$ rpki-client -vvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: +BCv0J+st46fYauziynbu8uubJg/v2pHa9JOrphiygw= Subject key identifier: 1E:B1:4A:48:52:D4:10:D4:ED:DD:CE:12:63:B8:94:31:20:3E:4A:BF Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 31BDAC8DCE91C7ADC3580139131CC1AAE2C004B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:18:00 +0000 Manifest this update: Wed 17 Jun 2026 08:13:00 +0000 Manifest next update: Thu 18 Jun 2026 12:16:00 +0000 Files and hashes: 1: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: /fkviVm53DdXyGplg3Eda4ZnvZl1Iz3HPWGOl/ZDJzc=) 2: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) 3: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) 4: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 5: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bd:ac:8d:ce:91:c7:ad:c3:58:01:39:13:1c:c1:aa:e2:c0:04:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: Jun 17 08:13:00 2026 GMT Not After : Jun 18 12:16:00 2026 GMT Subject: CN=1EB14A4852D410D4EDDDCE1263B89431203E4ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:aa:88:de:3f:86:5d:51:4c:a5:86:5a:93: 7e:54:ed:ad:41:3a:2b:0e:cd:8f:9f:f4:3f:42:2f: a8:f7:57:6c:4d:de:29:3f:e1:15:76:ab:84:b1:98: 0e:84:09:33:0a:14:0c:41:8d:21:27:fa:89:0d:b3: b9:37:d7:db:04:87:00:87:07:c7:ed:d8:08:8d:94: 04:3a:15:85:91:31:b7:cd:81:1c:10:62:fd:34:22: 61:40:a4:d3:71:ce:dd:ee:7a:a4:27:99:45:a7:23: 08:af:83:0f:34:e1:52:90:bd:4b:4b:60:63:99:5f: bb:22:03:dc:24:43:78:0c:3b:63:e7:f4:1c:79:33: 3b:4a:f9:25:af:38:31:c1:1b:87:c9:bf:fe:a0:53: 42:00:b8:03:56:59:a0:6d:c8:f3:f9:9d:44:eb:e1: 0f:ca:f3:77:c5:76:33:49:e1:55:ff:e6:8a:76:34: f2:f7:ee:f1:3a:d2:cf:9e:04:c6:c1:77:d1:0e:08: 53:6f:9e:9b:05:09:21:1d:c0:34:f1:ce:61:c7:98: 3e:ff:26:27:d2:95:85:c8:de:63:b6:40:f0:5e:c9: c7:0b:aa:04:e0:87:f9:ac:24:bb:20:88:e7:6a:c2: 6e:ea:50:ef:ea:e2:fb:2a:a9:d4:19:87:b2:bf:f3: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:4A:48:52:D4:10:D4:ED:DD:CE:12:63:B8:94:31:20:3E:4A:BF X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:dc:03:ab:07:4d:df:41:f5:5a:de:80:ea:61:4e:27:1c:d7: 75:16:24:30:b6:cf:1d:23:91:03:71:4d:d6:52:bb:62:85:76: d4:f4:6b:5a:1d:5b:c6:b7:02:49:8f:00:77:5f:03:25:68:51: 53:3e:d8:4e:94:a6:fc:46:1f:ea:6d:b0:07:b9:7d:96:0e:f0: 09:0f:c8:7f:e8:ac:6c:44:5f:33:70:37:40:19:ad:62:d7:6f: 05:b7:6d:79:42:95:35:85:38:ed:df:fd:38:61:00:d6:e7:c3: ba:f2:c8:13:bd:f5:43:bc:7b:34:c3:58:98:ff:60:8b:e7:66: e5:d4:4a:fa:8e:41:03:68:8b:e2:47:ec:18:86:f1:23:b7:64: f7:fc:82:c9:d9:a2:2d:95:13:59:2c:55:f9:c8:90:b4:81:25: 09:8e:ba:c7:64:7d:c2:5a:5a:c4:4f:85:fb:f2:db:34:b8:05: 29:00:d5:8f:46:5f:c6:db:20:1b:c3:0c:85:b2:d3:1c:88:27: 00:4e:ab:a9:91:f1:d4:aa:18:82:b6:e6:ce:47:0e:1e:4d:41: f5:56:d2:a9:c0:81:dc:e9:c5:89:d2:a2:bd:c3:e1:e4:21:71: 7f:9e:8e:65:75:e3:c1:32:c0:00:f5:e1:33:34:fd:02:69:4d: c0:28:ea:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMb2sjc6Rx63DWAE5ExzBquLABLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA2MTcwODEzMDBaFw0yNjA2MTgxMjE2MDBaMDMxMTAvBgNV BAMTKDFFQjE0QTQ4NTJENDEwRDRFREREQ0UxMjYzQjg5NDMxMjAzRTRBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyqqI3j+GXVFMpYZak35U7a1B OisOzY+f9D9CL6j3V2xN3ik/4RV2q4SxmA6ECTMKFAxBjSEn+okNs7k319sEhwCH B8ft2AiNlAQ6FYWRMbfNgRwQYv00ImFApNNxzt3ueqQnmUWnIwivgw804VKQvUtL YGOZX7siA9wkQ3gMO2Pn9Bx5MztK+SWvODHBG4fJv/6gU0IAuANWWaBtyPP5nUTr 4Q/K83fFdjNJ4VX/5op2NPL37vE60s+eBMbBd9EOCFNvnpsFCSEdwDTxzmHHmD7/ JifSlYXI3mO2QPBeyccLqgTgh/msJLsgiOdqwm7qUO/q4vsqqdQZh7K/84vjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHrFKSFLUENTt3c4SY7iUMSA+Sr8wHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/cA6sHTd9B9VregOphTicc13UWJDC2zx0j kQNxTdZSu2KFdtT0a1odW8a3AkmPAHdfAyVoUVM+2E6UpvxGH+ptsAe5fZYO8AkP yH/orGxEXzNwN0AZrWLXbwW3bXlClTWFOO3f/ThhANbnw7ryyBO99UO8ezTDWJj/ YIvnZuXUSvqOQQNoi+JH7BiG8SO3ZPf8gsnZoi2VE1ksVfnIkLSBJQmOusdkfcJa WsRPhfvy2zS4BSkA1Y9GX8bbIBvDDIWy0xyIJwBOq6mR8dSqGIK25s5HDh5NQfVW 0qnAgdzpxYnSor3D4eQhcX+ejmV148EywAD14TM0/QJpTcAo6nA= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:15 2026 by rpki-client