$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft File: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft (raw, json) Hash identifier: CetdBX+0NPvM6oU3Z/Mituclw8RyXPRykinxhBLtdMY= Subject key identifier: 5C:20:ED:23:5C:2C:33:4F:26:98:E9:95:47:65:0C:78:C4:93:E1:E5 Authority key identifier: CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A Certificate issuer: /CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Certificate serial: 631E39C6824D0CA2254A511912A19B95296140E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:20:14 +0000 Manifest this update: Thu 17 Sep 2026 01:15:14 +0000 Manifest next update: Fri 18 Sep 2026 04:03:14 +0000 Files and hashes: 1: CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl (hash: BfgHtWfnUogjIYEsRECY75WDzdNcIENg1LKT415Xgsg=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: r6qxzQ/FpP4apM7+bFGMg0MnfLkYQkINU0oxwojw5KA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1e:39:c6:82:4d:0c:a2:25:4a:51:19:12:a1:9b:95:29:61:40:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5ECD1D687D040F7BDA17704649E1DFA897CE1A Validity Not Before: Sep 17 01:15:14 2026 GMT Not After : Sep 18 04:03:14 2026 GMT Subject: CN=5C20ED235C2C334F2698E99547650C78C493E1E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:de:ac:c8:2e:0e:02:e0:e3:a8:e7:38:37: 4a:01:83:b3:ed:ff:a8:45:71:b5:35:6f:2b:4e:00: 0f:86:a5:53:64:1e:3e:dc:82:49:ee:37:e2:0d:2d: cc:23:3d:01:e3:e4:53:4b:86:89:30:5a:a5:bb:cc: e9:bc:2c:9b:bd:c1:3f:c6:7d:a4:20:90:f3:31:ee: c3:eb:85:b4:72:ba:98:99:73:28:34:f9:bf:7c:36: 3a:d0:2b:a1:bc:05:b5:4a:dd:b4:60:32:c4:5e:76: a5:fb:d5:33:6a:06:0d:f4:d7:ff:f2:9c:f5:ba:12: c0:12:89:fe:4a:78:7f:27:92:b4:36:2a:43:bf:c3: 79:97:b6:bf:e2:95:ed:93:ae:b8:b7:37:c4:86:50: 4c:da:f7:81:5a:c5:44:80:b6:b8:c8:32:1b:91:66: cc:6e:d3:b5:7e:cd:79:dc:7c:85:af:eb:ab:39:52: cd:94:97:c0:77:3d:ff:1c:c4:a2:d2:72:ac:0a:f7: e8:1c:ba:1b:de:32:b5:a8:6a:71:44:b1:57:3b:63: b9:fb:9c:42:27:2e:ef:a1:a8:b3:84:a7:7e:e0:82: 4d:ac:83:82:21:18:15:bb:8f:ed:6e:9f:ea:6c:2c: 12:b9:9d:c6:ca:02:a1:49:80:c0:ef:44:43:85:13: 93:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:20:ED:23:5C:2C:33:4F:26:98:E9:95:47:65:0C:78:C4:93:E1:E5 X509v3 Authority Key Identifier: keyid:CE:5E:CD:1D:68:7D:04:0F:7B:DA:17:70:46:49:E1:DF:A8:97:CE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/CE5ECD1D687D040F7BDA17704649E1DFA897CE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:77:d8:b6:59:b3:8a:ff:af:26:5c:e8:15:ff:d3:e2:f4:46: 15:ea:61:cf:b6:8e:77:45:7a:ae:35:d5:45:2c:f1:a0:bb:48: 64:b2:0a:97:e9:04:8e:ab:80:fb:2d:54:35:5b:37:51:06:c2: 04:94:7a:b6:4d:05:16:1e:f6:fa:53:44:20:b3:1c:8e:d5:4d: b9:92:c8:5d:62:fd:af:52:0f:89:4a:fc:71:2f:ac:d1:3a:a3: 98:ad:74:18:e5:b8:5f:c8:5c:23:c8:ee:7e:a0:95:02:aa:81: cc:24:28:f9:e4:86:9b:46:54:e8:98:b9:03:17:9f:23:e0:a5: 52:c1:21:4d:10:29:90:f7:7d:53:73:de:dd:84:dc:6f:a9:dd: a7:88:51:81:0f:a4:ac:90:99:ba:8e:f0:2e:d8:5d:45:46:42: 82:65:12:31:e1:15:35:6a:3e:e0:df:73:c2:69:1c:a8:7e:37: d2:5c:b0:56:4e:91:5d:83:3b:b4:25:d4:16:22:65:bc:e0:e4: 88:00:44:fb:b5:aa:ab:cb:ac:4d:f8:30:19:22:20:3e:86:a7: cc:93:3c:70:b3:61:68:9a:d5:6b:89:1b:22:cb:ae:3d:46:ef: 91:82:8d:a4:d9:4f:b7:88:64:78:14:f5:ab:a7:15:61:77:fa: 2c:96:b2:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYx45xoJNDKIlSlEZEqGblSlhQOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUxREZB ODk3Q0UxQTAeFw0yNjA5MTcwMTE1MTRaFw0yNjA5MTgwNDAzMTRaMDMxMTAvBgNV BAMTKDVDMjBFRDIzNUMyQzMzNEYyNjk4RTk5NTQ3NjUwQzc4QzQ5M0UxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHd6syC4OAuDjqOc4N0oBg7Pt /6hFcbU1bytOAA+GpVNkHj7cgknuN+INLcwjPQHj5FNLhokwWqW7zOm8LJu9wT/G faQgkPMx7sPrhbRyupiZcyg0+b98NjrQK6G8BbVK3bRgMsRedqX71TNqBg301//y nPW6EsASif5KeH8nkrQ2KkO/w3mXtr/ile2Trri3N8SGUEza94FaxUSAtrjIMhuR Zsxu07V+zXncfIWv66s5Us2Ul8B3Pf8cxKLScqwK9+gcuhveMrWoanFEsVc7Y7n7 nEInLu+hqLOEp37ggk2sg4IhGBW7j+1un+psLBK5ncbKAqFJgMDvREOFE5MPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCDtI1wsM08mmOmVR2UMeMST4eUwHwYDVR0j BBgwFoAUzl7NHWh9BA972hdwRknh36iXzhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2 ODdEMDQwRjdCREExNzcwNDY0OUUxREZBODk3Q0UxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQ0QxRDY4N0QwNDBGN0JEQTE3NzA0NjQ5RTFERkE4OTdD RTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvQ0U1RUNEMUQ2ODdEMDQwRjdCREExNzcwNDY0OUUx REZBODk3Q0UxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB32LZZs4r/ryZc6BX/0+L0RhXqYc+2jndF eq411UUs8aC7SGSyCpfpBI6rgPstVDVbN1EGwgSUerZNBRYe9vpTRCCzHI7VTbmS yF1i/a9SD4lK/HEvrNE6o5itdBjluF/IXCPI7n6glQKqgcwkKPnkhptGVOiYuQMX nyPgpVLBIU0QKZD3fVNz3t2E3G+p3aeIUYEPpKyQmbqO8C7YXUVGQoJlEjHhFTVq PuDfc8JpHKh+N9JcsFZOkV2DO7Ql1BYiZbzg5IgARPu1qqvLrE34MBkiID6Gp8yT PHCzYWia1WuJGyLLrj1G75GCjaTZT7eIZHgU9aunFWF3+iyWsmQ= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:18 2026 by rpki-client