$ rpki-client -vvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: RqDmjDy5oVZfsuhPLEpY2AxfFLyEFyEOSOLApmb5S5M= Subject key identifier: 50:C3:FD:D3:F5:F8:4B:37:A6:F8:D8:49:D4:3D:84:CE:C2:44:29:8E Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 7A7D65D855E2739106616B17649B8B1D05ECA01D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:57:12 +0000 Manifest this update: Mon 20 Jul 2026 20:52:12 +0000 Manifest next update: Wed 22 Jul 2026 00:56:12 +0000 Files and hashes: 1: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) 2: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) 3: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 4: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) 5: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: f4RCQLBx8v4va4qyFhm8O1LKYSOXiheWjCZhUrNdTgw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7d:65:d8:55:e2:73:91:06:61:6b:17:64:9b:8b:1d:05:ec:a0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: Jul 20 20:52:12 2026 GMT Not After : Jul 22 00:56:12 2026 GMT Subject: CN=50C3FDD3F5F84B37A6F8D849D43D84CEC244298E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:6a:3c:ae:10:65:ea:19:33:a5:f9:f9:27: f2:e5:21:28:b2:c3:5c:d2:81:9e:82:dc:58:63:f5: 0b:a4:d2:79:7a:4e:c4:bd:75:60:7a:d2:4c:60:67: 99:94:ef:89:86:c1:a1:93:e7:6a:4e:78:ed:b0:ca: 10:f9:4c:c8:28:9e:59:75:c0:f8:f9:95:46:7d:95: 95:62:45:9e:ab:39:de:c2:c3:d0:f3:2e:76:46:e2: 3d:19:36:e6:ec:ea:3f:ad:33:2d:6b:42:80:0a:72: ee:81:d8:bb:c1:51:1c:eb:48:8b:19:68:b6:b1:a9: bb:fc:fa:2f:d7:3d:6e:69:46:ff:63:1c:61:33:5e: 31:6e:d1:44:f5:90:8a:c5:78:f5:e8:44:c0:f1:ae: 1a:65:75:b6:46:a9:a8:7d:b6:51:84:53:bf:d1:6b: 04:f6:dc:8e:39:c3:40:9b:7b:35:8f:12:62:44:a7: f1:04:f2:82:9c:1c:c5:eb:95:06:b7:03:ed:18:21: 21:cd:24:c1:ff:55:51:19:0e:72:3a:19:7f:56:a2: 49:39:ba:f6:47:ff:47:4d:47:fd:f5:9a:58:0e:84: 8f:1c:4e:91:59:4c:f9:08:82:8f:50:99:cf:c5:a9: 80:7b:62:0e:9c:ce:d8:b8:02:0f:a2:ed:3d:50:92: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C3:FD:D3:F5:F8:4B:37:A6:F8:D8:49:D4:3D:84:CE:C2:44:29:8E X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:05:91:54:1c:55:27:9f:0d:cc:ee:07:6a:29:8c:5d:93:d8: 76:3f:b0:a1:c5:57:ba:86:88:8d:9e:b2:7c:e3:5d:42:b1:5f: ad:af:70:fb:80:88:6b:71:fd:db:31:54:56:6f:8c:95:ca:d2: ae:d0:c9:ae:48:78:7a:d5:c5:22:0b:e9:4d:8e:1b:a4:06:8a: da:ec:d7:b2:15:17:90:14:73:1f:cc:de:0f:9e:c2:86:47:44: 19:2f:cb:50:01:8f:17:4f:c0:0e:de:d6:eb:48:1c:92:ae:6f: f3:e9:d9:de:ff:6c:31:8c:c1:96:03:42:19:ca:15:79:45:b4: 05:09:91:8b:94:f1:3c:16:64:b5:80:cf:f7:bd:9a:a7:09:c9: b0:3e:b2:52:74:a8:cb:d1:59:ef:16:76:c8:01:c8:30:89:85: e9:07:d9:c2:36:d5:21:28:08:03:ec:19:40:74:7b:91:47:e3: d1:e5:10:01:cd:97:33:3a:dc:b8:d2:09:ae:31:f9:85:34:62: 87:84:a6:4a:d9:07:12:43:80:d5:dc:73:d3:aa:ef:a4:a2:3e: a6:6d:0f:c2:ed:6c:1c:65:d9:3d:31:2a:36:9b:7d:6e:69:e2: 6c:5e:b0:71:23:10:c8:cf:42:d6:d2:7e:2e:42:ac:33:d0:ed: db:83:27:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUen1l2FXic5EGYWsXZJuLHQXsoB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA3MjAyMDUyMTJaFw0yNjA3MjIwMDU2MTJaMDMxMTAvBgNV BAMTKDUwQzNGREQzRjVGODRCMzdBNkY4RDg0OUQ0M0Q4NENFQzI0NDI5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cWo8rhBl6hkzpfn5J/LlISiy w1zSgZ6C3Fhj9Quk0nl6TsS9dWB60kxgZ5mU74mGwaGT52pOeO2wyhD5TMgonll1 wPj5lUZ9lZViRZ6rOd7Cw9DzLnZG4j0ZNubs6j+tMy1rQoAKcu6B2LvBURzrSIsZ aLaxqbv8+i/XPW5pRv9jHGEzXjFu0UT1kIrFePXoRMDxrhpldbZGqah9tlGEU7/R awT23I45w0CbezWPEmJEp/EE8oKcHMXrlQa3A+0YISHNJMH/VVEZDnI6GX9Wokk5 uvZH/0dNR/31mlgOhI8cTpFZTPkIgo9Qmc/FqYB7Yg6czti4Ag+i7T1QkseNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUMP90/X4Szem+NhJ1D2EzsJEKY4wHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcFkVQcVSefDczuB2opjF2T2HY/sKHFV7qG iI2esnzjXUKxX62vcPuAiGtx/dsxVFZvjJXK0q7Qya5IeHrVxSIL6U2OG6QGitrs 17IVF5AUcx/M3g+ewoZHRBkvy1ABjxdPwA7e1utIHJKub/Pp2d7/bDGMwZYDQhnK FXlFtAUJkYuU8TwWZLWAz/e9mqcJybA+slJ0qMvRWe8WdsgByDCJhekH2cI21SEo CAPsGUB0e5FH49HlEAHNlzM63LjSCa4x+YU0YoeEpkrZBxJDgNXcc9Oq76SiPqZt D8LtbBxl2T0xKjabfW5p4mxesHEjEMjPQtbSfi5CrDPQ7duDJ8E= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:35 2026 by rpki-client