$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: WhxHZYFwkqHH5OJd4ZDvQ0JnHsiSGV9IcIr5Ex50+yk= Subject key identifier: 76:21:0D:62:AD:6C:A7:C6:F3:CE:82:7B:CC:B4:F0:28:DB:23:46:4A Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 30253EFB08B052FB2098534E83DA6A1D1613C65A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: BF Signing time: Mon 21 Sep 2026 06:19:29 +0000 Manifest this update: Mon 21 Sep 2026 06:14:29 +0000 Manifest next update: Tue 22 Sep 2026 09:38:29 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 3: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: rHFYLv2HpNAd2XpTCB02b2K+M85+ma3ib5Pgm/d/VEk=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 5: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:25:3e:fb:08:b0:52:fb:20:98:53:4e:83:da:6a:1d:16:13:c6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Sep 21 06:14:29 2026 GMT Not After : Sep 22 09:38:29 2026 GMT Subject: CN=76210D62AD6CA7C6F3CE827BCCB4F028DB23464A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:cd:c9:7b:e4:2c:93:fa:ad:56:fd:d9:b0: c8:57:3a:66:05:55:82:df:dd:53:d9:f7:70:32:1a: 13:fe:f4:56:11:03:0b:5b:d7:60:27:34:2d:38:91: 3d:e3:2d:3d:2f:4b:28:32:91:bb:40:f6:46:0f:e0: ba:f0:43:3f:95:ac:8d:ff:7e:d1:57:74:17:b2:c9: b7:a9:e6:4b:72:2b:86:25:bb:6c:a5:83:1b:c3:5a: b1:84:a8:48:82:d6:09:05:66:d6:d8:af:df:9e:1c: 91:9d:8f:27:96:cd:5b:70:db:d0:3e:4c:6c:cd:13: e4:ac:ed:eb:1d:e2:29:22:de:e0:27:d5:be:04:a7: 90:e3:84:e2:de:2c:b2:16:b3:36:d3:18:5a:35:6c: d5:7f:13:b5:7c:43:e3:e1:ce:5e:4e:ac:ec:f5:e3: f4:fd:7e:03:eb:d4:25:6a:bf:7a:c4:69:49:33:4f: e3:01:a2:db:37:17:a4:d7:16:9b:fb:3f:26:95:64: 0a:c8:bc:d0:b1:88:e9:d3:d1:65:41:aa:f2:36:1d: 70:1a:07:41:af:f5:c1:cb:66:ae:8d:a7:c2:3f:0b: 74:36:2d:d4:ae:5b:23:77:31:9c:d8:7c:6f:0c:34: 23:10:41:0a:bd:a3:96:f4:82:ab:57:29:1b:71:6b: b2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:21:0D:62:AD:6C:A7:C6:F3:CE:82:7B:CC:B4:F0:28:DB:23:46:4A X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c6:12:18:ed:84:10:ea:ab:e6:69:46:47:f4:d9:a7:23:0a: 2c:f1:56:9e:4b:f3:5d:e9:8b:24:28:a2:a0:81:8c:f5:38:db: 88:47:8c:1d:e4:49:25:11:d9:da:d3:ce:92:71:97:a7:fd:d4: c6:26:1f:09:5b:61:80:21:e9:de:83:39:3d:27:19:79:92:4f: 08:33:aa:2f:bc:60:94:74:20:21:a3:52:1d:5a:fa:7d:cc:fd: a2:31:ac:b3:0f:93:a4:c0:15:30:f4:20:db:93:2c:50:4b:8c: e2:3e:53:d2:e7:a8:99:96:62:38:7e:cf:0b:93:34:2b:d2:be: 95:7a:53:ab:f9:8b:2b:5e:75:62:32:35:c3:46:9b:74:19:72: b7:8b:b2:94:17:8a:9a:64:3e:dd:2a:d1:21:4c:de:54:e5:50: 5b:61:36:a7:d8:d3:c5:c5:84:7a:3d:a2:65:f9:06:77:04:08: 36:b0:29:bc:c6:a2:e8:54:c7:f4:5b:81:87:68:46:b7:04:d6: 67:c3:9b:56:4d:17:e5:c2:a3:06:0b:a7:ba:41:32:f2:67:74: 89:fd:81:cd:21:42:87:8c:2e:f1:56:23:16:ae:5e:28:ee:0c: 7e:11:e8:bb:92:00:82:d5:5f:1f:cf:16:48:f0:c7:ca:83:fc: 5c:48:b3:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCU++wiwUvsgmFNOg9pqHRYTxlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA5MjEwNjE0MjlaFw0yNjA5MjIwOTM4MjlaMDMxMTAvBgNV BAMTKDc2MjEwRDYyQUQ2Q0E3QzZGM0NFODI3QkNDQjRGMDI4REIyMzQ2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+M3Je+Qsk/qtVv3ZsMhXOmYF VYLf3VPZ93AyGhP+9FYRAwtb12AnNC04kT3jLT0vSygykbtA9kYP4LrwQz+VrI3/ ftFXdBeyybep5ktyK4Ylu2ylgxvDWrGEqEiC1gkFZtbYr9+eHJGdjyeWzVtw29A+ TGzNE+Ss7esd4iki3uAn1b4Ep5DjhOLeLLIWszbTGFo1bNV/E7V8Q+Phzl5OrOz1 4/T9fgPr1CVqv3rEaUkzT+MBots3F6TXFpv7PyaVZArIvNCxiOnT0WVBqvI2HXAa B0Gv9cHLZq6Np8I/C3Q2LdSuWyN3MZzYfG8MNCMQQQq9o5b0gqtXKRtxa7KPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdiENYq1sp8bzzoJ7zLTwKNsjRkowHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDGEhjthBDqq+ZpRkf02acjCizxVp5L813p iyQooqCBjPU424hHjB3kSSUR2drTzpJxl6f91MYmHwlbYYAh6d6DOT0nGXmSTwgz qi+8YJR0ICGjUh1a+n3M/aIxrLMPk6TAFTD0INuTLFBLjOI+U9LnqJmWYjh+zwuT NCvSvpV6U6v5iytedWIyNcNGm3QZcreLspQXippkPt0q0SFM3lTlUFthNqfY08XF hHo9omX5BncECDawKbzGouhUx/RbgYdoRrcE1mfDm1ZNF+XCowYLp7pBMvJndIn9 gc0hQoeMLvFWIxauXijuDH4R6LuSAILVXx/PFkjwx8qD/FxIs6A= -----END CERTIFICATE-----Generated at Mon Sep 21 11:06:50 2026 by rpki-client