$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft File: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft (raw, json) Hash identifier: Vd1UgIN6oBCbTf7N2ZtuyYPbxO4ogMLjI140F0woTLo= Subject key identifier: 3C:3B:63:A8:24:A8:52:64:89:30:31:2F:86:07:2A:74:DD:84:92:FE Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C Certificate issuer: /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Certificate serial: 2A50B4CE840BA13E5D75032B529FD5A17E973731 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft Manifest number: EB Signing time: Sat 24 Oct 2026 17:25:51 +0000 Manifest this update: Sat 24 Oct 2026 17:20:51 +0000 Manifest next update: Sun 25 Oct 2026 20:46:51 +0000 Files and hashes: 1: CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl (hash: O8Scrf2YqnK9BSiSnipPOUNCfurfU3sv70uwdWb18po=) 2: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: ubZK1JZSOkQSdT51nvL6YxDcdnyD6UzUmGgbeftTx40=) 3: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=) 4: 3130332e3234302e3130382e302f32322d3234203d3e203538383139.roa (hash: ymqzNsOJhmLcRFDDsoYR0MwzS6+nUhmsNkUUP+/NCsk=) 5: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: TA/s8DKqVENi0iNK6VJjUYJ9iOIFI3fpPu0mJtiANFQ=) 6: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: Zbsf0dYqnLxdlncAJCYqnzQ41srbRVWGXwAiyL3mwjg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:50:b4:ce:84:0b:a1:3e:5d:75:03:2b:52:9f:d5:a1:7e:97:37:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C Validity Not Before: Oct 24 17:20:51 2026 GMT Not After : Oct 25 20:46:51 2026 GMT Subject: CN=3C3B63A824A852648930312F86072A74DD8492FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:ac:b6:5f:3d:34:c6:9a:d4:64:4c:27:b1: 66:d9:66:49:9e:ac:36:b7:01:9b:a6:4b:c4:8e:e6: 5f:b1:e1:3d:c0:3b:10:e8:da:11:01:88:25:e2:fa: f1:08:07:35:44:d5:b9:c5:e5:3e:44:ea:6c:fb:04: 67:fc:cd:e9:4d:25:34:89:02:83:82:a8:d6:08:f1: c6:ba:57:21:ec:07:61:34:18:b6:f1:81:0c:a9:c5: 79:6d:7b:e3:06:d5:d9:db:a5:29:d1:f1:38:e0:fe: 7a:40:53:81:05:3d:23:51:71:2f:d1:a8:a2:f4:55: 41:1a:be:4b:68:18:56:8d:6a:53:9f:2f:a1:f5:35: 54:25:9b:6e:3a:31:86:65:3d:9d:3d:ee:43:7c:e6: 8f:ed:31:58:61:1c:8c:fd:77:b9:60:f9:9a:58:52: a4:49:23:45:2a:b2:25:32:6b:7d:75:96:4e:7c:4d: fe:aa:c1:29:cf:c6:fe:8e:41:1f:76:49:88:46:69: d7:bb:5c:70:d2:a7:e4:38:80:3e:9a:84:19:8b:5f: 96:80:01:d6:a8:70:de:2a:dc:c9:f1:4c:a3:d9:60: b9:8b:28:58:55:a8:ca:4e:fd:74:9d:66:f5:c8:26: 54:73:27:7c:60:5f:03:ca:46:a9:67:80:8f:d9:9e: 5f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3B:63:A8:24:A8:52:64:89:30:31:2F:86:07:2A:74:DD:84:92:FE