
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft
File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json)
Hash identifier: zStWyI15CaYYEhO8GKnPWfuE617PU0Ewcx+9tJiH4Oc=
Subject key identifier: EE:27:A6:8B:74:D2:30:BC:C5:17:6B:93:DB:AC:4A:73:88:B4:DB:9A
Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5
Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5
Certificate serial: 1CA9208FBE83794556148EA8F55D540722589F56
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:14:15 +0000
Manifest this update: Wed 17 Jun 2026 05:09:15 +0000
Manifest next update: Thu 18 Jun 2026 08:02:15 +0000
Files and hashes: 1: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=)
2: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: +8hAYm/lD3Xo1bhdMM6x3CGp7WDVW23/6huHjeB/59U=)
3: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=)
4: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl
rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a9:20:8f:be:83:79:45:56:14:8e:a8:f5:5d:54:07:22:58:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5
Validity
Not Before: Jun 17 05:09:15 2026 GMT
Not After : Jun 18 08:02:15 2026 GMT
Subject: CN=EE27A68B74D230BCC5176B93DBAC4A7388B4DB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:65:fe:80:61:ce:eb:d6:62:5d:a6:80:72:
23:e6:4b:e6:d7:19:9f:9b:d8:a3:c5:e8:ed:7a:b3:
35:69:be:c5:66:ce:3b:71:ef:cc:53:c6:52:0c:48:
54:88:5c:67:9a:ba:ec:a7:c7:f8:89:6d:27:73:d5:
47:3a:87:35:ee:0f:71:56:3a:78:9d:96:bd:a6:04:
4c:0f:72:d8:f6:85:52:04:60:4e:f7:05:ff:bb:91:
03:48:85:82:6b:00:0e:d2:cc:98:62:1c:3d:82:54:
54:70:7e:07:10:bd:c4:92:24:97:db:2f:6b:d2:e2:
f1:1d:d0:1f:03:d4:9b:82:30:50:39:ce:68:9d:56:
bb:75:4d:82:0a:5c:60:a3:e4:77:2e:69:dc:c4:28:
bf:63:a1:21:b7:10:47:d1:8f:90:e4:27:fc:1d:63:
de:37:c5:ed:aa:df:c7:1e:3c:1f:96:6a:e8:72:9e:
ec:c6:b9:f9:f8:b8:9f:07:b5:0a:75:0a:b0:a8:da:
f5:55:33:8e:02:cb:06:7e:c7:bb:11:cd:25:50:c6:
0d:70:50:84:0b:de:e0:cd:3f:3d:b7:df:57:fc:25:
e2:cc:0e:2f:9b:ab:d2:4a:d8:1e:1e:a4:03:71:be:
9d:9e:19:b0:42:ed:7e:21:2a:eb:27:2e:22:f1:2d:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:A6:8B:74:D2:30:BC:C5:17:6B:93:DB:AC:4A:73:88:B4:DB:9A
X509v3 Authority Key Identifier:
keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:31:05:11:a3:f6:bb:d6:28:44:5e:16:43:f2:5a:ab:72:f4:
f0:16:56:7e:5c:5e:99:7d:74:29:16:f6:42:f2:90:0f:d6:d6:
6b:3a:9a:95:ce:f0:88:df:7f:90:24:a8:c3:08:bd:1d:e1:a4:
bf:f7:1d:15:6f:0a:40:29:b3:36:91:47:c7:fa:c9:46:5c:67:
4d:8f:4c:07:2b:30:29:84:8f:1c:80:d9:fa:40:ad:59:fe:1e:
83:61:04:81:78:8c:52:3b:78:fa:d6:da:41:4d:61:26:43:31:
af:07:be:5c:68:bd:c4:2f:d1:08:6b:33:12:58:65:54:b5:a0:
ea:dc:36:41:20:98:f3:90:1f:6e:d6:ac:2f:7d:59:87:e1:06:
5a:b7:9f:30:e3:80:d6:e1:06:1c:8b:25:f6:b1:3f:59:5f:49:
a3:0d:4f:4d:34:ac:1d:7c:53:8d:e9:67:8a:2b:f5:1d:72:04:
40:fd:87:4b:11:5c:e9:f6:20:b0:e7:c3:1a:4e:97:50:34:7c:
a8:ab:a5:a9:ee:00:ca:37:5a:cd:13:73:1b:e1:54:5d:bb:ec:
fb:0f:8c:ba:2c:60:e6:50:48:d5:98:3c:82:e6:88:70:a0:82:
65:dc:9a:66:6d:e0:88:60:21:e1:11:6e:f3:0a:f2:ea:67:2e:
1d:8f:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:07 2026 by rpki-client