$ rpki-client -vvf rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft File: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft (raw, json) Hash identifier: /h6rP3e1Ib/UbcedLcA9iTfUNuZ2dLkcFwbHpp0iqb8= Subject key identifier: D5:18:E6:AC:3A:01:E0:33:95:74:CA:47:93:12:17:A1:96:1E:5D:30 Authority key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 Certificate issuer: /CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Certificate serial: 092D401353282622CD91690830717376590167EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:28:48 +0000 Manifest this update: Tue 02 Jun 2026 15:23:48 +0000 Manifest next update: Wed 03 Jun 2026 15:28:48 +0000 Files and hashes: 1: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: mS9PRPKBDmGv104t2c/uWFhRF9qgpc8OIooHFMXaEg4=) 2: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: 12S1HOzE8Rs4umiuV1n2mL1hqQ5ALMTa7jdnK3K0btU=) 3: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl (hash: CMo0Zq0QM+t/5+57N9Ms2W7ObYjOnop9lwkjutHcDqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2d:40:13:53:28:26:22:cd:91:69:08:30:71:73:76:59:01:67:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Validity Not Before: Jun 2 15:23:48 2026 GMT Not After : Jun 3 15:28:48 2026 GMT Subject: CN=D518E6AC3A01E0339574CA47931217A1961E5D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3f:20:c7:8a:91:de:32:3f:05:4c:95:80:69: 34:53:7c:73:d0:fb:90:03:28:94:72:ed:d9:86:39: ec:96:99:79:66:2c:6d:b4:9b:2e:cb:81:40:9d:b0: 74:8f:ad:d5:f9:8f:4a:c6:2e:b5:43:49:b3:2f:f1: 0e:09:f9:10:08:8d:42:1d:a7:19:c1:de:3e:98:d1: 6c:e1:4c:9c:04:ed:83:71:7c:70:fb:42:63:ff:17: 4c:f9:ea:b7:b1:21:7a:e8:40:b0:00:df:49:cc:24: fa:f1:5b:3a:b9:c2:2d:55:60:15:63:d2:52:08:9f: 0e:26:a5:24:81:a7:0c:93:9d:b7:4a:e4:35:54:3b: 1b:84:36:f8:c1:c7:42:71:0b:16:8c:20:32:f1:38: 1f:74:64:4d:e5:25:f2:d5:55:ae:a8:09:79:78:ee: 24:de:b7:a2:bf:16:63:64:6e:73:af:8c:07:54:5a: b9:93:a2:ac:a0:1f:47:18:c7:a3:5d:1d:d6:2c:02: aa:0c:27:cc:a5:2f:11:c3:b2:9b:8e:3c:18:2e:3b: 5f:f4:7b:de:2f:dc:8c:51:75:e6:f4:d2:52:d2:5d: 19:a2:cf:14:b5:46:16:c5:d0:42:6f:d8:2c:66:f0: 89:90:97:20:59:5c:ed:0d:54:ce:d9:e0:64:94:73: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:18:E6:AC:3A:01:E0:33:95:74:CA:47:93:12:17:A1:96:1E:5D:30 X509v3 Authority Key Identifier: keyid:CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:de:00:22:5d:bb:18:3d:9e:00:f9:b7:ca:e5:9b:d5:d1:e5: 58:81:7f:ee:f6:4d:2f:e7:f1:32:9c:fc:92:8b:27:dc:ad:67: a9:55:5e:72:16:17:08:6c:d1:ba:a1:c8:f4:67:c9:b4:46:5e: 70:0d:51:18:91:1f:02:b2:3a:fb:ad:95:78:b4:c2:18:8b:eb: 73:e9:1b:58:7f:61:93:fa:3b:9e:08:ce:f7:e4:d0:46:d3:91: 47:eb:61:da:2e:01:f5:02:62:f2:af:b4:91:7e:ef:af:0d:6e: 96:3c:a2:fb:3e:a6:b8:a8:a7:d3:fd:ba:5e:48:23:68:31:08: 70:5b:65:b8:8c:80:9c:de:49:d5:92:31:25:63:a7:d3:d3:0b: d1:5a:39:85:bf:f3:e1:46:1c:92:da:6b:79:56:ea:01:dc:9e: b3:a8:b7:a2:c1:f5:8b:18:59:63:a3:12:c9:01:be:b6:7b:ae: 3f:44:37:da:fd:3a:7c:22:e5:8a:1e:1b:98:e8:14:fd:f6:49: d1:b6:5c:29:dc:99:c8:f0:e6:9f:cf:9d:33:04:ae:3c:22:0b: 14:33:f1:8b:1b:70:e8:31:ed:79:b0:33:61:42:2c:52:6a:fc: 45:bc:3d:9e:2f:24:b0:ea:35:eb:8f:86:be:13:43:21:82:c8: 10:3a:59:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCS1AE1MoJiLNkWkIMHFzdlkBZ+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNGMDlF MkVGMzlGNjAeFw0yNjA2MDIxNTIzNDhaFw0yNjA2MDMxNTI4NDhaMDMxMTAvBgNV BAMTKEQ1MThFNkFDM0EwMUUwMzM5NTc0Q0E0NzkzMTIxN0ExOTYxRTVEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxPyDHipHeMj8FTJWAaTRTfHPQ +5ADKJRy7dmGOeyWmXlmLG20my7LgUCdsHSPrdX5j0rGLrVDSbMv8Q4J+RAIjUId pxnB3j6Y0WzhTJwE7YNxfHD7QmP/F0z56rexIXroQLAA30nMJPrxWzq5wi1VYBVj 0lIInw4mpSSBpwyTnbdK5DVUOxuENvjBx0JxCxaMIDLxOB90ZE3lJfLVVa6oCXl4 7iTet6K/FmNkbnOvjAdUWrmToqygH0cYx6NdHdYsAqoMJ8ylLxHDspuOPBguO1/0 e94v3IxRdeb00lLSXRmizxS1RhbF0EJv2Cxm8ImQlyBZXO0NVM7Z4GSUc1/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1RjmrDoB4DOVdMpHkxIXoZYeXTAwHwYDVR0j BBgwFoAUzoZsp6SPQnDYYRQejbg/CeLvOfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc4M2VkMjgtNTg4MS00N2RhLWFlNjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdB NDhGNDI3MEQ4NjExNDFFOERCODNGMDlFMkVGMzlGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTg2NkNBN0E0OEY0MjcwRDg2MTE0MUU4REI4M0YwOUUyRUYz OUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNG MDlFMkVGMzlGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTeACJduxg9ngD5t8rlm9XR5ViBf+72TS/n 8TKc/JKLJ9ytZ6lVXnIWFwhs0bqhyPRnybRGXnANURiRHwKyOvutlXi0whiL63Pp G1h/YZP6O54Izvfk0EbTkUfrYdouAfUCYvKvtJF+768NbpY8ovs+priop9P9ul5I I2gxCHBbZbiMgJzeSdWSMSVjp9PTC9FaOYW/8+FGHJLaa3lW6gHcnrOot6LB9YsY WWOjEskBvrZ7rj9EN9r9Onwi5YoeG5joFP32SdG2XCncmcjw5p/PnTMErjwiCxQz 8YsbcOgx7XmwM2FCLFJq/EW8PZ4vJLDqNeuPhr4TQyGCyBA6WQg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:03 2026 by rpki-client