$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: CUhyHRxGKliK2SUEfGcTcqT+omGz5jMxc9JhC5V6HPE= Subject key identifier: EB:07:22:8D:3B:33:44:9E:AD:92:35:F0:1E:3A:3B:74:5D:F6:65:D9 Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 0ACEFA8054B42426B2E95F9B1AD1B30FBAB2AE7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 17:46:56 +0000 Manifest this update: Mon 31 Aug 2026 17:41:56 +0000 Manifest next update: Tue 01 Sep 2026 19:25:56 +0000 Files and hashes: 1: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: q518vAR5fl3rvnpN4y9/XdOIvreUzWY8mOtrtxIVKMQ=) 2: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 3: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 4: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) 5: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 19:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ce:fa:80:54:b4:24:26:b2:e9:5f:9b:1a:d1:b3:0f:ba:b2:ae:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Aug 31 17:41:56 2026 GMT Not After : Sep 1 19:25:56 2026 GMT Subject: CN=EB07228D3B33449EAD9235F01E3A3B745DF665D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:a9:9b:da:01:9a:1b:fa:5a:a1:db:af:7e: 79:20:ad:31:21:8c:86:e4:32:89:86:ae:28:68:c5: e2:11:82:84:ca:50:34:3b:e0:35:f9:8b:b9:92:24: ce:cd:56:76:76:c0:74:46:8f:f7:bb:f2:ef:8b:c0: 7a:eb:42:9b:23:65:3b:c7:7e:0d:00:0e:99:d2:84: 3a:76:af:53:57:14:38:8e:06:58:63:5b:0b:e9:39: c6:3f:31:34:78:7a:6b:30:77:71:a2:f7:03:a3:b0: 38:3f:5d:07:bd:f1:95:e8:e7:35:e6:c5:da:b4:4c: 5c:ac:04:0e:df:81:ba:26:ed:4a:d8:0f:5d:d9:15: 06:ee:73:8f:4c:4e:71:fe:5d:94:60:11:35:26:86: c8:02:d9:2a:ae:7f:cc:f5:9a:c5:30:90:b6:e1:02: 96:fb:0d:3f:b0:f5:c9:b1:b8:f2:3a:20:9f:f9:08: 93:3b:de:93:86:49:60:f0:95:2b:46:18:b3:24:fd: b2:d6:7c:74:b0:92:b3:80:23:47:67:2e:3f:3d:00: a3:c5:96:c0:8d:71:20:cf:70:b0:8b:e5:a8:c4:5c: d3:8b:88:82:16:ec:6f:9b:7e:96:d8:f6:01:4e:ec: 10:c4:9e:ad:be:38:c7:96:3f:46:80:70:a6:e4:64: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:07:22:8D:3B:33:44:9E:AD:92:35:F0:1E:3A:3B:74:5D:F6:65:D9 X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:17:31:1c:8d:7d:e2:e3:11:f4:9b:a3:99:ef:da:28:b0:36: b3:8b:df:51:d9:67:08:65:4d:e3:de:dd:09:36:96:b4:81:eb: b7:04:cb:b8:27:7a:72:6f:85:47:e8:a8:84:e9:61:a6:4e:a4: b7:56:f3:63:ee:f4:d4:90:6b:4a:45:b7:15:63:28:88:48:9a: f3:ac:65:03:d3:92:69:e8:40:f0:7a:81:ca:c3:97:54:1b:d7: 01:ef:d7:a5:5c:69:61:ab:49:b8:cd:69:95:16:ac:52:f6:06: 94:3a:48:85:2d:3f:98:02:51:2e:37:0b:d8:ab:ce:fb:73:d7: 43:2f:a9:82:b0:1f:95:a4:22:d2:f1:c7:76:8a:ad:9e:36:25: e0:32:dd:e7:0a:2c:8e:f0:9d:c7:68:03:f6:a1:51:ba:46:39: 70:d3:1a:d2:1f:40:2b:cc:8e:53:32:39:39:ba:55:a2:bc:fe: 8c:e6:63:8b:3b:9e:d9:4a:96:50:2b:c7:87:e0:97:7d:25:1e: 7d:9e:04:8d:ff:e4:08:72:6c:18:3d:34:27:22:6f:39:4b:ad: 67:6e:6f:5e:3a:48:6a:5b:78:ed:23:e7:2a:09:0c:43:25:4a: af:b5:51:b6:8d:5c:76:8f:0f:c7:71:4b:03:d4:c4:5b:23:65: 09:4b:89:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCs76gFS0JCay6V+bGtGzD7qyrnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA4MzExNzQxNTZaFw0yNjA5MDExOTI1NTZaMDMxMTAvBgNV BAMTKEVCMDcyMjhEM0IzMzQ0OUVBRDkyMzVGMDFFM0EzQjc0NURGNjY1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyKmb2gGaG/paoduvfnkgrTEh jIbkMomGrihoxeIRgoTKUDQ74DX5i7mSJM7NVnZ2wHRGj/e78u+LwHrrQpsjZTvH fg0ADpnShDp2r1NXFDiOBlhjWwvpOcY/MTR4emswd3Gi9wOjsDg/XQe98ZXo5zXm xdq0TFysBA7fgbom7UrYD13ZFQbuc49MTnH+XZRgETUmhsgC2Squf8z1msUwkLbh Apb7DT+w9cmxuPI6IJ/5CJM73pOGSWDwlStGGLMk/bLWfHSwkrOAI0dnLj89AKPF lsCNcSDPcLCL5ajEXNOLiIIW7G+bfpbY9gFO7BDEnq2+OMeWP0aAcKbkZG65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wcijTszRJ6tkjXwHjo7dF32ZdkwHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoXMRyNfeLjEfSbo5nv2iiwNrOL31HZZwhl TePe3Qk2lrSB67cEy7gnenJvhUfoqITpYaZOpLdW82Pu9NSQa0pFtxVjKIhImvOs ZQPTkmnoQPB6gcrDl1Qb1wHv16VcaWGrSbjNaZUWrFL2BpQ6SIUtP5gCUS43C9ir zvtz10MvqYKwH5WkItLxx3aKrZ42JeAy3ecKLI7wncdoA/ahUbpGOXDTGtIfQCvM jlMyOTm6VaK8/ozmY4s7ntlKllArx4fgl30lHn2eBI3/5AhybBg9NCcibzlLrWdu b146SGpbeO0j5yoJDEMlSq+1UbaNXHaPD8dxSwPUxFsjZQlLiV4= -----END CERTIFICATE-----Generated at Tue Sep 1 05:20:16 2026 by rpki-client