$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft (raw, json) Hash identifier: j56pMucWBmRoIvFbbWTZAi6JxRa8PjhhPsF1mpyqBog= Subject key identifier: 13:D8:F8:CD:38:96:3A:09:E4:5B:43:78:9C:40:ED:09:60:D0:81:F9 Authority key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Certificate issuer: /CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Certificate serial: 794152A68A775768D74B57C90C13E0521AC6C39B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:25:06 +0000 Manifest this update: Thu 17 Sep 2026 05:20:06 +0000 Manifest next update: Fri 18 Sep 2026 07:50:06 +0000 Files and hashes: 1: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IkerkjqgnhBAn5EejyZFy6lrwBbURS4/dFzRwIvSKxM=) 2: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: 3KlRb2Xxps0pa33onoIOEPbzzvYPuOJ6GZ6dlFF3dyg=) 3: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: VNYYS2GDQmFWdOUq1UzUKPeHy/hhrUowLycYAkc8LZ4=) 4: CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl (hash: Y2EEWuXDeshZH2CXqK8meiiNPzVzCXTjdUtX1zu9JGE=) 5: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: /5UsQ72wkftXufGALBqkedRUAuHfRHvsc0Wy+KWVZoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:41:52:a6:8a:77:57:68:d7:4b:57:c9:0c:13:e0:52:1a:c6:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Validity Not Before: Sep 17 05:20:06 2026 GMT Not After : Sep 18 07:50:06 2026 GMT Subject: CN=13D8F8CD38963A09E45B43789C40ED0960D081F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e2:e6:ff:a7:88:77:3c:88:e0:e7:87:6a:6f: cf:5b:ce:68:a0:e8:2c:93:78:14:35:28:a7:eb:65: fe:da:5c:51:28:33:1b:fd:1e:97:3e:83:78:3e:34: 5b:bd:3f:df:33:08:6b:c5:5d:4c:0e:03:a0:94:be: 15:47:26:f7:67:62:88:9f:69:59:70:65:7f:18:80: 36:49:8a:16:bf:c0:c0:2d:ad:4f:96:52:59:48:68: 8c:f8:c8:45:3f:29:8b:1e:7f:c5:fb:ce:89:8b:ca: 78:e0:c5:1f:3a:ec:c0:e4:c5:28:f5:9a:ab:ed:81: 9e:c8:f0:55:f8:50:a7:6b:1e:74:84:15:ca:f3:0d: 08:c6:06:54:1d:a6:70:c0:61:b3:f9:d2:8b:59:f6: e8:f6:4d:83:98:72:1f:35:10:62:41:fe:bb:7c:ec: 91:5c:29:84:02:c6:6d:8c:96:da:2f:5c:37:f3:ca: 25:c2:d8:57:73:15:92:c7:b0:58:e3:04:01:e6:8c: 7d:27:7f:f9:82:9b:b4:c5:6d:bf:de:19:e5:8d:90: 99:e9:19:80:00:a9:54:af:41:c3:98:5e:2d:db:b2: 59:62:de:25:c2:a3:34:0a:ef:f0:65:d9:7f:ac:30: ce:3e:b9:94:6c:ff:63:45:ed:08:5c:2d:25:e9:98: 39:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D8:F8:CD:38:96:3A:09:E4:5B:43:78:9C:40:ED:09:60:D0:81:F9 X509v3 Authority Key Identifier: