$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft File: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft (raw, json) Hash identifier: XY7uDsNHn3GFLIdh9tTKXeEjwq0U8AmglqLw0GV71Sg= Subject key identifier: FD:E8:3D:D8:B5:4F:95:E7:53:44:E5:0E:8B:10:22:4A:B2:27:A5:10 Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 Certificate issuer: /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Certificate serial: 64037F2501195749ECE8CDAEE3BBAD4266006B2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 12:50:04 +0000 Manifest this update: Wed 16 Sep 2026 12:45:04 +0000 Manifest next update: Thu 17 Sep 2026 15:39:04 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (hash: xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=) 2: CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl (hash: PPrR6R8qQlC1dDQhwTcgBCqJAQ2GobErdC0fIfEwuLY=) 3: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: ocZrlLDRZyjY4x8l+fkxr8Jyua7oZYTwN5xYrKXbrJg=) 4: 3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (hash: CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:03:7f:25:01:19:57:49:ec:e8:cd:ae:e3:bb:ad:42:66:00:6b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5 Validity Not Before: Sep 16 12:45:04 2026 GMT Not After : Sep 17 15:39:04 2026 GMT Subject: CN=FDE83DD8B54F95E75344E50E8B10224AB227A510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:22:66:25:44:a4:47:86:06:30:a4:5d:98: 5d:81:1d:9a:2b:3c:52:fb:3f:83:63:62:83:89:ff: f3:7f:53:2b:9e:0d:6f:75:d1:de:e7:ec:ce:be:f6: 9b:15:e6:96:dd:5a:7b:42:c5:4e:27:4d:ab:b7:f7: e2:de:f4:0f:af:d3:06:15:96:90:50:52:8b:5b:d9: ff:70:d4:a7:65:2b:73:c9:f7:5c:93:12:37:1c:f1: 13:e0:f7:a3:9c:ed:32:7a:56:51:3c:3a:38:b6:70: 65:b2:cb:d8:21:06:9c:5c:fe:36:6a:1c:85:19:02: 7b:d3:2d:34:36:50:10:fc:c9:83:45:79:ab:b8:83: 99:82:d9:3f:b1:c7:98:fc:24:2f:b5:ce:f4:c8:f1: 01:a0:48:dc:59:50:08:e8:9d:fa:15:14:fc:23:b4: 8d:db:19:16:5c:6b:b1:b7:0f:a0:ea:11:85:b4:33: 94:ce:13:a5:19:09:59:67:8a:9f:d8:7d:40:f2:5d: 91:a2:8a:71:94:58:26:1e:5d:df:26:21:2b:c2:91: 1b:a1:b6:48:8d:5f:9b:93:8c:8c:ce:be:c9:b2:b3: 92:bf:05:b7:d7:ea:16:cd:34:fe:c6:42:20:1a:a3: f3:74:8f:a6:d8:7e:8f:a7:33:b1:00:c5:d3:7b:66: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E8:3D:D8:B5:4F:95:E7:53:44:E5:0E:8B:10:22:4A:B2:27:A5:10 X509v3 Authority Key Identifier: keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:57:a3:e4:77:c0:f1:51:1c:e1:a3:44:41:ac:47:95:b9:64: 08:91:ba:2e:e0:3e:13:13:b9:e6:73:33:f7:08:63:cb:b2:5c: e9:77:06:50:55:9a:0c:93:4e:ab:7d:62:7b:52:93:40:d0:e8: 0f:7d:57:be:c4:93:d9:78:f6:ce:c0:ac:a0:76:ea:9a:76:7f: 0a:f9:ed:98:f9:6d:08:d9:7e:aa:cd:d0:3c:6d:4b:45:92:5e: f2:5d:fd:05:d9:54:01:97:68:5e:83:d5:93:c8:2f:12:80:69: 8e:d1:49:52:d7:e7:48:31:cc:ca:69:8d:fe:01:0a:84:d8:2f: f9:00:8f:b9:5f:e0:77:70:e2:ea:43:63:a0:09:d1:90:0c:9e: 4c:3e:69:97:00:e2:b9:23:00:46:14:74:88:20:7e:f9:7a:89: 03:fe:15:9c:01:37:2c:a7:4a:53:07:0e:d1:72:fc:b4:e8:14: eb:85:22:ab:03:13:5c:8a:90:36:b3:d6:ce:eb:14:a7:4d:db: f7:17:5c:e4:c0:32:f7:d0:51:2f:7d:0f:b9:32:b7:e8:ec:22: 8b:6b:7d:97:e0:29:3d:7e:17:c4:61:8c:02:fc:f8:ca:67:6e: a1:ac:f8:c9:6a:97:2a:03:0e:c5:2e:06:a5:bc:a8:40:7f:a8: f7:36:bd:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAN/JQEZV0ns6M2u47utQmYAay0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG NDExQkFDNTAeFw0yNjA5MTYxMjQ1MDRaFw0yNjA5MTcxNTM5MDRaMDMxMTAvBgNV BAMTKEZERTgzREQ4QjU0Rjk1RTc1MzQ0RTUwRThCMTAyMjRBQjIyN0E1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidiJmJUSkR4YGMKRdmF2BHZor PFL7P4NjYoOJ//N/UyueDW910d7n7M6+9psV5pbdWntCxU4nTau39+Le9A+v0wYV lpBQUotb2f9w1KdlK3PJ91yTEjcc8RPg96Oc7TJ6VlE8Oji2cGWyy9ghBpxc/jZq HIUZAnvTLTQ2UBD8yYNFeau4g5mC2T+xx5j8JC+1zvTI8QGgSNxZUAjonfoVFPwj tI3bGRZca7G3D6DqEYW0M5TOE6UZCVlnip/YfUDyXZGiinGUWCYeXd8mISvCkRuh tkiNX5uTjIzOvsmys5K/BbfX6hbNNP7GQiAao/N0j6bYfo+nM7EAxdN7ZlxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/eg92LVPledTROUOixAiSrInpRAwHwYDVR0j BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3 REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC QUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVB NDhGNDExQkFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdXo+R3wPFRHOGjREGsR5W5ZAiRui7gPhMT ueZzM/cIY8uyXOl3BlBVmgyTTqt9YntSk0DQ6A99V77Ek9l49s7ArKB26pp2fwr5 7Zj5bQjZfqrN0DxtS0WSXvJd/QXZVAGXaF6D1ZPILxKAaY7RSVLX50gxzMppjf4B CoTYL/kAj7lf4Hdw4upDY6AJ0ZAMnkw+aZcA4rkjAEYUdIggfvl6iQP+FZwBNyyn SlMHDtFy/LToFOuFIqsDE1yKkDaz1s7rFKdN2/cXXOTAMvfQUS99D7kyt+jsIotr fZfgKT1+F8RhjAL8+MpnbqGs+MlqlyoDDsUuBqW8qEB/qPc2vZ8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:10:51 2026 by rpki-client