$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: DsUSUEjh0RWt+kcg/uBgzCpEvmM4FwTOzK3H/77HHnA= Subject key identifier: D4:D9:97:26:38:58:EA:EC:14:B4:4B:69:05:5F:B5:BB:96:AA:14:98 Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 7CF5986750D175C924F32218DFB8ADE3BDA68284 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: BF Signing time: Tue 22 Sep 2026 21:58:40 +0000 Manifest this update: Tue 22 Sep 2026 21:53:40 +0000 Manifest next update: Wed 23 Sep 2026 23:38:40 +0000 Files and hashes: 1: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: cHJQ0tHjGjkKYzWzy1UfEYFXavcGq3Mo+BRrpPRfzwE=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 23:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f5:98:67:50:d1:75:c9:24:f3:22:18:df:b8:ad:e3:bd:a6:82:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: Sep 22 21:53:40 2026 GMT Not After : Sep 23 23:38:40 2026 GMT Subject: CN=D4D997263858EAEC14B44B69055FB5BB96AA1498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:c6:1c:5b:07:99:54:c7:d4:8f:8a:7e:e5: 5c:ea:bf:d1:34:de:94:12:42:b8:aa:16:27:f0:e9: 85:13:42:5e:e8:83:60:63:62:8d:37:5f:4b:24:9d: 46:6f:00:d4:3c:d9:e1:6d:09:ec:41:be:ac:92:1e: d0:0a:bb:98:3f:83:fa:1c:7a:a3:ad:5d:e0:3c:cf: 31:29:1b:94:54:a8:14:79:38:b7:47:81:72:2f:64: 39:5c:82:60:50:df:f7:cc:ad:27:d3:4f:ab:bc:70: 4f:f0:28:fc:6f:c4:d1:14:6e:ef:52:24:c0:13:0f: c6:a4:bd:bd:78:fa:df:34:50:ad:f0:de:5f:38:3c: 61:25:5f:a3:da:2c:28:dd:c3:33:6b:08:58:6f:9d: 7f:ff:9b:cf:ff:65:c1:da:2d:64:ec:da:36:b7:55: e0:34:b6:98:74:45:fa:f1:0a:58:7d:c8:09:84:c3: 9b:5f:e2:41:5e:d9:3e:9f:f0:46:1e:52:a6:8a:ae: bd:6e:64:f2:21:45:68:eb:2a:b4:64:b7:ce:38:cf: e5:20:8a:0c:5f:6f:5b:0c:46:6f:43:7d:62:ae:c5: 40:01:5b:d2:91:e0:1c:a2:48:02:dc:ae:e7:d1:be: 33:fd:c1:a7:2e:87:c9:57:f4:9f:07:c5:3f:c1:a3: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D9:97:26:38:58:EA:EC:14:B4:4B:69:05:5F:B5:BB:96:AA:14:98 X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e0:3a:73:c4:30:33:9d:58:2c:22:6f:3c:0f:ef:43:d9:a7: da:23:6c:23:55:bf:fb:7e:ce:1a:9f:a9:03:f4:e9:9a:dd:fe: db:1c:90:40:f3:79:82:c7:aa:86:e2:bb:22:a7:64:68:51:ca: 90:1c:1d:aa:f3:37:39:d7:cc:54:ae:e0:dd:83:da:60:eb:af: f0:6a:4d:11:7a:62:dd:a4:cf:f9:c8:cc:9d:4e:d4:02:3c:7e: 95:f1:2a:23:e4:35:88:e6:e4:0b:72:a6:63:cb:7f:a4:9c:e1: 4a:25:c0:ac:19:dc:bc:1e:a5:7f:3f:6d:3b:42:1f:02:d4:11: 4e:41:2e:2b:4c:13:5c:29:53:cf:81:64:3e:59:87:5a:77:30: ea:1d:85:11:3e:96:3f:f0:b3:5c:15:0e:17:7b:2c:b5:7a:8a: 7a:64:b0:29:81:6e:62:06:a6:fd:4c:ba:72:ad:b5:bb:72:e7: 5a:f9:2d:a9:11:7c:91:48:43:02:e4:9f:b9:64:8f:2a:a3:ca: a8:da:be:70:77:50:40:26:4c:ac:3a:06:f8:e3:aa:fe:37:3b: 76:d6:b8:51:d8:e5:ce:41:cc:1b:7d:49:ae:46:5e:b9:14:66: d7:7a:7f:20:dd:52:d7:2c:48:2d:7e:82:d8:a5:62:db:de:2c: f6:13:48:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPWYZ1DRdckk8yIY37it472mgoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA5MjIyMTUzNDBaFw0yNjA5MjMyMzM4NDBaMDMxMTAvBgNV BAMTKEQ0RDk5NzI2Mzg1OEVBRUMxNEI0NEI2OTA1NUZCNUJCOTZBQTE0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGn8YcWweZVMfUj4p+5Vzqv9E0 3pQSQriqFifw6YUTQl7og2BjYo03X0sknUZvANQ82eFtCexBvqySHtAKu5g/g/oc eqOtXeA8zzEpG5RUqBR5OLdHgXIvZDlcgmBQ3/fMrSfTT6u8cE/wKPxvxNEUbu9S JMATD8akvb14+t80UK3w3l84PGElX6PaLCjdwzNrCFhvnX//m8//ZcHaLWTs2ja3 VeA0tph0RfrxClh9yAmEw5tf4kFe2T6f8EYeUqaKrr1uZPIhRWjrKrRkt844z+Ug igxfb1sMRm9DfWKuxUABW9KR4ByiSALcrufRvjP9wacuh8lX9J8HxT/Bo5ddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1NmXJjhY6uwUtEtpBV+1u5aqFJgwHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABngOnPEMDOdWCwibzwP70PZp9ojbCNVv/t+ zhqfqQP06Zrd/tsckEDzeYLHqobiuyKnZGhRypAcHarzNznXzFSu4N2D2mDrr/Bq TRF6Yt2kz/nIzJ1O1AI8fpXxKiPkNYjm5AtypmPLf6Sc4UolwKwZ3LwepX8/bTtC HwLUEU5BLitME1wpU8+BZD5Zh1p3MOodhRE+lj/ws1wVDhd7LLV6inpksCmBbmIG pv1MunKttbty51r5LakRfJFIQwLkn7lkjyqjyqjavnB3UEAmTKw6Bvjjqv43O3bW uFHY5c5BzBt9Sa5GXrkUZtd6fyDdUtcsSC1+gtilYtveLPYTSIE= -----END CERTIFICATE-----Generated at Wed Sep 23 08:26:06 2026 by rpki-client