$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json) Hash identifier: Yi27Ai3JuRcpz7gthR9ERVMHlQKJSwSbcV+KC1mFK6Y= Subject key identifier: D3:88:AB:C1:D0:1E:D0:58:46:D6:CB:2D:83:EE:07:FC:1C:97:9E:85 Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Certificate serial: 5E00F49A86184E536C67ADE35C3D6553277A5333 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft Manifest number: BD Signing time: Mon 21 Sep 2026 19:05:08 +0000 Manifest this update: Mon 21 Sep 2026 19:00:08 +0000 Manifest next update: Tue 22 Sep 2026 21:25:08 +0000 Files and hashes: 1: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: 7TtPM5M34HF/VSR+DW26/dA3DrJp6vo21LuWo6wCtyQ=) 2: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=) 3: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=) 4: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:00:f4:9a:86:18:4e:53:6c:67:ad:e3:5c:3d:65:53:27:7a:53:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Validity Not Before: Sep 21 19:00:08 2026 GMT Not After : Sep 22 21:25:08 2026 GMT Subject: CN=D388ABC1D01ED05846D6CB2D83EE07FC1C979E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:32:cc:17:45:29:8b:21:02:c2:11:ca:65: f8:d4:3e:0d:e4:92:e2:55:fd:14:ff:4b:c9:87:3e: a1:92:ff:08:a6:70:0c:b1:a5:a5:22:2e:1d:9b:d3: 48:16:8e:b0:a0:8b:92:3c:a1:1b:6c:ff:b3:ea:df: 2f:f6:dc:82:74:11:01:b8:97:84:75:8d:77:61:4d: d1:2d:19:2e:49:e2:e1:02:e4:aa:9c:2b:59:a4:e2: 9a:5f:a1:95:04:86:db:76:23:9d:88:af:ba:eb:05: ba:4a:60:4c:34:1e:2f:13:8a:eb:0d:49:88:09:02: 5d:86:17:0b:65:0d:fd:5b:87:3f:24:f6:12:06:6e: e1:3c:b4:5c:9e:d1:4a:81:90:c7:7b:39:7b:76:f0: 9c:ea:17:1c:b4:94:4e:d7:af:a5:f8:31:02:9e:46: 0b:e1:73:ec:ed:17:db:04:84:d6:a9:41:34:3a:25: 2c:2e:0e:ad:ed:a4:9a:90:82:66:d3:c4:55:32:41: e9:86:9e:d2:28:f0:f5:31:5e:94:69:d1:37:9c:0a: ec:f1:a1:1c:2e:af:d9:3d:37:ca:53:68:c5:43:0f: 14:cf:a1:c2:da:3b:d7:96:ff:1b:c3:6d:8c:16:d9: 7a:fd:ce:e3:53:e9:44:c9:7c:46:24:99:2a:7a:1c: 85:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:88:AB:C1:D0:1E:D0:58:46:D6:CB:2D:83:EE:07:FC:1C:97:9E:85 X509v3 Authority Key Identifier: keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9f:33:64:ea:37:95:e8:57:a7:ca:da:1f:81:fa:20:28:6a: 13:08:33:5c:18:56:54:21:e2:91:57:ce:c7:0d:32:6c:f6:fc: a2:c0:1e:9f:49:b0:09:2e:11:51:97:a9:3d:d4:b8:be:83:71: 5f:ee:50:14:bd:53:10:e7:04:5a:2d:21:e8:11:eb:6c:ad:d0: 26:e7:65:a2:07:4e:7e:a0:e6:1a:75:2b:7f:ac:e8:cf:80:0e: 08:d8:c7:04:4b:57:a8:f0:86:2b:8b:12:fe:b8:68:c8:f9:0f: 0f:de:85:14:a9:29:10:91:09:61:27:16:ec:a6:7e:bb:09:ec: 94:c0:60:88:32:09:24:60:b2:03:b4:98:7b:b4:df:81:8f:ba: f5:08:98:c6:38:43:ec:71:96:66:a4:09:1c:fe:35:a5:d0:ca: e4:24:8f:3d:e6:d9:bc:68:e0:ea:7d:ca:25:34:45:3b:5d:5a: 07:f6:63:08:c0:22:0f:49:63:01:55:8b:7f:ef:7e:31:6a:f6: a8:30:54:f9:47:d1:4b:4b:b2:f4:8d:05:ad:83:7c:4d:cb:a6: 77:3f:ed:af:db:1c:83:77:c1:c0:0f:ed:46:c0:b2:5a:91:dd: 7b:dc:e5:1e:84:79:43:68:c0:5d:bc:c6:23:da:f9:7b:e2:52: 37:cf:f7:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgD0moYYTlNsZ63jXD1lUyd6UzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG NDExQkFDNTAeFw0yNjA5MjExOTAwMDhaFw0yNjA5MjIyMTI1MDhaMDMxMTAvBgNV BAMTKEQzODhBQkMxRDAxRUQwNTg0NkQ2Q0IyRDgzRUUwN0ZDMUM5NzlFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jzLMF0UpiyECwhHKZfjUPg3k kuJV/RT/S8mHPqGS/wimcAyxpaUiLh2b00gWjrCgi5I8oRts/7Pq3y/23IJ0EQG4 l4R1jXdhTdEtGS5J4uEC5KqcK1mk4ppfoZUEhtt2I52Ir7rrBbpKYEw0Hi8TiusN SYgJAl2GFwtlDf1bhz8k9hIGbuE8tFye0UqBkMd7OXt28JzqFxy0lE7Xr6X4MQKe Rgvhc+ztF9sEhNapQTQ6JSwuDq3tpJqQgmbTxFUyQemGntIo8PUxXpRp0TecCuzx oRwur9k9N8pTaMVDDxTPocLaO9eW/xvDbYwW2Xr9zuNT6UTJfEYkmSp6HIWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04irwdAe0FhG1sstg+4H/ByXnoUwHwYDVR0j BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3 REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC QUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVB NDhGNDExQkFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyfM2TqN5XoV6fK2h+B+iAoahMIM1wYVlQh 4pFXzscNMmz2/KLAHp9JsAkuEVGXqT3UuL6DcV/uUBS9UxDnBFotIegR62yt0Cbn ZaIHTn6g5hp1K3+s6M+ADgjYxwRLV6jwhiuLEv64aMj5Dw/ehRSpKRCRCWEnFuym frsJ7JTAYIgyCSRgsgO0mHu034GPuvUImMY4Q+xxlmakCRz+NaXQyuQkjz3m2bxo 4Op9yiU0RTtdWgf2YwjAIg9JYwFVi3/vfjFq9qgwVPlH0UtLsvSNBa2DfE3Lpnc/ 7a/bHIN3wcAP7UbAslqR3Xvc5R6EeUNowF28xiPa+XviUjfP9yQ= -----END CERTIFICATE-----Generated at Mon Sep 21 21:57:43 2026 by rpki-client