$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: do5/xCQfVhrpA91RXQf7kXtVj5PWDyRWhpNZWBZJd6s= Subject key identifier: C5:A8:CA:78:4E:53:9C:2D:23:C8:4A:3E:14:79:9A:20:E8:AC:90:EB Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 061DE416DB8446F0E1642843F39AA4AA79960411 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 10:50:14 +0000 Manifest this update: Tue 28 Jul 2026 10:45:14 +0000 Manifest next update: Wed 29 Jul 2026 11:04:14 +0000 Files and hashes: 1: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 2: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 3: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 4: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: Kx0qXjQH0QNO0hpfe4XkMD7L/lCUCh+7MpanGbnVuCc=) 5: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 11:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1d:e4:16:db:84:46:f0:e1:64:28:43:f3:9a:a4:aa:79:96:04:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Jul 28 10:45:14 2026 GMT Not After : Jul 29 11:04:14 2026 GMT Subject: CN=C5A8CA784E539C2D23C84A3E14799A20E8AC90EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:da:30:49:1f:06:41:94:64:06:cf:51:d6: bd:10:64:97:94:fb:04:6e:44:d1:71:4d:34:1b:86: 02:c8:6f:32:40:70:63:b0:9f:00:45:9c:b3:15:2d: 92:70:05:49:d9:20:ef:33:6b:bd:8a:4d:47:46:43: 93:82:31:b7:1f:5b:84:bd:7f:b5:11:4a:ff:32:93: 52:5a:65:91:18:3b:a7:6d:27:8a:73:b1:61:e0:79: f4:1c:ea:17:10:92:ff:d4:8a:44:f4:52:4d:61:d8: 61:3d:71:d0:2f:0a:67:93:da:d9:a3:4f:c2:17:fd: 14:25:e4:cd:34:99:f2:8c:f3:cc:15:2d:d5:1a:ea: 8d:05:5f:7f:6b:48:01:4e:9b:70:96:a8:2b:c3:76: 16:cf:71:bb:37:3a:9d:19:14:bb:90:62:75:d9:a2: ea:0d:c7:77:c2:5f:d3:e5:89:c1:98:ce:81:84:bd: 57:ce:9a:48:38:29:96:93:be:87:29:43:b7:89:0c: 97:c6:52:67:f1:b5:cb:9c:5e:91:91:19:2a:6c:2f: 61:98:23:eb:28:e9:4a:81:2e:68:76:d8:19:b4:df: 3c:58:42:15:4a:5c:ff:10:b6:f9:37:e8:f9:7c:7f: 05:ef:48:f5:47:b0:28:46:10:37:3f:8d:e2:62:86: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A8:CA:78:4E:53:9C:2D:23:C8:4A:3E:14:79:9A:20:E8:AC:90:EB X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:28:b1:10:83:22:37:b2:8c:92:5d:96:a1:ae:f2:a7:9e:ff: b7:f2:e6:5a:18:07:51:83:d0:fd:2c:f4:24:5d:1e:6b:fe:0f: c0:21:95:76:5a:e2:c4:48:94:5b:60:55:59:3b:ab:6c:44:8f: c4:4e:f5:5a:1a:ae:f3:ae:90:72:08:1b:5a:c6:4b:7f:16:e5: c0:dd:50:39:1d:e9:7c:dc:9f:c7:0c:07:f3:c9:20:2e:77:21: 59:fb:81:9f:9e:c4:da:af:ce:f0:e0:b7:d8:32:de:0d:f4:f0: 38:01:19:b8:78:a9:ee:79:55:09:8d:5d:3c:c1:b6:5b:3d:de: 5f:f8:cf:b2:e9:d8:a1:e8:d9:9a:62:c3:18:8f:71:6d:21:3c: 21:f4:3d:b5:fd:f4:05:99:7c:58:6b:d0:3b:a0:89:ee:93:75: ca:c3:1b:8c:c3:cc:ca:a8:72:0d:01:8c:73:5d:3c:79:89:4a: e1:25:5a:01:c2:53:e0:59:72:1b:73:21:b2:ca:2d:ac:f9:3f: 2e:b8:b2:67:af:30:c4:fe:1a:25:f3:04:39:94:b2:be:e6:7a: 0a:48:c1:94:b1:de:af:a3:98:f9:bb:04:5f:da:ce:bb:32:4f: db:15:c3:b5:41:59:bd:4b:28:96:9b:e3:7f:2d:9f:94:7b:7a: 9b:33:33:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBh3kFtuERvDhZChD85qkqnmWBBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA3MjgxMDQ1MTRaFw0yNjA3MjkxMTA0MTRaMDMxMTAvBgNV BAMTKEM1QThDQTc4NEU1MzlDMkQyM0M4NEEzRTE0Nzk5QTIwRThBQzkwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPdowSR8GQZRkBs9R1r0QZJeU +wRuRNFxTTQbhgLIbzJAcGOwnwBFnLMVLZJwBUnZIO8za72KTUdGQ5OCMbcfW4S9 f7URSv8yk1JaZZEYO6dtJ4pzsWHgefQc6hcQkv/UikT0Uk1h2GE9cdAvCmeT2tmj T8IX/RQl5M00mfKM88wVLdUa6o0FX39rSAFOm3CWqCvDdhbPcbs3Op0ZFLuQYnXZ ouoNx3fCX9PlicGYzoGEvVfOmkg4KZaTvocpQ7eJDJfGUmfxtcucXpGRGSpsL2GY I+so6UqBLmh22Bm03zxYQhVKXP8Qtvk36Pl8fwXvSPVHsChGEDc/jeJihmF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxajKeE5TnC0jyEo+FHmaIOiskOswHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsosRCDIjeyjJJdlqGu8qee/7fy5loYB1GD 0P0s9CRdHmv+D8AhlXZa4sRIlFtgVVk7q2xEj8RO9VoarvOukHIIG1rGS38W5cDd UDkd6Xzcn8cMB/PJIC53IVn7gZ+exNqvzvDgt9gy3g308DgBGbh4qe55VQmNXTzB tls93l/4z7Lp2KHo2ZpiwxiPcW0hPCH0PbX99AWZfFhr0Dugie6TdcrDG4zDzMqo cg0BjHNdPHmJSuElWgHCU+BZchtzIbLKLaz5Py64smevMMT+GiXzBDmUsr7megpI wZSx3q+jmPm7BF/azrsyT9sVw7VBWb1LKJab438tn5R7epszM0w= -----END CERTIFICATE-----Generated at Tue Jul 28 23:07:26 2026 by rpki-client