$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: IQsLnFG7MdLkljyAWeFV5nZI+tY2t60F8s2nr5JN7jM= Subject key identifier: D0:26:D9:8A:85:1A:17:88:DA:46:1B:A5:36:C3:FB:81:90:C2:20:97 Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 2349B9A128509C066BEF3081A60DC9A0275318D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 06:54:08 +0000 Manifest this update: Wed 29 Jul 2026 06:49:08 +0000 Manifest next update: Thu 30 Jul 2026 08:21:08 +0000 Files and hashes: 1: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: I4BZ3IQqztReuiAy10qx0q1OcX58CROaYTz05diUhdo=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: 5EvruLBNSAVPD9rhIUp2sgGO0l1cxlFHLpEgjT7FBPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:49:b9:a1:28:50:9c:06:6b:ef:30:81:a6:0d:c9:a0:27:53:18:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: Jul 29 06:49:08 2026 GMT Not After : Jul 30 08:21:08 2026 GMT Subject: CN=D026D98A851A1788DA461BA536C3FB8190C22097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:71:93:11:36:52:90:ef:5a:85:83:f5:62:a6: 2f:d8:5b:db:ec:6f:4d:6e:c8:b2:17:4c:da:88:7a: 0d:13:19:f9:f9:a9:29:4a:04:fc:0c:d2:f7:d0:9d: a2:f3:a4:f6:2f:5b:d3:54:3e:d0:68:11:a3:ac:82: 89:52:1c:59:9c:c4:dc:ff:93:11:ff:98:0f:fa:8a: e2:95:72:5c:3f:b1:30:9a:2c:95:5b:da:d3:a2:03: b1:1c:af:3a:b5:0a:9c:05:a5:d7:24:d1:2c:96:73: b6:e6:f1:cc:e7:d4:e9:55:70:ef:26:cd:a2:3a:35: 48:d4:6a:2a:c7:b9:57:3a:3d:52:58:86:19:1e:7f: dc:b4:2b:9b:04:9f:ad:28:4b:c5:d2:d1:56:7d:78: 3a:b9:2c:3d:82:aa:0f:1f:29:7d:18:28:84:24:19: 29:8c:a2:dc:f0:c4:c2:28:71:da:5c:91:fb:13:6d: e3:cf:ee:69:4a:a7:97:f5:70:a1:34:44:cd:9b:4d: 2e:6a:0d:f1:85:37:39:8d:f4:be:b4:7d:ed:5d:47: bc:a1:08:a1:cb:5a:13:9e:7c:37:33:65:de:03:64: 38:09:bc:8f:af:5e:3a:3d:3c:36:ed:22:84:b9:39: 30:e7:8b:7f:fd:07:e4:3e:6e:06:d1:66:ba:53:1d: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:26:D9:8A:85:1A:17:88:DA:46:1B:A5:36:C3:FB:81:90:C2:20:97 X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f2:99:24:1b:49:fc:79:d1:8c:4d:90:f9:7e:2e:bb:92:1d: 4c:95:56:67:da:ea:61:63:ee:5e:80:a8:8f:33:61:18:3b:8c: 46:b8:e9:27:06:be:22:3d:e3:3e:4e:2a:ae:3d:8d:e0:e8:0d: 4b:1b:71:da:71:7c:a5:52:87:a8:a7:1b:0f:86:2a:eb:a3:a7: cc:53:9a:f9:e6:6d:11:81:ca:35:fc:56:a5:e4:f1:8a:dc:ab: f7:54:39:bd:17:e7:37:7d:50:7f:c7:ab:9c:b3:22:c6:1e:45: 9d:ee:e8:01:00:97:44:e9:bc:f3:d3:86:ac:6b:a0:14:81:01: 1b:4d:61:5d:99:f2:ff:fa:f6:77:2e:34:00:21:bc:7e:b1:45: 49:72:54:46:eb:c8:5a:47:4b:8b:fb:a7:96:9b:43:88:75:0e: b6:82:a8:90:27:f5:96:8f:26:ef:e8:92:31:f0:6b:85:93:b8: 92:f6:61:b7:56:f6:78:74:90:73:9c:6c:a5:fa:a9:66:0a:5f: 84:79:6f:1c:aa:65:e0:d9:87:4f:ce:16:98:03:4d:11:a8:d7: ee:a1:6a:83:b7:90:75:3d:d5:e1:45:88:d3:de:69:69:c3:b8: 9c:a3:25:20:e4:76:3f:77:49:e4:d0:ac:8c:b0:47:e2:a3:7c: bc:61:82:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0m5oShQnAZr7zCBpg3JoCdTGNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjA3MjkwNjQ5MDhaFw0yNjA3MzAwODIxMDhaMDMxMTAvBgNV BAMTKEQwMjZEOThBODUxQTE3ODhEQTQ2MUJBNTM2QzNGQjgxOTBDMjIwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcZMRNlKQ71qFg/Vipi/YW9vs b01uyLIXTNqIeg0TGfn5qSlKBPwM0vfQnaLzpPYvW9NUPtBoEaOsgolSHFmcxNz/ kxH/mA/6iuKVclw/sTCaLJVb2tOiA7Ecrzq1CpwFpdck0SyWc7bm8czn1OlVcO8m zaI6NUjUairHuVc6PVJYhhkef9y0K5sEn60oS8XS0VZ9eDq5LD2Cqg8fKX0YKIQk GSmMotzwxMIocdpckfsTbePP7mlKp5f1cKE0RM2bTS5qDfGFNzmN9L60fe1dR7yh CKHLWhOefDczZd4DZDgJvI+vXjo9PDbtIoS5OTDni3/9B+Q+bgbRZrpTHRrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0CbZioUaF4jaRhulNsP7gZDCIJcwHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPymSQbSfx50YxNkPl+LruSHUyVVmfa6mFj 7l6AqI8zYRg7jEa46ScGviI94z5OKq49jeDoDUsbcdpxfKVSh6inGw+GKuujp8xT mvnmbRGByjX8VqXk8Yrcq/dUOb0X5zd9UH/Hq5yzIsYeRZ3u6AEAl0TpvPPThqxr oBSBARtNYV2Z8v/69ncuNAAhvH6xRUlyVEbryFpHS4v7p5abQ4h1DraCqJAn9ZaP Ju/okjHwa4WTuJL2YbdW9nh0kHOcbKX6qWYKX4R5bxyqZeDZh0/OFpgDTRGo1+6h aoO3kHU91eFFiNPeaWnDuJyjJSDkdj93SeTQrIywR+KjfLxhgk8= -----END CERTIFICATE-----Generated at Wed Jul 29 15:45:47 2026 by rpki-client