$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json) Hash identifier: OCryL6q4C2qTzUnyuk1ILHZsrCF7JXcZfwS494xWtXA= Subject key identifier: D6:36:4F:F9:A5:98:17:F0:7F:38:4C:D3:DC:59:C0:08:5B:DB:32:8D Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Certificate serial: 4576001800D74A3A397C43A5E598B62FB96229C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:40:03 +0000 Manifest this update: Tue 02 Jun 2026 20:35:03 +0000 Manifest next update: Wed 03 Jun 2026 21:08:03 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=) 2: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=) 3: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: LzFtcdeY9v1wOZXs/iwMv/gHUOIaj2Kmhj6ydiDLGA8=) 4: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:76:00:18:00:d7:4a:3a:39:7c:43:a5:e5:98:b6:2f:b9:62:29:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Validity Not Before: Jun 2 20:35:03 2026 GMT Not After : Jun 3 21:08:03 2026 GMT Subject: CN=D6364FF9A59817F07F384CD3DC59C0085BDB328D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:3f:15:3f:52:f0:f9:4c:8e:2b:6c:d3:ce: ab:83:76:e8:ab:8f:3c:db:54:7f:99:f8:19:e5:25: e1:28:22:8c:ff:9a:b4:2d:16:94:ef:09:c2:7b:b0: ef:14:47:e7:7c:de:dd:5b:a2:55:2c:fe:53:b8:39: c2:50:db:4c:71:7c:83:b8:1b:07:5a:3f:c8:cb:0b: 76:9c:24:78:5a:aa:fd:33:0b:89:ce:63:65:20:cb: 13:6d:64:be:76:ab:79:ea:6c:51:90:5f:d0:6e:fe: f1:dc:a1:e6:ef:92:0e:aa:ad:5d:6f:21:06:6c:22: 95:04:ec:f7:09:57:96:4d:1b:e9:52:72:6a:f6:7c: a7:84:9c:36:d4:3a:f3:3b:25:52:d5:18:df:e5:a7: 0a:21:5b:90:94:1e:d9:97:da:de:24:3b:98:d1:0a: e0:60:36:45:66:83:19:38:bb:6d:09:70:14:31:76: 85:a4:21:7b:1b:4a:fa:75:45:80:a3:e2:0d:57:9d: cc:26:90:97:b5:3e:c9:c3:ef:01:5a:07:9e:84:c4: 77:9d:81:df:53:43:97:1e:cd:a2:fa:7b:6f:82:bb: 91:8b:ce:6c:b6:14:f7:06:f0:15:3f:34:02:fe:37: 5b:6b:ef:33:48:fc:b9:82:79:91:c4:74:f0:94:bb: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:36:4F:F9:A5:98:17:F0:7F:38:4C:D3:DC:59:C0:08:5B:DB:32:8D X509v3 Authority Key Identifier: keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2f:10:02:49:9f:7c:fa:6b:4f:16:43:86:1b:e7:73:b2:07: b3:00:43:b7:49:70:b0:c8:5c:25:51:2d:f7:f2:73:05:8a:1b: cd:bf:34:2e:ff:6d:e2:d5:c7:be:2e:35:3c:86:5f:c0:4f:4b: 2d:13:a4:e6:48:ee:cd:2c:29:d3:17:4b:5f:d4:b9:20:9d:05: e5:6e:a8:f9:7f:91:e7:31:69:13:8b:3b:6d:f0:56:a6:57:e9: dd:79:7c:ae:ae:0e:7e:22:ce:38:86:c4:6e:94:3d:97:8e:38: 1b:c8:00:bf:9f:58:88:f3:9b:39:51:11:9a:f4:d8:18:8a:94: 3d:6e:8e:08:7c:23:91:33:dd:37:58:51:7e:21:92:6d:d4:cb: 24:e3:5c:e2:aa:a6:94:f2:29:20:d9:bd:c1:85:08:53:03:ab: 69:42:b7:31:cc:09:84:56:b9:d9:d1:b1:01:9e:e3:6f:3e:01: 8f:3b:3c:40:ed:62:ee:c5:81:a4:c0:39:08:0f:00:c8:d3:c1: e0:5a:72:a1:8d:53:6d:2c:00:83:64:54:ce:59:b9:cb:1f:99: 7f:b8:05:9a:a5:f4:5f:ba:6f:9d:7d:62:c4:6f:12:88:ef:c8: f2:dc:5b:df:8a:09:10:b5:ef:79:18:32:01:6f:ad:1f:2a:20: 46:d6:15:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXYAGADXSjo5fEOl5Zi2L7liKcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG NDExQkFDNTAeFw0yNjA2MDIyMDM1MDNaFw0yNjA2MDMyMTA4MDNaMDMxMTAvBgNV BAMTKEQ2MzY0RkY5QTU5ODE3RjA3RjM4NENEM0RDNTlDMDA4NUJEQjMyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKYT8VP1Lw+UyOK2zTzquDduir jzzbVH+Z+BnlJeEoIoz/mrQtFpTvCcJ7sO8UR+d83t1bolUs/lO4OcJQ20xxfIO4 GwdaP8jLC3acJHhaqv0zC4nOY2UgyxNtZL52q3nqbFGQX9Bu/vHcoebvkg6qrV1v IQZsIpUE7PcJV5ZNG+lScmr2fKeEnDbUOvM7JVLVGN/lpwohW5CUHtmX2t4kO5jR CuBgNkVmgxk4u20JcBQxdoWkIXsbSvp1RYCj4g1XncwmkJe1PsnD7wFaB56ExHed gd9TQ5cezaL6e2+Cu5GLzmy2FPcG8BU/NAL+N1tr7zNI/LmCeZHEdPCUu5yZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jZP+aWYF/B/OEzT3FnACFvbMo0wHwYDVR0j BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3 REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC QUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVB NDhGNDExQkFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIvEAJJn3z6a08WQ4Yb53OyB7MAQ7dJcLDI XCVRLffycwWKG82/NC7/beLVx74uNTyGX8BPSy0TpOZI7s0sKdMXS1/UuSCdBeVu qPl/kecxaROLO23wVqZX6d15fK6uDn4izjiGxG6UPZeOOBvIAL+fWIjzmzlREZr0 2BiKlD1ujgh8I5Ez3TdYUX4hkm3UyyTjXOKqppTyKSDZvcGFCFMDq2lCtzHMCYRW udnRsQGe428+AY87PEDtYu7FgaTAOQgPAMjTweBacqGNU20sAINkVM5ZucsfmX+4 BZql9F+6b519YsRvEojvyPLcW9+KCRC173kYMgFvrR8qIEbWFYc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:32 2026 by rpki-client