$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json) Hash identifier: Oj50RSkOKPzgFvo2T+qKyQ0nn8OvdJ+DIj9LWGLK/J0= Subject key identifier: A2:0B:A4:33:3D:40:F8:2D:76:4B:64:33:92:F9:1C:40:72:B1:BB:DD Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Certificate serial: 74C77F6E07198CE7429AF474C4AFB5C2775F9C35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 18:54:02 +0000 Manifest this update: Thu 24 Sep 2026 18:49:02 +0000 Manifest next update: Fri 25 Sep 2026 20:43:02 +0000 Files and hashes: 1: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=) 2: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=) 3: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=) 4: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: INjbadtzzneLVX5CNhxPgt3MyUPvTPyMpKGt3LVED7g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c7:7f:6e:07:19:8c:e7:42:9a:f4:74:c4:af:b5:c2:77:5f:9c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Validity Not Before: Sep 24 18:49:02 2026 GMT Not After : Sep 25 20:43:02 2026 GMT Subject: CN=A20BA4333D40F82D764B643392F91C4072B1BBDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:5d:09:7c:2a:48:c5:26:ce:b5:03:2b:20: 0f:28:62:c9:f6:c4:90:a1:ac:c3:a6:d9:6f:c1:10: 22:82:5f:1a:c5:12:28:50:32:90:cd:33:b6:b7:d5: f7:ac:8d:f0:a5:9b:7c:cd:93:ab:a8:24:ef:a4:4f: a2:0c:e7:11:9d:1e:d7:1b:0c:af:e9:a1:32:a0:85: 34:05:8f:f8:f0:e5:0b:03:7a:54:c2:c5:d9:de:5e: 25:74:2c:c2:2c:1e:bc:c0:20:d7:c5:8c:44:b0:4a: 73:09:78:d5:5a:63:db:a7:85:04:be:d0:78:58:a1: e2:aa:77:4e:39:42:d7:90:1b:31:f3:84:d3:36:a4: b5:80:49:17:ee:e5:fd:14:83:38:1d:c3:dd:66:18: 44:27:b2:47:83:dc:29:6a:d9:e8:69:a3:d3:e5:cd: 7c:e7:e4:e6:bb:4f:05:7e:6f:d3:9f:4b:30:a3:56: 8d:d7:13:80:6e:5f:e8:72:78:ea:a8:35:85:8d:f5: d3:36:2a:d0:58:12:b2:e7:06:47:1d:4a:f8:6d:8b: ae:20:14:9a:12:49:3c:f4:9d:94:c7:d4:e4:81:2b: 19:12:bf:de:48:d1:9c:9d:bb:99:a8:f7:0e:12:2e: b7:81:f2:4c:95:ed:50:1c:18:06:a1:60:16:75:7b: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0B:A4:33:3D:40:F8:2D:76:4B:64:33:92:F9:1C:40:72:B1:BB:DD X509v3 Authority Key Identifier: keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:56:07:ff:43:3d:db:a2:6d:d1:c5:23:8a:08:e5:e3:50:0d: 7f:dd:71:3b:d8:e8:7e:cc:ff:59:c5:dc:51:b2:e1:56:bd:fd: fd:0b:02:74:24:d9:bc:e1:b3:0b:83:b8:85:19:a9:74:7b:20: ac:63:89:56:81:3d:b4:5b:55:b4:1a:37:06:af:ba:9c:2c:cc: 68:a9:bf:ec:c2:2d:95:9d:f4:f8:b6:89:4f:a0:a0:0e:e9:8c: 63:98:70:07:92:e5:f5:d5:95:b9:60:e8:d4:a7:0e:14:5c:2d: 68:48:5d:6e:80:a1:92:47:3c:96:b6:21:65:e3:30:16:81:85: 60:11:d3:a4:6a:b3:a8:1b:23:3e:84:e7:c2:c6:d2:2c:4a:03: 62:c0:ab:fe:44:e9:c4:8a:aa:46:c6:1a:58:34:fe:f8:75:66: 1f:d8:fd:c9:38:1a:ec:f6:a2:2d:ab:bc:47:31:b9:48:22:16: 1e:6d:a0:8d:ca:5f:46:3e:15:2b:a8:31:08:31:99:78:7f:cb: 53:9c:ef:86:b0:ff:ff:ba:0e:ee:e3:aa:ca:de:bd:bf:c4:37: 77:5a:9e:b7:6f:44:be:a4:e3:9f:57:4a:d8:cb:d0:bb:a7:3b: 73:23:1e:92:b7:d0:0f:34:9e:0a:55:15:ca:27:96:4d:22:1d: d9:ae:5c:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMd/bgcZjOdCmvR0xK+1wndfnDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG NDExQkFDNTAeFw0yNjA5MjQxODQ5MDJaFw0yNjA5MjUyMDQzMDJaMDMxMTAvBgNV BAMTKEEyMEJBNDMzM0Q0MEY4MkQ3NjRCNjQzMzkyRjkxQzQwNzJCMUJCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOc10JfCpIxSbOtQMrIA8oYsn2 xJChrMOm2W/BECKCXxrFEihQMpDNM7a31fesjfClm3zNk6uoJO+kT6IM5xGdHtcb DK/poTKghTQFj/jw5QsDelTCxdneXiV0LMIsHrzAINfFjESwSnMJeNVaY9unhQS+ 0HhYoeKqd045QteQGzHzhNM2pLWASRfu5f0Ugzgdw91mGEQnskeD3Clq2ehpo9Pl zXzn5Oa7TwV+b9OfSzCjVo3XE4BuX+hyeOqoNYWN9dM2KtBYErLnBkcdSvhti64g FJoSSTz0nZTH1OSBKxkSv95I0Zydu5mo9w4SLreB8kyV7VAcGAahYBZ1e5tpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogukMz1A+C12S2QzkvkcQHKxu90wHwYDVR0j BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3 REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC QUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVB NDhGNDExQkFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpWB/9DPduibdHFI4oI5eNQDX/dcTvY6H7M /1nF3FGy4Va9/f0LAnQk2bzhswuDuIUZqXR7IKxjiVaBPbRbVbQaNwavupwszGip v+zCLZWd9Pi2iU+goA7pjGOYcAeS5fXVlblg6NSnDhRcLWhIXW6AoZJHPJa2IWXj MBaBhWAR06Rqs6gbIz6E58LG0ixKA2LAq/5E6cSKqkbGGlg0/vh1Zh/Y/ck4Guz2 oi2rvEcxuUgiFh5toI3KX0Y+FSuoMQgxmXh/y1Oc74aw//+6Du7jqsrevb/EN3da nrdvRL6k459XStjL0LunO3MjHpK30A80ngpVFconlk0iHdmuXFU= -----END CERTIFICATE-----Generated at Fri Sep 25 08:36:09 2026 by rpki-client