X509v3 Authority Key Identifier: keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:95:e8:c7:41:9a:1d:12:55:42:e5:94:88:22:10:fa:68:86: ce:7a:11:77:a1:86:e0:1f:cb:b8:8b:aa:07:a2:10:15:26:3c: 15:ed:a5:56:e9:0b:62:f1:be:3f:20:14:78:45:f8:c0:60:eb: ac:a3:b4:9e:27:82:36:7a:53:c8:ae:4e:15:20:dc:8c:41:d5: 28:dd:54:89:cb:a0:8f:73:6e:a2:30:7f:e3:f1:bf:0d:44:24: 7e:9b:a9:bc:0f:86:d0:39:4c:25:d1:fc:b8:7a:5c:0d:4d:b6: e9:56:da:df:72:5d:05:2d:1c:28:37:50:ff:d1:19:2e:0b:1f: 10:91:d5:16:f6:3d:c1:b3:04:3e:e0:9f:0e:77:39:c5:d6:35: 5e:dc:e2:54:f8:7c:bb:7f:6b:64:6f:7e:4f:e4:5f:0d:bd:24: 27:6d:61:f6:26:64:bb:8b:f9:7c:e5:28:60:fb:ad:78:6d:77: 67:d6:e2:ef:89:34:c3:d8:88:48:09:2f:53:5e:52:5f:dc:37: 6a:f2:f8:6d:29:6b:b0:33:e8:5e:03:a1:43:04:5b:06:ec:71: 72:6c:fb:1c:6e:cc:5f:62:e1:13:5d:7c:49:f5:4e:4d:2a:bb: 8a:5d:84:f6:bf:52:86:30:58:44:d4:25:a1:08:40:50:2f:5b: cc:1e:34:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlC0zoQLoT5ddQMrUp/VoX6XNzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQw Q0YzM0MxQzAeFw0yNjEwMjQxNzIwNTFaFw0yNjEwMjUyMDQ2NTFaMDMxMTAvBgNV BAMTKDNDM0I2M0E4MjRBODUyNjQ4OTMwMzEyRjg2MDcyQTc0REQ4NDkyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kay2Xz00xprUZEwnsWbZZkme rDa3AZumS8SO5l+x4T3AOxDo2hEBiCXi+vEIBzVE1bnF5T5E6mz7BGf8zelNJTSJ AoOCqNYI8ca6VyHsB2E0GLbxgQypxXlte+MG1dnbpSnR8Tjg/npAU4EFPSNRcS/R qKL0VUEavktoGFaNalOfL6H1NVQlm246MYZlPZ097kN85o/tMVhhHIz9d7lg+ZpY UqRJI0UqsiUya311lk58Tf6qwSnPxv6OQR92SYhGade7XHDSp+Q4gD6ahBmLX5aA AdaocN4q3MnxTKPZYLmLKFhVqMpO/XSdZvXIJlRzJ3xgXwPKRqlngI/Znl9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPDtjqCSoUmSJMDEvhgcqdN2Ekv4wHwYDVR0j BBgwFoAUzmIND1HLDuHI3yZMSIzjTQzzPBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQwM2FmMDEtZjIzOS00YTFmLTgxY2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1 MUNCMEVFMUM4REYyNjRDNDg4Q0UzNEQwQ0YzM0MxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTYyMEQwRjUxQ0IwRUUxQzhERjI2NEM0ODhDRTM0RDBDRjMz QzFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvQ0U2MjBEMEY1MUNCMEVFMUM4REYyNjRDNDg4Q0Uz NEQwQ0YzM0MxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByV6MdBmh0SVULllIgiEPpohs56EXehhuAf y7iLqgeiEBUmPBXtpVbpC2Lxvj8gFHhF+MBg66yjtJ4ngjZ6U8iuThUg3IxB1Sjd VInLoI9zbqIwf+Pxvw1EJH6bqbwPhtA5TCXR/Lh6XA1NtulW2t9yXQUtHCg3UP/R GS4LHxCR1Rb2PcGzBD7gnw53OcXWNV7c4lT4fLt/a2Rvfk/kXw29JCdtYfYmZLuL +XzlKGD7rXhtd2fW4u+JNMPYiEgJL1NeUl/cN2ry+G0pa7Az6F4DoUMEWwbscXJs +xxuzF9i4RNdfEn1Tk0qu4pdhPa/UoYwWETUJaEIQFAvW8weNEs= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:13 2026 by rpki-client