$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json) Hash identifier: +Y11bZ5n20Ed8LwDnE9qiKestaV0QfA/yh8YfHL09JE= Subject key identifier: 4E:95:7A:B3:96:D9:A0:D6:6F:BF:C4:DE:F0:FE:3E:F6:1F:07:AA:57 Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Certificate serial: 56436F2F76A4642FFE603DBB7323A437126CCB0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:41:21 +0000 Manifest this update: Tue 12 May 2026 16:36:21 +0000 Manifest next update: Wed 13 May 2026 18:24:21 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=) 2: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=) 3: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=) 4: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: BMaQAGDr0vNR2/eEc7TX49ZUPc/iB/dFNP+Hyrg14so=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:43:6f:2f:76:a4:64:2f:fe:60:3d:bb:73:23:a4:37:12:6c:cb:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Validity Not Before: May 12 16:36:21 2026 GMT Not After : May 13 18:24:21 2026 GMT Subject: CN=4E957AB396D9A0D66FBFC4DEF0FE3EF61F07AA57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:39:3a:c1:9b:56:c4:85:22:42:d2:1e:db: 15:22:97:66:18:74:9f:5c:2d:c1:4f:ee:42:a1:13: 9c:2b:a3:08:77:34:11:1f:0e:b8:f9:70:a0:38:3b: 0a:58:a9:80:03:9b:46:47:7a:87:28:11:f5:0f:9d: 03:1c:a5:e9:ee:77:b0:60:15:92:de:27:d6:02:0f: dc:e8:f8:da:27:de:ec:09:f0:88:84:68:e3:ff:96: 68:0d:2f:f8:8e:c8:5c:02:ec:21:06:fc:0e:f6:9d: e5:da:2f:7f:ed:67:b8:7f:06:40:08:21:fd:4e:3c: fe:21:e2:58:28:06:9a:be:67:4a:29:25:3e:79:9e: 94:33:0d:e0:2c:b9:e7:2a:13:c7:d5:67:90:d3:16: 1a:a3:fd:f8:a2:ff:da:3d:e3:7a:57:a0:47:54:f2: d9:52:76:d2:ae:4a:6c:64:a7:68:15:e0:e5:00:a7: 29:90:32:83:d2:7a:8f:7a:67:d5:aa:99:7a:51:26: fa:0f:b3:f0:bf:cd:f9:dd:16:68:3d:b6:f8:8f:76: 25:d1:94:e1:bc:30:3e:70:b9:a7:9b:79:44:be:79: aa:2d:59:7c:55:ee:e6:9f:32:44:72:ec:c3:5e:08: a3:e2:73:d3:21:e9:2e:8c:78:a0:c3:42:90:c1:5d: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:7A:B3:96:D9:A0:D6:6F:BF:C4:DE:F0:FE:3E:F6:1F:07:AA:57 X509v3 Authority Key Identifier: keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ac:d6:3f:1f:d3:15:80:75:07:73:7d:87:bd:11:39:3a:5a: cb:a3:e9:0b:45:f0:c8:d4:b1:01:01:ab:f5:64:bf:8a:00:c7: af:3f:34:bd:c1:cd:2f:f6:38:3b:a3:9d:5c:25:9a:8e:10:ab: d5:44:dd:8f:ca:59:d0:c3:e6:e0:5d:9c:b7:55:1b:2d:f6:b8: b2:2a:e5:b7:50:c9:0d:b7:0c:22:61:3f:ba:1a:2f:56:d8:c3: 41:d1:d8:e4:25:c9:b0:f5:3b:46:b4:a0:8e:e7:48:99:44:c7: b5:56:82:e8:5e:83:45:f9:26:74:dd:a9:fa:33:34:5c:b5:73: 2a:dd:43:57:ca:48:2e:2c:48:38:52:c7:42:00:81:7e:6d:d2: 69:54:4b:37:bc:27:e6:42:00:ab:36:76:f8:74:5c:12:2e:f7: 0b:cd:0d:4e:c1:28:a4:c1:27:30:14:52:83:78:1f:71:f4:ab: 10:07:54:00:0f:d3:a1:1f:7e:49:28:bf:ff:85:66:24:28:24: 5a:bb:84:82:6b:51:f1:2b:5c:e6:48:db:d9:7a:82:1b:a5:85: d0:d2:b8:af:1c:b1:c3:8f:11:b4:a9:4f:de:c7:3c:9f:c6:e8: dc:55:86:48:4a:42:f2:b6:45:2d:04:e1:3c:c0:2a:c6:c5:86: f8:fc:90:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkNvL3akZC/+YD27cyOkNxJsywswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG NDExQkFDNTAeFw0yNjA1MTIxNjM2MjFaFw0yNjA1MTMxODI0MjFaMDMxMTAvBgNV BAMTKDRFOTU3QUIzOTZEOUEwRDY2RkJGQzRERUYwRkUzRUY2MUYwN0FBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbDk6wZtWxIUiQtIe2xUil2YY dJ9cLcFP7kKhE5wrowh3NBEfDrj5cKA4OwpYqYADm0ZHeocoEfUPnQMcpenud7Bg FZLeJ9YCD9zo+Non3uwJ8IiEaOP/lmgNL/iOyFwC7CEG/A72neXaL3/tZ7h/BkAI If1OPP4h4lgoBpq+Z0opJT55npQzDeAsuecqE8fVZ5DTFhqj/fii/9o943pXoEdU 8tlSdtKuSmxkp2gV4OUApymQMoPSeo96Z9WqmXpRJvoPs/C/zfndFmg9tviPdiXR lOG8MD5wuaebeUS+eaotWXxV7uafMkRy7MNeCKPic9Mh6S6MeKDDQpDBXWWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTpV6s5bZoNZvv8Te8P4+9h8HqlcwHwYDVR0j BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3 REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC QUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVB NDhGNDExQkFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWs1j8f0xWAdQdzfYe9ETk6Wsuj6QtF8MjU sQEBq/Vkv4oAx68/NL3BzS/2ODujnVwlmo4Qq9VE3Y/KWdDD5uBdnLdVGy32uLIq 5bdQyQ23DCJhP7oaL1bYw0HR2OQlybD1O0a0oI7nSJlEx7VWguheg0X5JnTdqfoz NFy1cyrdQ1fKSC4sSDhSx0IAgX5t0mlUSze8J+ZCAKs2dvh0XBIu9wvNDU7BKKTB JzAUUoN4H3H0qxAHVAAP06Effkkov/+FZiQoJFq7hIJrUfErXOZI29l6ghulhdDS uK8cscOPEbSpT97HPJ/G6NxVhkhKQvK2RS0E4TzAKsbFhvj8kBY= -----END CERTIFICATE-----Generated at Wed May 13 00:21:07 2026 by rpki-client