$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: F4qDbaryt/UGA2bcyNzx4IQpJiLYLJMUyNZv0HZD+Qs= Subject key identifier: E9:4E:2C:76:B0:CF:AE:E6:D3:6C:1C:DA:E1:00:3D:11:52:7B:81:95 Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 3388A0061DD5334BFF32A693152A652EBBFC4619 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 03:06:01 +0000 Manifest this update: Tue 28 Jul 2026 03:01:01 +0000 Manifest next update: Wed 29 Jul 2026 06:36:01 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) 2: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: 2DAfMDZzJEin3F7OVCTEkcrie1kIkSFPNnJzdKuFNVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:88:a0:06:1d:d5:33:4b:ff:32:a6:93:15:2a:65:2e:bb:fc:46:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Jul 28 03:01:01 2026 GMT Not After : Jul 29 06:36:01 2026 GMT Subject: CN=E94E2C76B0CFAEE6D36C1CDAE1003D11527B8195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:ca:13:79:5f:7f:65:db:4b:f9:4a:15:45: 72:ee:06:da:15:07:1d:db:47:f9:75:f8:39:cb:f5: d7:04:4a:51:0c:4b:fb:ec:90:e8:a6:77:c6:e5:1d: 73:67:63:53:e4:45:7c:e7:90:cc:54:57:b0:c0:17: 04:1a:5b:5a:8f:1b:0f:e9:2e:74:21:ac:7e:dd:7d: c4:3e:c8:a4:00:bd:2c:d8:cd:4e:f1:85:c1:27:d3: 55:30:95:67:e4:7e:eb:5c:d9:65:23:76:d7:e8:f1: eb:80:b3:65:89:af:8f:4e:5d:24:3a:f8:31:06:55: f3:db:01:82:e9:21:c1:36:bd:7f:77:68:51:68:5e: 53:e3:db:aa:d1:dc:2e:41:c9:ce:6d:6c:f3:97:66: 9f:40:5d:30:96:30:d7:d4:24:04:e7:5d:13:4c:8a: d0:8a:43:8c:57:f7:8a:bd:d0:d6:71:5e:9e:77:75: a3:7f:cc:fb:06:e1:d4:14:27:2e:30:27:e5:23:b0: 02:72:0a:cd:87:bc:3b:57:0f:23:04:d6:48:e1:2b: 13:09:8e:70:19:14:ae:82:45:9d:d5:2c:40:9f:09: 76:72:86:f6:ed:c1:44:8c:57:eb:f5:7c:5b:20:6a: d0:d8:fb:5e:7c:2f:64:e8:46:b1:e9:5f:c0:7a:dd: 5b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4E:2C:76:B0:CF:AE:E6:D3:6C:1C:DA:E1:00:3D:11:52:7B:81:95 X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:76:ad:61:7a:1f:25:44:c6:68:a3:95:3b:41:b9:b1:bf:8c: 76:11:84:6b:b8:7f:f8:05:2c:d2:c7:26:8c:74:12:45:aa:40: 48:40:96:0b:05:52:da:5e:ae:0c:78:0b:24:cb:6b:87:2e:a3: 74:ed:6e:6d:bf:e2:8c:83:67:46:16:71:07:d5:61:d6:32:5c: 23:62:21:8c:4b:6a:fa:1d:f4:d2:6c:11:b3:4c:8e:2a:57:96: eb:3d:ee:1d:8a:66:72:7a:f3:14:d4:13:63:7e:30:e1:1a:e5: 12:69:07:68:ad:75:5a:81:97:75:27:59:9c:12:3d:89:41:4e: 0a:66:c6:b6:27:c9:5a:e9:77:37:09:35:5e:70:d3:47:d3:e2: b6:5d:fb:2f:1e:48:9f:45:83:2d:9d:42:c3:fd:90:41:93:fe: a4:d0:21:14:fe:2c:c3:9a:87:c6:9f:1c:c8:e8:95:d4:b4:98: 27:1d:a6:8c:25:a7:f1:29:8b:9d:bf:e4:c4:3e:10:44:aa:59: 6b:3a:e3:fa:ce:9b:a3:82:f9:85:e3:b8:61:b0:ee:43:93:9c: 2c:10:19:2b:5d:a9:5f:aa:b8:44:9b:db:98:3a:27:e7:66:7f: dc:f1:31:40:a2:23:57:e5:f1:94:3a:8f:88:3a:a4:ff:36:87: 2d:b2:7e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4igBh3VM0v/MqaTFSplLrv8RhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA3MjgwMzAxMDFaFw0yNjA3MjkwNjM2MDFaMDMxMTAvBgNV BAMTKEU5NEUyQzc2QjBDRkFFRTZEMzZDMUNEQUUxMDAzRDExNTI3QjgxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC8oTeV9/ZdtL+UoVRXLuBtoV Bx3bR/l1+DnL9dcESlEMS/vskOimd8blHXNnY1PkRXznkMxUV7DAFwQaW1qPGw/p LnQhrH7dfcQ+yKQAvSzYzU7xhcEn01UwlWfkfutc2WUjdtfo8euAs2WJr49OXSQ6 +DEGVfPbAYLpIcE2vX93aFFoXlPj26rR3C5Byc5tbPOXZp9AXTCWMNfUJATnXRNM itCKQ4xX94q90NZxXp53daN/zPsG4dQUJy4wJ+UjsAJyCs2HvDtXDyME1kjhKxMJ jnAZFK6CRZ3VLECfCXZyhvbtwUSMV+v1fFsgatDY+158L2ToRrHpX8B63VutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6U4sdrDPrubTbBza4QA9EVJ7gZUwHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF2rWF6HyVExmijlTtBubG/jHYRhGu4f/gF LNLHJox0EkWqQEhAlgsFUtpergx4CyTLa4cuo3Ttbm2/4oyDZ0YWcQfVYdYyXCNi IYxLavod9NJsEbNMjipXlus97h2KZnJ68xTUE2N+MOEa5RJpB2itdVqBl3UnWZwS PYlBTgpmxrYnyVrpdzcJNV5w00fT4rZd+y8eSJ9Fgy2dQsP9kEGT/qTQIRT+LMOa h8afHMjoldS0mCcdpowlp/Epi52/5MQ+EESqWWs64/rOm6OC+YXjuGGw7kOTnCwQ GStdqV+quESb25g6J+dmf9zxMUCiI1fl8ZQ6j4g6pP82hy2yfpk= -----END CERTIFICATE-----Generated at Tue Jul 28 19:48:09 2026 by rpki-client