$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: Vi9b5eoiDnIiEuJw15gsgx94OYLF2LpvCzpOYAfwv1c= Subject key identifier: 9E:50:66:E8:55:22:53:CA:82:90:65:3B:D7:B2:8A:1E:41:B4:58:0A Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 577672E94F448AFB5CEF7589C74115DC2927F6BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 03:48:43 +0000 Manifest this update: Sat 13 Jun 2026 03:43:43 +0000 Manifest next update: Sun 14 Jun 2026 04:39:43 +0000 Files and hashes: 1: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: VPFfCV1qx468PXA92oRoSFNl5eK/0vXVoPLHOrk7GJw=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 04:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:76:72:e9:4f:44:8a:fb:5c:ef:75:89:c7:41:15:dc:29:27:f6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Jun 13 03:43:43 2026 GMT Not After : Jun 14 04:39:43 2026 GMT Subject: CN=9E5066E8552253CA8290653BD7B28A1E41B4580A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:27:d9:56:98:de:a7:3a:f4:62:48:4e:9c: dc:bb:17:b7:ee:78:50:72:2c:e2:56:a2:3b:c3:03: 56:d2:d0:70:68:05:68:5f:0e:3f:15:ff:59:e8:3e: dd:71:5a:0a:f5:1b:3b:fb:ba:0a:d5:9e:79:f6:3e: 47:46:93:c5:64:b2:9f:32:e3:1b:29:e1:f1:25:54: 2d:8c:12:46:b6:b8:ca:91:4b:de:8a:84:65:e7:4e: 01:be:ea:22:16:02:28:f0:b8:3f:2f:4f:c8:95:8a: ee:55:b3:0e:bd:5f:75:bb:b6:7b:60:07:d0:f6:80: 94:7b:f9:e4:24:fc:b0:d2:8f:90:ce:2e:8a:fb:0d: 9d:6a:94:f4:90:ef:3e:d6:7b:8e:fc:19:b9:66:1c: 6a:5f:cf:bb:38:00:ed:06:17:86:72:87:d1:e8:53: b0:62:b7:81:11:34:39:ed:0a:9a:cf:ab:86:62:e8: 56:3f:b2:94:19:aa:d7:ff:32:9a:ff:1d:bf:f5:6d: 3d:79:79:b8:12:17:47:d2:3a:8d:38:5e:a1:e0:03: 1a:3a:77:8b:39:cc:c9:e2:55:4f:28:a5:90:f8:63: eb:df:73:f0:4d:7c:fa:e1:e8:4d:b9:06:d1:04:2a: e5:aa:59:49:49:09:e1:55:4d:c7:6b:db:fd:4b:8f: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:50:66:E8:55:22:53:CA:82:90:65:3B:D7:B2:8A:1E:41:B4:58:0A X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1d:7c:b5:19:51:32:3c:c8:5f:1d:13:99:33:d0:96:ec:32: f5:6d:37:25:b9:21:05:4a:a7:4f:77:bc:30:80:ab:b9:1f:d4: 56:fd:32:41:8a:52:fb:e9:a3:df:95:0f:04:af:e6:e1:d7:ce: 12:19:0f:21:ba:c6:de:5a:ed:e0:fe:e8:35:0a:fc:bb:0f:55: 40:18:77:ac:95:ba:5f:ea:8a:f5:ce:b0:8f:3d:4e:9c:d6:cf: 8a:96:7d:cd:07:c1:24:20:fb:dc:56:6b:4f:54:69:eb:6e:02: 37:53:12:ce:b2:33:3a:ea:6f:d9:36:77:40:a8:9e:90:36:e8: 0d:fc:7d:40:46:d9:9c:35:af:86:65:5e:ec:48:e7:81:cb:7e: 0b:c2:a7:5e:a2:22:36:32:61:cc:11:12:95:34:76:2d:de:71: d1:4a:0f:5b:dc:0d:2f:f8:b8:91:68:18:9e:65:93:95:78:06: 58:19:d6:71:4f:f8:7c:30:99:60:1b:81:fd:91:51:4a:fa:f3: b7:f1:2b:88:8c:a2:33:80:7e:97:f6:1e:6f:e3:fb:8d:a0:63: 56:7d:c3:5b:18:a1:4a:3a:2f:4b:d4:c9:b1:e6:b4:04:a4:74: 22:06:06:b6:45:bb:90:db:a6:c2:41:85:d8:8a:81:72:ec:84: d7:b5:47:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3Zy6U9Eivtc73WJx0EV3Ckn9rwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA2MTMwMzQzNDNaFw0yNjA2MTQwNDM5NDNaMDMxMTAvBgNV BAMTKDlFNTA2NkU4NTUyMjUzQ0E4MjkwNjUzQkQ3QjI4QTFFNDFCNDU4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgyfZVpjepzr0YkhOnNy7F7fu eFByLOJWojvDA1bS0HBoBWhfDj8V/1noPt1xWgr1Gzv7ugrVnnn2PkdGk8Vksp8y 4xsp4fElVC2MEka2uMqRS96KhGXnTgG+6iIWAijwuD8vT8iViu5Vsw69X3W7tntg B9D2gJR7+eQk/LDSj5DOLor7DZ1qlPSQ7z7We478GblmHGpfz7s4AO0GF4Zyh9Ho U7Bit4ERNDntCprPq4Zi6FY/spQZqtf/Mpr/Hb/1bT15ebgSF0fSOo04XqHgAxo6 d4s5zMniVU8opZD4Y+vfc/BNfPrh6E25BtEEKuWqWUlJCeFVTcdr2/1Lj/PRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnlBm6FUiU8qCkGU717KKHkG0WAowHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkdfLUZUTI8yF8dE5kz0JbsMvVtNyW5IQVK p093vDCAq7kf1Fb9MkGKUvvpo9+VDwSv5uHXzhIZDyG6xt5a7eD+6DUK/LsPVUAY d6yVul/qivXOsI89TpzWz4qWfc0HwSQg+9xWa09UaetuAjdTEs6yMzrqb9k2d0Co npA26A38fUBG2Zw1r4ZlXuxI54HLfgvCp16iIjYyYcwREpU0di3ecdFKD1vcDS/4 uJFoGJ5lk5V4BlgZ1nFP+HwwmWAbgf2RUUr687fxK4iMojOAfpf2Hm/j+42gY1Z9 w1sYoUo6L0vUybHmtASkdCIGBrZFu5DbpsJBhdiKgXLshNe1Rxk= -----END CERTIFICATE-----Generated at Sat Jun 13 14:19:34 2026 by rpki-client