$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: nODontkHroY9CQ6naHB+6v30DwJYiyp8wYaR7N6ofBo= Subject key identifier: D4:C9:50:4A:69:C4:B8:33:35:ED:7A:B4:8B:65:3B:BD:CD:1B:5E:70 Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 6E922BC6126F4D15238E1523398B886AB30FF131 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:10:27 +0000 Manifest this update: Tue 12 May 2026 05:05:27 +0000 Manifest next update: Wed 13 May 2026 08:41:27 +0000 Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) 2: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: MBbdV22s6E6fjbSUPp0Iqf8734O4HP/8ziJaCbHTCn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:92:2b:c6:12:6f:4d:15:23:8e:15:23:39:8b:88:6a:b3:0f:f1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: May 12 05:05:27 2026 GMT Not After : May 13 08:41:27 2026 GMT Subject: CN=D4C9504A69C4B83335ED7AB48B653BBDCD1B5E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:ea:5f:f9:f6:c6:df:4b:07:dd:7f:f7:3d: e7:4f:8f:9b:28:95:e9:c9:32:65:f4:b2:49:40:7e: e0:3f:22:70:c3:1e:b0:5d:01:33:57:f3:f7:60:fb: 51:50:75:7e:04:20:72:bf:37:ee:2c:48:61:a2:58: 62:05:f4:fb:03:20:ee:7b:21:bd:34:8c:f0:ec:9a: f2:24:a1:d2:02:7d:4c:9a:14:50:f5:2e:53:3a:9e: 85:2d:54:5a:35:d9:19:ed:51:14:d2:86:ce:3a:b6: 1e:ef:9a:2a:3e:79:d4:19:22:ae:85:71:c9:05:c4: a4:c5:53:14:65:05:02:0c:0b:a4:0e:d6:80:c2:ed: 4e:cc:4e:65:95:fa:41:19:f0:ba:9d:41:0c:1a:f4: d0:41:8a:4b:5b:70:25:9d:ec:c7:ac:ff:82:13:b9: 7e:84:51:28:11:15:1a:3f:97:45:9a:d1:41:79:af: be:4c:af:5b:85:96:bb:1a:b9:98:7f:79:ad:bc:d6: 05:bb:a3:77:b5:5a:7a:5d:b1:ff:af:26:bf:e4:80: 16:5b:7b:bf:e0:a8:96:69:31:ca:fe:15:06:29:01: d7:14:f4:37:73:c7:97:49:7c:f3:75:85:7e:6c:b2: c3:83:ba:77:b3:65:3d:d1:b4:52:af:1a:4f:fc:7e: a8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C9:50:4A:69:C4:B8:33:35:ED:7A:B4:8B:65:3B:BD:CD:1B:5E:70 X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:64:2e:bb:d2:c4:cd:45:66:c1:e3:3e:eb:03:42:20:1c:6d: d4:bc:a3:9a:3b:24:6d:fc:76:86:3a:cc:dc:7e:3f:ea:52:78: 0e:e0:b4:f8:0a:ec:7f:88:44:d4:de:fa:1d:2e:3c:94:f5:0f: cd:af:9b:bb:ba:0a:74:3a:35:4c:29:54:66:12:3a:90:7e:48: 3d:13:99:ba:68:91:cf:4c:c7:24:93:9d:88:0f:99:71:8a:64: 4f:b9:ba:7b:4d:48:d2:93:f8:b9:de:8c:0b:0c:45:b1:1d:3e: ef:2a:d7:9c:bb:6b:36:8d:f1:05:f9:d7:c6:9c:9d:28:ce:06: 08:67:89:fa:ec:75:e3:f3:3c:7b:69:f8:1c:91:04:3d:ef:3a: df:bd:dd:0f:86:71:c3:76:a7:1c:f0:1e:e1:29:6e:a1:4d:98: 00:2b:ca:30:3b:f5:13:27:f2:78:8c:c8:80:87:f4:c7:85:e1: aa:c0:6b:3c:07:70:0e:c3:a5:ab:8d:29:14:ca:3b:0e:1a:d5: f1:ac:81:07:61:ea:22:48:d6:f6:39:69:e9:d0:6c:b8:bc:35: 6f:10:7e:e8:3f:e2:e8:61:c0:a0:b6:6e:cf:72:d9:9d:13:71: ca:a6:a0:97:9f:a6:9a:5e:62:34:32:1f:aa:fe:12:4e:31:1a: 22:2c:2f:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpIrxhJvTRUjjhUjOYuIarMP8TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA1MTIwNTA1MjdaFw0yNjA1MTMwODQxMjdaMDMxMTAvBgNV BAMTKEQ0Qzk1MDRBNjlDNEI4MzMzNUVEN0FCNDhCNjUzQkJEQ0QxQjVFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiP+pf+fbG30sH3X/3PedPj5so lenJMmX0sklAfuA/InDDHrBdATNX8/dg+1FQdX4EIHK/N+4sSGGiWGIF9PsDIO57 Ib00jPDsmvIkodICfUyaFFD1LlM6noUtVFo12RntURTShs46th7vmio+edQZIq6F cckFxKTFUxRlBQIMC6QO1oDC7U7MTmWV+kEZ8LqdQQwa9NBBiktbcCWd7Mes/4IT uX6EUSgRFRo/l0Wa0UF5r75Mr1uFlrsauZh/ea281gW7o3e1Wnpdsf+vJr/kgBZb e7/gqJZpMcr+FQYpAdcU9Ddzx5dJfPN1hX5sssODunezZT3RtFKvGk/8fqgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MlQSmnEuDM17Xq0i2U7vc0bXnAwHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBkLrvSxM1FZsHjPusDQiAcbdS8o5o7JG38 doY6zNx+P+pSeA7gtPgK7H+IRNTe+h0uPJT1D82vm7u6CnQ6NUwpVGYSOpB+SD0T mbpokc9MxySTnYgPmXGKZE+5untNSNKT+LnejAsMRbEdPu8q15y7azaN8QX518ac nSjOBghnifrsdePzPHtp+ByRBD3vOt+93Q+GccN2pxzwHuEpbqFNmAAryjA79RMn 8niMyICH9MeF4arAazwHcA7DpauNKRTKOw4a1fGsgQdh6iJI1vY5aenQbLi8NW8Q fug/4uhhwKC2bs9y2Z0TccqmoJefpppeYjQyH6r+Ek4xGiIsL3Q= -----END CERTIFICATE-----Generated at Tue May 12 22:56:29 2026 by rpki-client