$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: wfIcCwhvJDKhy79oDCFSPFE6V8fi+a6zAegvSJmrV3s= Subject key identifier: E4:78:32:D7:F1:6F:9B:90:7C:A4:60:8E:61:C3:A2:5D:FC:BD:6C:BA Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 4B26BAE8EE75FBBAFB163DDFDAD676ECA3977BE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: 1A Signing time: Thu 21 May 2026 01:16:04 +0000 Manifest this update: Thu 21 May 2026 01:11:04 +0000 Manifest next update: Fri 22 May 2026 01:39:04 +0000 Files and hashes: 1: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: lDBKozbUIBfbuH/Cqzg/t+5uJYwrkQf8SzPFvKHs6XY=) 2: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 3: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) 4: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 5: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 01:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:26:ba:e8:ee:75:fb:ba:fb:16:3d:df:da:d6:76:ec:a3:97:7b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: May 21 01:11:04 2026 GMT Not After : May 22 01:39:04 2026 GMT Subject: CN=E47832D7F16F9B907CA4608E61C3A25DFCBD6CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:81:6c:13:e5:a7:d9:a6:92:99:f6:2a:da: b2:54:46:5a:05:11:68:ed:64:f2:30:7b:d7:8e:bc: 24:2b:a5:90:23:97:f1:84:14:fc:52:42:aa:a3:9b: 0b:49:e7:eb:7e:c2:b5:21:fc:1b:4d:f2:b7:36:ba: df:10:10:5f:eb:07:cb:90:84:b1:90:a4:f7:af:fe: 4e:98:95:b7:8c:2e:67:32:d1:de:da:90:b7:05:82: e6:44:87:52:29:38:30:20:24:9b:b0:b6:18:0b:32: 56:c4:03:d4:8d:4b:27:24:40:19:00:74:46:81:d8: 5f:e6:1a:eb:fe:14:d4:b9:3c:be:cd:e1:bb:e5:0a: f0:81:66:92:5b:c6:76:53:fc:e0:b0:b6:c5:8b:1b: 06:e1:48:cb:cc:47:4e:e7:5f:0d:13:62:1f:3f:89: 34:1a:c8:45:35:de:f7:69:f7:b1:c7:0d:eb:57:84: e4:fa:5a:7e:eb:d1:34:1d:ea:5c:3a:6b:6b:16:8e: 32:df:da:2b:ba:08:98:7c:26:ee:8b:90:90:f6:a8: 90:c7:eb:5a:a8:76:16:36:39:a2:e6:7e:38:49:59: d3:65:e8:4c:26:1a:a0:ff:06:8f:c0:5f:68:a3:b8: 8a:21:b0:cf:d6:16:7b:df:ec:5b:aa:ed:a5:23:76: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:78:32:D7:F1:6F:9B:90:7C:A4:60:8E:61:C3:A2:5D:FC:BD:6C:BA X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:88:dd:18:c7:b5:ad:9f:b6:e8:e3:e4:12:47:8c:05:ed:10: bd:4e:44:6b:de:05:f4:a9:ce:43:b7:d6:ca:16:e9:9e:a9:40: d2:79:cc:39:07:61:37:29:e7:f4:85:15:da:14:36:ed:f5:ed: 16:64:ca:e7:18:74:00:fa:13:65:4b:02:a9:9c:7c:ab:aa:73: 63:e7:04:b3:4d:3a:b3:b4:92:07:25:3e:5b:1c:4d:14:ad:cc: e8:f5:75:db:d8:0c:f5:75:2a:87:67:bf:c8:be:30:46:a7:81: 11:f9:79:81:aa:61:40:31:dd:30:dd:55:11:83:54:9b:21:af: a0:9d:7d:a7:90:c6:2c:95:96:29:a9:f1:38:23:fd:9e:be:33: 9d:52:6b:61:aa:a7:60:30:d9:c9:70:d9:09:2f:75:4c:99:e8: 73:a2:9b:17:e1:ef:91:10:69:c3:fd:26:d2:c1:5d:bd:23:17: 19:8c:25:85:b8:10:dc:c6:c0:98:fa:eb:45:cb:5e:5a:cd:7d: 7f:68:98:5b:d9:0c:f7:ee:64:5f:0e:2d:fd:73:f4:3f:a4:38: 7d:d2:c7:a7:ad:81:f2:df:d9:ef:55:97:3f:50:4d:09:8e:15: fa:fa:80:ff:b4:42:6f:45:d7:7c:af:9b:51:08:1d:95:5d:09: e0:cc:f4:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSya66O51+7r7Fj3f2tZ27KOXe+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA1MjEwMTExMDRaFw0yNjA1MjIwMTM5MDRaMDMxMTAvBgNV BAMTKEU0NzgzMkQ3RjE2RjlCOTA3Q0E0NjA4RTYxQzNBMjVERkNCRDZDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3YFsE+Wn2aaSmfYq2rJURloF EWjtZPIwe9eOvCQrpZAjl/GEFPxSQqqjmwtJ5+t+wrUh/BtN8rc2ut8QEF/rB8uQ hLGQpPev/k6YlbeMLmcy0d7akLcFguZEh1IpODAgJJuwthgLMlbEA9SNSyckQBkA dEaB2F/mGuv+FNS5PL7N4bvlCvCBZpJbxnZT/OCwtsWLGwbhSMvMR07nXw0TYh8/ iTQayEU13vdp97HHDetXhOT6Wn7r0TQd6lw6a2sWjjLf2iu6CJh8Ju6LkJD2qJDH 61qodhY2OaLmfjhJWdNl6EwmGqD/Bo/AX2ijuIohsM/WFnvf7Fuq7aUjdpq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Hgy1/Fvm5B8pGCOYcOiXfy9bLowHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGI3RjHta2ftujj5BJHjAXtEL1ORGveBfSp zkO31soW6Z6pQNJ5zDkHYTcp5/SFFdoUNu317RZkyucYdAD6E2VLAqmcfKuqc2Pn BLNNOrO0kgclPlscTRStzOj1ddvYDPV1Kodnv8i+MEangRH5eYGqYUAx3TDdVRGD VJshr6CdfaeQxiyVlimp8Tgj/Z6+M51Sa2Gqp2Aw2clw2QkvdUyZ6HOimxfh75EQ acP9JtLBXb0jFxmMJYW4ENzGwJj660XLXlrNfX9omFvZDPfuZF8OLf1z9D+kOH3S x6etgfLf2e9Vlz9QTQmOFfr6gP+0Qm9F13yvm1EIHZVdCeDM9F8= -----END CERTIFICATE-----Generated at Thu May 21 12:52:59 2026 by rpki-client