$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft File: CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft (raw, json) Hash identifier: GAjsXT0uhPy+4rVrsnrAfQxdWXVRydA8E1jZgrpKfLA= Subject key identifier: D4:B9:33:B3:DF:67:F4:BF:2D:A5:D5:87:53:AB:BF:ED:E6:87:0A:BB Authority key identifier: CE:A0:E1:4B:52:5E:5A:73:96:4E:38:F8:B6:F1:8E:3C:CC:B1:AD:F5 Certificate issuer: /CN=CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5 Certificate serial: 6F119752E7F5F476C47B983314A81C7713D6B320 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft Manifest number: 21 Signing time: Tue 03 Nov 2026 08:49:07 +0000 Manifest this update: Tue 03 Nov 2026 08:44:07 +0000 Manifest next update: Wed 04 Nov 2026 08:52:07 +0000 Files and hashes: 1: 323030313a6466363a663763303a3a2f34382d3438203d3e20313339323333.roa (hash: jDympUfxfIgIE9EZlVRv7wuMBUZc38G2sqIa+jOJvx0=) 2: CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.crl (hash: nA5dePHfTEGWtB0w4t4u89yNTxX+FA0l0h/EJKGVjYI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.crl rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 08:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:11:97:52:e7:f5:f4:76:c4:7b:98:33:14:a8:1c:77:13:d6:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5 Validity Not Before: Nov 3 08:44:07 2026 GMT Not After : Nov 4 08:52:07 2026 GMT Subject: CN=D4B933B3DF67F4BF2DA5D58753ABBFEDE6870ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:c3:ca:ae:63:bd:fd:12:67:82:f2:d1:fa: d6:f2:82:63:53:12:56:1f:98:75:d4:90:2d:71:79: 67:49:a2:42:66:66:7a:5e:e2:71:20:4e:72:11:c9: a1:1d:d0:b6:1a:dc:bd:af:51:00:a0:28:27:75:c6: 12:67:23:ff:34:36:a0:4d:36:f1:13:60:74:d6:68: a7:64:92:e2:3f:76:17:da:1c:f0:e0:40:a9:73:37: 1d:af:7c:eb:a9:10:a8:c5:91:01:b7:a7:c5:3c:1a: 44:d5:77:64:24:75:10:6d:84:33:39:7a:ed:1f:a8: a6:85:f8:62:5c:06:5a:7d:78:4a:e5:e0:51:36:c6: 07:05:4c:49:62:bb:06:ac:7f:01:a9:59:2b:60:61: 52:45:c2:ee:94:34:7e:e3:bf:2a:98:d1:c6:c6:7d: 66:1d:0b:8e:fb:df:ce:2b:4e:78:53:07:05:fa:4e: 96:53:e0:27:b0:2c:c5:71:12:0f:7b:9b:02:8a:f8: 8d:f7:7a:7e:6d:ba:72:aa:be:a8:42:9d:7c:6f:c9: 8f:75:5e:fb:62:1d:03:cc:77:c4:95:ff:ad:63:bc: cc:07:1d:16:6d:6f:61:31:5e:67:43:1b:72:95:17: d9:75:7f:c3:21:17:ca:af:77:ad:52:9d:9c:6c:69: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:33:B3:DF:67:F4:BF:2D:A5:D5:87:53:AB:BF:ED:E6:87:0A:BB X509v3 Authority Key Identifier: keyid:CE:A0:E1:4B:52:5E:5A:73:96:4E:38:F8:B6:F1:8E:3C:CC:B1:AD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02244416-0e80-4285-9e91-71758d89e1c0/0/CEA0E14B525E5A73964E38F8B6F18E3CCCB1ADF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:18:fd:1f:19:45:2f:b1:56:c9:09:2f:30:05:08:a3:ae:41: