$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft File: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft (raw, json) Hash identifier: J76butK6uIFHCWe63iBd/D5pGKdTvKUsF83OpaFwMNU= Subject key identifier: 13:38:48:DB:37:00:BD:3E:5A:56:29:1E:01:FF:57:3B:06:34:56:61 Authority key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 Certificate issuer: /CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Certificate serial: 5EA02F323833BE589BADABE22581F32745069E77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:00:10 +0000 Manifest this update: Wed 16 Sep 2026 16:55:10 +0000 Manifest next update: Thu 17 Sep 2026 20:35:10 +0000 Files and hashes: 1: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl (hash: vQSAwQtLSHSl4qXvaKrQky1/ZpXkZJ6UmJiLP+2O/F4=) 2: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: mS9PRPKBDmGv104t2c/uWFhRF9qgpc8OIooHFMXaEg4=) 3: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: 12S1HOzE8Rs4umiuV1n2mL1hqQ5ALMTa7jdnK3K0btU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a0:2f:32:38:33:be:58:9b:ad:ab:e2:25:81:f3:27:45:06:9e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Validity Not Before: Sep 16 16:55:10 2026 GMT Not After : Sep 17 20:35:10 2026 GMT Subject: CN=133848DB3700BD3E5A56291E01FF573B06345661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:4f:41:5f:86:de:7a:e3:f8:6b:ba:c0:60: d4:fd:f9:62:34:66:41:17:b5:77:10:ba:29:17:e5: 37:09:18:f9:00:86:1c:f5:2c:82:d2:d2:a8:ff:96: 9b:5e:34:94:d0:a9:c4:07:61:5b:5b:25:60:42:ec: 21:eb:27:27:2e:a4:d3:d1:a4:ef:76:ac:31:4c:60: fb:aa:ad:26:d2:2b:8a:b5:31:38:30:1d:5d:df:09: 19:a1:12:de:12:c8:15:66:9a:2b:5f:fb:99:f7:33: aa:98:cd:65:d9:04:c5:48:ae:fd:3b:0e:f5:9d:15: 65:61:c7:ed:25:61:cb:8c:34:61:e6:cf:bd:48:77: 0d:ed:5b:4e:ac:05:b8:95:12:75:ea:23:47:ed:5f: 1c:f6:c4:0a:c0:81:17:94:8b:ad:92:da:56:1b:35: bf:45:e3:aa:21:c0:7b:32:39:c7:5e:f5:b6:94:34: f6:a1:2f:9a:7f:f0:65:05:05:5d:94:98:ef:dd:13: 7f:4a:dd:0c:c5:bf:d0:41:6d:53:cb:c7:2a:bd:55: 23:cc:c8:c6:a0:bd:e6:10:77:d4:25:d0:79:9c:5c: bd:76:13:19:e0:26:b5:5e:e3:7c:68:61:06:a3:5f: 46:f4:69:19:60:0a:6f:5b:e5:69:7c:44:05:36:c3: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:38:48:DB:37:00:BD:3E:5A:56:29:1E:01:FF:57:3B:06:34:56:61 X509v3 Authority Key Identifier: keyid:CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2f:2a:24:9d:6a:04:e8:08:de:95:bf:cf:bf:c4:85:67:9e: 2b:97:65:c2:b8:4d:a9:ab:a3:54:6e:73:d2:21:d6:ca:c0:81: 08:48:32:96:8d:d1:07:a7:6f:24:68:f7:58:42:1b:99:d6:ec: 69:2c:9c:fc:40:b2:b0:82:28:b3:e4:0b:74:9e:e2:8a:c8:62: 98:96:3b:5e:e6:a4:28:1a:05:15:a5:77:ef:b6:37:f7:4f:2b: 24:6f:bd:46:ab:cd:f9:99:0c:7b:39:4c:a1:90:b7:bd:5d:cc: 65:75:d6:49:ec:fb:69:8c:ff:51:ab:1c:ff:60:db:8b:99:3a: b8:6a:7f:28:9d:79:7f:7c:84:44:e4:53:6b:c0:5a:0a:ae:8b: 26:40:bf:6c:4b:7f:ec:84:48:ca:78:3a:ad:fc:aa:d1:8c:77: 0d:0c:2f:1e:ac:3a:c5:bb:80:d0:d1:5b:3a:6c:0c:a2:4b:30: 13:4e:b5:25:b1:d1:9c:6b:cd:d2:ae:ea:f1:79:32:5a:d7:bf: cb:0e:e5:0f:66:e5:8c:23:3a:fa:1a:a5:1d:1f:7a:6c:e4:ec: 28:15:e5:1e:ad:41:69:ad:85:df:2a:25:3b:22:0a:14:4e:fa: 74:e7:06:ab:15:0b:15:94:dc:ac:44:53:15:11:7c:ec:99:17: 1c:02:20:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqAvMjgzvlibraviJYHzJ0UGnncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNGMDlF MkVGMzlGNjAeFw0yNjA5MTYxNjU1MTBaFw0yNjA5MTcyMDM1MTBaMDMxMTAvBgNV BAMTKDEzMzg0OERCMzcwMEJEM0U1QTU2MjkxRTAxRkY1NzNCMDYzNDU2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQ09BX4beeuP4a7rAYNT9+WI0 ZkEXtXcQuikX5TcJGPkAhhz1LILS0qj/lpteNJTQqcQHYVtbJWBC7CHrJycupNPR pO92rDFMYPuqrSbSK4q1MTgwHV3fCRmhEt4SyBVmmitf+5n3M6qYzWXZBMVIrv07 DvWdFWVhx+0lYcuMNGHmz71Idw3tW06sBbiVEnXqI0ftXxz2xArAgReUi62S2lYb Nb9F46ohwHsyOcde9baUNPahL5p/8GUFBV2UmO/dE39K3QzFv9BBbVPLxyq9VSPM yMagveYQd9Ql0HmcXL12ExngJrVe43xoYQajX0b0aRlgCm9b5Wl8RAU2w5czAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEzhI2zcAvT5aVikeAf9XOwY0VmEwHwYDVR0j BBgwFoAUzoZsp6SPQnDYYRQejbg/CeLvOfYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc4M2VkMjgtNTg4MS00N2RhLWFlNjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdB NDhGNDI3MEQ4NjExNDFFOERCODNGMDlFMkVGMzlGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTg2NkNBN0E0OEY0MjcwRDg2MTE0MUU4REI4M0YwOUUyRUYz OUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvQ0U4NjZDQTdBNDhGNDI3MEQ4NjExNDFFOERCODNG MDlFMkVGMzlGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsvKiSdagToCN6Vv8+/xIVnniuXZcK4Tamr o1Ruc9Ih1srAgQhIMpaN0QenbyRo91hCG5nW7GksnPxAsrCCKLPkC3Se4orIYpiW O17mpCgaBRWld++2N/dPKyRvvUarzfmZDHs5TKGQt71dzGV11kns+2mM/1GrHP9g 24uZOrhqfyideX98hETkU2vAWgquiyZAv2xLf+yESMp4Oq38qtGMdw0MLx6sOsW7 gNDRWzpsDKJLMBNOtSWx0ZxrzdKu6vF5MlrXv8sO5Q9m5YwjOvoapR0femzk7CgV 5R6tQWmthd8qJTsiChRO+nTnBqsVCxWU3KxEUxURfOyZFxwCIMM= -----END CERTIFICATE-----Generated at Thu Sep 17 13:06:17 2026 by rpki-client