$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json) Hash identifier: IIRm2WU7TTm0dS1+3GPCoIEViaFJD1Cf8xSwiP7vtCE= Subject key identifier: AB:CE:31:BB:30:25:E1:55:EA:58:1E:8F:76:44:27:7E:47:8B:F9:FE Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 671A4E98A73EE8B2FA35FB77C85665D9E911A39E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:34:36 +0000 Manifest this update: Mon 21 Sep 2026 14:29:36 +0000 Manifest next update: Tue 22 Sep 2026 17:09:36 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=) 2: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: 8NN7jPZ6ptb4RD4YqkAoKDepPaaipOGHIHa0CGaldKw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1a:4e:98:a7:3e:e8:b2:fa:35:fb:77:c8:56:65:d9:e9:11:a3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: Sep 21 14:29:36 2026 GMT Not After : Sep 22 17:09:36 2026 GMT Subject: CN=ABCE31BB3025E155EA581E8F7644277E478BF9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:23:2d:55:d1:71:ce:48:28:f1:fd:99:1c: 0c:39:6b:cd:5b:15:e1:f6:56:5f:1b:37:1c:26:c1: 69:4b:9a:37:3b:b3:9d:53:94:d0:da:eb:5a:87:7c: 89:00:8d:67:92:1f:f5:bc:a9:00:f6:03:2a:83:06: 4f:1e:9c:e0:cc:ef:58:29:6f:8a:fb:9d:9c:68:6b: 2a:26:0a:1f:cd:8c:c3:66:0b:d9:38:b4:b1:b0:26: 9e:98:fe:de:06:3e:cb:14:6f:ce:c9:d1:85:15:83: 95:e5:d6:83:25:5c:2e:90:99:d6:30:3b:7b:74:58: 07:ce:60:71:db:fc:01:ae:ea:d7:32:b7:40:a0:66: 1e:1b:d1:5d:19:cc:c1:b6:c7:7d:78:2f:d3:59:1d: 90:89:6e:9b:15:65:d2:72:95:b2:08:8e:5e:17:2f: 78:3a:a4:ce:a5:6b:0d:56:53:2f:2e:b2:08:81:7a: 6b:53:18:8d:24:7a:0f:8c:b8:3f:a2:53:b0:2c:12: de:10:22:2b:7a:fe:4f:d2:35:1e:a8:df:a9:cf:aa: 2f:35:49:05:ed:fe:ae:d8:39:f5:3b:df:b0:52:e6: 9c:cb:c1:76:8a:44:0f:1d:dc:b5:07:0a:21:8a:27: 17:6e:39:fa:df:fe:c4:61:6b:17:b4:ef:73:0e:b5: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CE:31:BB:30:25:E1:55:EA:58:1E:8F:76:44:27:7E:47:8B:F9:FE X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2c:b4:91:4d:02:06:0a:ae:d6:9a:f0:06:cb:95:6e:b2:85: ad:f0:b6:df:04:3d:d1:70:00:9b:14:2f:39:1e:21:bf:6a:5b: f2:43:fa:e8:4b:63:4a:72:ac:d6:e4:01:08:27:95:de:e7:95: 04:f4:f0:08:29:0e:27:e6:ec:b1:a0:37:b9:69:58:18:92:54: a1:3e:31:99:11:5e:40:be:04:43:4a:5c:9b:98:b7:7e:85:1b: a6:76:95:9c:d9:0b:f5:95:be:a5:97:24:d7:9f:e1:fb:33:7c: 4c:35:68:c3:1d:8f:e7:a3:fd:82:bc:c8:9b:cf:6e:6a:24:d8: 70:80:4f:91:31:6c:ad:08:86:22:ea:4d:ae:4d:4d:ec:52:2e: c3:29:3b:df:a3:0c:d9:d7:f6:df:3c:76:0a:2e:0a:f0:27:9f: 29:e4:29:6e:e2:d9:c5:0e:75:99:30:cc:37:38:ba:5b:03:8d: 46:fb:ed:b4:db:ce:c2:f2:30:fa:4f:14:32:60:a4:d6:33:c4: 85:6c:7c:e0:0a:4e:ae:44:02:c1:e0:aa:17:f0:aa:92:fa:19: 3b:cb:a7:a8:d3:57:f6:dd:a5:c2:91:cd:57:d1:92:07:96:70: 77:74:f3:ca:d6:aa:7d:c7:be:64:8f:86:0b:44:a3:e3:ef:82: 3a:13:9f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxpOmKc+6LL6Nft3yFZl2ekRo54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA5MjExNDI5MzZaFw0yNjA5MjIxNzA5MzZaMDMxMTAvBgNV BAMTKEFCQ0UzMUJCMzAyNUUxNTVFQTU4MUU4Rjc2NDQyNzdFNDc4QkY5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oyMtVdFxzkgo8f2ZHAw5a81b FeH2Vl8bNxwmwWlLmjc7s51TlNDa61qHfIkAjWeSH/W8qQD2AyqDBk8enODM71gp b4r7nZxoayomCh/NjMNmC9k4tLGwJp6Y/t4GPssUb87J0YUVg5Xl1oMlXC6QmdYw O3t0WAfOYHHb/AGu6tcyt0CgZh4b0V0ZzMG2x314L9NZHZCJbpsVZdJylbIIjl4X L3g6pM6law1WUy8usgiBemtTGI0keg+MuD+iU7AsEt4QIit6/k/SNR6o36nPqi81 SQXt/q7YOfU737BS5pzLwXaKRA8d3LUHCiGKJxduOfrf/sRhaxe073MOteFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq84xuzAl4VXqWB6PdkQnfkeL+f4wHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUx REZBODk3Q0UxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0stJFNAgYKrtaa8AbLlW6yha3wtt8EPdFw AJsULzkeIb9qW/JD+uhLY0pyrNbkAQgnld7nlQT08AgpDifm7LGgN7lpWBiSVKE+ MZkRXkC+BENKXJuYt36FG6Z2lZzZC/WVvqWXJNef4fszfEw1aMMdj+ej/YK8yJvP bmok2HCAT5ExbK0IhiLqTa5NTexSLsMpO9+jDNnX9t88dgouCvAnnynkKW7i2cUO dZkwzDc4ulsDjUb77bTbzsLyMPpPFDJgpNYzxIVsfOAKTq5EAsHgqhfwqpL6GTvL p6jTV/bdpcKRzVfRkgeWcHd088rWqn3HvmSPhgtEo+PvgjoTn50= -----END CERTIFICATE-----Generated at Mon Sep 21 19:44:06 2026 by rpki-client