$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json) Hash identifier: hFPcHvko3e7AePQCKiIV1/VUZyJbw4VrNLjNsGzgFCU= Subject key identifier: 8D:78:AB:22:68:07:FA:89:46:9F:3F:6F:D2:7A:BC:D9:52:1F:15:13 Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Certificate serial: 78F40F5B5BB419828A08A2B46F6D8AA5003EEE85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:43:59 +0000 Manifest this update: Fri 24 Jul 2026 07:38:59 +0000 Manifest next update: Sat 25 Jul 2026 09:04:59 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=) 2: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=) 3: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: jn8lBqJ/WLixUQtleWpis7e5YMpjtmSI4m0Cof6Q0Os=) 4: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f4:0f:5b:5b:b4:19:82:8a:08:a2:b4:6f:6d:8a:a5:00:3e:ee:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Validity Not Before: Jul 24 07:38:59 2026 GMT Not After : Jul 25 09:04:59 2026 GMT Subject: CN=8D78AB226807FA89469F3F6FD27ABCD9521F1513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:51:5f:e6:ba:48:13:02:7b:fc:15:99:59: a1:3a:9d:89:18:fb:af:6e:3d:65:57:82:b9:96:5d: c4:b6:f1:c1:3c:f0:9b:1c:a4:2f:c2:a6:7e:81:8d: 89:30:dd:86:cb:1e:5c:52:ad:ff:80:73:98:7c:42: 7c:86:a2:06:8d:7f:27:83:c1:01:c4:de:75:fd:34: 49:cd:77:d9:8b:6d:cf:cd:76:9b:52:b9:04:ad:60: 7b:fd:8b:a3:26:1b:23:1c:37:9a:41:e8:78:4f:01: 00:4e:d7:73:7b:d7:cd:ae:7f:2c:fa:77:fa:59:62: 3f:f6:d3:eb:1d:a7:a4:f6:6b:3d:95:34:4d:af:bb: b3:09:66:62:a3:7c:58:0b:4b:28:30:88:e4:45:ce: a0:1b:5e:4a:6e:1e:62:a7:d1:6b:27:48:86:8e:4c: ef:f8:51:3d:0b:4c:0e:a4:5c:b7:0b:8a:91:7f:fe: 17:d4:28:12:e0:7b:99:33:2e:e5:1c:94:63:47:86: d5:df:97:08:21:59:c1:af:25:69:33:ad:f8:aa:b7: 49:e9:26:f5:1c:11:f3:e0:02:ac:65:6d:c4:c3:e8: 47:34:ac:1e:fe:9d:0d:c8:73:56:11:a2:67:dc:39: 73:45:7f:7e:b4:a3:f4:3b:0f:9a:23:f7:4d:fc:a2: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:AB:22:68:07:FA:89:46:9F:3F:6F:D2:7A:BC:D9:52:1F:15:13 X509v3 Authority Key Identifier: keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:96:4b:0e:52:43:19:1c:62:69:87:a9:43:4e:8f:98:d4:48: 59:a2:cf:17:83:c2:58:b1:58:95:46:a7:1d:6f:bb:cd:21:b8: ca:b2:96:2e:45:86:63:be:f3:52:d3:3b:21:f0:1e:72:78:ab: 25:35:2a:ec:cf:be:d5:9f:26:14:c8:45:51:fb:05:95:94:c0: 4c:dc:42:b2:85:1f:ac:fc:fc:60:f9:2e:e3:18:fd:6b:d8:53: b0:b2:65:5d:29:ce:73:ac:37:a5:c2:60:85:d9:98:96:cb:7e: c3:5b:cc:12:b2:95:3f:ab:9f:41:83:3b:1c:e6:f3:3c:54:f0: f2:1d:45:71:69:85:9d:d1:46:4d:f2:6a:9a:aa:fb:69:8a:0f: 78:d7:2a:4e:c6:5f:fe:b7:38:80:80:73:82:83:05:ad:f1:3c: ef:d3:ce:5f:c8:e6:fc:f9:f3:ef:f9:65:aa:f4:f2:15:59:03: 2e:13:0b:c5:3a:91:ab:bf:4f:f7:dc:91:2d:ed:4b:13:d4:87: 13:9a:d0:b0:67:40:be:d6:aa:aa:e8:1b:f3:5d:87:fa:77:ca: 0d:3d:67:45:d2:b1:90:e0:61:d6:c1:68:e9:b8:d2:e7:02:d5: a8:43:8e:f7:f3:4f:4e:d8:16:43:2e:1f:c6:e7:93:99:7b:a0: 36:62:10:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePQPW1u0GYKKCKK0b22KpQA+7oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG NDExQkFDNTAeFw0yNjA3MjQwNzM4NTlaFw0yNjA3MjUwOTA0NTlaMDMxMTAvBgNV BAMTKDhENzhBQjIyNjgwN0ZBODk0NjlGM0Y2RkQyN0FCQ0Q5NTIxRjE1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwlFf5rpIEwJ7/BWZWaE6nYkY +69uPWVXgrmWXcS28cE88JscpC/Cpn6BjYkw3YbLHlxSrf+Ac5h8QnyGogaNfyeD wQHE3nX9NEnNd9mLbc/NdptSuQStYHv9i6MmGyMcN5pB6HhPAQBO13N7182ufyz6 d/pZYj/20+sdp6T2az2VNE2vu7MJZmKjfFgLSygwiORFzqAbXkpuHmKn0WsnSIaO TO/4UT0LTA6kXLcLipF//hfUKBLge5kzLuUclGNHhtXflwghWcGvJWkzrfiqt0np JvUcEfPgAqxlbcTD6Ec0rB7+nQ3Ic1YRomfcOXNFf360o/Q7D5oj9038om7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjXirImgH+olGnz9v0nq82VIfFRMwHwYDVR0j BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3 REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC QUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVB NDhGNDExQkFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmWSw5SQxkcYmmHqUNOj5jUSFmizxeDwlix WJVGpx1vu80huMqyli5FhmO+81LTOyHwHnJ4qyU1KuzPvtWfJhTIRVH7BZWUwEzc QrKFH6z8/GD5LuMY/WvYU7CyZV0pznOsN6XCYIXZmJbLfsNbzBKylT+rn0GDOxzm 8zxU8PIdRXFphZ3RRk3yapqq+2mKD3jXKk7GX/63OICAc4KDBa3xPO/Tzl/I5vz5 8+/5Zar08hVZAy4TC8U6kau/T/fckS3tSxPUhxOa0LBnQL7WqqroG/Ndh/p3yg09 Z0XSsZDgYdbBaOm40ucC1ahDjvfzT07YFkMuH8bnk5l7oDZiEFI= -----END CERTIFICATE-----Generated at Fri Jul 24 11:16:26 2026 by rpki-client