$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: 3dWotH2df7+2p29p6VKsoCQMaaue1fZ5DO1bqdScWCk= Subject key identifier: 6A:7F:56:69:C0:CD:73:4C:83:14:1D:15:50:B9:A9:13:9F:E3:F1:0F Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 4F0C63E6C95CE6594472A24C0AAECF3622EF67B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: 54 Signing time: Sat 04 Jul 2026 01:14:06 +0000 Manifest this update: Sat 04 Jul 2026 01:09:06 +0000 Manifest next update: Sun 05 Jul 2026 05:01:06 +0000 Files and hashes: 1: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: 4DVUWvXlgBeMhejPMpkwersF66HtcXNEydY9dW2BQMc=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: 5EvruLBNSAVPD9rhIUp2sgGO0l1cxlFHLpEgjT7FBPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0c:63:e6:c9:5c:e6:59:44:72:a2:4c:0a:ae:cf:36:22:ef:67:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: Jul 4 01:09:06 2026 GMT Not After : Jul 5 05:01:06 2026 GMT Subject: CN=6A7F5669C0CD734C83141D1550B9A9139FE3F10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:a6:cd:e4:38:73:06:30:d8:3d:9f:4b:9f: 64:4e:80:f9:52:ec:2f:63:08:20:3e:f2:8b:79:dd: cb:12:2a:2c:ec:fa:f8:0b:88:f5:6e:68:39:7a:f6: 23:e4:c9:dc:c0:36:74:d1:3d:b7:2a:fb:f1:1a:66: b8:c8:8a:1e:7e:2a:a0:b9:9b:4b:75:c4:12:3c:c1: 00:bf:be:58:39:a0:fa:e5:b1:67:e2:14:77:43:85: 92:3c:e7:81:24:fd:6d:3a:d9:ef:ca:1c:33:66:ce: 11:6f:cd:1c:02:bb:2c:e2:22:33:fe:4c:2f:6a:21: 74:49:37:f5:df:03:69:aa:89:2f:83:f8:f8:95:b7: ef:33:4a:8d:10:20:55:ab:8e:f3:9b:cf:ec:e1:b9: ef:d3:f7:65:ea:92:31:35:b2:8c:30:0d:d8:e1:92: d8:82:69:5c:55:e3:a6:b6:68:44:82:6e:4f:2e:8e: 68:71:b4:d2:76:3b:09:30:9b:ad:9d:c0:d4:04:fc: 2e:43:f3:e3:c5:b1:84:87:28:b0:76:3e:51:38:bc: 3f:30:ac:5a:32:bd:db:f9:7f:1d:a0:8a:7c:0e:e6: a1:b6:c4:26:f2:2f:f8:0f:af:63:e9:1b:b0:81:d5: f7:53:9a:a3:4c:39:6d:23:45:c1:c2:3e:d7:ab:15: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7F:56:69:C0:CD:73:4C:83:14:1D:15:50:B9:A9:13:9F:E3:F1:0F X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c5:d4:dc:de:a3:28:08:0c:13:93:94:a0:08:e7:51:54:69: 65:d1:6f:01:79:93:4f:7d:ff:6e:f6:e2:63:4b:18:91:13:38: f8:61:65:1e:ab:74:55:22:eb:47:d1:c9:b0:49:31:08:5c:fb: df:31:6d:4e:d4:70:f3:ee:48:b9:b9:b2:4e:30:fe:76:c5:5f: 00:6c:b4:6f:ef:6a:70:ee:73:76:d1:43:ff:d5:8e:2c:c2:09: 7b:3c:48:4b:02:80:a4:b1:ab:46:dc:99:32:c8:2a:4a:16:1a: 5d:dd:d8:09:e3:c9:65:03:50:ca:d7:0a:8e:a1:8e:77:d1:b9: 05:be:f2:a6:7e:2d:cf:51:65:67:63:4b:de:50:2b:dc:1e:70: e3:35:3f:0a:0d:1c:ae:04:6c:7f:6a:55:24:5a:2c:a1:8c:8b: 28:cb:2d:03:a1:a3:6e:61:01:5a:98:6f:76:dc:49:a3:74:22: e3:45:a0:94:77:bb:44:c3:7c:36:89:a5:c0:75:5b:74:cb:97: a6:23:c8:e4:0d:6d:3e:b6:47:64:62:f2:d5:7e:95:40:c3:40: 8f:fc:cc:f1:df:b2:c0:87:67:c2:eb:0e:de:be:20:15:9f:16: ea:fa:2a:0c:3b:6a:03:cd:c7:33:85:4d:f3:f0:4d:af:e3:cb: 85:f4:f5:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwxj5slc5llEcqJMCq7PNiLvZ7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjA3MDQwMTA5MDZaFw0yNjA3MDUwNTAxMDZaMDMxMTAvBgNV BAMTKDZBN0Y1NjY5QzBDRDczNEM4MzE0MUQxNTUwQjlBOTEzOUZFM0YxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbaqbN5DhzBjDYPZ9Ln2ROgPlS 7C9jCCA+8ot53csSKizs+vgLiPVuaDl69iPkydzANnTRPbcq+/EaZrjIih5+KqC5 m0t1xBI8wQC/vlg5oPrlsWfiFHdDhZI854Ek/W062e/KHDNmzhFvzRwCuyziIjP+ TC9qIXRJN/XfA2mqiS+D+PiVt+8zSo0QIFWrjvObz+zhue/T92XqkjE1sowwDdjh ktiCaVxV46a2aESCbk8ujmhxtNJ2Owkwm62dwNQE/C5D8+PFsYSHKLB2PlE4vD8w rFoyvdv5fx2ginwO5qG2xCbyL/gPr2PpG7CB1fdTmqNMOW0jRcHCPterFR9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUan9WacDNc0yDFB0VULmpE5/j8Q8wHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjF1NzeoygIDBOTlKAI51FUaWXRbwF5k099 /2724mNLGJETOPhhZR6rdFUi60fRybBJMQhc+98xbU7UcPPuSLm5sk4w/nbFXwBs tG/vanDuc3bRQ//VjizCCXs8SEsCgKSxq0bcmTLIKkoWGl3d2AnjyWUDUMrXCo6h jnfRuQW+8qZ+Lc9RZWdjS95QK9wecOM1PwoNHK4EbH9qVSRaLKGMiyjLLQOho25h AVqYb3bcSaN0IuNFoJR3u0TDfDaJpcB1W3TLl6YjyOQNbT62R2Ri8tV+lUDDQI/8 zPHfssCHZ8LrDt6+IBWfFur6Kgw7agPNxzOFTfPwTa/jy4X09dg= -----END CERTIFICATE-----Generated at Sat Jul 4 11:16:57 2026 by rpki-client