c4:60:65:07:90:1e:4c:84:9e:63:df:5e:ae:87:10:7a:91:7e: a5:4e:33:4f:86:39:d2:57:8f:ea:46:ee:bc:3e:ec:98:1c:2b: b2:a2:65:6e:e0:80:c8:76:53:06:28:40:3a:36:45:0b:0e:e3: df:ac:67:8d:cd:fa:56:ae:c5:84:13:29:2f:26:dc:6c:c6:91: 0c:46:92:a8:dd:93:7b:bb:32:2a:7e:5b:c0:0c:7a:bd:d7:a0: 7f:42:0b:ee:80:e5:c2:12:7f:6e:e4:20:17:90:2a:92:5f:f7: 26:c0:db:22:f0:47:44:d5:8b:48:17:75:ca:85:a3:43:55:86: 6a:43:88:6b:44:e1:92:50:f9:f7:b8:9e:6d:38:55:82:3b:74: af:b1:0a:fb:82:b4:75:b1:2d:cc:39:7c:54:14:e0:e3:40:d9: 8c:c1:5b:d0:3e:41:b5:e3:95:23:23:0f:5e:6b:20:28:5d:42: 47:38:f1:e1:d4:8f:27:76:8c:d6:53:dd:2d:23:ab:1d:2d:cc: 52:6c:9a:5e:0b:f4:3d:3d:88:85:7d:f7:8b:39:5a:79:5c:a6: 04:d5:8d:5b:65:e4:30:fa:4c:90:5c:96:49:41:51:a6:7c:da: b7:68:2b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxGXUuf19HbEe5gzFKgcdxPWsyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMEUxNEI1MjVFNUE3Mzk2NEUzOEY4QjZGMThFM0ND Q0IxQURGNTAeFw0yNjExMDMwODQ0MDdaFw0yNjExMDQwODUyMDdaMDMxMTAvBgNV BAMTKEQ0QjkzM0IzREY2N0Y0QkYyREE1RDU4NzUzQUJCRkVERTY4NzBBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl38PKrmO9/RJngvLR+tbygmNT ElYfmHXUkC1xeWdJokJmZnpe4nEgTnIRyaEd0LYa3L2vUQCgKCd1xhJnI/80NqBN NvETYHTWaKdkkuI/dhfaHPDgQKlzNx2vfOupEKjFkQG3p8U8GkTVd2QkdRBthDM5 eu0fqKaF+GJcBlp9eErl4FE2xgcFTEliuwasfwGpWStgYVJFwu6UNH7jvyqY0cbG fWYdC477384rTnhTBwX6TpZT4CewLMVxEg97mwKK+I33en5tunKqvqhCnXxvyY91 XvtiHQPMd8SV/61jvMwHHRZtb2ExXmdDG3KVF9l1f8MhF8qvd61SnZxsaeXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Lkzs99n9L8tpdWHU6u/7eaHCrswHwYDVR0j BBgwFoAUzqDhS1JeWnOWTjj4tvGOPMyxrfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIyNDQ0MTYtMGU4MC00Mjg1LTllOTEtNzE3NThkODllMWMwLzAvQ0VBMEUxNEI1 MjVFNUE3Mzk2NEUzOEY4QjZGMThFM0NDQ0IxQURGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUEwRTE0QjUyNUU1QTczOTY0RTM4RjhCNkYxOEUzQ0NDQjFB REY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIyNDQ0MTYtMGU4MC00Mjg1LTll OTEtNzE3NThkODllMWMwLzAvQ0VBMEUxNEI1MjVFNUE3Mzk2NEUzOEY4QjZGMThF M0NDQ0IxQURGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwY/R8ZRS+xVskJLzAFCKOuQcRgZQeQHkyE nmPfXq6HEHqRfqVOM0+GOdJXj+pG7rw+7JgcK7KiZW7ggMh2UwYoQDo2RQsO49+s Z43N+lauxYQTKS8m3GzGkQxGkqjdk3u7Mip+W8AMer3XoH9CC+6A5cISf27kIBeQ KpJf9ybA2yLwR0TVi0gXdcqFo0NVhmpDiGtE4ZJQ+fe4nm04VYI7dK+xCvuCtHWx Lcw5fFQU4ONA2YzBW9A+QbXjlSMjD15rIChdQkc48eHUjyd2jNZT3S0jqx0tzFJs ml4L9D09iIV994s5WnlcpgTVjVtl5DD6TJBclklBUaZ82rdoKw0= -----END CERTIFICATE-----Generated at Tue Nov 3 12:06:30 2026 by rpki-client