$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: IRaVET6Rs17zurrgRko5Mvh9uA1UA6HEjRVc0KU7ogc= Subject key identifier: 9C:B2:80:0A:8C:AB:84:0D:F9:30:67:D9:52:F6:BA:0A:F7:4F:24:6A Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 46971C456CA4B7E3164C4F774BA20317D9D47D47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 13:00:58 +0000 Manifest this update: Thu 23 Jul 2026 12:55:58 +0000 Manifest next update: Fri 24 Jul 2026 15:40:58 +0000 Files and hashes: 1: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: ILIyndzneS4ZWG/PCz+ZXVzHg3+2Pg7XZ3sCB/lTR7E=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:97:1c:45:6c:a4:b7:e3:16:4c:4f:77:4b:a2:03:17:d9:d4:7d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: Jul 23 12:55:58 2026 GMT Not After : Jul 24 15:40:58 2026 GMT Subject: CN=9CB2800A8CAB840DF93067D952F6BA0AF74F246A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:9e:f5:40:a0:80:6d:77:6f:02:56:42:ca: 6f:e1:de:c4:d9:d5:33:5e:cd:5c:c7:be:c8:b6:7f: 67:d1:c7:7f:24:70:d1:3a:49:fe:df:37:b4:44:d7: 0c:1c:9c:14:bc:61:e7:83:ee:3f:01:9f:d2:88:6a: 82:c6:f5:5a:7e:19:b0:af:0c:96:c9:ec:7c:06:8c: 7a:f7:5e:d5:e6:d6:f9:ca:d1:76:8a:7d:46:56:95: d9:c0:ad:50:8a:4a:e5:d7:55:74:0b:9b:b1:9d:4a: fe:b0:ba:50:35:c4:25:15:38:fd:6f:24:6f:66:10: a0:94:8a:b0:6b:01:36:67:aa:a5:52:c4:49:70:53: 52:b4:23:01:9c:06:15:74:ed:12:60:30:cb:26:63: ad:7b:cd:db:fd:7d:71:29:f7:19:da:34:a3:8f:65: c1:28:a5:e1:8b:33:51:1c:50:17:4b:52:23:57:3f: ff:47:76:d0:52:47:29:22:07:3e:22:8a:d5:6d:5d: 05:49:1b:a4:10:28:bb:cb:52:fe:d0:17:a6:78:06: 77:1d:e3:5a:88:fb:75:2b:ba:9e:54:e8:28:ca:58: d7:5e:83:8b:87:32:88:7c:b2:66:52:da:21:d8:93: af:3b:f0:da:93:29:28:3d:47:12:62:ce:46:84:43: c1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B2:80:0A:8C:AB:84:0D:F9:30:67:D9:52:F6:BA:0A:F7:4F:24:6A X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:7f:b7:05:ff:c4:07:75:94:2a:4f:50:91:e7:06:6b:3d:49: 30:1d:be:23:1f:3f:7e:16:aa:4b:23:4a:92:4a:46:47:89:9e: 33:44:16:5f:66:a9:bf:f9:15:82:c5:ea:39:4c:dc:ce:52:1f: 8f:45:0d:4e:b7:49:20:46:eb:01:00:e3:b0:e2:07:8f:9a:c3: 28:e4:b6:f7:12:06:20:2d:22:2c:1b:3c:e7:f9:c9:80:4d:b4: 03:31:80:5f:68:e9:a4:e0:34:b9:be:dc:9e:10:ef:c5:f4:77: f5:d4:f2:fa:af:af:96:a4:2d:dc:6d:a7:5a:bc:75:9e:c6:b8: 50:58:de:59:63:67:b3:92:e0:14:67:0e:72:dd:b3:4c:55:39: 02:05:e4:c9:7c:2b:9f:b2:b6:bb:b4:56:78:c4:30:c9:81:5b: ab:07:1c:b6:92:a6:2a:02:ce:b2:73:44:2a:ec:31:b6:e0:b3: 12:e7:f6:5d:f7:c0:2c:10:2c:a0:64:a2:44:47:36:f3:e9:96: 0c:46:53:97:ba:4b:84:11:f2:30:c6:4a:6e:ab:00:26:e9:e5: 57:76:c5:dd:f6:1c:9c:4b:dc:4c:e2:55:a7:14:e3:6b:d5:44: ca:b8:c7:8e:ac:19:74:01:0c:10:4a:3c:a1:bc:eb:62:d1:9e: e8:e0:85:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpccRWykt+MWTE93S6IDF9nUfUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA3MjMxMjU1NThaFw0yNjA3MjQxNTQwNThaMDMxMTAvBgNV BAMTKDlDQjI4MDBBOENBQjg0MERGOTMwNjdEOTUyRjZCQTBBRjc0RjI0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzp71QKCAbXdvAlZCym/h3sTZ 1TNezVzHvsi2f2fRx38kcNE6Sf7fN7RE1wwcnBS8YeeD7j8Bn9KIaoLG9Vp+GbCv DJbJ7HwGjHr3XtXm1vnK0XaKfUZWldnArVCKSuXXVXQLm7GdSv6wulA1xCUVOP1v JG9mEKCUirBrATZnqqVSxElwU1K0IwGcBhV07RJgMMsmY617zdv9fXEp9xnaNKOP ZcEopeGLM1EcUBdLUiNXP/9HdtBSRykiBz4iitVtXQVJG6QQKLvLUv7QF6Z4Bncd 41qI+3Urup5U6CjKWNdeg4uHMoh8smZS2iHYk6878NqTKSg9RxJizkaEQ8HLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLKACoyrhA35MGfZUva6CvdPJGowHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR/twX/xAd1lCpPUJHnBms9STAdviMfP34W qksjSpJKRkeJnjNEFl9mqb/5FYLF6jlM3M5SH49FDU63SSBG6wEA47DiB4+awyjk tvcSBiAtIiwbPOf5yYBNtAMxgF9o6aTgNLm+3J4Q78X0d/XU8vqvr5akLdxtp1q8 dZ7GuFBY3lljZ7OS4BRnDnLds0xVOQIF5Ml8K5+ytru0VnjEMMmBW6sHHLaSpioC zrJzRCrsMbbgsxLn9l33wCwQLKBkokRHNvPplgxGU5e6S4QR8jDGSm6rACbp5Vd2 xd32HJxL3EziVacU42vVRMq4x46sGXQBDBBKPKG862LRnujghRg= -----END CERTIFICATE-----Generated at Fri Jul 24 04:30:21 2026 by rpki-client