$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: 3b2cWlR+d1C/USVs1/n7oy2JnOFszm1Vb9eIZtBxTDg= Subject key identifier: 5B:5A:58:4F:E6:F6:75:5F:44:65:73:D5:00:E4:A1:C9:A2:B6:28:82 Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 4E18D0541C1F30854C6F41E1C69494A729E50453 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:40:32 +0000 Manifest this update: Wed 23 Sep 2026 15:35:32 +0000 Manifest next update: Thu 24 Sep 2026 19:18:32 +0000 Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) 2: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: YkduxMvoOIE9UHt5F0U/GyEg0vVypvuQd1QPSwND3AM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:18:d0:54:1c:1f:30:85:4c:6f:41:e1:c6:94:94:a7:29:e5:04:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: Sep 23 15:35:32 2026 GMT Not After : Sep 24 19:18:32 2026 GMT Subject: CN=5B5A584FE6F6755F446573D500E4A1C9A2B62882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:d1:63:83:df:c4:47:8c:a1:50:87:0b:6c: f8:f7:68:0a:ed:da:2d:38:0e:da:6d:da:87:7c:89: 71:93:ef:89:72:12:22:97:b8:77:ac:1e:ec:9f:26: 13:17:81:98:b4:1b:0f:ce:f0:c6:c3:cd:b4:64:19: f8:a6:1b:ee:e3:58:fd:4f:4d:22:1b:b1:1c:24:a6: 23:ce:d7:2e:50:73:e0:a3:7e:c5:96:1e:06:62:f5: ef:a5:4f:3c:07:b6:57:fb:dc:87:ce:cc:b3:af:70: 75:29:3d:f5:80:77:b4:90:4c:58:8f:cd:e5:1b:03: 55:d6:39:d8:d0:c9:5d:9f:49:93:91:66:cc:9a:95: 79:e1:93:76:34:ca:6f:39:61:3f:b9:f2:9e:fc:00: bd:fd:b6:d6:48:d4:c6:34:4c:2d:8c:97:52:15:96: 3a:8f:a3:20:5c:25:6c:9e:a0:5a:3a:16:b1:90:d6: 0a:a1:e2:b2:c3:83:61:58:f7:ac:d2:52:25:de:af: d4:b4:af:16:14:aa:75:ef:c9:d9:13:aa:31:cc:69: 52:ed:95:45:8a:87:63:0f:90:de:e7:df:82:a0:07: b9:8b:db:76:5e:29:7c:5a:3d:6e:bb:b6:7a:c2:a9: 49:26:8a:0f:0b:9e:c1:97:24:27:3e:33:f8:53:fb: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5A:58:4F:E6:F6:75:5F:44:65:73:D5:00:E4:A1:C9:A2:B6:28:82 X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f8:97:84:a7:c8:6c:b2:64:ab:64:2a:85:ba:98:d1:6b:fc: 17:e6:67:19:55:95:87:2b:21:98:82:c4:17:b9:f1:74:3d:6b: 59:cc:f8:25:36:a0:72:b6:53:32:0c:e4:e8:7a:12:97:34:ee: 64:b1:48:67:b3:b8:e1:a5:46:ca:dd:ed:9d:b5:4a:90:80:0e: fb:f2:bc:d9:bb:81:f0:ca:b4:6d:fe:83:25:f8:29:db:01:3b: 42:db:a3:dc:a0:62:1f:5d:a3:11:a9:86:9b:df:25:10:0f:9c: 31:6a:5e:e1:97:02:42:39:82:29:d3:0d:e9:d2:e7:0e:c4:f5: 9e:5c:16:60:d6:e0:a4:e9:5a:3b:11:b2:6d:59:c8:ac:31:dd: 76:84:af:61:81:22:30:b3:bb:b2:f6:52:f5:46:7a:1a:a5:6c: d6:2e:6d:c1:d9:7c:81:37:d2:c8:51:2c:ac:70:d3:af:40:1b: 8d:01:96:69:83:8a:64:77:d1:b8:e3:56:44:5d:32:69:00:ac: 2e:15:cb:c1:22:9d:fd:6f:da:5e:b4:f8:d0:c8:2b:1b:3b:9c: 49:fa:12:27:e5:97:02:e0:c2:1c:1c:e9:c6:7e:a0:4e:b0:ef: a8:33:cd:1a:7a:a5:6d:2b:d6:7b:6b:a1:be:d9:1d:98:e9:3e: 4b:b5:18:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThjQVBwfMIVMb0HhxpSUpynlBFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA5MjMxNTM1MzJaFw0yNjA5MjQxOTE4MzJaMDMxMTAvBgNV BAMTKDVCNUE1ODRGRTZGNjc1NUY0NDY1NzNENTAwRTRBMUM5QTJCNjI4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzdFjg9/ER4yhUIcLbPj3aArt 2i04Dtpt2od8iXGT74lyEiKXuHesHuyfJhMXgZi0Gw/O8MbDzbRkGfimG+7jWP1P TSIbsRwkpiPO1y5Qc+CjfsWWHgZi9e+lTzwHtlf73IfOzLOvcHUpPfWAd7SQTFiP zeUbA1XWOdjQyV2fSZORZsyalXnhk3Y0ym85YT+58p78AL39ttZI1MY0TC2Ml1IV ljqPoyBcJWyeoFo6FrGQ1gqh4rLDg2FY96zSUiXer9S0rxYUqnXvydkTqjHMaVLt lUWKh2MPkN7n34KgB7mL23ZeKXxaPW67tnrCqUkmig8LnsGXJCc+M/hT+359AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW1pYT+b2dV9EZXPVAOShyaK2KIIwHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACb4l4SnyGyyZKtkKoW6mNFr/BfmZxlVlYcr IZiCxBe58XQ9a1nM+CU2oHK2UzIM5Oh6Epc07mSxSGezuOGlRsrd7Z21SpCADvvy vNm7gfDKtG3+gyX4KdsBO0Lbo9ygYh9doxGphpvfJRAPnDFqXuGXAkI5ginTDenS 5w7E9Z5cFmDW4KTpWjsRsm1ZyKwx3XaEr2GBIjCzu7L2UvVGehqlbNYubcHZfIE3 0shRLKxw069AG40BlmmDimR30bjjVkRdMmkArC4Vy8Einf1v2l60+NDIKxs7nEn6 EifllwLgwhwc6cZ+oE6w76gzzRp6pW0r1ntrob7ZHZjpPku1GAY= -----END CERTIFICATE-----Generated at Wed Sep 23 20:16:34 2026 by rpki-client