$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: A5CuZ8Yh9O+e9xc2jhYSA3sukVv8pGc/E8mpLGr5HN4= Subject key identifier: 02:95:24:EC:47:42:D6:38:DA:05:4C:46:0D:2C:8C:B3:A6:A5:45:79 Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 5B834BB4BDA417E32EBA4AB9FFB3CAE550D4205A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: AD Signing time: Wed 09 Sep 2026 22:56:04 +0000 Manifest this update: Wed 09 Sep 2026 22:51:04 +0000 Manifest next update: Fri 11 Sep 2026 02:11:04 +0000 Files and hashes: 1: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: g9YccPnepVKUJC/WtuYMu2TDegynNY0rCd+BbuIIhIw=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 02:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:83:4b:b4:bd:a4:17:e3:2e:ba:4a:b9:ff:b3:ca:e5:50:d4:20:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: Sep 9 22:51:04 2026 GMT Not After : Sep 11 02:11:04 2026 GMT Subject: CN=029524EC4742D638DA054C460D2C8CB3A6A54579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:25:91:c6:33:53:fd:90:67:fe:d5:c2:0f: 5e:c8:94:48:e8:11:c8:68:01:25:37:8e:e8:a5:a4: 8a:0d:5a:6c:f3:4a:7b:b3:0a:95:a8:4d:98:15:d0: 59:e5:2d:b1:cd:16:b1:e3:e8:fd:41:fb:0f:a7:b0: a6:bc:1b:84:b0:17:d9:91:c0:49:1b:6a:d3:6d:de: 51:24:3c:c1:c5:31:9f:92:49:ce:bf:05:2c:95:23: 65:da:67:1b:9f:5b:e9:f1:55:77:8f:65:08:f1:24: 37:63:1f:57:9a:1f:f8:0f:f7:17:53:12:17:bd:01: b2:f7:45:f9:c9:81:91:ac:29:6c:b0:01:e2:01:07: 3a:47:a3:96:84:a5:f1:84:bb:a4:ad:7b:54:32:bb: 84:a0:bb:8a:ff:36:0f:a5:d4:a2:04:9c:57:63:96: fb:5a:dc:37:fa:39:8b:5c:33:4d:31:a6:87:e2:bf: ee:14:c5:89:9e:c3:39:12:63:bc:11:97:d4:9c:be: 80:33:ad:4b:61:c4:0f:a9:29:d7:29:06:ce:1f:a8: d8:2e:d8:fa:7e:d5:4d:f6:59:68:c4:d0:7e:5a:96: 5e:38:e1:3a:04:97:24:56:49:4c:d6:d0:97:d5:2a: 2a:49:89:b7:6f:a8:e9:7d:ba:57:f5:c6:00:6a:33: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:95:24:EC:47:42:D6:38:DA:05:4C:46:0D:2C:8C:B3:A6:A5:45:79 X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ad:00:5a:46:7a:51:ca:9c:d4:ae:b0:9e:82:09:69:e1:40: 00:d2:c6:75:76:5d:7b:77:46:10:a1:03:32:6c:d2:fa:eb:2f: 87:b0:49:73:9a:47:6d:63:fa:96:d8:34:e7:2f:77:95:ac:5d: a1:35:b0:cc:58:f3:34:3d:44:04:f8:65:9b:db:62:9c:dc:14: 27:69:7c:81:8c:45:6c:78:59:b7:2f:8d:f0:e3:18:28:36:4b: 00:c5:c7:c9:b4:37:2f:9b:79:3a:40:72:47:4b:37:fb:05:7a: f7:32:32:a5:03:b7:a3:3e:3c:15:00:55:46:7f:dc:03:3d:30: 99:02:73:b7:6d:1e:a4:75:98:49:0e:bc:0d:31:ca:6a:5a:27: 4b:19:f7:d3:5a:22:11:ad:6b:ed:98:40:ef:1d:2a:b7:e3:1f: 80:4a:60:82:8c:34:6d:00:87:51:8b:19:a9:1a:f0:c2:46:f9: f3:14:1b:63:69:c5:0c:5c:61:73:f6:a2:ce:73:3f:d6:b9:66: ee:4b:62:f6:5e:6c:19:ae:9c:8f:a2:9d:39:0d:aa:1b:a0:28: 51:4d:34:33:89:03:f9:ef:de:6b:2c:c1:11:da:74:54:2a:b2: 63:ad:a3:30:84:00:9f:3f:94:f4:3e:51:ee:fd:96:a2:75:27: d8:70:3c:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4NLtL2kF+Muukq5/7PK5VDUIFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA5MDkyMjUxMDRaFw0yNjA5MTEwMjExMDRaMDMxMTAvBgNV BAMTKDAyOTUyNEVDNDc0MkQ2MzhEQTA1NEM0NjBEMkM4Q0IzQTZBNTQ1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2iWRxjNT/ZBn/tXCD17IlEjo EchoASU3juilpIoNWmzzSnuzCpWoTZgV0FnlLbHNFrHj6P1B+w+nsKa8G4SwF9mR wEkbatNt3lEkPMHFMZ+SSc6/BSyVI2XaZxufW+nxVXePZQjxJDdjH1eaH/gP9xdT Ehe9AbL3RfnJgZGsKWywAeIBBzpHo5aEpfGEu6Ste1Qyu4Sgu4r/Ng+l1KIEnFdj lvta3Df6OYtcM00xpofiv+4UxYmewzkSY7wRl9ScvoAzrUthxA+pKdcpBs4fqNgu 2Pp+1U32WWjE0H5all444ToElyRWSUzW0JfVKipJibdvqOl9ulf1xgBqM3LtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUApUk7EdC1jjaBUxGDSyMs6alRXkwHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6tAFpGelHKnNSusJ6CCWnhQADSxnV2XXt3 RhChAzJs0vrrL4ewSXOaR21j+pbYNOcvd5WsXaE1sMxY8zQ9RAT4ZZvbYpzcFCdp fIGMRWx4WbcvjfDjGCg2SwDFx8m0Ny+beTpAckdLN/sFevcyMqUDt6M+PBUAVUZ/ 3AM9MJkCc7dtHqR1mEkOvA0xympaJ0sZ99NaIhGta+2YQO8dKrfjH4BKYIKMNG0A h1GLGaka8MJG+fMUG2NpxQxcYXP2os5zP9a5Zu5LYvZebBmunI+inTkNqhugKFFN NDOJA/nv3msswRHadFQqsmOtozCEAJ8/lPQ+Ue79lqJ1J9hwPLs= -----END CERTIFICATE-----Generated at Thu Sep 10 16:58:13 2026 by rpki-client