$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: Vnv4bWLfXfH0jKoALcKDdMsBj1jiC2dGxe6ZEx1cTwM= Subject key identifier: 19:F3:27:2A:DB:78:68:6A:E1:2C:68:D6:90:DC:74:77:4A:87:0B:FC Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 5A81F410ACA97860B583AEC725DA7BC42B6EAFC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: 65 Signing time: Thu 16 Jul 2026 23:58:10 +0000 Manifest this update: Thu 16 Jul 2026 23:53:10 +0000 Manifest next update: Sat 18 Jul 2026 02:37:10 +0000 Files and hashes: 1: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 2: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: kb1Acuw/7Xt3L139JiZkrjYsMkwut/zNjfaQYeVEHTs=) 3: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 4: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 5: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 02:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:81:f4:10:ac:a9:78:60:b5:83:ae:c7:25:da:7b:c4:2b:6e:af:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Jul 16 23:53:10 2026 GMT Not After : Jul 18 02:37:10 2026 GMT Subject: CN=19F3272ADB78686AE12C68D690DC74774A870BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:a9:ab:03:96:fe:f2:ea:c1:04:c0:6a:89: 88:9c:fb:ee:59:40:3e:b3:1c:f1:d0:fc:a8:85:ac: a7:39:48:ea:f8:32:69:9f:f1:bd:32:a1:89:79:ff: 58:1e:7f:e7:26:2d:ce:2c:cb:5c:7d:d0:94:a0:12: d2:7d:e0:28:57:d3:5f:a8:5b:19:b8:63:d1:51:1a: ee:7f:62:1e:13:57:96:15:32:43:56:46:b6:e7:c4: bf:c7:2f:6c:f4:17:03:17:01:80:35:77:8c:6f:d7: 4f:c7:3e:09:23:55:64:69:2a:a0:fc:ae:89:40:35: 3d:9f:34:bd:42:c1:9b:12:e0:3d:8c:9c:3c:13:18: 5e:39:04:b3:7e:68:5d:96:fc:db:d6:c7:7a:0b:7b: 6e:51:e0:be:e7:98:86:2e:f5:e2:72:1b:4b:cd:8f: c6:75:b4:e7:8e:4e:8b:a0:4f:ce:18:ac:18:ee:ed: a0:7e:e1:6c:f0:ee:a1:2c:05:38:75:c8:20:d7:3f: de:5a:16:f3:51:b5:88:63:f3:91:d0:92:8a:44:36: 2c:ea:bc:4d:9a:1c:61:1d:21:2d:9f:fb:46:58:0d: fd:f7:88:ab:e4:77:9b:5b:71:ed:d4:0b:e2:35:1d: ea:75:e7:dc:26:e8:71:1b:61:a0:70:a6:23:55:fb: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:27:2A:DB:78:68:6A:E1:2C:68:D6:90:DC:74:77:4A:87:0B:FC X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4f:4f:8f:39:d4:0d:4f:b3:04:af:29:e3:d6:f6:47:6e:59: f6:bd:aa:7a:ce:33:6f:68:65:54:f3:b6:3d:e4:bc:63:81:13: cd:d8:8c:fd:5d:27:ed:29:46:f5:fe:06:81:6c:48:33:2c:d9: 95:af:ce:ba:45:37:03:89:ff:f0:4f:6d:15:68:b7:37:6d:39: 05:ad:97:d2:f8:25:e8:f8:dd:7c:ea:91:44:97:14:27:ac:59: 8b:86:dc:bf:26:7b:72:37:f2:7a:27:eb:57:c3:d6:49:54:91: f7:90:e2:9b:6c:a1:99:fd:9b:71:30:5a:86:dd:a3:79:e1:aa: 82:2d:f5:5d:87:19:20:ab:ca:f2:d2:a8:a7:d3:18:0d:f0:a1: cd:ec:16:1e:c9:2f:6c:35:46:41:7e:2f:61:4f:ca:d7:ec:14: 8a:6d:9e:89:95:76:bd:d9:54:60:47:30:64:e6:42:3b:46:0d: 0b:db:a1:5a:82:8b:b5:f8:bc:f5:1a:a8:fb:58:15:f4:54:6a: 91:11:d7:00:e0:51:b3:a7:e7:8d:f7:a3:ad:a6:3c:99:6b:3e: 61:0a:e0:78:46:2a:5b:cd:dd:7b:de:fb:06:fc:79:36:67:5c: 3c:8d:05:67:25:36:a0:cb:b2:9d:c4:e2:53:95:e8:20:94:98: 16:a0:83:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoH0EKypeGC1g67HJdp7xCtur8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA3MTYyMzUzMTBaFw0yNjA3MTgwMjM3MTBaMDMxMTAvBgNV BAMTKDE5RjMyNzJBREI3ODY4NkFFMTJDNjhENjkwREM3NDc3NEE4NzBCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIamrA5b+8urBBMBqiYic++5Z QD6zHPHQ/KiFrKc5SOr4Mmmf8b0yoYl5/1gef+cmLc4sy1x90JSgEtJ94ChX01+o Wxm4Y9FRGu5/Yh4TV5YVMkNWRrbnxL/HL2z0FwMXAYA1d4xv10/HPgkjVWRpKqD8 rolANT2fNL1CwZsS4D2MnDwTGF45BLN+aF2W/NvWx3oLe25R4L7nmIYu9eJyG0vN j8Z1tOeOTougT84YrBju7aB+4Wzw7qEsBTh1yCDXP95aFvNRtYhj85HQkopENizq vE2aHGEdIS2f+0ZYDf33iKvkd5tbce3UC+I1Hep159wm6HEbYaBwpiNV+yfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGfMnKtt4aGrhLGjWkNx0d0qHC/wwHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZPT4851A1PswSvKePW9kduWfa9qnrOM29o ZVTztj3kvGOBE83YjP1dJ+0pRvX+BoFsSDMs2ZWvzrpFNwOJ//BPbRVotzdtOQWt l9L4Jej43XzqkUSXFCesWYuG3L8me3I38non61fD1klUkfeQ4ptsoZn9m3EwWobd o3nhqoIt9V2HGSCryvLSqKfTGA3woc3sFh7JL2w1RkF+L2FPytfsFIptnomVdr3Z VGBHMGTmQjtGDQvboVqCi7X4vPUaqPtYFfRUapER1wDgUbOn5433o62mPJlrPmEK 4HhGKlvN3Xve+wb8eTZnXDyNBWclNqDLsp3E4lOV6CCUmBagg5A= -----END CERTIFICATE-----Generated at Fri Jul 17 10:11:26 2026 by rpki-client