keyid:CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0a:2e:63:18:02:2a:c3:64:c0:01:5f:ef:41:6f:f0:48:00: 74:8d:8c:96:94:b6:c5:b9:01:ba:a1:39:e1:5f:09:f5:e9:07: f9:0f:0a:26:a3:ca:71:0d:86:f6:45:59:19:11:7e:61:61:a8: d0:82:d0:22:77:bf:c5:aa:a0:cf:7f:d7:3f:53:48:6e:2e:57: 85:8b:40:25:32:38:4d:8c:df:27:8d:a7:4b:2f:1c:78:3d:9d: c5:17:18:82:19:52:68:eb:f0:87:31:31:ad:c9:8d:a8:d1:7b: 50:7d:0b:ba:ae:21:6f:57:d8:73:3d:53:d5:40:d6:dd:4e:51: a7:99:45:a1:a5:59:a7:83:48:1b:68:cb:ba:15:30:02:a9:13: c0:ac:eb:bd:38:0e:78:d4:a3:66:39:87:95:51:c1:ad:40:75: 26:ca:9f:11:e5:b7:7d:95:7c:28:4f:bd:51:a2:4f:cb:04:42: 3f:ea:fd:c3:5a:71:b9:c6:13:e2:00:01:7a:5d:f2:23:75:01: 73:90:95:b5:f4:2d:6c:e0:4c:a0:8d:2f:84:8c:fa:b2:ca:ee: e3:35:fb:fb:88:79:80:f7:79:90:be:53:6b:6f:b8:b6:ca:0d: 6a:81:b7:a1:43:3c:87:1b:55:9d:98:d9:18:10:32:5f:3e:cd: c9:a6:df:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUFSpop3V2jXS1fJDBPgUhrGw5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZF RDdFODU0QjAeFw0yNjA5MTcwNTIwMDZaFw0yNjA5MTgwNzUwMDZaMDMxMTAvBgNV BAMTKDEzRDhGOENEMzg5NjNBMDlFNDVCNDM3ODlDNDBFRDA5NjBEMDgxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ4ub/p4h3PIjg54dqb89bzmig 6CyTeBQ1KKfrZf7aXFEoMxv9Hpc+g3g+NFu9P98zCGvFXUwOA6CUvhVHJvdnYoif aVlwZX8YgDZJiha/wMAtrU+WUllIaIz4yEU/KYsef8X7zomLynjgxR867MDkxSj1 mqvtgZ7I8FX4UKdrHnSEFcrzDQjGBlQdpnDAYbP50otZ9uj2TYOYch81EGJB/rt8 7JFcKYQCxm2MltovXDfzyiXC2FdzFZLHsFjjBAHmjH0nf/mCm7TFbb/eGeWNkJnp GYAAqVSvQcOYXi3bslli3iXCozQK7/Bl2X+sMM4+uZRs/2NF7QhcLSXpmDm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9j4zTiWOgnkW0N4nEDtCWDQgfkwHwYDVR0j BBgwFoAUzsciPcMWLWi1sXP1R5Zwxu1+hUswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQwMmRhYTUtZmIwYy00YTI0LTk4ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RD MzE2MkQ2OEI1QjE3M0Y1NDc5NjcwQzZFRDdFODU0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUM3MjIzREMzMTYyRDY4QjVCMTczRjU0Nzk2NzBDNkVEN0U4 NTRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3M0Y1NDc5Njcw QzZFRDdFODU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQKLmMYAirDZMABX+9Bb/BIAHSNjJaUtsW5 AbqhOeFfCfXpB/kPCiajynENhvZFWRkRfmFhqNCC0CJ3v8WqoM9/1z9TSG4uV4WL QCUyOE2M3yeNp0svHHg9ncUXGIIZUmjr8IcxMa3JjajRe1B9C7quIW9X2HM9U9VA 1t1OUaeZRaGlWaeDSBtoy7oVMAKpE8Cs6704DnjUo2Y5h5VRwa1AdSbKnxHlt32V fChPvVGiT8sEQj/q/cNacbnGE+IAAXpd8iN1AXOQlbX0LWzgTKCNL4SM+rLK7uM1 +/uIeYD3eZC+U2tvuLbKDWqBt6FDPIcbVZ2Y2RgQMl8+zcmm31o= -----END CERTIFICATE-----Generated at Thu Sep 17 14:41:57 2026 by rpki-client