$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: e+UTV4TKxUQssKs9a+bMuedVpcag63KkVxbgodKlQkw= Subject key identifier: 51:58:5D:4C:03:B4:52:05:F5:D8:8E:DD:90:31:48:D4:DB:B0:11:B5 Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 606EDCEEBFB1748BBDCA5B02090E6699E5FB5008 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:40:41 +0000 Manifest this update: Mon 20 Jul 2026 19:35:41 +0000 Manifest next update: Tue 21 Jul 2026 20:22:41 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) 2: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: 0LQ8i7qACw9IY+NzaA5e5v51fHdFNgEg4KmQwUlcgtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6e:dc:ee:bf:b1:74:8b:bd:ca:5b:02:09:0e:66:99:e5:fb:50:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Jul 20 19:35:41 2026 GMT Not After : Jul 21 20:22:41 2026 GMT Subject: CN=51585D4C03B45205F5D88EDD903148D4DBB011B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:69:1c:6e:c5:24:7c:8f:52:c1:6b:cf:05: 62:58:4b:ff:c6:50:28:10:b1:0a:67:d6:39:fd:43: 43:ed:f5:84:33:57:d3:28:ee:82:a6:6c:cd:84:59: d1:c3:7a:09:e6:a6:cc:84:ec:09:9b:3e:a5:ae:04: b7:ba:c3:0d:64:98:ed:a6:b1:24:02:89:73:0c:92: 42:8f:c9:d7:0a:3e:17:bf:69:e2:4c:0b:b3:e2:d2: a1:17:7c:13:a9:5c:1b:21:4d:30:c6:29:9e:05:a5: 50:55:84:10:cd:10:f6:77:ce:57:94:cf:7d:59:b6: 9a:de:45:df:fc:7a:14:d6:65:83:b9:49:39:8c:0f: d3:a2:25:a1:77:13:26:cc:13:53:01:27:f2:04:3d: e2:b5:0e:9f:53:19:94:64:e6:bb:4d:e5:ac:f0:17: 1b:89:24:7e:79:05:c4:3e:e1:d3:59:cd:3f:ee:47: f1:d0:49:eb:a6:17:95:83:68:0f:fb:8a:ba:0a:ac: 12:0e:03:5b:80:80:7b:88:00:bb:de:44:36:ed:29: 81:32:f8:d3:da:ab:e6:08:39:3a:cb:cf:71:0e:04: 2e:51:e8:90:15:04:a3:ec:cc:80:c8:97:72:7c:e7: dd:e8:53:3b:d7:45:60:9a:8b:89:2b:98:15:51:ac: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:58:5D:4C:03:B4:52:05:F5:D8:8E:DD:90:31:48:D4:DB:B0:11:B5 X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:74:92:de:a8:ea:b3:0d:a6:eb:7e:2c:39:46:74:14:cf:34: 65:5c:01:b7:e8:7f:19:1b:7c:1d:51:2c:f8:9d:09:cf:09:4c: 30:2d:be:d4:db:bc:aa:81:f1:81:54:87:04:a1:24:61:9c:df: 55:c4:d2:10:14:ba:fd:c3:10:d3:af:08:33:d4:0b:5c:68:02: 7e:95:48:85:36:5d:cc:1b:33:5c:82:cc:94:64:a7:28:0b:42: 73:66:f5:7f:80:cd:cd:2b:59:40:ca:8a:cc:99:e9:80:8e:0b: 03:a2:2e:26:ec:c9:91:f8:4c:dc:22:c0:10:cc:cb:91:1c:b1: 71:3f:4e:b2:db:7c:a0:dd:25:7e:99:c9:a9:4c:c5:6a:9d:df: 97:90:01:e7:a8:e7:8e:43:f2:d4:5f:54:f5:98:04:a1:9c:1b: 23:56:64:27:33:6b:6d:cc:41:5c:62:76:65:9f:4b:d9:02:7d: 01:b2:a4:fc:86:fe:6f:0c:f9:0b:f3:a3:de:be:97:0b:d9:e0: 8e:ac:6d:fa:f2:e9:b8:b2:1a:92:d2:af:0b:c4:10:c6:f1:fc: aa:f5:13:5e:6e:f9:35:cf:31:cf:3c:fe:af:89:4a:54:b2:a3: 7c:18:8d:a4:6c:da:fe:9a:cb:8a:a4:35:4c:e2:b5:c1:3d:f5: 37:d4:c8:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYG7c7r+xdIu9ylsCCQ5mmeX7UAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA3MjAxOTM1NDFaFw0yNjA3MjEyMDIyNDFaMDMxMTAvBgNV BAMTKDUxNTg1RDRDMDNCNDUyMDVGNUQ4OEVERDkwMzE0OEQ0REJCMDExQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUWkcbsUkfI9SwWvPBWJYS//G UCgQsQpn1jn9Q0Pt9YQzV9Mo7oKmbM2EWdHDegnmpsyE7AmbPqWuBLe6ww1kmO2m sSQCiXMMkkKPydcKPhe/aeJMC7Pi0qEXfBOpXBshTTDGKZ4FpVBVhBDNEPZ3zleU z31ZtpreRd/8ehTWZYO5STmMD9OiJaF3EybME1MBJ/IEPeK1Dp9TGZRk5rtN5azw FxuJJH55BcQ+4dNZzT/uR/HQSeumF5WDaA/7iroKrBIOA1uAgHuIALveRDbtKYEy +NPaq+YIOTrLz3EOBC5R6JAVBKPszIDIl3J8593oUzvXRWCai4krmBVRrDlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVhdTAO0UgX12I7dkDFI1NuwEbUwHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZ0kt6o6rMNput+LDlGdBTPNGVcAbfofxkb fB1RLPidCc8JTDAtvtTbvKqB8YFUhwShJGGc31XE0hAUuv3DENOvCDPUC1xoAn6V SIU2XcwbM1yCzJRkpygLQnNm9X+Azc0rWUDKisyZ6YCOCwOiLibsyZH4TNwiwBDM y5EcsXE/TrLbfKDdJX6ZyalMxWqd35eQAeeo545D8tRfVPWYBKGcGyNWZCcza23M QVxidmWfS9kCfQGypPyG/m8M+Qvzo96+lwvZ4I6sbfry6biyGpLSrwvEEMbx/Kr1 E15u+TXPMc88/q+JSlSyo3wYjaRs2v6ay4qkNUzitcE99TfUyPU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:51 2026 by rpki-client