$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft File: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft (raw, json) Hash identifier: 0YyQuoPpkc9SGxSYTITg0QgRNEavjIR/FpVToUXj64w= Subject key identifier: 0A:25:2F:F9:B8:7B:B1:54:AF:4E:1D:22:AD:8C:5A:88:5A:6B:20:9C Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 56C000A6A3DA879CA6266E6C7C9EDE35D71A7A4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 21:19:01 +0000 Manifest this update: Wed 02 Sep 2026 21:14:01 +0000 Manifest next update: Thu 03 Sep 2026 23:33:01 +0000 Files and hashes: 1: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=) 2: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl (hash: VagIXSDEinrq6xGXR+hfuwUG5JSsbES7mgKN7gYxOsw=) 3: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: ymqzNsOJhmLcRFDDsoYR0MwzS6+nUhmsNkUUP+/NCsk=) 4: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: ubZK1JZSOkQSdT51nvL6YxDcdnyD6UzUmGgbeftTx40=) 5: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: TA/s8DKqVENi0iNK6VJjUYJ9iOIFI3fpPu0mJtiANFQ=) 6: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: Zbsf0dYqnLxdlncAJCYqnzQ41srbRVWGXwAiyL3mwjg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c0:00:a6:a3:da:87:9c:a6:26:6e:6c:7c:9e:de:35:d7:1a:7a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: Sep 2 21:14:01 2026 GMT Not After : Sep 3 23:33:01 2026 GMT Subject: CN=0A252FF9B87BB154AF4E1D22AD8C5A885A6B209C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:c1:17:04:ba:83:f0:54:77:ef:bd:8b:72: a9:30:57:31:b4:46:39:99:f7:8b:9a:73:99:83:76: 60:3a:93:79:42:d2:f7:31:00:42:69:0b:c5:2c:61: f9:9e:aa:93:81:d0:2a:96:4f:cc:25:b5:91:38:4b: e3:03:5f:3a:4d:fb:14:35:97:72:96:52:1f:be:49: 17:15:3a:e2:78:26:5a:b4:99:3f:79:58:dc:62:b2: a0:3c:6a:5e:91:68:bb:74:1c:e1:32:a3:41:71:ca: 0e:02:0d:9d:14:46:16:1c:3a:e4:2a:6e:31:0a:14: e9:87:7c:5c:27:bf:44:1d:9b:82:ba:bb:7f:08:55: 10:17:88:1b:f7:9c:0f:ff:08:d0:33:4c:88:ce:73: 47:3d:d9:53:88:b3:6f:d8:4a:33:25:59:9c:ba:84: 65:9e:39:fa:e3:7b:bf:10:b1:c8:1a:66:fb:82:a4: a5:cf:17:3a:c8:86:03:32:a9:d2:03:c6:6a:3f:ad: aa:bb:1a:a9:b4:7d:e6:44:d3:27:3a:90:8c:d5:13: ed:7f:76:86:35:7d:4c:2f:d1:87:1f:d7:5b:44:65: 22:be:20:92:58:72:71:a9:c6:84:f3:80:f2:d0:1e: 96:65:b1:24:9c:18:2d:79:2d:11:7a:a8:19:5d:a2: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:2F:F9:B8:7B:B1:54:AF:4E:1D:22:AD:8C:5A:88:5A:6B:20:9C X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:eb:b1:fe:ab:e2:92:91:e9:f8:1f:eb:95:94:8a:d8:7c:7d: 9d:66:65:b7:b7:77:11:9f:f8:f4:9c:e6:e4:78:46:8d:23:c7: 4e:e2:57:81:db:b2:b2:34:60:92:c9:68:45:33:ce:71:21:e1: e1:44:1c:92:82:a5:5b:c1:8f:71:72:dc:48:e4:e4:c8:7c:89: e2:19:c4:10:a2:c9:60:bf:87:21:86:ac:9a:b3:f5:f8:c8:c2: ee:95:77:3e:5e:68:2a:3a:4f:e7:9f:9c:42:4a:46:f7:3f:d0: fe:0a:28:f3:6b:95:32:48:5d:9c:b7:3e:55:d2:9e:8f:e7:34: ce:29:77:26:1f:6e:28:ed:4d:1f:85:33:32:36:24:3f:bf:23: 3a:7c:f8:cd:47:49:d6:5c:29:9d:de:d2:9f:50:aa:3c:af:93: ea:66:62:6b:53:03:97:ce:5d:81:6f:1e:78:84:59:ea:fd:5b: 0d:92:68:93:df:f1:74:69:71:dd:02:fa:50:ac:95:86:bb:d3: cd:68:c2:7b:77:8a:a3:63:7a:b2:e5:fa:03:56:63:d2:a5:af: 2f:96:81:cb:d9:b3:86:7c:48:3e:86:1c:1d:08:a5:79:16:ee: cd:a2:aa:84:7d:e0:44:71:c1:28:bf:30:f0:f1:57:3c:4d:05: 3b:5c:9b:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsAApqPah5ymJm5sfJ7eNdcaek0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjA5MDIyMTE0MDFaFw0yNjA5MDMyMzMzMDFaMDMxMTAvBgNV BAMTKDBBMjUyRkY5Qjg3QkIxNTRBRjRFMUQyMkFEOEM1QTg4NUE2QjIwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSscEXBLqD8FR3772LcqkwVzG0 RjmZ94uac5mDdmA6k3lC0vcxAEJpC8UsYfmeqpOB0CqWT8wltZE4S+MDXzpN+xQ1 l3KWUh++SRcVOuJ4Jlq0mT95WNxisqA8al6RaLt0HOEyo0Fxyg4CDZ0URhYcOuQq bjEKFOmHfFwnv0Qdm4K6u38IVRAXiBv3nA//CNAzTIjOc0c92VOIs2/YSjMlWZy6 hGWeOfrje78QscgaZvuCpKXPFzrIhgMyqdIDxmo/raq7Gqm0feZE0yc6kIzVE+1/ doY1fUwv0Ycf11tEZSK+IJJYcnGpxoTzgPLQHpZlsSScGC15LRF6qBldoohVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCiUv+bh7sVSvTh0irYxaiFprIJwwHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0Uz NEQwQ0YzM0MxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3rsf6r4pKR6fgf65WUith8fZ1mZbe3dxGf +PSc5uR4Ro0jx07iV4HbsrI0YJLJaEUzznEh4eFEHJKCpVvBj3Fy3Ejk5Mh8ieIZ xBCiyWC/hyGGrJqz9fjIwu6Vdz5eaCo6T+efnEJKRvc/0P4KKPNrlTJIXZy3PlXS no/nNM4pdyYfbijtTR+FMzI2JD+/Izp8+M1HSdZcKZ3e0p9Qqjyvk+pmYmtTA5fO XYFvHniEWer9Ww2SaJPf8XRpcd0C+lCslYa7081ownt3iqNjerLl+gNWY9Klry+W gcvZs4Z8SD6GHB0IpXkW7s2iqoR94ERxwSi/MPDxVzxNBTtcm60= -----END CERTIFICATE-----Generated at Thu Sep 3 08:16:56 2026 by rpki-client