$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json) Hash identifier: amsmlOnWUjnRkzphCJyYh2qEG/RyGqb/IYryFo7mveM= Subject key identifier: 3D:DF:C7:E7:E0:39:0D:09:BE:10:FC:84:05:FD:68:E7:FB:17:60:03 Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Certificate serial: 6F45488CFDD91A5DE01C8BFF977EADF5A71A533B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:30:44 +0000 Manifest this update: Mon 20 Jul 2026 15:25:44 +0000 Manifest next update: Tue 21 Jul 2026 16:38:44 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=) 2: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: ulW63PGCXouzgPvoxDOHvwK0/VLZLRH9CxsulF/nBoM=) 3: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=) 4: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:45:48:8c:fd:d9:1a:5d:e0:1c:8b:ff:97:7e:ad:f5:a7:1a:53:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Validity Not Before: Jul 20 15:25:44 2026 GMT Not After : Jul 21 16:38:44 2026 GMT Subject: CN=3DDFC7E7E0390D09BE10FC8405FD68E7FB176003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:64:08:2b:97:27:ca:02:75:90:07:84:a2: 70:d0:41:3d:cc:58:63:43:dc:a4:65:c0:48:4d:86: fe:2f:1f:4b:11:d6:e0:a9:87:a2:b3:32:44:7e:d1: b6:1a:a1:ae:1d:94:c2:a3:9d:e5:fd:17:1b:44:02: f0:dd:72:f4:9d:ce:93:fd:c3:f6:6d:a8:02:34:48: f0:12:7b:ac:ae:e4:d8:23:29:38:51:09:c5:a0:80: e4:44:b7:76:7a:10:70:d5:70:b3:f6:30:fb:5e:31: c6:79:e4:f1:60:75:03:87:be:85:11:6b:42:d1:a6: 5c:90:79:6a:7c:81:9e:20:10:dc:af:a8:15:7b:85: 2d:62:6a:a8:a1:4f:43:ef:bb:ea:5b:f4:4d:be:dd: c8:4c:44:4e:b3:a7:97:81:62:36:cc:16:64:9b:5f: 81:46:b6:19:e1:0a:e0:bb:5a:9e:be:1f:ed:63:44: bd:3c:d1:af:96:4c:42:54:16:08:e0:42:4a:86:ae: 69:14:b1:aa:0c:6d:bf:0f:de:7e:ee:b7:c7:ce:1f: 4d:8f:ec:26:cc:ca:bc:9c:f8:02:04:26:32:a1:05: e6:4d:b1:5f:48:e2:be:9f:76:f2:59:c3:9f:35:d6: 37:25:c8:2f:c6:e1:f7:7c:77:15:fe:12:c2:5d:b6: af:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:C7:E7:E0:39:0D:09:BE:10:FC:84:05:FD:68:E7:FB:17:60:03 X509v3 Authority Key Identifier: keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:74:e9:74:bc:4e:31:a3:51:ed:01:1f:40:e7:0a:09:5f:7f: 8f:09:df:3c:d9:ca:1b:c5:f3:59:49:d8:3e:11:dd:67:8f:4e: 1c:be:6d:af:d5:f3:be:27:ec:ed:90:6c:d2:f0:49:97:de:e2: 11:59:a6:94:83:82:36:70:f8:8c:d2:7a:9f:9b:a3:3e:99:95: d3:45:db:60:db:55:a9:57:cc:43:f6:6b:85:32:17:ff:47:7e: 12:7c:2c:26:eb:87:5e:08:8a:6e:c5:06:d9:c2:15:0f:eb:1e: d0:63:4d:a6:6f:8f:79:76:f4:19:c5:6b:0a:1d:b5:bf:b8:e1: 6b:38:02:7b:f0:8b:89:77:30:f1:5e:f9:b6:f3:52:6d:2b:f2: 2c:da:16:df:c1:aa:b3:01:7c:ea:22:a4:1a:12:0d:4e:bc:46: 82:6d:da:89:c3:5c:43:22:a2:24:01:5a:5e:78:fb:44:18:32: 73:eb:d4:36:0c:8d:9a:12:dd:e4:97:6e:35:b6:f9:85:95:ae: 68:16:3c:53:ef:7a:31:be:f1:a7:ee:b9:b3:52:ac:56:4a:c3: 43:a4:49:1b:71:99:8c:78:a0:d8:2b:e9:a0:fa:cc:5e:94:86: 02:47:e3:40:ed:75:d2:86:c0:d6:74:76:25:b1:8a:78:13:4f: 5e:34:61:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0VIjP3ZGl3gHIv/l36t9acaUzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG NDExQkFDNTAeFw0yNjA3MjAxNTI1NDRaFw0yNjA3MjExNjM4NDRaMDMxMTAvBgNV BAMTKDNEREZDN0U3RTAzOTBEMDlCRTEwRkM4NDA1RkQ2OEU3RkIxNzYwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPGQIK5cnygJ1kAeEonDQQT3M WGND3KRlwEhNhv4vH0sR1uCph6KzMkR+0bYaoa4dlMKjneX9FxtEAvDdcvSdzpP9 w/ZtqAI0SPASe6yu5NgjKThRCcWggOREt3Z6EHDVcLP2MPteMcZ55PFgdQOHvoUR a0LRplyQeWp8gZ4gENyvqBV7hS1iaqihT0Pvu+pb9E2+3chMRE6zp5eBYjbMFmSb X4FGthnhCuC7Wp6+H+1jRL080a+WTEJUFgjgQkqGrmkUsaoMbb8P3n7ut8fOH02P 7CbMyryc+AIEJjKhBeZNsV9I4r6fdvJZw5811jclyC/G4fd8dxX+EsJdtq9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPd/H5+A5DQm+EPyEBf1o5/sXYAMwHwYDVR0j BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3 REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC QUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVB NDhGNDExQkFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ06XS8TjGjUe0BH0DnCglff48J3zzZyhvF 81lJ2D4R3WePThy+ba/V874n7O2QbNLwSZfe4hFZppSDgjZw+IzSep+boz6ZldNF 22DbValXzEP2a4UyF/9HfhJ8LCbrh14Iim7FBtnCFQ/rHtBjTaZvj3l29BnFawod tb+44Ws4Anvwi4l3MPFe+bbzUm0r8izaFt/BqrMBfOoipBoSDU68RoJt2onDXEMi oiQBWl54+0QYMnPr1DYMjZoS3eSXbjW2+YWVrmgWPFPvejG+8afuubNSrFZKw0Ok SRtxmYx4oNgr6aD6zF6UhgJH40DtddKGwNZ0diWxingTT140Yd4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:07 2026 by rpki-client