$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: 7l7w7yGflAKGS3hFSmpxBHfb5tApEu27sggyjnJXsdg= Subject key identifier: F1:1F:A1:AA:20:62:E8:02:1F:43:94:5D:2E:3D:00:2C:83:44:E7:CE Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 2432FFA7622C67D39C622690C6889E9EAC849415 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:18:00 +0000 Manifest this update: Mon 21 Sep 2026 13:13:00 +0000 Manifest next update: Tue 22 Sep 2026 14:16:00 +0000 Files and hashes: 1: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) 2: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 3: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: JVBBPRrv+tI3A+lVi0KytdJdo+smkKDs96bkROnr7jg=) 4: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) 5: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:32:ff:a7:62:2c:67:d3:9c:62:26:90:c6:88:9e:9e:ac:84:94:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: Sep 21 13:13:00 2026 GMT Not After : Sep 22 14:16:00 2026 GMT Subject: CN=F11FA1AA2062E8021F43945D2E3D002C8344E7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:76:96:e9:37:39:f9:0c:ac:65:9c:21:70: a0:d8:15:f0:e8:73:94:a8:bb:01:25:8d:77:e6:71: 5e:93:26:75:04:47:1d:04:3d:62:2d:11:41:89:79: d9:d1:e0:f6:d5:9b:43:24:e4:16:36:4d:2a:82:1d: 41:50:13:a2:46:08:09:50:89:63:11:a4:33:61:17: 99:ce:b2:20:5f:ac:4f:c1:58:2a:ab:1b:20:35:81: 14:a2:fe:3f:ec:59:4f:f3:b6:87:bc:0f:bd:e9:14: 18:b5:e3:92:d8:78:6b:8c:db:5a:79:f7:e0:38:a2: a2:a2:ad:21:48:4b:3a:e4:88:df:6a:05:d3:a8:c4: b5:05:d5:ed:fb:67:3d:3f:4b:44:6c:39:3c:61:62: 74:34:e1:be:a5:24:02:73:bf:af:85:ea:24:3e:3a: e9:16:b8:0a:c2:26:01:4b:21:c4:78:f9:06:1c:59: f0:67:dd:eb:18:f7:e3:94:51:9c:d3:89:a6:08:77: a7:57:0e:48:84:75:0c:11:d1:32:00:ce:81:80:ae: 5e:08:c8:d2:5a:28:6b:fd:30:7f:88:5c:31:43:8c: 4d:78:ed:17:4c:4c:af:8c:d3:b2:0e:31:60:f4:84: 00:21:de:bb:ff:d8:74:89:b3:b7:8f:2c:98:e9:86: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1F:A1:AA:20:62:E8:02:1F:43:94:5D:2E:3D:00:2C:83:44:E7:CE X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:70:57:4b:99:5b:42:aa:b7:03:70:0c:f0:36:5e:38:ff:5d: 0e:e1:84:37:c1:a6:b8:d5:fd:d8:98:b5:54:37:96:c9:48:e9: d1:34:66:4e:c4:20:f4:12:09:69:75:a8:1a:81:e1:46:6a:09: 2e:9f:85:61:3b:0a:7f:36:21:77:19:00:ca:7b:be:bf:bb:b0: 73:3c:4a:ca:9c:d5:37:bf:f1:f1:75:4d:60:34:32:08:25:44: 02:d3:21:40:14:fe:a7:78:34:ff:0e:18:51:51:30:dd:23:76: 82:be:1b:04:04:e4:e8:b4:ca:70:7c:2d:6f:f7:ee:0a:8a:3e: 15:28:8a:aa:5c:5a:3b:74:c7:7c:a2:10:1a:2b:bc:aa:82:4b: 3c:86:0e:0a:80:aa:93:94:64:0c:59:19:1e:1e:88:c2:1a:de: 63:85:9b:0a:1c:c5:9a:93:cc:ef:00:1d:1e:42:72:0d:15:a0: 9c:7b:03:a5:8a:6f:ae:28:ee:2d:0c:32:48:af:e6:6c:79:53: c8:6b:0f:24:6b:40:5e:bb:db:3e:1f:0a:96:1a:ad:61:cf:88: 37:c0:60:89:8c:1e:7c:9b:7c:02:1a:79:c8:02:ba:55:15:51: 4a:94:f9:38:e8:55:82:49:da:bd:f6:97:d6:a8:1d:37:42:3b: 9d:3e:62:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDL/p2IsZ9OcYiaQxoienqyElBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA5MjExMzEzMDBaFw0yNjA5MjIxNDE2MDBaMDMxMTAvBgNV BAMTKEYxMUZBMUFBMjA2MkU4MDIxRjQzOTQ1RDJFM0QwMDJDODM0NEU3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OXaW6Tc5+QysZZwhcKDYFfDo c5SouwEljXfmcV6TJnUERx0EPWItEUGJednR4PbVm0Mk5BY2TSqCHUFQE6JGCAlQ iWMRpDNhF5nOsiBfrE/BWCqrGyA1gRSi/j/sWU/ztoe8D73pFBi145LYeGuM21p5 9+A4oqKirSFISzrkiN9qBdOoxLUF1e37Zz0/S0RsOTxhYnQ04b6lJAJzv6+F6iQ+ OukWuArCJgFLIcR4+QYcWfBn3esY9+OUUZzTiaYId6dXDkiEdQwR0TIAzoGArl4I yNJaKGv9MH+IXDFDjE147RdMTK+M07IOMWD0hAAh3rv/2HSJs7ePLJjphsOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8R+hqiBi6AIfQ5RdLj0ALINE584wHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9wV0uZW0KqtwNwDPA2Xjj/XQ7hhDfBprjV /diYtVQ3lslI6dE0Zk7EIPQSCWl1qBqB4UZqCS6fhWE7Cn82IXcZAMp7vr+7sHM8 Ssqc1Te/8fF1TWA0MgglRALTIUAU/qd4NP8OGFFRMN0jdoK+GwQE5Oi0ynB8LW/3 7gqKPhUoiqpcWjt0x3yiEBorvKqCSzyGDgqAqpOUZAxZGR4eiMIa3mOFmwocxZqT zO8AHR5Ccg0VoJx7A6WKb64o7i0MMkiv5mx5U8hrDyRrQF672z4fCpYarWHPiDfA YImMHnybfAIaecgCulUVUUqU+TjoVYJJ2r32l9aoHTdCO50+YvE= -----END CERTIFICATE-----Generated at Tue Sep 22 06:56:11 2026 by rpki-client