$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json) Hash identifier: jbJj+4l3VzT+Z9gKgk+p6VrVNWULLAc4oZrO6RHhqsM= Subject key identifier: C5:D7:DD:3E:42:77:00:F5:8C:F3:5E:B9:FD:28:28:6D:8C:6B:73:FD Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 1D71034B4F1EE3DA80955F95E3E393498309C41D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:55:51 +0000 Manifest this update: Tue 16 Jun 2026 21:50:51 +0000 Manifest next update: Wed 17 Jun 2026 23:06:51 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=) 2: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: UrAdDFAgHHMudwxZ/VwCcmKn24lfFd+mRDBjl+++Xd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:71:03:4b:4f:1e:e3:da:80:95:5f:95:e3:e3:93:49:83:09:c4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: Jun 16 21:50:51 2026 GMT Not After : Jun 17 23:06:51 2026 GMT Subject: CN=C5D7DD3E427700F58CF35EB9FD28286D8C6B73FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:db:c8:a9:7c:84:a1:c7:67:10:8e:9a:d4:c9: 7b:73:ed:3b:07:ea:db:57:7a:42:3d:20:63:fc:e5: 19:58:12:c9:d8:40:87:1c:27:60:e8:fe:ef:0a:4e: 6f:8f:32:2b:9d:4d:5d:41:bc:01:01:0c:c0:49:2f: 49:97:a9:b6:18:74:87:a9:97:72:c0:8d:60:a8:10: 65:bc:7b:8a:c5:fb:11:ed:06:45:aa:b4:fc:7c:9c: 96:9b:48:a0:e0:ab:92:ad:fd:29:24:36:c6:8b:8f: 83:c6:99:e1:2e:2e:18:88:de:fc:59:0f:43:f8:02: 59:cc:96:94:f5:10:85:b1:51:9e:d4:39:0f:26:33: 5f:8e:b7:0a:2a:4e:a2:4c:48:50:84:a0:d7:89:51: 7e:8d:72:ec:dd:15:33:9a:ea:6a:61:fc:9e:4d:72: ce:dc:2f:e8:e3:f6:cf:8f:b3:6e:f9:c1:65:37:d2: 9f:da:c6:e8:5e:95:20:33:dd:74:34:ec:6b:01:a0: a4:bd:a9:b4:2c:5c:08:5b:f6:cc:cd:c3:65:cd:73: 2e:77:87:f2:6f:ff:82:62:57:33:92:21:25:ac:21: fe:ea:ad:a7:96:7c:68:56:9e:bf:d5:eb:4e:92:f9: 3e:18:65:d8:36:cb:94:fb:43:9c:14:fc:52:66:9e: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:DD:3E:42:77:00:F5:8C:F3:5E:B9:FD:28:28:6D:8C:6B:73:FD X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:67:81:6b:37:67:39:95:c8:d6:f3:8c:b8:c1:2c:6b:d3:bd: 83:f3:8b:8a:49:ad:38:88:53:20:c9:dc:37:9a:69:00:19:52: c9:c4:4e:0c:6f:07:64:d7:1f:94:53:cc:e9:55:ed:b3:cb:b3: de:72:98:b8:bb:a1:42:4f:73:4a:4d:b6:ce:0e:ba:61:ba:e9: 38:84:cb:ce:40:81:37:7e:e4:5c:80:25:cc:d4:fd:73:5e:cd: d8:48:ad:3f:16:f6:5e:e8:e4:f8:08:89:d6:4a:7f:5f:91:0d: 56:89:a5:5a:50:ab:03:8f:22:7d:1d:5f:40:ee:6e:6d:e0:35: 1b:75:8a:7a:d0:45:8b:85:29:db:89:7c:e2:1c:8e:0c:3d:0f: 82:c3:43:8c:18:8c:d7:3a:be:a7:c3:88:2d:b1:a7:88:69:12: c1:48:ed:ed:28:98:26:7c:21:b2:4a:80:5c:50:04:00:a5:d5: e7:76:01:fd:74:bd:67:4b:86:ef:41:43:6c:17:d7:98:ab:5b: 7b:2e:a2:68:85:62:e6:eb:08:9a:27:e9:89:e8:97:73:45:7a: b3:65:fe:6f:2f:bd:36:9c:0e:68:eb:fc:29:f2:54:77:5a:ed: 0c:a6:96:1a:2e:a1:f8:a9:fc:e1:c0:5c:e3:67:e3:ff:93:75: 13:af:63:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXEDS08e49qAlV+V4+OTSYMJxB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA2MTYyMTUwNTFaFw0yNjA2MTcyMzA2NTFaMDMxMTAvBgNV BAMTKEM1RDdERDNFNDI3NzAwRjU4Q0YzNUVCOUZEMjgyODZEOEM2QjczRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD328ipfIShx2cQjprUyXtz7TsH 6ttXekI9IGP85RlYEsnYQIccJ2Do/u8KTm+PMiudTV1BvAEBDMBJL0mXqbYYdIep l3LAjWCoEGW8e4rF+xHtBkWqtPx8nJabSKDgq5Kt/SkkNsaLj4PGmeEuLhiI3vxZ D0P4AlnMlpT1EIWxUZ7UOQ8mM1+OtwoqTqJMSFCEoNeJUX6NcuzdFTOa6mph/J5N cs7cL+jj9s+Ps275wWU30p/axuhelSAz3XQ07GsBoKS9qbQsXAhb9szNw2XNcy53 h/Jv/4JiVzOSISWsIf7qraeWfGhWnr/V606S+T4YZdg2y5T7Q5wU/FJmnpThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdfdPkJ3APWM8165/SgobYxrc/0wHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUx REZBODk3Q0UxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtngWs3ZzmVyNbzjLjBLGvTvYPzi4pJrTiI UyDJ3DeaaQAZUsnETgxvB2TXH5RTzOlV7bPLs95ymLi7oUJPc0pNts4OumG66TiE y85AgTd+5FyAJczU/XNezdhIrT8W9l7o5PgIidZKf1+RDVaJpVpQqwOPIn0dX0Du bm3gNRt1inrQRYuFKduJfOIcjgw9D4LDQ4wYjNc6vqfDiC2xp4hpEsFI7e0omCZ8 IbJKgFxQBACl1ed2Af10vWdLhu9BQ2wX15irW3suomiFYubrCJon6Ynol3NFerNl /m8vvTacDmjr/CnyVHda7Qymlhouofip/OHAXONn4/+TdROvY1I= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:17 2026 by rpki-client