$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: hcR315GoiPDMkxu95IEp9qZtPINPxAuDcVuR2dtU1Ps= Subject key identifier: 7A:6E:29:23:AC:A7:29:6F:2B:57:74:70:2D:99:FC:97:56:D5:48:3A Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 5C2C5B857799ABD430A38F08723B16FB09B21024 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:21:43 +0000 Manifest this update: Mon 21 Sep 2026 20:16:43 +0000 Manifest next update: Tue 22 Sep 2026 22:11:43 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) 2: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: ed30s0vnVoCtr4HjpvXP04TYbw2qN///ohWKrqYws3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2c:5b:85:77:99:ab:d4:30:a3:8f:08:72:3b:16:fb:09:b2:10:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Sep 21 20:16:43 2026 GMT Not After : Sep 22 22:11:43 2026 GMT Subject: CN=7A6E2923ACA7296F2B5774702D99FC9756D5483A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:aa:4e:60:35:11:f7:18:5a:75:16:5c:c4: 72:98:2c:d5:c3:24:8e:d0:b0:5b:64:da:0a:84:e9: 91:82:63:a7:36:ef:8d:ca:f7:5e:09:c5:13:d6:c2: e6:96:e3:c3:ba:4c:7e:5c:28:6e:9d:28:f6:f3:e6: c6:59:f8:c8:2c:04:38:49:06:fe:c9:43:7d:25:6e: 95:9a:62:0c:5a:b5:3f:69:7d:35:bd:c1:5e:aa:83: ef:2c:59:94:b0:26:94:8a:cb:76:37:77:cc:cf:33: 0a:ff:d9:5e:f9:3b:ee:3c:62:d1:66:dd:a6:6b:6f: 87:c0:94:a8:de:d1:ba:03:93:81:8a:eb:b5:6a:27: 68:33:c3:23:4c:6c:21:b3:53:8d:1c:1e:4f:9b:43: 39:8f:32:bb:66:71:4e:02:a0:c1:4d:62:b3:db:65: a8:23:13:8b:80:96:50:75:56:8a:a0:2f:22:4b:de: 19:ed:74:4f:6f:0b:85:ef:37:33:88:1e:21:09:15: d6:03:ea:ef:a1:02:79:eb:30:1f:9f:51:e0:e8:9b: 50:7e:b2:e7:76:9e:9c:f5:f9:3c:75:28:dd:fa:84: fb:81:a3:f3:be:10:4a:fb:8f:5f:f1:00:f0:04:2f: 20:f0:ff:00:4a:e1:36:2f:68:66:e7:7e:be:0d:c7: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6E:29:23:AC:A7:29:6F:2B:57:74:70:2D:99:FC:97:56:D5:48:3A X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:88:03:13:d4:10:8f:f8:ae:c7:e9:8f:23:d1:4d:4b:e0:66: f8:f1:1a:aa:bd:18:d3:63:e1:0a:c0:54:31:d3:ac:3f:93:c9: 1f:1b:27:c0:3d:0b:df:a8:c6:65:ed:3b:55:c1:e6:a1:00:c2: 58:ed:3f:f9:4a:ed:79:f2:f8:0a:0e:e8:7d:99:1d:00:4b:94: 77:c1:ac:ce:fc:15:86:ff:9b:31:04:fb:3c:ea:99:0c:10:3b: 53:52:8b:81:02:5e:51:f9:63:1a:c4:39:f3:39:3c:65:ec:fa: 3d:32:f7:57:25:11:e9:e1:3b:b2:73:1b:6a:af:a5:20:1a:06: 7b:61:14:14:7d:dc:c0:6e:56:77:44:b5:e2:ad:13:d6:a0:4a: f6:58:35:bb:c5:12:0e:17:9c:e4:bd:2b:54:da:60:31:c9:8a: c3:b3:99:00:6b:e6:1a:28:a4:63:f2:3a:f0:2d:8a:6b:10:8a: 2a:e7:91:40:fd:da:f1:0c:76:82:88:50:d9:6f:c3:77:25:8b: 2d:94:a2:d6:4e:bd:98:a2:44:5b:14:04:2a:89:a3:47:43:03: f9:a3:b1:12:d1:90:e7:bb:99:ac:f6:d1:b8:07:6c:9c:e9:9b: 44:a8:65:d8:11:a1:51:9c:97:0f:4c:91:a4:88:41:eb:0f:33: b6:dd:d3:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCxbhXeZq9Qwo48IcjsW+wmyECQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA5MjEyMDE2NDNaFw0yNjA5MjIyMjExNDNaMDMxMTAvBgNV BAMTKDdBNkUyOTIzQUNBNzI5NkYyQjU3NzQ3MDJEOTlGQzk3NTZENTQ4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUapOYDUR9xhadRZcxHKYLNXD JI7QsFtk2gqE6ZGCY6c2743K914JxRPWwuaW48O6TH5cKG6dKPbz5sZZ+MgsBDhJ Bv7JQ30lbpWaYgxatT9pfTW9wV6qg+8sWZSwJpSKy3Y3d8zPMwr/2V75O+48YtFm 3aZrb4fAlKje0boDk4GK67VqJ2gzwyNMbCGzU40cHk+bQzmPMrtmcU4CoMFNYrPb ZagjE4uAllB1VoqgLyJL3hntdE9vC4XvNzOIHiEJFdYD6u+hAnnrMB+fUeDom1B+ sud2npz1+Tx1KN36hPuBo/O+EEr7j1/xAPAELyDw/wBK4TYvaGbnfr4NxxY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUem4pI6ynKW8rV3RwLZn8l1bVSDowHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWIAxPUEI/4rsfpjyPRTUvgZvjxGqq9GNNj 4QrAVDHTrD+TyR8bJ8A9C9+oxmXtO1XB5qEAwljtP/lK7Xny+AoO6H2ZHQBLlHfB rM78FYb/mzEE+zzqmQwQO1NSi4ECXlH5YxrEOfM5PGXs+j0y91clEenhO7JzG2qv pSAaBnthFBR93MBuVndEteKtE9agSvZYNbvFEg4XnOS9K1TaYDHJisOzmQBr5hoo pGPyOvAtimsQiirnkUD92vEMdoKIUNlvw3cliy2UotZOvZiiRFsUBCqJo0dDA/mj sRLRkOe7maz20bgHbJzpm0SoZdgRoVGclw9MkaSIQesPM7bd03M= -----END CERTIFICATE-----Generated at Tue Sep 22 03:29:51 2026 by rpki-client