$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft File: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft (raw, json) Hash identifier: tfFkg47UnI+yLncqKZFvfpXcW2HCvDyfQea126jqHWg= Subject key identifier: 02:FD:25:48:56:04:97:33:8A:E2:2B:62:A8:5F:20:47:6A:B3:15:CE Authority key identifier: CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 Certificate issuer: /CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Certificate serial: 340FC89DF22DA9C992DFE44B91785A0864926516 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft Manifest number: 34 Signing time: Thu 11 Jun 2026 02:19:27 +0000 Manifest this update: Thu 11 Jun 2026 02:14:27 +0000 Manifest next update: Fri 12 Jun 2026 05:01:27 +0000 Files and hashes: 1: CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl (hash: oEzUeU0p3KLEHy/pHoL5qIMjd4TQrMM2RpqQQFxicTM=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: dEG+unW2666RsnDsfqu11wDmAZTNa9qhZWenf3Lht9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0f:c8:9d:f2:2d:a9:c9:92:df:e4:4b:91:78:5a:08:64:92:65:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859 Validity Not Before: Jun 11 02:14:27 2026 GMT Not After : Jun 12 05:01:27 2026 GMT Subject: CN=02FD2548560497338AE22B62A85F20476AB315CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:db:60:8e:1d:2d:2b:2c:f9:e6:64:31:98: 12:16:f7:e9:a8:76:99:df:8b:46:69:dc:97:fb:1d: 85:72:62:f6:1b:5f:b7:c4:25:2a:08:28:26:81:1e: cc:67:01:6c:46:a1:a1:d4:3b:ea:a6:09:e8:e5:ae: 89:ef:59:b9:d4:ca:ed:34:92:e0:20:ee:5f:bc:79: 3c:c9:e7:64:67:72:64:6d:61:5b:ba:75:58:13:f3: cb:0c:40:50:d4:da:6a:51:6e:7f:2e:1b:60:a8:1a: 7b:c4:c9:3a:7d:cb:2d:49:fc:c9:14:d8:5f:0c:90: c9:20:da:b5:0f:69:d3:ee:4b:ba:0e:77:00:f4:ab: 71:dd:87:ea:6b:3f:7c:f2:7c:00:8e:ab:20:4e:24: 46:3d:04:e8:a6:2c:6e:db:4f:5f:43:59:9f:3b:11: 7c:f7:47:5c:c6:6c:80:23:1a:aa:d2:40:3b:a3:7b: be:01:ba:01:95:c9:20:eb:be:09:40:a3:67:cc:6e: 6a:66:89:ad:92:93:4f:57:5d:b0:0c:8b:33:5a:a2: 39:fd:ed:b7:c1:e7:a9:b3:2a:1c:8d:c1:eb:f7:21: 2b:2f:8d:20:e4:df:c0:5a:c6:8b:7e:aa:f7:7c:62: 72:d9:c2:65:57:ea:27:61:3e:c6:ea:af:01:9d:02: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FD:25:48:56:04:97:33:8A:E2:2B:62:A8:5F:20:47:6A:B3:15:CE X509v3 Authority Key Identifier: keyid:CE:CF:0F:1B:53:F6:EA:34:8D:F8:C9:63:CB:A0:68:6B:E4:BD:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/CECF0F1B53F6EA348DF8C963CBA0686BE4BD7859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7e:3c:41:f3:b1:b3:19:72:5f:13:be:76:38:b4:56:da:d0: 64:5b:cf:89:c9:53:9a:4e:ab:40:8c:24:99:6f:f4:27:44:f3: 13:56:8c:9c:15:a6:27:98:09:2a:f0:39:c5:34:02:27:83:af: 43:7e:7b:97:11:d6:49:bf:3d:8e:95:00:db:8e:32:07:fc:05: c3:ce:28:09:32:f2:33:2b:f8:0e:73:62:5e:a4:63:39:ca:e8: c1:a4:a3:ca:a5:c8:61:f3:e0:03:4a:3b:cd:e2:a0:3e:7f:76: 48:05:cb:7c:11:a4:dc:56:19:e3:1f:dd:a4:a2:80:a4:0e:5a: d7:04:9f:ce:d3:58:4f:0e:3d:24:d3:77:e8:47:3c:c4:4b:5c: cf:6d:52:82:ab:30:21:33:44:ce:e0:48:3d:73:bb:c3:55:62: 6c:34:3d:8e:d6:a0:d4:22:6b:22:bd:4c:fa:97:93:b9:ac:48: 54:9c:77:54:4c:85:66:10:f1:ef:d9:9e:54:03:03:77:16:ed: cf:b7:42:d1:8a:b5:55:2b:e0:5f:9b:58:57:d9:f5:ef:8d:23: df:03:d3:d8:97:6c:46:f2:ae:29:f8:23:de:02:f2:36:1d:71: 82:80:5d:96:e6:ad:a3:d6:b1:22:8a:06:e5:ab:48:11:92:75: c5:05:a7:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNA/InfItqcmS3+RLkXhaCGSSZRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJF NEJENzg1OTAeFw0yNjA2MTEwMjE0MjdaFw0yNjA2MTIwNTAxMjdaMDMxMTAvBgNV BAMTKDAyRkQyNTQ4NTYwNDk3MzM4QUUyMkI2MkE4NUYyMDQ3NkFCMzE1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX69tgjh0tKyz55mQxmBIW9+mo dpnfi0Zp3Jf7HYVyYvYbX7fEJSoIKCaBHsxnAWxGoaHUO+qmCejlronvWbnUyu00 kuAg7l+8eTzJ52RncmRtYVu6dVgT88sMQFDU2mpRbn8uG2CoGnvEyTp9yy1J/MkU 2F8MkMkg2rUPadPuS7oOdwD0q3Hdh+prP3zyfACOqyBOJEY9BOimLG7bT19DWZ87 EXz3R1zGbIAjGqrSQDuje74BugGVySDrvglAo2fMbmpmia2Sk09XXbAMizNaojn9 7bfB56mzKhyNwev3ISsvjSDk38Baxot+qvd8YnLZwmVX6idhPsbqrwGdAtvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAv0lSFYElzOK4itiqF8gR2qzFc4wHwYDVR0j BBgwFoAUzs8PG1P26jSN+Mljy6Boa+S9eFkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMzMjdmZmQtMWUyZS00YzUyLTk3MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1 M0Y2RUEzNDhERjhDOTYzQ0JBMDY4NkJFNEJENzg1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUNGMEYxQjUzRjZFQTM0OERGOEM5NjNDQkEwNjg2QkU0QkQ3 ODU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQ0VDRjBGMUI1M0Y2RUEzNDhERjhDOTYzQ0JBMDY4 NkJFNEJENzg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9+PEHzsbMZcl8TvnY4tFba0GRbz4nJU5pO q0CMJJlv9CdE8xNWjJwVpieYCSrwOcU0AieDr0N+e5cR1km/PY6VANuOMgf8BcPO KAky8jMr+A5zYl6kYznK6MGko8qlyGHz4ANKO83ioD5/dkgFy3wRpNxWGeMf3aSi gKQOWtcEn87TWE8OPSTTd+hHPMRLXM9tUoKrMCEzRM7gSD1zu8NVYmw0PY7WoNQi ayK9TPqXk7msSFScd1RMhWYQ8e/ZnlQDA3cW7c+3QtGKtVUr4F+bWFfZ9e+NI98D 09iXbEbyrin4I94C8jYdcYKAXZbmraPWsSKKBuWrSBGSdcUFp1c= -----END CERTIFICATE-----Generated at Thu Jun 11 20:42:24 2026 by rpki-client