$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: neGmtGUdeA1UK8LtkrbYFJ/ndsNJbhfNGnnRRKC5iao= Subject key identifier: 16:8F:CA:E3:DB:B2:7C:EC:6A:55:5B:40:99:FB:9F:1C:DA:E3:20:70 Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 3E35753744E7121B148CABDA70D2D8C7EC92978D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 07:47:24 +0000 Manifest this update: Sun 01 Nov 2026 07:42:24 +0000 Manifest next update: Mon 02 Nov 2026 10:19:24 +0000 Files and hashes: 1: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: 7XT8njaGCh3gYmXh+6eRJlz4Lw2H62TCq7CGH82oD2s=) 2: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 3: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) 4: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) 5: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 10:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:35:75:37:44:e7:12:1b:14:8c:ab:da:70:d2:d8:c7:ec:92:97:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: Nov 1 07:42:24 2026 GMT Not After : Nov 2 10:19:24 2026 GMT Subject: CN=168FCAE3DBB27CEC6A555B4099FB9F1CDAE32070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:7a:0b:e3:e6:4f:66:0f:55:fa:a8:84:b4: 6c:87:cd:4c:29:4c:90:83:41:a5:2a:92:d7:c6:d3: d6:3f:3d:c8:ff:2c:94:18:42:27:9b:7b:74:af:d7: e4:f1:54:a9:32:26:82:df:02:a8:44:ce:ea:39:b8: d4:88:b3:47:6b:1f:e1:16:59:34:50:71:b9:bc:45: da:3d:c5:d7:71:86:c8:d2:2c:ec:5b:b2:91:aa:6a: bd:a5:a8:23:c6:0f:2c:b3:53:2e:79:a8:c8:2d:cd: d4:f6:13:46:4e:cb:87:43:9b:31:34:0b:ac:48:13: 0d:bc:f9:29:0c:ba:a0:40:4a:fb:95:1e:30:d3:78: f7:0b:18:69:d5:d6:b6:5f:b0:ad:f9:7b:d5:1c:60: 27:30:83:a4:dc:24:34:63:05:11:d4:b1:a2:75:d6: a6:86:6e:09:67:0d:ea:01:7e:fd:a6:30:fa:59:a1: 66:97:f0:09:55:ba:70:b7:aa:8b:31:15:61:a8:33: c3:fa:eb:6f:d6:3e:21:8f:b7:e6:54:76:68:74:cf: 95:78:c4:01:64:e0:8b:02:30:44:b9:96:de:46:cf: 90:b6:4f:c8:eb:2a:0c:46:39:ca:56:29:c7:ad:da: fc:79:3c:6b:0e:84:d1:4d:53:f0:47:41:81:f9:f7: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:CA:E3:DB:B2:7C:EC:6A:55:5B:40:99:FB:9F:1C:DA:E3:20:70 X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:37:d5:8a:0b:a1:7b:a6:27:0c:d4:08:1f:af:d4:a4:20:21: f5:e5:e0:26:51:77:6d:83:91:ee:71:9d:da:92:41:d4:ae:0d: e7:37:0e:0f:4c:10:4c:3c:6c:1f:b8:21:b7:7c:19:bd:7d:96: e6:dd:7d:15:2e:ec:32:a9:db:18:95:3d:3b:0f:8c:78:f4:50: ee:30:60:4c:dd:6c:3b:0c:fd:f6:cf:6a:42:23:6f:e4:16:e7: 5e:b0:8e:c5:83:77:0b:ee:49:7a:ff:8a:c8:c3:60:87:63:ab: 39:36:da:8e:9c:b7:a8:0e:d7:cc:f9:bc:19:a9:99:5d:1a:4f: 32:7d:43:68:77:76:f7:48:ad:d3:2d:9d:93:d9:84:04:b8:bd: 75:e1:8d:07:a4:07:aa:da:80:71:5f:8c:be:00:f2:ac:74:7c: 69:20:ec:b4:a9:df:18:cf:21:78:83:1d:9b:88:b2:d1:c3:9b: ed:f6:1c:df:d9:8e:e6:c4:45:a1:eb:05:1d:2a:30:a2:e4:5a: 67:8e:d2:68:e2:9f:1c:0b:01:92:6d:e7:ad:b1:3d:05:a1:38: 00:a4:ed:a7:03:82:0b:8c:e8:91:3d:e7:6d:ae:b8:ed:1c:8d: a2:98:15:e5:22:47:35:bb:28:27:df:e2:6b:19:31:36:74:cd: b6:2e:47:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjV1N0TnEhsUjKvacNLYx+ySl40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjExMDEwNzQyMjRaFw0yNjExMDIxMDE5MjRaMDMxMTAvBgNV BAMTKDE2OEZDQUUzREJCMjdDRUM2QTU1NUI0MDk5RkI5RjFDREFFMzIwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHHoL4+ZPZg9V+qiEtGyHzUwp TJCDQaUqktfG09Y/Pcj/LJQYQiebe3Sv1+TxVKkyJoLfAqhEzuo5uNSIs0drH+EW WTRQcbm8Rdo9xddxhsjSLOxbspGqar2lqCPGDyyzUy55qMgtzdT2E0ZOy4dDmzE0 C6xIEw28+SkMuqBASvuVHjDTePcLGGnV1rZfsK35e9UcYCcwg6TcJDRjBRHUsaJ1 1qaGbglnDeoBfv2mMPpZoWaX8AlVunC3qosxFWGoM8P662/WPiGPt+ZUdmh0z5V4 xAFk4IsCMES5lt5Gz5C2T8jrKgxGOcpWKcet2vx5PGsOhNFNU/BHQYH5981rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFo/K49uyfOxqVVtAmfufHNrjIHAwHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA31YoLoXumJwzUCB+v1KQgIfXl4CZRd22D ke5xndqSQdSuDec3Dg9MEEw8bB+4Ibd8Gb19lubdfRUu7DKp2xiVPTsPjHj0UO4w YEzdbDsM/fbPakIjb+QW516wjsWDdwvuSXr/isjDYIdjqzk22o6ct6gO18z5vBmp mV0aTzJ9Q2h3dvdIrdMtnZPZhAS4vXXhjQekB6ragHFfjL4A8qx0fGkg7LSp3xjP IXiDHZuIstHDm+32HN/ZjubERaHrBR0qMKLkWmeO0mjinxwLAZJt562xPQWhOACk 7acDgguM6JE9522uuO0cjaKYFeUiRzW7KCff4msZMTZ0zbYuR28= -----END CERTIFICATE-----Generated at Mon Nov 2 03:26:50 2026 by rpki-client