$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft File: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft (raw, json) Hash identifier: Iz+7tdXSHradjNKi3gKJPv9IjRWNVmf+jBGpdKT8mCc= Subject key identifier: FD:A9:EE:A7:38:C8:EC:85:79:8D:98:97:6C:77:24:E2:57:B4:51:5E Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 19E96020F9DEE06FCDD4B0EA3AF69F7DDCDDFD4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 09:05:58 +0000 Manifest this update: Thu 23 Jul 2026 09:00:58 +0000 Manifest next update: Fri 24 Jul 2026 12:49:58 +0000 Files and hashes: 1: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=) 2: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: TA/s8DKqVENi0iNK6VJjUYJ9iOIFI3fpPu0mJtiANFQ=) 3: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: Zbsf0dYqnLxdlncAJCYqnzQ41srbRVWGXwAiyL3mwjg=) 4: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl (hash: NRHE90FYGpbb4OVFdzr7nCpPyhQzukEBEOzlp+t70Eg=) 5: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: ymqzNsOJhmLcRFDDsoYR0MwzS6+nUhmsNkUUP+/NCsk=) 6: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: ubZK1JZSOkQSdT51nvL6YxDcdnyD6UzUmGgbeftTx40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e9:60:20:f9:de:e0:6f:cd:d4:b0:ea:3a:f6:9f:7d:dc:dd:fd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: Jul 23 09:00:58 2026 GMT Not After : Jul 24 12:49:58 2026 GMT Subject: CN=FDA9EEA738C8EC85798D98976C7724E257B4515E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:34:8d:16:b4:35:03:51:d1:fc:4f:a4:42: 7e:9b:0f:bf:28:ff:30:4c:31:16:a2:4c:2d:80:18: 66:a5:48:53:9e:a8:e9:5c:a7:87:e9:ec:40:d1:d9: 68:26:33:c7:13:77:cc:f0:9c:4c:ab:e0:b5:74:74: 75:ef:a4:fa:c8:7d:70:32:99:17:36:81:7f:e6:12: 63:a6:7b:12:9c:68:77:f7:10:4b:e9:5c:d1:23:05: 32:b4:ee:7a:99:aa:5a:0c:b5:7d:cd:80:68:cb:c9: ff:58:3b:8d:13:cf:4e:5b:b0:e3:a2:c0:80:af:f2: 7f:fc:a1:bd:d9:7b:10:da:4b:39:ae:3b:2e:56:9d: c4:4b:4d:1e:81:35:4d:c2:2b:a1:56:7c:cf:fb:38: ef:78:fa:5a:91:f2:0a:9b:49:05:fa:4e:e0:99:66: 8f:0f:45:5b:15:66:ca:8f:2a:91:fc:95:ea:7c:8f: 6c:fe:aa:9c:32:58:a2:a1:41:d7:66:0a:c1:9f:36: d7:f8:31:1b:5d:ac:a5:e8:e6:ea:ec:ac:0f:a9:90: 2a:a2:ce:8d:82:10:f6:22:cb:44:d8:da:e1:af:d9: ee:9b:8e:51:5e:d2:51:4f:0b:ea:f9:75:fd:1b:93: 8e:52:28:d9:44:ec:85:b1:51:11:60:23:13:da:c1: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A9:EE:A7:38:C8:EC:85:79:8D:98:97:6C:77:24:E2:57:B4:51:5E X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:73:b2:7f:89:1d:73:a0:e5:5d:1b:8b:78:2a:99:d5:7f:10: 51:8d:88:87:4e:6d:2a:f2:df:2d:9b:17:62:4e:85:74:29:ad: fb:f4:3e:64:5c:17:08:cd:47:5b:fb:9f:d3:56:43:a3:83:e2: d5:08:70:5b:88:ad:80:1e:b7:3e:5f:2b:a5:d3:48:29:f9:41: 01:e2:18:54:cc:45:72:e0:5e:e7:43:fd:bc:4f:4b:e8:07:f6: 9e:fe:78:29:3b:74:74:51:78:22:31:5b:85:de:80:74:a2:3a: ac:1e:d0:43:7c:77:39:46:27:dd:9f:09:95:66:5e:b5:5d:db: 4f:9f:c4:e1:92:20:f2:9a:7a:f4:58:e3:28:ef:57:cc:89:7d: 6e:50:a1:db:da:5b:0c:00:2a:16:f1:09:2f:00:96:30:df:7e: 8a:bb:f7:3e:ce:11:71:3b:57:e1:15:93:71:2f:f6:49:49:96: 42:ed:09:4f:c0:67:7a:69:a8:2b:73:19:eb:92:cd:4d:48:f1: 5a:22:b7:7d:19:a1:1d:e6:fe:45:ec:30:32:72:17:65:e0:a8: e2:84:87:84:b0:5a:13:b7:e6:2c:13:c0:72:a0:71:0d:3c:26: c7:5c:f4:8c:32:e7:e9:e6:ab:0f:f2:22:f1:38:64:97:f7:07: 60:f4:b2:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGelgIPne4G/N1LDqOvaffdzd/UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjA3MjMwOTAwNThaFw0yNjA3MjQxMjQ5NThaMDMxMTAvBgNV BAMTKEZEQTlFRUE3MzhDOEVDODU3OThEOTg5NzZDNzcyNEUyNTdCNDUxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQXDSNFrQ1A1HR/E+kQn6bD78o /zBMMRaiTC2AGGalSFOeqOlcp4fp7EDR2WgmM8cTd8zwnEyr4LV0dHXvpPrIfXAy mRc2gX/mEmOmexKcaHf3EEvpXNEjBTK07nqZqloMtX3NgGjLyf9YO40Tz05bsOOi wICv8n/8ob3ZexDaSzmuOy5WncRLTR6BNU3CK6FWfM/7OO94+lqR8gqbSQX6TuCZ Zo8PRVsVZsqPKpH8lep8j2z+qpwyWKKhQddmCsGfNtf4MRtdrKXo5ursrA+pkCqi zo2CEPYiy0TY2uGv2e6bjlFe0lFPC+r5df0bk45SKNlE7IWxURFgIxPawfd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/anupzjI7IV5jZiXbHck4le0UV4wHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0Uz NEQwQ0YzM0MxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFzsn+JHXOg5V0bi3gqmdV/EFGNiIdObSry 3y2bF2JOhXQprfv0PmRcFwjNR1v7n9NWQ6OD4tUIcFuIrYAetz5fK6XTSCn5QQHi GFTMRXLgXudD/bxPS+gH9p7+eCk7dHRReCIxW4XegHSiOqwe0EN8dzlGJ92fCZVm XrVd20+fxOGSIPKaevRY4yjvV8yJfW5QodvaWwwAKhbxCS8AljDffoq79z7OEXE7 V+EVk3Ev9klJlkLtCU/AZ3ppqCtzGeuSzU1I8Voit30ZoR3m/kXsMDJyF2XgqOKE h4SwWhO35iwTwHKgcQ08Jsdc9Iwy5+nmqw/yIvE4ZJf3B2D0stI= -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:44 2026 by rpki-client