$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft File: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft (raw, json) Hash identifier: +UpgD/Rdf1ZMBQCilbrqA7YkXvx9YIPwc8MWsIxa8TI= Subject key identifier: 9C:21:5F:8C:C8:69:98:1C:A0:37:44:86:31:64:20:E1:87:A4:CB:A3 Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 238F98C0C608E96453DA0DB4F494B239DB3107D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:14:14 +0000 Manifest this update: Wed 17 Jun 2026 05:09:14 +0000 Manifest next update: Thu 18 Jun 2026 08:40:14 +0000 Files and hashes: 1: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl (hash: qfchg7xA72xUFhV/EqHktef7qcfGwsycjbZV1ZyNxH4=) 2: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=) 3: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: TA/s8DKqVENi0iNK6VJjUYJ9iOIFI3fpPu0mJtiANFQ=) 4: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: Zbsf0dYqnLxdlncAJCYqnzQ41srbRVWGXwAiyL3mwjg=) 5: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: ymqzNsOJhmLcRFDDsoYR0MwzS6+nUhmsNkUUP+/NCsk=) 6: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: ubZK1JZSOkQSdT51nvL6YxDcdnyD6UzUmGgbeftTx40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8f:98:c0:c6:08:e9:64:53:da:0d:b4:f4:94:b2:39:db:31:07:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: Jun 17 05:09:14 2026 GMT Not After : Jun 18 08:40:14 2026 GMT Subject: CN=9C215F8CC869981CA0374486316420E187A4CBA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:6a:fb:cb:17:b2:77:37:be:b4:03:18:9f: c5:0e:35:3a:f9:d8:d2:bf:2b:65:f6:33:cb:04:0c: d9:6a:65:a0:e4:53:f3:4c:3f:6a:55:cd:07:2b:84: 89:b7:11:41:15:8d:5a:71:41:65:74:9d:d4:ed:77: 5a:bc:2b:b0:6f:a3:73:bb:78:f0:cd:8e:0b:74:a8: 7d:50:90:1c:3b:8f:ec:e5:e5:32:eb:18:f0:58:0a: 2c:1d:10:17:e8:1a:7c:af:78:76:df:71:9d:b1:26: 39:f1:47:0d:58:80:26:3e:30:79:f2:48:64:60:1a: 87:34:4d:91:af:cd:cd:0d:10:03:94:c9:76:4f:8e: 18:38:32:41:51:39:03:97:cc:7f:cd:bc:db:11:5a: 11:30:49:31:d9:94:d3:2c:01:17:48:30:22:66:23: ec:82:ba:1d:11:43:37:32:71:dc:3c:82:57:a0:54: d5:2e:44:f0:0b:68:8e:b3:e3:7b:b7:e1:96:81:a2: 99:28:37:f1:3d:91:9a:ad:c1:e3:0e:4c:4b:32:6c: bb:2e:78:f8:f9:9d:fa:c4:b7:4a:68:a3:5e:ef:36: ca:a6:fd:36:e8:68:ce:b7:f9:97:48:35:dd:be:79: cd:ac:de:05:28:d8:c5:4b:e7:2f:85:7c:60:21:23: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:21:5F:8C:C8:69:98:1C:A0:37:44:86:31:64:20:E1:87:A4:CB:A3 X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d0:8e:55:50:de:63:76:8f:52:72:bf:55:78:20:43:67:8b: 34:71:89:a8:15:29:b7:78:2d:f0:4d:f2:2b:06:e8:93:72:31: 4d:df:3a:9f:8c:3d:70:3e:57:54:f9:5d:f1:6d:7b:b7:68:01: 7f:62:1e:10:1a:be:44:d3:44:31:14:8f:ac:11:af:24:df:ea: 90:b6:2e:f5:8d:ec:71:01:c5:ef:b7:e8:b6:9c:8a:b5:fa:c7: 4d:e3:36:07:b7:2c:77:47:70:51:92:be:80:ca:c4:f7:0c:63: 32:70:ef:fd:f5:e3:17:82:de:a3:19:fb:bb:a9:f4:be:b4:bb: 85:f8:2a:77:d4:32:d8:df:97:14:44:2e:56:3d:0c:3d:20:91: d7:ca:0e:60:1e:7a:e8:92:a3:e7:d2:1e:d2:70:6e:be:2e:4b: f7:51:da:43:d3:a7:2f:98:7b:05:e5:d1:0a:14:d5:e5:fc:89: b1:0e:c0:0c:5d:aa:51:d6:c9:c8:43:b1:6d:79:b3:6c:da:7a: 4c:b8:ab:57:92:2a:48:ac:cd:e9:23:c8:40:16:eb:e2:e7:37: a0:c7:90:80:68:b9:5b:39:87:b1:7f:e7:dc:73:33:6a:b9:8b: 48:12:bb:d9:c4:0a:f8:ed:bc:d5:b3:ae:92:9f:4e:81:9c:7b: 16:67:da:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4+YwMYI6WRT2g209JSyOdsxB9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjA2MTcwNTA5MTRaFw0yNjA2MTgwODQwMTRaMDMxMTAvBgNV BAMTKDlDMjE1RjhDQzg2OTk4MUNBMDM3NDQ4NjMxNjQyMEUxODdBNENCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZGr7yxeydze+tAMYn8UONTr5 2NK/K2X2M8sEDNlqZaDkU/NMP2pVzQcrhIm3EUEVjVpxQWV0ndTtd1q8K7Bvo3O7 ePDNjgt0qH1QkBw7j+zl5TLrGPBYCiwdEBfoGnyveHbfcZ2xJjnxRw1YgCY+MHny SGRgGoc0TZGvzc0NEAOUyXZPjhg4MkFROQOXzH/NvNsRWhEwSTHZlNMsARdIMCJm I+yCuh0RQzcycdw8glegVNUuRPALaI6z43u34ZaBopkoN/E9kZqtweMOTEsybLsu ePj5nfrEt0poo17vNsqm/TboaM63+ZdINd2+ec2s3gUo2MVL5y+FfGAhI8Y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCFfjMhpmBygN0SGMWQg4Yeky6MwHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0Uz NEQwQ0YzM0MxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETQjlVQ3mN2j1Jyv1V4IENnizRxiagVKbd4 LfBN8isG6JNyMU3fOp+MPXA+V1T5XfFte7doAX9iHhAavkTTRDEUj6wRryTf6pC2 LvWN7HEBxe+36LacirX6x03jNge3LHdHcFGSvoDKxPcMYzJw7/314xeC3qMZ+7up 9L60u4X4KnfUMtjflxRELlY9DD0gkdfKDmAeeuiSo+fSHtJwbr4uS/dR2kPTpy+Y ewXl0QoU1eX8ibEOwAxdqlHWychDsW15s2zaeky4q1eSKkiszekjyEAW6+LnN6DH kIBouVs5h7F/59xzM2q5i0gSu9nECvjtvNWzrpKfToGcexZn2gg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:44:08 2026 by rpki-client