$ rpki-client -vvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: G4BKXM1RkHLMUoDSoihb8x96xaraN9zref9YOFRAaOo= Subject key identifier: E3:EE:60:1B:22:70:D6:D2:0E:66:78:E1:DE:41:48:87:6E:38:AC:6A Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 0EE4B9AB81788556ED83D55E5E2172F8CCCF9305 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:48:28 +0000 Manifest this update: Mon 20 Jul 2026 17:43:28 +0000 Manifest next update: Tue 21 Jul 2026 18:06:28 +0000 Files and hashes: 1: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: a/k+SqezO7eyDEFF2yP/AG2FDyBTdu3VbpeH977CeN8=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) 3: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e4:b9:ab:81:78:85:56:ed:83:d5:5e:5e:21:72:f8:cc:cf:93:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: Jul 20 17:43:28 2026 GMT Not After : Jul 21 18:06:28 2026 GMT Subject: CN=E3EE601B2270D6D20E6678E1DE4148876E38AC6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:6d:52:76:0d:a8:d4:3e:59:c8:29:67:97: 90:67:f5:1b:fb:76:cc:89:54:34:4f:0b:77:ae:c2: 14:2e:5b:bc:88:b7:08:a3:bd:f2:93:fa:49:0b:d1: 30:77:0e:a1:89:51:9b:65:bf:4c:f9:52:46:11:9b: 9e:61:f5:7f:2c:0a:e6:3e:2b:f4:de:d8:41:4e:fb: 8c:38:f9:c3:87:5f:2f:ff:99:6b:bf:f3:b8:6c:94: eb:bf:04:ec:0e:8c:e3:3f:e9:b8:fe:ff:1d:ad:2e: fb:38:ac:04:a7:ef:13:2a:f3:6d:a4:a9:73:00:c6: 78:9f:1e:33:ee:0c:0f:cd:8b:38:8e:2d:e6:6e:4f: 44:bf:c1:1b:d6:d6:4e:86:5c:6b:b9:5b:40:20:8e: 10:11:ea:0a:29:02:a2:57:c6:29:95:f8:bd:5c:76: f6:b5:51:06:15:a2:33:3b:0c:c7:5b:19:26:fc:2f: 17:c5:24:28:ef:28:c1:62:42:c4:7c:fc:f4:4c:34: 28:f9:31:32:18:d1:42:bc:0b:2f:e4:c3:e0:9a:5a: 3f:e6:03:08:3e:cc:a0:cb:e4:bc:e0:0c:5f:69:3c: e2:2e:a7:28:01:89:70:e6:98:8f:b1:e5:8a:c9:68: c7:35:fc:f0:18:68:e4:cf:cd:a1:13:78:12:21:dd: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EE:60:1B:22:70:D6:D2:0E:66:78:E1:DE:41:48:87:6E:38:AC:6A X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c0:6b:b1:a8:94:04:a6:7e:6b:1e:ff:64:99:81:b3:c3:04: 12:e8:d0:cc:ff:8f:65:92:1f:2d:c5:bc:29:8b:07:dc:ee:8a: 5e:12:3f:5c:0b:d0:9f:1d:6a:d4:b4:6f:d5:63:49:a7:a5:6c: e1:eb:38:cd:78:52:74:bc:86:e6:79:bf:db:bf:ba:bf:7d:d4: b1:bd:71:94:f0:ea:90:80:e2:24:dc:e7:29:12:45:e0:56:43: 01:30:4c:e1:24:dd:c7:da:1b:66:78:db:8f:b5:e1:27:20:06: 81:49:eb:7f:54:3c:6d:3a:96:24:45:34:93:95:15:c8:ed:84: e9:14:91:ba:04:fc:12:fe:a8:43:44:ba:03:73:09:0a:9e:a1: 95:24:d6:66:d4:af:5b:62:94:e1:54:3f:eb:20:27:31:87:81: a2:31:06:33:4b:3c:01:99:6d:55:ca:0c:f2:48:fb:8d:e5:65: dc:a1:17:21:de:bb:34:aa:3a:77:bc:fc:86:0a:cc:f8:f9:c1: be:d1:30:4b:c9:00:cb:e4:8d:ad:95:97:a1:26:46:0d:0b:0f: d4:fa:79:3f:d2:57:ea:53:19:d4:10:ee:a0:45:55:5b:c7:6b: bd:f9:2a:0c:67:fa:bf:e0:8b:42:0b:3c:e2:bd:f7:52:42:2d: e2:46:69:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuS5q4F4hVbtg9VeXiFy+MzPkwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA3MjAxNzQzMjhaFw0yNjA3MjExODA2MjhaMDMxMTAvBgNV BAMTKEUzRUU2MDFCMjI3MEQ2RDIwRTY2NzhFMURFNDE0ODg3NkUzOEFDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLbW1Sdg2o1D5ZyClnl5Bn9Rv7 dsyJVDRPC3euwhQuW7yItwijvfKT+kkL0TB3DqGJUZtlv0z5UkYRm55h9X8sCuY+ K/Te2EFO+4w4+cOHXy//mWu/87hslOu/BOwOjOM/6bj+/x2tLvs4rASn7xMq822k qXMAxnifHjPuDA/NiziOLeZuT0S/wRvW1k6GXGu5W0AgjhAR6gopAqJXximV+L1c dva1UQYVojM7DMdbGSb8LxfFJCjvKMFiQsR8/PRMNCj5MTIY0UK8Cy/kw+CaWj/m Awg+zKDL5LzgDF9pPOIupygBiXDmmI+x5YrJaMc1/PAYaOTPzaETeBIh3b/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+5gGyJw1tIOZnjh3kFIh244rGowHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzAa7GolASmfmse/2SZgbPDBBLo0Mz/j2WS Hy3FvCmLB9zuil4SP1wL0J8datS0b9VjSaelbOHrOM14UnS8huZ5v9u/ur991LG9 cZTw6pCA4iTc5ykSReBWQwEwTOEk3cfaG2Z424+14ScgBoFJ639UPG06liRFNJOV FcjthOkUkboE/BL+qENEugNzCQqeoZUk1mbUr1tilOFUP+sgJzGHgaIxBjNLPAGZ bVXKDPJI+43lZdyhFyHeuzSqOne8/IYKzPj5wb7RMEvJAMvkja2Vl6EmRg0LD9T6 eT/SV+pTGdQQ7qBFVVvHa735Kgxn+r/gi0ILPOK991JCLeJGaQk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:11 2026 by rpki-client