$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft File: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft (raw, json) Hash identifier: gqKHFEdt7XE+2rQ3kkio+o4jDF3km6943mCD3Yb33Bs= Subject key identifier: FD:52:E2:53:5B:BB:B2:BC:B5:D2:5F:28:2B:B1:65:C5:B9:70:21:36 Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 6E8C737BD7837C84E5F3D76BAA4BF7DDC77B79D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:29:43 +0000 Manifest this update: Sun 20 Sep 2026 22:24:43 +0000 Manifest next update: Tue 22 Sep 2026 01:07:43 +0000 Files and hashes: 1: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: ubZK1JZSOkQSdT51nvL6YxDcdnyD6UzUmGgbeftTx40=) 2: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: Zbsf0dYqnLxdlncAJCYqnzQ41srbRVWGXwAiyL3mwjg=) 3: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: TA/s8DKqVENi0iNK6VJjUYJ9iOIFI3fpPu0mJtiANFQ=) 4: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: ymqzNsOJhmLcRFDDsoYR0MwzS6+nUhmsNkUUP+/NCsk=) 5: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl (hash: 5ZzD5TbavGzmgRNFg25fUCfOh2BtpOs22Zf8h22xcW8=) 6: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:8c:73:7b:d7:83:7c:84:e5:f3:d7:6b:aa:4b:f7:dd:c7:7b:79:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: Sep 20 22:24:43 2026 GMT Not After : Sep 22 01:07:43 2026 GMT Subject: CN=FD52E2535BBBB2BCB5D25F282BB165C5B9702136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:51:e6:b2:aa:a7:28:76:7c:02:8d:1b:b2: a7:29:37:4d:f7:b0:cc:05:e1:95:57:f8:71:67:54: 0e:44:a7:83:8b:3a:0a:44:96:a9:ba:18:30:7b:60: 0e:53:f9:51:7d:e0:52:d3:e8:78:3a:04:14:61:01: 64:ba:15:af:eb:13:d5:6b:42:f4:60:82:31:e0:94: ce:76:05:43:73:cb:a4:da:b9:a7:4b:f0:ba:fd:01: e0:d5:59:c9:bf:1b:17:d7:ec:47:f1:18:73:b1:14: 11:3c:05:29:cc:d0:26:c2:6f:4d:24:8c:1a:31:84: a3:83:65:76:f3:a8:8f:4d:91:5b:9a:30:08:14:4e: 55:3b:92:97:bd:68:04:8b:8a:d7:f2:18:c6:90:6c: b3:f4:07:e3:13:9f:d0:fc:5f:a0:3d:eb:eb:0b:fb: 29:6e:04:23:4a:0d:8e:b4:7d:ef:c7:ab:9b:81:d3: 07:a7:1e:5f:ca:3e:b5:44:97:fb:b2:3b:b1:e1:f8: d9:f2:09:65:f3:72:5c:74:dc:67:8e:07:d7:e6:11: 53:ac:ae:77:78:ac:6d:91:d0:98:d8:f1:30:52:bd: 97:43:24:00:ce:42:d8:19:46:70:bd:70:12:4b:2a: 35:1b:8d:58:79:cb:63:49:e9:be:ee:9d:34:18:80: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:52:E2:53:5B:BB:B2:BC:B5:D2:5F:28:2B:B1:65:C5:B9:70:21:36 X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3a:bf:ad:38:0e:41:a9:42:19:30:69:69:ce:b0:cf:c1:36: f3:c9:31:b8:ce:3a:bb:18:a6:6d:54:91:bd:d6:5e:82:d2:a0: e1:a1:c9:27:40:b5:d7:8b:98:aa:99:8a:f3:a8:5c:1a:4d:89: 04:9d:ef:9c:cc:22:2f:9e:9f:cd:65:c3:af:80:dd:1e:38:46: eb:a3:d8:b2:b8:c2:12:27:2b:ec:e0:e2:a8:a2:75:d8:c6:da: db:a8:ee:63:71:a4:80:13:ad:99:9e:1d:06:cd:00:96:ee:ea: d0:2d:f5:90:69:47:5f:9f:f7:59:ab:03:e1:e0:9a:6f:5f:18: 4d:6d:9c:29:b4:f5:d3:52:d6:2d:e4:fc:70:53:9e:01:5c:4a: 1d:a1:35:f5:2f:5b:18:52:d5:c1:89:ba:38:3b:26:f1:b5:3f: dc:b5:eb:82:4b:e9:32:83:8a:0f:14:6f:7b:0e:0f:7c:89:3c: fb:bd:91:e1:b1:49:eb:05:45:4d:49:21:81:89:00:71:ff:3c: 10:b8:43:fa:4d:0a:f6:c1:f8:4d:ad:5b:f2:49:4b:71:f0:1b: e0:a0:a5:8a:0a:d7:6b:d9:0e:b1:ea:f9:d2:3e:6c:26:be:f4: 16:f2:36:c9:46:12:ba:2f:44:0e:4c:b9:dd:6e:44:e3:57:79: 45:c8:8b:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboxze9eDfITl89drqkv33cd7edYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjA5MjAyMjI0NDNaFw0yNjA5MjIwMTA3NDNaMDMxMTAvBgNV BAMTKEZENTJFMjUzNUJCQkIyQkNCNUQyNUYyODJCQjE2NUM1Qjk3MDIxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQFHmsqqnKHZ8Ao0bsqcpN033 sMwF4ZVX+HFnVA5Ep4OLOgpElqm6GDB7YA5T+VF94FLT6Hg6BBRhAWS6Fa/rE9Vr QvRggjHglM52BUNzy6TauadL8Lr9AeDVWcm/GxfX7EfxGHOxFBE8BSnM0CbCb00k jBoxhKODZXbzqI9NkVuaMAgUTlU7kpe9aASLitfyGMaQbLP0B+MTn9D8X6A96+sL +yluBCNKDY60fe/Hq5uB0wenHl/KPrVEl/uyO7Hh+NnyCWXzclx03GeOB9fmEVOs rnd4rG2R0JjY8TBSvZdDJADOQtgZRnC9cBJLKjUbjVh5y2NJ6b7unTQYgKMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/VLiU1u7sry10l8oK7FlxblwITYwHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0Uz NEQwQ0YzM0MxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE06v604DkGpQhkwaWnOsM/BNvPJMbjOOrsY pm1Ukb3WXoLSoOGhySdAtdeLmKqZivOoXBpNiQSd75zMIi+en81lw6+A3R44Ruuj 2LK4whInK+zg4qiiddjG2tuo7mNxpIATrZmeHQbNAJbu6tAt9ZBpR1+f91mrA+Hg mm9fGE1tnCm09dNS1i3k/HBTngFcSh2hNfUvWxhS1cGJujg7JvG1P9y164JL6TKD ig8Ub3sOD3yJPPu9keGxSesFRU1JIYGJAHH/PBC4Q/pNCvbB+E2tW/JJS3HwG+Cg pYoK12vZDrHq+dI+bCa+9BbyNslGErovRA5Mud1uRONXeUXIiwQ= -----END CERTIFICATE-----Generated at Mon Sep 21 13:28:11 2026 by rpki-client