$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft File: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft (raw, json) Hash identifier: 24Yx+Zf7D4EH/30OM8PYIbA1Nc6R9OAG1nnX6Xa5uGw= Subject key identifier: 10:6E:BE:6E:92:06:69:4C:E2:4C:58:D0:C8:24:B9:3A:08:7C:DC:74 Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 15D70714BB68F3ECC444C30FD1C1B7C39A22527A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 18:48:22 +0000 Manifest this update: Sat 26 Sep 2026 18:43:22 +0000 Manifest next update: Sun 27 Sep 2026 20:42:22 +0000 Files and hashes: 1: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=) 2: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl (hash: h3nFs2XeyelzBNEWM5nvGUa+/88Ta3RVEsg4uSRCOfc=) 3: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: TA/s8DKqVENi0iNK6VJjUYJ9iOIFI3fpPu0mJtiANFQ=) 4: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: Zbsf0dYqnLxdlncAJCYqnzQ41srbRVWGXwAiyL3mwjg=) 5: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: ubZK1JZSOkQSdT51nvL6YxDcdnyD6UzUmGgbeftTx40=) 6: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: ymqzNsOJhmLcRFDDsoYR0MwzS6+nUhmsNkUUP+/NCsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d7:07:14:bb:68:f3:ec:c4:44:c3:0f:d1:c1:b7:c3:9a:22:52:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: Sep 26 18:43:22 2026 GMT Not After : Sep 27 20:42:22 2026 GMT Subject: CN=106EBE6E9206694CE24C58D0C824B93A087CDC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:cd:7e:99:cf:4a:ab:89:b3:56:13:2e:1e: 41:8d:ee:c2:21:94:0a:0c:56:8b:96:e3:88:c1:ec: 75:b8:57:72:3d:6f:23:24:d1:20:5c:b5:20:e7:2f: 84:2f:94:05:62:cf:6e:a8:1f:64:ff:16:20:4a:e7: a2:87:0e:bc:fa:5f:c0:0d:13:72:60:d4:c0:c4:ad: 2f:c1:80:f0:f2:31:22:42:b0:41:ef:f8:fd:f6:a2: 58:28:ee:ef:d1:ce:85:2e:bf:c5:7c:fd:58:c3:e9: d3:6c:3b:86:5c:3e:b8:e6:fd:9a:fe:fb:10:0b:90: 1b:26:00:74:3e:4f:d8:56:dd:ca:fd:a2:5c:ba:b7: 65:9d:86:7e:d2:3d:8a:4a:ab:68:ba:39:b2:94:6b: bf:e7:4d:bd:db:c0:af:8b:e1:02:26:53:75:e4:75: 6b:93:99:2a:9e:af:87:40:6c:f3:49:88:2a:d7:59: 8a:15:bc:f8:c8:49:c4:a4:85:28:22:4e:ee:f0:fd: 9e:9f:3c:2a:ab:c1:52:4a:48:76:9f:d9:96:70:72: d1:30:7a:66:44:54:e7:7e:6d:f4:13:14:24:2d:88: 4f:5c:d0:fc:40:92:3d:6e:da:f7:0c:8f:44:2c:6d: f0:e7:78:8e:8a:8b:df:00:d7:77:06:dd:68:09:37: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:BE:6E:92:06:69:4C:E2:4C:58:D0:C8:24:B9:3A:08:7C:DC:74 X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2d:cd:d7:ce:92:b4:43:c1:30:ea:1b:2a:2a:81:19:71:cf: ff:3a:45:bc:54:9b:18:79:1d:c7:70:8f:43:84:bc:38:65:3c: 8c:83:39:41:d5:be:ab:6b:ba:49:f0:dd:06:ed:3c:1a:03:81: e6:dc:04:57:8c:d5:74:2d:8f:0a:5d:57:5a:42:6e:e2:54:77: 52:7b:41:dc:24:41:de:38:95:fc:db:91:a8:c5:f1:f4:2c:41: d1:13:66:ee:b4:a9:e6:61:4b:ae:c1:a5:9d:7a:51:07:1d:c9: 62:fd:d4:0b:7d:70:9d:86:ec:28:21:99:6f:54:96:7e:c1:6e: 62:00:3b:0e:d8:f3:7d:c7:6f:7e:2b:29:fc:08:65:58:4a:d4: ee:1b:a3:f1:15:d4:de:69:e6:15:ad:3f:39:cc:94:bd:53:e3: cb:49:34:c3:6b:be:2b:d3:0b:2b:a6:03:fa:b4:4a:a5:68:ff: 5f:8a:69:13:23:0e:e9:fe:cc:40:42:3f:bd:bd:96:e3:92:5f: 6b:d6:44:3a:29:d6:b5:1f:81:77:9b:c2:29:01:f7:d2:f9:97: 50:76:73:36:fc:49:b0:63:68:0a:95:b4:5b:26:bd:7c:4d:d1: a2:e7:d4:2c:87:ca:13:fe:4d:f7:ac:3f:e9:65:c1:d8:44:9b: cd:1d:2f:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdcHFLto8+zERMMP0cG3w5oiUnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjA5MjYxODQzMjJaFw0yNjA5MjcyMDQyMjJaMDMxMTAvBgNV BAMTKDEwNkVCRTZFOTIwNjY5NENFMjRDNThEMEM4MjRCOTNBMDg3Q0RDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSV81+mc9Kq4mzVhMuHkGN7sIh lAoMVouW44jB7HW4V3I9byMk0SBctSDnL4QvlAViz26oH2T/FiBK56KHDrz6X8AN E3Jg1MDErS/BgPDyMSJCsEHv+P32olgo7u/RzoUuv8V8/VjD6dNsO4ZcPrjm/Zr+ +xALkBsmAHQ+T9hW3cr9oly6t2Wdhn7SPYpKq2i6ObKUa7/nTb3bwK+L4QImU3Xk dWuTmSqer4dAbPNJiCrXWYoVvPjIScSkhSgiTu7w/Z6fPCqrwVJKSHaf2ZZwctEw emZEVOd+bfQTFCQtiE9c0PxAkj1u2vcMj0QsbfDneI6Ki98A13cG3WgJNzH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEG6+bpIGaUziTFjQyCS5Ogh83HQwHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0Uz NEQwQ0YzM0MxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAtzdfOkrRDwTDqGyoqgRlxz/86RbxUmxh5 Hcdwj0OEvDhlPIyDOUHVvqtruknw3QbtPBoDgebcBFeM1XQtjwpdV1pCbuJUd1J7 QdwkQd44lfzbkajF8fQsQdETZu60qeZhS67BpZ16UQcdyWL91At9cJ2G7CghmW9U ln7BbmIAOw7Y833Hb34rKfwIZVhK1O4bo/EV1N5p5hWtPznMlL1T48tJNMNrvivT CyumA/q0SqVo/1+KaRMjDun+zEBCP729luOSX2vWRDop1rUfgXebwikB99L5l1B2 czb8SbBjaAqVtFsmvXxN0aLn1CyHyhP+TfesP+llwdhEm80dL6o= -----END CERTIFICATE-----Generated at Sun Sep 27 10:15:42 2026 by rpki-client