$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: A3lxGV8RpOxLyAUlgOicoSZtaIrtTQsdo8RHBkzISgo= Subject key identifier: 81:02:99:E1:58:AD:83:25:0F:BA:52:8A:01:A6:0B:DC:77:3F:20:66 Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 16A8E4799D4DE6D3E3CFC742BF9CF1EB917D956E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: 72 Signing time: Mon 27 Jul 2026 05:09:12 +0000 Manifest this update: Mon 27 Jul 2026 05:04:12 +0000 Manifest next update: Tue 28 Jul 2026 08:42:12 +0000 Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) 2: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: yTWT7c2cFre5BvyjyI8kmN/lKtG1Ek3bFcLOJP3ukGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a8:e4:79:9d:4d:e6:d3:e3:cf:c7:42:bf:9c:f1:eb:91:7d:95:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: Jul 27 05:04:12 2026 GMT Not After : Jul 28 08:42:12 2026 GMT Subject: CN=810299E158AD83250FBA528A01A60BDC773F2066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:d4:3c:bf:50:31:b8:aa:88:f1:31:8a:dc: c6:ce:3b:5b:c5:73:c3:93:55:90:bc:6f:ad:40:b8: 67:16:51:80:8a:c9:a3:24:9f:15:59:3c:08:41:c1: e7:b1:80:e4:7e:a4:51:38:8e:ed:d7:7e:3b:d7:59: 21:2b:b2:45:e0:12:ee:4a:fa:4e:8f:d2:4d:33:fd: 57:85:0b:fb:a5:f9:37:db:34:5a:a5:71:9d:84:d7: d5:63:34:ba:4a:e4:8d:9c:2d:44:ae:95:d0:bf:6f: 30:d3:15:f7:e9:50:4c:2b:a3:49:5a:79:8d:21:08: 66:40:73:c4:21:cd:9e:ee:ca:2f:87:eb:3b:7a:d4: 31:99:22:33:66:f3:02:33:04:23:fb:76:d1:41:23: 7a:d1:ca:34:e8:bc:78:ba:d4:90:8b:e7:7f:c0:40: 7e:4e:79:54:b6:6c:c1:88:69:5c:1d:35:a0:aa:32: 70:c7:db:94:3d:b9:fe:db:0c:31:9a:43:cb:93:ce: 3e:55:bc:ef:76:31:3d:79:cd:03:f5:00:d0:a8:63: 2c:c3:e5:30:fd:54:2e:f4:33:b0:9d:55:c3:97:0e: c3:82:47:96:5c:57:79:c9:5c:f2:99:9a:23:e1:0f: b2:92:3b:a5:d8:68:2a:3e:ec:b9:39:bc:c1:fa:c8: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:02:99:E1:58:AD:83:25:0F:BA:52:8A:01:A6:0B:DC:77:3F:20:66 X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fc:82:0d:3a:71:d2:51:10:da:f9:0b:ff:d2:9a:90:86:27: 82:03:26:b7:61:89:71:36:e8:2e:4f:56:34:7c:b5:2e:6a:d7: 05:3a:11:b0:ed:95:fb:e2:e1:1c:bd:63:14:a5:9f:9b:c4:c8: e3:6b:2e:da:60:c8:31:1a:6c:07:1b:f3:37:03:00:43:15:1c: 2b:a4:b0:8f:98:84:d5:51:59:d3:b8:3a:41:76:54:0d:0b:49: 20:57:3a:8a:a9:98:c7:f1:9e:21:10:82:3b:3c:83:20:35:ad: d9:08:e3:92:3b:35:0c:6d:0d:74:98:0f:72:db:a3:f9:aa:e3: df:ff:a2:5f:2f:85:22:12:eb:97:45:70:5d:01:12:6d:08:be: d4:f5:df:12:e8:0e:1a:fa:ef:d0:d4:d2:39:21:43:17:56:97: 40:6d:1f:c6:39:a8:b9:02:1b:9a:77:77:e5:c1:29:ed:5b:32: 88:2e:e5:2d:c7:d6:03:e4:ad:ec:a3:53:84:50:7e:dd:5e:be: 29:42:cf:90:a2:1a:d3:05:b4:30:59:0c:9c:8a:6d:42:43:af: ff:e5:2a:26:51:fb:dd:f6:a8:4c:d3:f3:8e:52:4d:dc:05:08: f3:29:e0:51:af:d0:79:cc:5f:16:33:e0:0d:cd:1b:9f:a7:5e: 61:16:88:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqjkeZ1N5tPjz8dCv5zx65F9lW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA3MjcwNTA0MTJaFw0yNjA3MjgwODQyMTJaMDMxMTAvBgNV BAMTKDgxMDI5OUUxNThBRDgzMjUwRkJBNTI4QTAxQTYwQkRDNzczRjIwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCC9Q8v1AxuKqI8TGK3MbOO1vF c8OTVZC8b61AuGcWUYCKyaMknxVZPAhBweexgOR+pFE4ju3XfjvXWSErskXgEu5K +k6P0k0z/VeFC/ul+TfbNFqlcZ2E19VjNLpK5I2cLUSuldC/bzDTFffpUEwro0la eY0hCGZAc8QhzZ7uyi+H6zt61DGZIjNm8wIzBCP7dtFBI3rRyjTovHi61JCL53/A QH5OeVS2bMGIaVwdNaCqMnDH25Q9uf7bDDGaQ8uTzj5VvO92MT15zQP1ANCoYyzD 5TD9VC70M7CdVcOXDsOCR5ZcV3nJXPKZmiPhD7KSO6XYaCo+7Lk5vMH6yH3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQKZ4VitgyUPulKKAaYL3Hc/IGYwHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGv8gg06cdJRENr5C//SmpCGJ4IDJrdhiXE2 6C5PVjR8tS5q1wU6EbDtlfvi4Ry9YxSln5vEyONrLtpgyDEabAcb8zcDAEMVHCuk sI+YhNVRWdO4OkF2VA0LSSBXOoqpmMfxniEQgjs8gyA1rdkI45I7NQxtDXSYD3Lb o/mq49//ol8vhSIS65dFcF0BEm0IvtT13xLoDhr679DU0jkhQxdWl0BtH8Y5qLkC G5p3d+XBKe1bMogu5S3H1gPkreyjU4RQft1evilCz5CiGtMFtDBZDJyKbUJDr//l KiZR+932qEzT845STdwFCPMp4FGv0HnMXxYz4A3NG5+nXmEWiFw= -----END CERTIFICATE-----Generated at Mon Jul 27 09:45:12 2026 by rpki-client