$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: kxF3ouyGQWyCKkSM62PO6U9q8kIHHEoGl3OsxSfeN4Y= Subject key identifier: 75:61:51:E4:C6:53:0F:3F:B2:BB:6B:0A:FA:E4:2B:77:18:7E:0F:0F Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 231446CF0B903B257D2472F0B4F599F639C4332E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: 3C Signing time: Wed 17 Jun 2026 00:13:17 +0000 Manifest this update: Wed 17 Jun 2026 00:08:17 +0000 Manifest next update: Thu 18 Jun 2026 01:50:17 +0000 Files and hashes: 1: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: 04x7wLBEy5XrdFUiokeTjyQoArwT2l6aE2gwzSRISRs=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:46:cf:0b:90:3b:25:7d:24:72:f0:b4:f5:99:f6:39:c4:33:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: Jun 17 00:08:17 2026 GMT Not After : Jun 18 01:50:17 2026 GMT Subject: CN=756151E4C6530F3FB2BB6B0AFAE42B77187E0F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:76:ad:f6:01:3d:fd:0f:34:87:39:64:b5: 04:4f:ea:4d:83:0e:58:a4:f6:88:5d:f8:2d:1e:f3: 87:13:79:20:44:c5:4e:1e:21:14:49:d8:0c:a8:43: 48:08:8a:5f:15:f2:f7:23:1d:46:be:42:da:f6:47: 8a:86:c7:b1:6e:a2:b7:ac:45:b8:83:48:60:36:24: 9b:cf:a7:97:a8:6a:96:12:99:e5:00:10:25:0e:61: 82:26:a1:d0:12:46:7d:c6:d2:f6:99:d1:f8:71:54: 0d:9a:44:91:2a:30:76:6c:e6:5e:b6:20:2e:a3:df: 2e:1e:2f:5f:db:91:64:8f:4c:d7:6e:b2:b2:3a:31: 3f:55:30:30:5f:7a:37:43:af:49:56:1b:eb:f2:f4: 2f:95:f7:16:d6:4c:d5:90:74:8c:dc:84:b7:67:f2: 4b:c7:2e:cd:f5:8c:b2:66:6d:5f:65:92:56:0b:41: 9f:27:7c:60:cd:89:53:78:01:e8:21:d6:80:37:63: 35:54:ca:97:61:63:58:8e:23:a7:5e:96:dd:02:62: 71:f0:ea:97:75:3e:81:41:d4:91:bd:e8:bf:e2:38: a0:c0:67:f0:32:28:55:3b:f9:2f:e7:00:9d:ab:e2: 1b:dd:5d:38:68:49:0e:05:74:2e:5a:0e:b3:da:d6: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:51:E4:C6:53:0F:3F:B2:BB:6B:0A:FA:E4:2B:77:18:7E:0F:0F X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d3:cf:16:b4:48:e3:48:11:f9:c0:41:96:68:69:41:5a:dd: e7:a3:09:f2:66:14:cc:76:6f:ba:17:19:b4:4f:6c:f6:84:aa: 23:48:b1:48:dc:17:b6:07:2a:68:70:04:ab:0f:c4:c7:c3:1b: ee:21:28:3f:04:1a:e8:df:da:9f:cc:a9:79:6b:b5:d2:da:bd: f3:09:37:c6:99:10:b3:e7:7a:fd:11:61:5d:75:0b:b7:55:0c: 66:b9:5d:b4:1c:07:23:61:20:3c:90:1a:21:f9:4b:e1:d8:07: 38:5c:ec:e7:9c:22:e2:c6:19:46:8f:63:e1:d0:68:9e:b1:ab: 3f:66:84:47:50:62:c8:9f:75:9f:d6:e6:b2:6d:6b:d2:e3:be: ef:b1:d9:9d:ed:e8:ec:d9:2e:66:9b:af:fe:3b:94:ce:56:96: 2b:d4:00:62:98:55:12:1c:90:05:77:ad:2c:14:2e:6d:b2:ab: 63:bd:bd:f5:b6:70:61:a1:10:b4:a0:b1:07:3c:c6:6f:f3:4b: e0:30:ed:19:10:a1:c8:ee:fd:2d:7e:64:46:8c:54:73:66:fc: 4a:4c:00:77:1d:53:3f:b2:48:cd:24:00:7b:28:f7:57:e3:90: 51:cb:4a:c9:9f:c9:2c:f5:b2:8e:2c:51:7a:be:c6:2b:51:18: 77:c2:de:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxRGzwuQOyV9JHLwtPWZ9jnEMy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA2MTcwMDA4MTdaFw0yNjA2MTgwMTUwMTdaMDMxMTAvBgNV BAMTKDc1NjE1MUU0QzY1MzBGM0ZCMkJCNkIwQUZBRTQyQjc3MTg3RTBGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyi3at9gE9/Q80hzlktQRP6k2D Dlik9ohd+C0e84cTeSBExU4eIRRJ2AyoQ0gIil8V8vcjHUa+Qtr2R4qGx7Fuores RbiDSGA2JJvPp5eoapYSmeUAECUOYYImodASRn3G0vaZ0fhxVA2aRJEqMHZs5l62 IC6j3y4eL1/bkWSPTNdusrI6MT9VMDBfejdDr0lWG+vy9C+V9xbWTNWQdIzchLdn 8kvHLs31jLJmbV9lklYLQZ8nfGDNiVN4Aegh1oA3YzVUypdhY1iOI6delt0CYnHw 6pd1PoFB1JG96L/iOKDAZ/AyKFU7+S/nAJ2r4hvdXThoSQ4FdC5aDrPa1rM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdWFR5MZTDz+yu2sK+uQrdxh+Dw8wHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHTzxa0SONIEfnAQZZoaUFa3eejCfJmFMx2 b7oXGbRPbPaEqiNIsUjcF7YHKmhwBKsPxMfDG+4hKD8EGujf2p/MqXlrtdLavfMJ N8aZELPnev0RYV11C7dVDGa5XbQcByNhIDyQGiH5S+HYBzhc7OecIuLGGUaPY+HQ aJ6xqz9mhEdQYsifdZ/W5rJta9Ljvu+x2Z3t6OzZLmabr/47lM5WlivUAGKYVRIc kAV3rSwULm2yq2O9vfW2cGGhELSgsQc8xm/zS+Aw7RkQocju/S1+ZEaMVHNm/EpM AHcdUz+ySM0kAHso91fjkFHLSsmfySz1so4sUXq+xitRGHfC3nE= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:48 2026 by rpki-client