$ rpki-client -vvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: lY+3h3MHYJzmjKa0HJf6jjoxkfCMYLx427jJV7SqFQ4= Subject key identifier: 87:8E:28:DD:FB:22:90:B3:EE:D5:5B:03:5E:EC:7C:73:38:5E:36:35 Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 20EC401010FC1E148626DEFAE3235E2B6DF1739E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 11:54:52 +0000 Manifest this update: Tue 02 Jun 2026 11:49:52 +0000 Manifest next update: Wed 03 Jun 2026 12:34:52 +0000 Files and hashes: 1: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: FRu2srv3eLd7mrB3kiKGXP5i+596oAc82PbzsyqjZvM=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ec:40:10:10:fc:1e:14:86:26:de:fa:e3:23:5e:2b:6d:f1:73:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Jun 2 11:49:52 2026 GMT Not After : Jun 3 12:34:52 2026 GMT Subject: CN=878E28DDFB2290B3EED55B035EEC7C73385E3635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:1c:20:7e:b9:b8:32:15:b7:46:a9:f0:58: 8c:16:c3:fd:9a:7e:a9:26:ab:2c:d2:ec:3f:20:8b: 99:45:4e:a2:35:4b:2c:85:4c:e4:51:33:55:95:b6: 8b:55:16:fd:0c:26:81:43:eb:d1:ee:54:98:51:81: 2e:08:ab:fa:91:f0:7b:56:b4:a0:26:71:ff:0f:e0: d9:0e:49:64:c3:76:94:86:50:20:e4:98:ac:07:8b: 57:22:a0:c3:9f:4c:36:5a:e8:bc:cd:de:c8:be:10: dd:35:86:c1:b3:2c:30:8d:e4:48:ec:53:bd:41:00: fc:7e:3e:17:1c:62:1f:34:81:d6:ca:2d:06:f2:f8: 2f:83:32:55:e5:4a:1a:f7:e4:8e:76:c2:95:1c:8a: 8e:43:d4:fe:0d:d5:c8:3e:6a:67:67:59:88:94:18: 77:12:1b:b5:e1:3a:2f:ff:44:19:8d:dc:ee:eb:fb: 8f:b6:bd:2d:0e:97:6b:a4:92:7b:3b:d2:e4:25:1d: 12:e7:b5:8a:e9:1a:24:94:67:b7:dd:12:90:48:f6: a4:f3:82:5a:57:e3:d3:54:bb:cc:40:a7:5a:0e:ab: 80:89:8b:69:10:cf:6a:a5:01:30:03:6f:83:2e:62: 12:03:27:0b:b4:48:4d:b0:e6:24:19:86:05:f1:24: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8E:28:DD:FB:22:90:B3:EE:D5:5B:03:5E:EC:7C:73:38:5E:36:35 X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b6:ba:f3:23:89:9e:2f:d1:8f:7d:a3:5a:5c:28:3c:e6:4d: cf:8c:87:a3:c8:6a:80:2f:f9:31:19:14:b6:02:ce:52:e7:10: 8b:a5:9a:1a:ec:24:3c:14:d2:a7:7a:26:2e:6d:57:0a:bb:a2: 97:c2:54:bb:27:08:e9:11:ff:9b:18:88:c0:98:3b:5d:e8:e9: 5d:cf:04:e1:be:13:c3:41:5f:cb:db:93:74:eb:8d:49:1e:8a: 9b:0f:96:e6:d6:ce:95:41:04:af:cd:7d:35:88:ef:65:f5:87: 62:20:96:81:d1:ea:6e:01:c9:7e:b1:98:98:e3:37:96:75:9d: 75:fd:b7:9c:cf:4f:43:81:71:98:7b:bf:ce:c3:ad:84:7a:22: 22:0e:67:7a:2c:4f:e8:cb:44:0b:34:3c:a4:c9:ed:de:5e:e1: 1d:0f:da:c4:de:7c:22:9d:f5:b5:8b:48:4e:59:a5:23:ff:9e: 44:ed:cb:dc:af:18:dd:7e:21:ee:e4:fd:3e:eb:f8:41:c2:93: eb:5d:41:d1:41:4f:8c:5f:58:ad:00:65:51:c7:1a:29:d0:63: 82:46:66:b0:85:4c:98:34:be:47:f9:d8:65:cf:5a:a0:29:94: 44:3c:a4:4b:01:17:ae:6f:e3:43:4d:e1:f6:f4:c7:7d:7f:0d: de:c5:b3:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOxAEBD8HhSGJt764yNeK23xc54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA2MDIxMTQ5NTJaFw0yNjA2MDMxMjM0NTJaMDMxMTAvBgNV BAMTKDg3OEUyOERERkIyMjkwQjNFRUQ1NUIwMzVFRUM3QzczMzg1RTM2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOEBwgfrm4MhW3RqnwWIwWw/2a fqkmqyzS7D8gi5lFTqI1SyyFTORRM1WVtotVFv0MJoFD69HuVJhRgS4Iq/qR8HtW tKAmcf8P4NkOSWTDdpSGUCDkmKwHi1cioMOfTDZa6LzN3si+EN01hsGzLDCN5Ejs U71BAPx+PhccYh80gdbKLQby+C+DMlXlShr35I52wpUcio5D1P4N1cg+amdnWYiU GHcSG7XhOi//RBmN3O7r+4+2vS0Ol2ukkns70uQlHRLntYrpGiSUZ7fdEpBI9qTz glpX49NUu8xAp1oOq4CJi2kQz2qlATADb4MuYhIDJwu0SE2w5iQZhgXxJIzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh44o3fsikLPu1VsDXux8czheNjUwHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa2uvMjiZ4v0Y99o1pcKDzmTc+Mh6PIaoAv +TEZFLYCzlLnEIulmhrsJDwU0qd6Ji5tVwq7opfCVLsnCOkR/5sYiMCYO13o6V3P BOG+E8NBX8vbk3TrjUkeipsPlubWzpVBBK/NfTWI72X1h2IgloHR6m4ByX6xmJjj N5Z1nXX9t5zPT0OBcZh7v87DrYR6IiIOZ3osT+jLRAs0PKTJ7d5e4R0P2sTefCKd 9bWLSE5ZpSP/nkTty9yvGN1+Ie7k/T7r+EHCk+tdQdFBT4xfWK0AZVHHGinQY4JG ZrCFTJg0vkf52GXPWqAplEQ8pEsBF65v40NN4fb0x31/Dd7Fs0k= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:10 2026 by rpki-client