$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json) Hash identifier: OqLqasNBj+u+GHOszou6a8xPpUEF8qoa8LzfDJDAwhw= Subject key identifier: 99:72:78:69:2C:7A:63:3F:F3:AE:DE:C7:D2:71:B1:C5:CF:D3:4E:36 Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 248072A5979AE85E3454D9DA9F77DCB0987B7E39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 21:18:06 +0000 Manifest this update: Sun 02 Aug 2026 21:13:06 +0000 Manifest next update: Mon 03 Aug 2026 22:19:06 +0000 Files and hashes: 1: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: H0JdJJTz2eAC4Mwyc+5LxFhfrmNNEEdfnS6kh9w6Kjk=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:80:72:a5:97:9a:e8:5e:34:54:d9:da:9f:77:dc:b0:98:7b:7e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: Aug 2 21:13:06 2026 GMT Not After : Aug 3 22:19:06 2026 GMT Subject: CN=997278692C7A633FF3AEDEC7D271B1C5CFD34E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:4e:60:93:ee:ba:7a:f4:ce:22:60:20:53: 07:79:1b:14:92:b4:b7:61:50:5b:83:19:c3:8d:fe: 89:44:88:a3:0f:94:05:e5:07:65:7f:e6:5b:22:95: 9f:34:dc:44:39:85:3f:b4:3f:9c:67:d5:50:5f:f3: 86:d5:27:81:64:da:ad:4f:35:10:de:04:ae:1a:38: b1:d9:68:80:35:e8:25:b6:33:61:46:a2:2f:57:ac: e3:c6:3d:2f:9b:e0:19:e5:1a:c1:40:84:fc:bd:06: 8c:65:92:15:7b:b0:68:71:8a:d4:68:15:84:0a:75: c9:29:0a:80:ab:c5:db:96:7a:f7:4a:e4:59:93:48: f1:4b:1f:30:cd:62:07:46:a8:6c:51:8e:44:0f:2d: ca:11:77:48:dd:05:39:41:08:22:32:69:f9:79:cd: 23:d4:78:02:84:a2:98:aa:68:95:9b:75:56:1d:29: 69:af:e4:b0:87:56:08:8f:93:8d:d3:2b:8f:c7:f0: 43:f3:a0:49:2e:2a:0c:b0:be:59:0c:dc:39:10:fa: b3:de:33:14:da:c7:aa:0f:d2:f9:8d:d7:c0:68:1a: dd:c8:94:97:e4:dc:21:0a:8d:48:88:1b:10:d6:56: 3f:cb:29:73:dc:ff:ef:ba:42:e3:c1:61:f8:56:b2: 71:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:78:69:2C:7A:63:3F:F3:AE:DE:C7:D2:71:B1:C5:CF:D3:4E:36 X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d2:78:af:28:f0:e5:9d:a0:2c:85:bf:63:8d:d2:88:3f:63: a9:ed:d0:e3:57:a7:6a:3c:78:a6:92:e8:97:33:30:fe:98:9d: f7:6d:2b:cf:3b:7d:a7:75:71:5b:41:a1:46:5a:f5:a1:04:79: 78:33:e1:85:88:f6:dc:4b:53:d9:a4:2a:0b:86:70:5e:89:2b: 1c:9d:34:66:44:0b:59:4d:0a:1b:ca:38:8d:35:42:53:af:9f: e2:65:ce:95:c4:c2:e4:57:d3:d6:be:10:32:a4:ca:67:57:8b: 69:86:3a:d9:3c:7e:fc:16:9b:d5:ce:b9:4f:ef:8d:4e:e7:a5: 71:60:20:d8:7f:39:42:64:4e:b7:86:56:33:e9:50:1f:79:95: e6:ee:13:00:89:b6:62:3c:23:fe:a6:53:33:62:d4:99:95:31: 68:a9:a7:95:1b:84:52:7b:9a:12:bf:62:49:7d:bc:58:ea:33: c5:13:be:04:1a:bb:05:ba:db:e1:97:43:3d:de:c2:4f:a6:a0: b1:f0:c0:ee:96:80:26:39:99:fa:74:3b:f5:24:18:80:60:4c: 50:76:4a:e5:18:e0:b1:a3:b0:47:56:e5:bb:38:3d:69:34:5a: ec:01:5d:74:95:e2:32:54:0d:ac:48:a3:54:b7:f3:b0:36:1a: ef:7b:1d:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIBypZea6F40VNnan3fcsJh7fjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA4MDIyMTEzMDZaFw0yNjA4MDMyMjE5MDZaMDMxMTAvBgNV BAMTKDk5NzI3ODY5MkM3QTYzM0ZGM0FFREVDN0QyNzFCMUM1Q0ZEMzRFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjE5gk+66evTOImAgUwd5GxSS tLdhUFuDGcON/olEiKMPlAXlB2V/5lsilZ803EQ5hT+0P5xn1VBf84bVJ4Fk2q1P NRDeBK4aOLHZaIA16CW2M2FGoi9XrOPGPS+b4BnlGsFAhPy9BoxlkhV7sGhxitRo FYQKdckpCoCrxduWevdK5FmTSPFLHzDNYgdGqGxRjkQPLcoRd0jdBTlBCCIyafl5 zSPUeAKEopiqaJWbdVYdKWmv5LCHVgiPk43TK4/H8EPzoEkuKgywvlkM3DkQ+rPe MxTax6oP0vmN18BoGt3IlJfk3CEKjUiIGxDWVj/LKXPc/++6QuPBYfhWsnEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmXJ4aSx6Yz/zrt7H0nGxxc/TTjYwHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUx REZBODk3Q0UxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnSeK8o8OWdoCyFv2ON0og/Y6nt0ONXp2o8 eKaS6JczMP6YnfdtK887fad1cVtBoUZa9aEEeXgz4YWI9txLU9mkKguGcF6JKxyd NGZEC1lNChvKOI01QlOvn+JlzpXEwuRX09a+EDKkymdXi2mGOtk8fvwWm9XOuU/v jU7npXFgINh/OUJkTreGVjPpUB95lebuEwCJtmI8I/6mUzNi1JmVMWipp5UbhFJ7 mhK/Ykl9vFjqM8UTvgQauwW62+GXQz3ewk+moLHwwO6WgCY5mfp0O/UkGIBgTFB2 SuUY4LGjsEdW5bs4PWk0WuwBXXSV4jJUDaxIo1S387A2Gu97HX4= -----END CERTIFICATE-----Generated at Mon Aug 3 01:44:09 2026 by rpki-client