$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft File: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft (raw, json) Hash identifier: zgJNhVuwqB6lHIWz77QQ7Y/7aAEGHWewaths16OlTUw= Subject key identifier: 6C:19:38:DC:F5:00:6C:F4:4A:C2:FA:1C:C9:AA:49:AD:14:BA:44:24 Authority key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 Certificate issuer: /CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Certificate serial: 5B3C4598AC99F96CEBF0C768F7A4C3784296C320 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:33:16 +0000 Manifest this update: Mon 21 Sep 2026 21:28:16 +0000 Manifest next update: Wed 23 Sep 2026 01:29:16 +0000 Files and hashes: 1: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl (hash: n3Lty1m3je8aamJrO4dcUtzRmcNGI5ylkTwx2yex4jc=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: mS9PRPKBDmGv104t2c/uWFhRF9qgpc8OIooHFMXaEg4=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: 12S1HOzE8Rs4umiuV1n2mL1hqQ5ALMTa7jdnK3K0btU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3c:45:98:ac:99:f9:6c:eb:f0:c7:68:f7:a4:c3:78:42:96:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Validity Not Before: Sep 21 21:28:16 2026 GMT Not After : Sep 23 01:29:16 2026 GMT Subject: CN=6C1938DCF5006CF44AC2FA1CC9AA49AD14BA4424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:65:6e:62:25:e4:cb:0f:f5:a5:69:4f:65: 3f:ee:5f:45:fe:99:70:a3:df:89:38:94:73:26:a9: 75:4d:f9:be:08:43:f9:d3:e4:0c:c2:3f:9e:88:1f: 3a:ad:7e:5d:2a:8f:ea:34:13:86:47:6e:0b:47:52: 32:75:59:11:5f:7d:43:a9:c1:2a:5e:3e:0d:92:d1: f3:91:b6:fa:09:90:89:cd:49:57:c0:95:69:e3:4f: 7f:2c:48:18:2b:80:b8:a5:4e:b7:35:18:4b:f2:9f: 29:55:79:cb:2a:29:f4:e7:dd:80:72:db:6f:4e:a6: 23:c1:d3:8d:3c:17:03:2f:82:79:04:b9:b1:a7:cf: dc:0d:43:78:20:82:a6:db:b4:82:d6:d3:bb:50:cb: 88:f5:de:30:97:32:bb:3a:41:4d:e3:65:ce:6c:90: 4a:37:93:b1:f6:1e:98:73:fd:b5:fa:8e:92:b1:8f: 13:f4:7b:44:98:0e:9f:14:22:4c:15:eb:b0:a9:0f: 58:a1:ef:68:85:dd:b5:84:0a:ba:95:81:99:9b:51: 47:9d:a1:95:71:2f:1f:41:f0:49:c0:7d:4e:de:09: b8:dc:a2:d0:20:4f:a5:7d:a7:f5:f7:d6:bd:92:1e: 01:b4:06:d4:39:f6:bc:39:2d:c5:dc:15:28:60:75: 73:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:19:38:DC:F5:00:6C:F4:4A:C2:FA:1C:C9:AA:49:AD:14:BA:44:24 X509v3 Authority Key Identifier: keyid:CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f9:b7:d5:a8:5c:1a:e0:c6:77:2b:06:b4:17:cc:7f:8c:bd: e2:2d:ca:00:9d:00:a2:21:a7:fb:f7:89:17:1c:c5:df:a6:c4: a5:d3:a3:98:20:13:76:88:22:9f:47:73:c5:d0:ad:fc:df:bd: b1:d3:f9:05:c1:9c:01:33:6a:9e:e4:63:03:2c:9e:6f:1c:cc: 46:4c:4c:6b:9d:fe:85:a5:48:2c:5a:79:4f:ec:bc:83:d8:07: 53:21:ec:79:35:41:c7:db:e1:2f:8f:10:93:56:78:f2:d5:10: 61:2b:bd:93:20:cb:2c:34:dd:a4:61:5f:06:70:9f:43:67:1c: 76:05:2c:c0:2e:e1:3f:77:e3:26:95:1a:cc:ed:10:69:53:67: 2f:15:8e:fe:80:6e:29:a2:3b:1c:97:d9:df:f2:43:9e:8a:47: 41:00:d7:bd:9e:84:4d:31:08:24:a8:26:83:ce:84:0f:9a:63: c2:5d:e6:41:3d:13:44:7d:59:ac:98:15:95:d7:b6:69:9d:ba: 93:c7:6c:26:a2:ba:a9:53:c4:5c:43:38:b8:08:5d:44:39:43: a0:ce:05:19:14:fe:00:a7:c8:de:fe:b0:a6:7c:38:8a:6c:41: 30:09:9f:58:3c:7f:5d:a7:ce:fa:03:31:c4:61:06:fe:9c:f8: eb:5d:82:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzxFmKyZ+Wzr8Mdo96TDeEKWwyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNGMDlF MkVGMzlGNjAeFw0yNjA5MjEyMTI4MTZaFw0yNjA5MjMwMTI5MTZaMDMxMTAvBgNV BAMTKDZDMTkzOERDRjUwMDZDRjQ0QUMyRkExQ0M5QUE0OUFEMTRCQTQ0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNWVuYiXkyw/1pWlPZT/uX0X+ mXCj34k4lHMmqXVN+b4IQ/nT5AzCP56IHzqtfl0qj+o0E4ZHbgtHUjJ1WRFffUOp wSpePg2S0fORtvoJkInNSVfAlWnjT38sSBgrgLilTrc1GEvynylVecsqKfTn3YBy 229OpiPB0408FwMvgnkEubGnz9wNQ3gggqbbtILW07tQy4j13jCXMrs6QU3jZc5s kEo3k7H2Hphz/bX6jpKxjxP0e0SYDp8UIkwV67CpD1ih72iF3bWECrqVgZmbUUed oZVxLx9B8EnAfU7eCbjcotAgT6V9p/X31r2SHgG0BtQ59rw5LcXcFShgdXN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbBk43PUAbPRKwvocyapJrRS6RCQwHwYDVR0j BBgwFoAUzoZsp6SPQnDYYRQejbg/CeLvOfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc4M2VkMjgtNTg4MS00N2RhLWFlNjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdB NDhGNDI3MEQ4NjExNDFFOERCODNGMDlFMkVGMzlGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTg2NkNBN0E0OEY0MjcwRDg2MTE0MUU4REI4M0YwOUUyRUYz OUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNG MDlFMkVGMzlGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf5t9WoXBrgxncrBrQXzH+MveItygCdAKIh p/v3iRccxd+mxKXTo5ggE3aIIp9Hc8XQrfzfvbHT+QXBnAEzap7kYwMsnm8czEZM TGud/oWlSCxaeU/svIPYB1Mh7Hk1Qcfb4S+PEJNWePLVEGErvZMgyyw03aRhXwZw n0NnHHYFLMAu4T934yaVGsztEGlTZy8Vjv6AbimiOxyX2d/yQ56KR0EA172ehE0x CCSoJoPOhA+aY8Jd5kE9E0R9WayYFZXXtmmdupPHbCaiuqlTxFxDOLgIXUQ5Q6DO BRkU/gCnyN7+sKZ8OIpsQTAJn1g8f12nzvoDMcRhBv6c+Otdgkg= -----END CERTIFICATE-----Generated at Tue Sep 22 12:33:46 2026 by rpki-client