:b1:a8:1f:8b:c3:f8:88:c4:38:82:4f:2f: 6b:8c:c4:7e:17:5d:01:e9:d2:25:9b:13:48:7e:ae:89:38:2f: d1:e5:96:a7:14:06:2e:bf:86:c4:f1:b9:90:3a:bb:13:d7:3c: fa:3a:96:21:38:db:3c:52:97:98:ed:a5:25:dc:96:19:01:38: ce:60:79:7d:fb:c8:c0:77:da:2b:2c:a6:1e:fb:98:47:04:a1: 00:bd:31:8b:90:56:e1:ef:54:81:66:46:b3:3b:c6:69:cd:4f: 04:9c:68:31:e0:a6:33:1d:33:2e:b2:34:68:12:78:a0:de:81: 4a:53:43:64:20:0b:86:c7:db:1d:c1:f4:23:44:eb:5a:6e:1c: 5a:b2:70:02:bb:14:3a:29:2f:e9:01:04:e7:5a:3d:7a:e0:1e: d0:1a:fd:50:2a:d2:4d:f6:5f:74:e9:4c:8a:e1:e1:df:b8:e2: a2:a3:19:01:f1:a0:3f:32:48:a7:76:b2:0a:83:dd:83:b2:ae: b3:68:96:92:c6:ad:17:04:ba:ef:b5:a3:f4:1f:dd:02:25:35: cc:04:40:ce:9d:f1:ea:35:44:8b:4e:d3:57:cc:2b:ff:3f:0f: a8:2e:5a:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSN4Sqitqwh2Agyfhi3epzf0tjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA3MjMxOTAzMzNaFw0yNjA3MjQxOTEwMzNaMDMxMTAvBgNV BAMTKEY4NThBOTJCRkYwRTY0QTVGOEQ3N0JGOTZBRjFBQ0MxMTlCRUQyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+JjasQG2rEHNTRTeSXEGY1fo q2DgxB7d3bcB1pevXPOzIox4Nv7ay3ny+Hhe05QEa+Gntjc4yvOC1nuIQ0Qx4Vgf vqL7C9wua6kyKpyuNxJhDY2WU05UOudcvZyKUpNlDk+RJgO3xnBogaF62czbzYBP 9Q8yBhFcz8BqpjHuX+omTjNpG0e9sx7CuLOhdzTBhxj7Sr/UbwBG0tWGeWXrO34D CUaSuPfseC6cykXZR9aHURMIeI4d0TfRe8fV6QmUe3bag7wRliamaPcxWwFv36vH ZAClabNf7Tru/Apb6H6Tust2+6cDemTtJDUDexANzlbam690wUOor08Ah+vrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FipK/8OZKX413v5avGswRm+0r8wHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMeufMvPhNTsP4VqiFQ4hN71WSAp4uOUbGo H4vD+IjEOIJPL2uMxH4XXQHp0iWbE0h+rok4L9HllqcUBi6/hsTxuZA6uxPXPPo6 liE42zxSl5jtpSXclhkBOM5geX37yMB32issph77mEcEoQC9MYuQVuHvVIFmRrM7 xmnNTwScaDHgpjMdMy6yNGgSeKDegUpTQ2QgC4bH2x3B9CNE61puHFqycAK7FDop L+kBBOdaPXrgHtAa/VAq0k32X3TpTIrh4d+44qKjGQHxoD8ySKd2sgqD3YOyrrNo lpLGrRcEuu+1o/Qf3QIlNcwEQM6d8eo1RItO01fMK/8/D6guWjU= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:43 2026 by rpki-client