$ rpki-client -vvvf rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft (raw, json) Hash identifier: W/VgZhj+itcPcEgkome2eo4Mr/y+7M5GcjeeOoRhfjw= Subject key identifier: 7A:DC:D2:3B:1B:F7:FA:CD:CC:29:38:A3:A6:EA:F2:84:54:3D:A4:C3 Authority key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Certificate issuer: /CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Certificate serial: 6729576F94C2F43EDFE816AC6FA9BA2C062B31DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:03:54 +0000 Manifest this update: Wed 16 Sep 2026 19:58:54 +0000 Manifest next update: Thu 17 Sep 2026 20:10:54 +0000 Files and hashes: 1: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl (hash: 7AAMD7PsEGDVuT9RnElefzrdTVQA5IYPbEvD3k8X1Kw=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: W701XnzRp68q2ju50V8LTfQrMyEFAxYNvXNJc+815TM=) 3: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: bAYJsjQtRu+aYVmaWgkshTJ01ed0qF6a1B1HjXmthuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:29:57:6f:94:c2:f4:3e:df:e8:16:ac:6f:a9:ba:2c:06:2b:31:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Validity Not Before: Sep 16 19:58:54 2026 GMT Not After : Sep 17 20:10:54 2026 GMT Subject: CN=7ADCD23B1BF7FACDCC2938A3A6EAF284543DA4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:e0:6d:88:89:ba:dc:b7:1b:ca:01:d8:dc: 27:20:74:9e:b8:40:ab:7a:29:a7:6d:e9:e3:64:dd: 58:16:05:50:34:9b:05:ab:40:7d:65:d4:b6:49:df: 7d:53:ce:fa:ab:bd:cc:cd:2a:02:43:e1:8a:8f:b3: 88:33:2d:20:cd:39:17:10:07:42:a1:21:1d:d6:5e: 4b:83:7b:a8:75:ba:1d:55:63:83:03:f5:ed:b5:24: be:ef:29:c9:75:66:e1:4a:55:5c:cc:39:c0:f8:43: 23:3d:88:64:12:67:11:bb:a9:c4:79:70:1d:af:b1: 5a:31:6a:8a:6a:36:a4:72:cb:8f:32:cb:16:ab:70: 0e:e7:22:e6:a9:e0:b9:33:ec:0c:0b:22:37:aa:0d: 00:fa:e1:ac:f0:33:8d:eb:45:22:46:57:36:ed:e3: a1:13:b7:76:d9:a6:14:13:bc:a8:9a:52:cb:98:f9: 08:70:1d:55:27:cb:e2:5a:81:ea:91:27:09:30:0d: dd:41:e7:22:a1:5c:61:eb:6c:63:8f:16:6b:bf:56: 1f:cd:e1:c6:28:e7:6c:ee:5b:af:bb:1d:e3:14:4a: 74:9f:1f:64:85:73:49:55:b3:8b:9c:7e:70:97:ad: 5f:a4:27:b5:e3:ed:e1:5b:4e:40:66:d6:63:f0:82: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DC:D2:3B:1B:F7:FA:CD:CC:29:38:A3:A6:EA:F2:84:54:3D:A4:C3 X509v3 Authority Key Identifier: keyid:03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6b:45:8f:35:b2:e3:33:8b:4f:64:72:f7:2e:3b:a8:5a:4b: 14:55:bc:c7:b8:fc:47:a7:92:3b:e4:bd:64:f9:2c:8f:ce:46: cd:b9:c3:1c:1a:92:c7:3a:f7:59:0e:86:22:2b:2e:8f:ea:b5: dc:ac:ca:91:31:b9:e6:0c:a6:fa:f9:9c:fb:3a:2d:b7:ed:d4: 70:fa:9f:1d:c7:42:52:d4:a8:3e:18:35:2a:a9:44:0c:c3:82: 4d:f2:ee:2a:1e:e3:b0:6a:0f:2c:9f:66:c9:70:06:79:3b:ba: 04:c1:6f:a4:a7:9c:57:ca:79:74:ed:b3:b8:ad:4b:b4:f2:f2: a7:51:37:04:0f:d2:3a:be:22:a3:4d:23:78:2c:51:61:bc:5e: e9:52:b0:9c:34:3b:ae:3e:4b:80:67:ab:01:a6:63:b9:f0:16: ad:e3:84:6a:3f:c8:76:69:35:4f:7e:96:b8:31:cc:58:ec:da: b5:16:6d:9c:6c:2c:d2:d8:d8:db:0b:ff:42:40:3e:01:89:33: a3:5b:7d:40:8d:e5:57:d1:a4:79:40:6e:57:c4:b7:93:53:53: cd:e9:fd:1e:38:f4:a5:cd:cc:b4:db:0e:c1:a0:cf:d5:38:b6: 93:3e:aa:e6:9d:5c:69:32:61:b5:4d:73:15:a7:59:63:1f:fc: a3:b4:91:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZylXb5TC9D7f6Basb6m6LAYrMd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVB MEE0RUM5MDAeFw0yNjA5MTYxOTU4NTRaFw0yNjA5MTcyMDEwNTRaMDMxMTAvBgNV BAMTKDdBRENEMjNCMUJGN0ZBQ0RDQzI5MzhBM0E2RUFGMjg0NTQzREE0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXeBtiIm63LcbygHY3CcgdJ64 QKt6Kadt6eNk3VgWBVA0mwWrQH1l1LZJ331TzvqrvczNKgJD4YqPs4gzLSDNORcQ B0KhIR3WXkuDe6h1uh1VY4MD9e21JL7vKcl1ZuFKVVzMOcD4QyM9iGQSZxG7qcR5 cB2vsVoxaopqNqRyy48yyxarcA7nIuap4Lkz7AwLIjeqDQD64azwM43rRSJGVzbt 46ETt3bZphQTvKiaUsuY+QhwHVUny+JageqRJwkwDd1B5yKhXGHrbGOPFmu/Vh/N 4cYo52zuW6+7HeMUSnSfH2SFc0lVs4ucfnCXrV+kJ7Xj7eFbTkBm1mPwgu7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUetzSOxv3+s3MKTijpuryhFQ9pMMwHwYDVR0j BBgwFoAUA87l7PXYKsQ1u4JWlgpgZaCk7JAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzRlMWYzNzAtZjMxZi00N2VkLThhNDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNG NUQ4MkFDNDM1QkI4MjU2OTYwQTYwNjVBMEE0RUM5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wM0NFRTVFQ0Y1RDgyQUM0MzVCQjgyNTY5NjBBNjA2NUEwQTRF QzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvMDNDRUU1RUNGNUQ4MkFDNDM1QkI4MjU2OTYwQTYw NjVBMEE0RUM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZrRY81suMzi09kcvcuO6haSxRVvMe4/Een kjvkvWT5LI/ORs25wxwaksc691kOhiIrLo/qtdysypExueYMpvr5nPs6Lbft1HD6 nx3HQlLUqD4YNSqpRAzDgk3y7ioe47BqDyyfZslwBnk7ugTBb6SnnFfKeXTts7it S7Ty8qdRNwQP0jq+IqNNI3gsUWG8XulSsJw0O64+S4BnqwGmY7nwFq3jhGo/yHZp NU9+lrgxzFjs2rUWbZxsLNLY2NsL/0JAPgGJM6NbfUCN5VfRpHlAblfEt5NTU83p /R449KXNzLTbDsGgz9U4tpM+quadXGkyYbVNcxWnWWMf/KO0kXQ= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:49 2026 by rpki-client