$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json) Hash identifier: Dea+lL8BoItmAQjXJDbafDBvJRIC6XyeRYAtFK/BMpc= Subject key identifier: 78:CC:2A:72:00:D3:64:22:50:C2:09:27:A9:6A:92:60:39:03:A0:97 Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 0484024763984295611480873DBFDE0B9C42748D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 07:21:12 +0000 Manifest this update: Thu 18 Jun 2026 07:16:12 +0000 Manifest next update: Fri 19 Jun 2026 09:15:12 +0000 Files and hashes: 1: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: P21y8EWa1kdwJuPxZzJ4yIaZ/h55Pdi3p7VUFiEyDCs=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 09:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:84:02:47:63:98:42:95:61:14:80:87:3d:bf:de:0b:9c:42:74:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: Jun 18 07:16:12 2026 GMT Not After : Jun 19 09:15:12 2026 GMT Subject: CN=78CC2A7200D3642250C20927A96A92603903A097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:17:5b:50:52:e5:4f:c0:a2:f9:63:fc:8d:d8: 5a:64:99:40:6b:bf:8f:cb:64:f9:09:c9:66:75:9f: e2:52:2d:2a:e9:8d:a1:d0:36:df:d6:73:bc:13:bb: 9f:f3:bb:a4:58:23:d2:3a:57:92:f0:58:fc:0f:03: f2:be:1a:95:24:8c:02:49:19:c6:85:79:d7:88:35: 1c:da:65:8e:18:e2:d6:fb:90:e7:4b:e9:17:27:a0: a4:1a:cc:11:d3:c5:50:79:de:41:45:b8:9f:5f:b4: 64:e1:e3:c7:90:47:a5:30:96:3b:9c:a9:4f:e1:06: 29:34:30:b3:12:a0:05:ec:41:07:29:ba:bf:c6:40: 90:dc:50:1f:15:e1:e9:24:64:c7:fa:8b:43:6d:bd: 4b:44:fb:08:b6:32:8f:9a:4e:cc:38:ef:7b:06:4a: b9:e3:66:50:5a:49:ab:78:bf:ee:28:9f:97:b6:ec: 28:f6:f8:b6:5a:01:28:28:e2:61:a2:89:b6:26:02: 18:8f:73:8e:35:4b:89:97:ca:d5:22:a3:c6:33:ea: 2b:93:f8:ba:e2:f8:c1:8c:18:2e:c9:3c:88:48:f4: 1e:5c:63:d8:04:d5:95:60:ce:70:22:0f:f8:ec:20: 3e:49:10:8c:00:6a:0c:b3:00:7f:37:d1:cb:d4:6c: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CC:2A:72:00:D3:64:22:50:C2:09:27:A9:6A:92:60:39:03:A0:97 X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:91:07:b6:e2:cc:a7:5f:ab:0a:92:22:83:3c:9c:69:c1: f9:e1:32:6b:be:7f:34:3b:d8:3c:8e:8d:ad:4b:e9:6b:ef:45: eb:3a:bd:9b:d8:86:ec:58:93:47:b3:9e:c0:c9:63:ba:64:a1: 44:23:a9:5c:01:5a:5b:7b:4a:7f:49:75:65:bc:80:28:fa:e4: b7:e4:73:c8:e1:6c:5b:19:5c:6e:fc:70:fd:9b:bf:e5:48:03: 8a:8b:99:33:f0:ad:dc:d2:2e:6d:bf:34:67:60:f1:38:56:6d: 35:a2:7f:0e:d0:ab:8a:37:77:b7:ed:6d:d6:06:29:14:84:47: ea:52:62:d3:74:21:0c:a5:0b:be:10:58:20:ee:ec:d4:1e:a0: e6:5b:ad:80:ce:f1:d6:25:12:f1:b1:e1:ea:5b:2f:ca:1b:eb: 29:9a:dd:69:aa:49:ff:2e:c7:b8:8f:3e:28:fa:07:3c:37:98: ad:33:8c:c8:4a:71:cd:b1:c5:f5:56:98:87:0e:c5:61:d6:04: 0d:3f:6e:54:13:bc:78:6a:fe:5e:bf:dd:80:22:9d:9a:fc:4c: 61:fa:b3:85:e3:0a:0b:a4:2a:6e:9b:8f:f8:58:8d:90:a8:3d: 7e:dc:d6:2c:3e:a7:6d:d4:54:e8:ad:94:46:3e:1a:ce:ab:1d: c3:91:54:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIQCR2OYQpVhFICHPb/eC5xCdI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA2MTgwNzE2MTJaFw0yNjA2MTkwOTE1MTJaMDMxMTAvBgNV BAMTKDc4Q0MyQTcyMDBEMzY0MjI1MEMyMDkyN0E5NkE5MjYwMzkwM0EwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhF1tQUuVPwKL5Y/yN2FpkmUBr v4/LZPkJyWZ1n+JSLSrpjaHQNt/Wc7wTu5/zu6RYI9I6V5LwWPwPA/K+GpUkjAJJ GcaFedeINRzaZY4Y4tb7kOdL6RcnoKQazBHTxVB53kFFuJ9ftGTh48eQR6Uwljuc qU/hBik0MLMSoAXsQQcpur/GQJDcUB8V4ekkZMf6i0NtvUtE+wi2Mo+aTsw473sG SrnjZlBaSat4v+4on5e27Cj2+LZaASgo4mGiibYmAhiPc441S4mXytUio8Yz6iuT +Lri+MGMGC7JPIhI9B5cY9gE1ZVgznAiD/jsID5JEIwAagyzAH830cvUbH+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMwqcgDTZCJQwgknqWqSYDkDoJcwHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUx REZBODk3Q0UxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgDkQe24synX6sKkiKDPJxpwfnhMmu+fzQ7 2DyOja1L6WvvRes6vZvYhuxYk0eznsDJY7pkoUQjqVwBWlt7Sn9JdWW8gCj65Lfk c8jhbFsZXG78cP2bv+VIA4qLmTPwrdzSLm2/NGdg8ThWbTWifw7Qq4o3d7ftbdYG KRSER+pSYtN0IQylC74QWCDu7NQeoOZbrYDO8dYlEvGx4epbL8ob6yma3WmqSf8u x7iPPij6Bzw3mK0zjMhKcc2xxfVWmIcOxWHWBA0/blQTvHhq/l6/3YAinZr8TGH6 s4XjCgukKm6bj/hYjZCoPX7c1iw+p23UVOitlEY+Gs6rHcORVPI= -----END CERTIFICATE-----Generated at Thu Jun 18 20:57:04 2026 by rpki-client