$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft (raw, json) Hash identifier: XZNoxkZd38FlCYpeDi6Fz/xbUvCo8WhCfO/RcVwNDk8= Subject key identifier: 7D:63:42:B4:D5:29:F8:34:9D:D9:D5:D3:E6:0E:DC:8A:EB:ED:7F:BC Authority key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Certificate issuer: /CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Certificate serial: 32E383E93036CC401381D2BA04F827599CB33B4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:31:38 +0000 Manifest this update: Thu 17 Sep 2026 10:26:38 +0000 Manifest next update: Fri 18 Sep 2026 12:08:38 +0000 Files and hashes: 1: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl (hash: TPl5+CB+A4hvfQRx+OoA2SUFACBJMElVD0EzH9QHpyg=) 2: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: vx1f/H1o8xw6yHs/uKwjoGpoC2+0kPIAw2YagPjwnHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e3:83:e9:30:36:cc:40:13:81:d2:ba:04:f8:27:59:9c:b3:3b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Validity Not Before: Sep 17 10:26:38 2026 GMT Not After : Sep 18 12:08:38 2026 GMT Subject: CN=7D6342B4D529F8349DD9D5D3E60EDC8AEBED7FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:e5:54:65:b3:28:ed:d6:7e:fe:66:d6:cd: 7e:fb:1a:c6:b8:1e:b0:cf:4d:33:cf:22:5a:68:8c: a0:4c:18:da:94:6b:7a:18:d9:4c:1c:5c:74:1a:5a: 36:6f:6e:42:2f:6e:31:32:f4:d4:8a:f8:d4:c8:f3: 54:80:40:40:ad:e8:15:73:36:65:fc:5e:5b:a7:ca: 46:9f:10:49:1b:ad:1f:8d:1d:ce:33:ce:f8:90:6f: ed:75:dd:1c:e3:7a:2e:2e:a8:ab:a2:12:f7:99:9d: a0:28:75:d0:ad:15:8d:6c:6a:cf:4f:2b:41:39:d6: 25:b1:13:c8:1e:ac:fb:6e:80:65:1e:8a:be:3b:91: 7e:08:ac:59:4e:7b:40:af:2d:23:05:47:45:91:a5: 3d:3f:89:2d:0e:24:bd:72:24:8c:69:44:04:2f:ba: 33:ad:b9:81:15:89:69:1b:44:c5:2f:9f:81:89:c8: 18:a1:87:90:19:2f:cf:ab:d3:8d:0a:f5:0d:d4:64: d1:e5:a7:8f:06:dd:81:48:9b:4a:09:3a:7a:da:17: f4:7e:39:9c:04:b3:91:86:5a:fc:33:84:86:17:53: 9f:13:05:bf:05:fc:2b:50:ee:98:d4:ae:d9:5f:40: f7:c6:6d:18:42:6e:33:65:a7:dc:56:0b:61:3f:05: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:42:B4:D5:29:F8:34:9D:D9:D5:D3:E6:0E:DC:8A:EB:ED:7F:BC X509v3 Authority Key Identifier: keyid:CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1e:bd:fd:f8:dc:00:48:42:a6:6d:3f:5d:c9:9c:f5:00:15: 91:59:64:3a:c3:61:a9:37:90:c0:62:b0:e0:e0:46:54:9d:aa: 26:ca:df:00:25:03:7e:f7:c5:5f:43:c9:64:5a:b1:51:1f:53: b9:c2:76:5f:9e:7c:f4:e6:9b:2a:30:05:da:6e:80:f4:c7:4b: 85:2e:c8:32:82:95:a8:40:55:d8:39:b4:c2:a3:80:22:b0:e5: 9c:1c:8c:75:28:91:0d:59:fe:6b:88:1b:4f:1a:2d:4a:76:f3: a1:b4:f6:33:14:9f:f6:a9:e2:fe:1a:be:d0:40:b8:e1:e1:c5: 53:6e:70:55:16:91:5a:79:c3:45:7f:28:da:06:b4:7a:03:69: 94:c9:a6:9b:93:24:b2:c2:88:cf:8b:ad:f3:19:9f:de:86:68: e3:75:fb:c6:81:00:4d:ed:65:cb:60:d5:41:bb:bb:40:2f:12: 97:29:a2:d9:9e:f3:d9:7f:f1:ca:1b:3a:f7:d9:66:9d:eb:0d: 4b:1a:00:77:09:4d:9a:3c:2e:8a:bc:19:53:dd:7e:74:b7:bc: 9a:3f:ef:f6:fd:35:14:40:ec:c1:4e:1b:05:fb:02:15:0b:ca: f8:9a:d3:ed:b6:e5:43:fc:5f:df:5c:be:7a:d7:c5:1b:cb:af: 75:c9:cf:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuOD6TA2zEATgdK6BPgnWZyzO0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3MjNF MEY5OEIwMDAeFw0yNjA5MTcxMDI2MzhaFw0yNjA5MTgxMjA4MzhaMDMxMTAvBgNV BAMTKDdENjM0MkI0RDUyOUY4MzQ5REQ5RDVEM0U2MEVEQzhBRUJFRDdGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+feVUZbMo7dZ+/mbWzX77Gsa4 HrDPTTPPIlpojKBMGNqUa3oY2UwcXHQaWjZvbkIvbjEy9NSK+NTI81SAQECt6BVz NmX8XlunykafEEkbrR+NHc4zzviQb+113Rzjei4uqKuiEveZnaAoddCtFY1sas9P K0E51iWxE8gerPtugGUeir47kX4IrFlOe0CvLSMFR0WRpT0/iS0OJL1yJIxpRAQv ujOtuYEViWkbRMUvn4GJyBihh5AZL8+r040K9Q3UZNHlp48G3YFIm0oJOnraF/R+ OZwEs5GGWvwzhIYXU58TBb8F/CtQ7pjUrtlfQPfGbRhCbjNlp9xWC2E/BfPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfWNCtNUp+DSd2dXT5g7ciuvtf7wwHwYDVR0j BBgwFoAUzsqGMMeqhUia63t1wbgXI+D5iwAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNjNzBmN2QtMzNmZS00ZGYyLTgxZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBD N0FBODU0ODlBRUI3Qjc1QzFCODE3MjNFMEY5OEIwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNBODYzMEM3QUE4NTQ4OUFFQjdCNzVDMUI4MTcyM0UwRjk4 QjAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvQ0VDQTg2MzBDN0FBODU0ODlBRUI3Qjc1QzFCODE3 MjNFMEY5OEIwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIevf343ABIQqZtP13JnPUAFZFZZDrDYak3 kMBisODgRlSdqibK3wAlA373xV9DyWRasVEfU7nCdl+efPTmmyowBdpugPTHS4Uu yDKClahAVdg5tMKjgCKw5ZwcjHUokQ1Z/muIG08aLUp286G09jMUn/ap4v4avtBA uOHhxVNucFUWkVp5w0V/KNoGtHoDaZTJppuTJLLCiM+LrfMZn96GaON1+8aBAE3t Zctg1UG7u0AvEpcpotme89l/8cobOvfZZp3rDUsaAHcJTZo8Loq8GVPdfnS3vJo/ 7/b9NRRA7MFOGwX7AhULyvia0+225UP8X99cvnrXxRvLr3XJz2A= -----END CERTIFICATE-----Generated at Thu Sep 17 15:23:34 2026 by rpki-client