$ rpki-client -vvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: AP+Za5StHh67HmCLGDL+p4N+WFdDkIM5DrPpS3OcZus= Subject key identifier: 5B:E1:8B:C4:28:FD:77:E7:DC:F4:D5:46:89:BE:5B:D4:07:84:A9:56 Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 0C2348D9FD5B0E0B606BED71205BEF1CC57EBB02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 07:56:48 +0000 Manifest this update: Tue 28 Jul 2026 07:51:48 +0000 Manifest next update: Wed 29 Jul 2026 11:46:48 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) 2: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 5: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: EZIWZxjIDNp8brUXR0W0H38xwnVIAOOzraIHIlMEWfQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 11:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:23:48:d9:fd:5b:0e:0b:60:6b:ed:71:20:5b:ef:1c:c5:7e:bb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Jul 28 07:51:48 2026 GMT Not After : Jul 29 11:46:48 2026 GMT Subject: CN=5BE18BC428FD77E7DCF4D54689BE5BD40784A956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:c2:6d:24:cc:7d:58:35:4c:c4:b8:58:b3: de:6e:da:56:de:bd:c8:25:9b:d8:6b:bf:8e:5e:0a: 2f:31:44:cb:e3:73:a6:f3:15:7d:8d:1d:ed:14:4c: c4:17:e5:e8:6c:cd:fb:43:e7:6f:0a:f1:1a:f5:88: 23:24:b3:d0:cd:25:c1:f1:15:47:c8:00:53:25:28: 2d:4a:5c:e1:2f:6c:ae:ff:0f:9b:37:86:9f:00:13: f2:31:07:26:2d:4b:e1:01:e0:c9:b3:94:57:8b:f9: 6e:18:66:cf:c9:33:90:3f:03:b6:1d:d2:b9:b1:43: e0:bf:6e:0c:8b:a9:58:9d:39:9a:8b:0d:f8:63:35: 87:d0:a0:6a:0a:d3:fb:16:ac:f8:1d:80:2b:07:30: 58:b5:cb:d0:b7:11:d9:aa:2a:b2:0d:86:5d:ac:75: 32:e2:8c:8f:12:e0:9c:79:76:9d:da:e1:b5:00:2e: 65:30:c8:1b:2b:72:b4:d6:46:62:fa:d9:b0:ef:e5: 65:0e:c0:44:b2:51:f2:4b:59:58:a4:1f:d7:73:59: b2:7e:86:1a:fa:4c:fa:f8:a7:a6:40:ce:d3:50:ba: 90:a6:5a:8c:c6:92:1b:20:dd:85:31:5f:0e:6d:3c: 50:dd:61:c1:ca:b6:bc:a7:e0:83:cf:8c:55:7a:5c: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E1:8B:C4:28:FD:77:E7:DC:F4:D5:46:89:BE:5B:D4:07:84:A9:56 X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8a:3f:d7:fb:81:8a:a8:f2:dc:ba:44:60:19:03:b0:f6:5e: ab:41:44:f1:c0:42:e8:4c:a2:d5:6c:f3:9c:b4:94:d3:d7:c9: 32:ad:19:b8:6a:00:5a:50:ad:23:98:c6:36:c2:81:df:47:e4: dd:cf:e5:9a:a1:de:5a:b0:d6:e2:e8:a0:7d:3b:e1:68:6d:25: 2a:ed:43:06:52:90:55:2b:6c:5c:5c:d5:59:2a:b5:65:08:30: 4a:bd:ed:a9:22:09:43:f1:7b:30:4b:67:3a:aa:a4:70:6a:39: cc:24:91:01:6a:fe:61:1e:4b:ac:ee:66:94:45:43:10:c0:1f: 2f:51:54:38:7e:e5:d6:12:0b:f9:bf:75:40:ac:4d:0d:98:09: c5:83:0d:cf:ef:dd:4c:b2:60:83:6d:c9:ce:d6:44:a8:e1:f9: 24:ea:18:db:0d:d5:2f:80:b6:61:89:b6:ef:c8:e9:4d:eb:62: a4:7c:fe:07:d9:92:44:75:16:aa:6e:dd:76:d2:ac:f7:af:43: 58:b5:d8:a1:f7:7a:30:5d:88:9a:17:45:03:cc:0d:6f:67:00: f8:3f:31:eb:a3:ef:28:02:81:51:c0:3c:0d:95:d2:08:72:00: 97:89:1a:08:ac:c5:52:9e:76:42:da:2b:bf:04:83:ea:5f:81: 42:5c:a0:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCNI2f1bDgtga+1xIFvvHMV+uwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA3MjgwNzUxNDhaFw0yNjA3MjkxMTQ2NDhaMDMxMTAvBgNV BAMTKDVCRTE4QkM0MjhGRDc3RTdEQ0Y0RDU0Njg5QkU1QkQ0MDc4NEE5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQMJtJMx9WDVMxLhYs95u2lbe vcglm9hrv45eCi8xRMvjc6bzFX2NHe0UTMQX5ehszftD528K8Rr1iCMks9DNJcHx FUfIAFMlKC1KXOEvbK7/D5s3hp8AE/IxByYtS+EB4MmzlFeL+W4YZs/JM5A/A7Yd 0rmxQ+C/bgyLqVidOZqLDfhjNYfQoGoK0/sWrPgdgCsHMFi1y9C3EdmqKrINhl2s dTLijI8S4Jx5dp3a4bUALmUwyBsrcrTWRmL62bDv5WUOwESyUfJLWVikH9dzWbJ+ hhr6TPr4p6ZAztNQupCmWozGkhsg3YUxXw5tPFDdYcHKtryn4IPPjFV6XJ1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW+GLxCj9d+fc9NVGib5b1AeEqVYwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCKP9f7gYqo8ty6RGAZA7D2XqtBRPHAQuhM otVs85y0lNPXyTKtGbhqAFpQrSOYxjbCgd9H5N3P5Zqh3lqw1uLooH074WhtJSrt QwZSkFUrbFxc1VkqtWUIMEq97akiCUPxezBLZzqqpHBqOcwkkQFq/mEeS6zuZpRF QxDAHy9RVDh+5dYSC/m/dUCsTQ2YCcWDDc/v3UyyYINtyc7WRKjh+STqGNsN1S+A tmGJtu/I6U3rYqR8/gfZkkR1Fqpu3XbSrPevQ1i12KH3ejBdiJoXRQPMDW9nAPg/ Meuj7ygCgVHAPA2V0ghyAJeJGgisxVKedkLaK78Eg+pfgUJcoJw= -----END CERTIFICATE-----Generated at Wed Jul 29 01:00:29 2026 by rpki-client