$ rpki-client -vvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: Tzftjce7HmzR4UdMlc3uzLxUdtbQ+COsJZU50rr5PSY= Subject key identifier: 32:C7:70:10:18:B7:CE:23:6C:D5:C4:CC:E0:75:86:37:1D:A4:C1:FF Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 5FD87D28A29458471AD5EAED2B9DDDC50169FE73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 05:35:46 +0000 Manifest this update: Sat 13 Jun 2026 05:30:46 +0000 Manifest next update: Sun 14 Jun 2026 08:43:46 +0000 Files and hashes: 1: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: IGrtdiid0ZE+xGlQOaKTna4dTgJpu2NLuY74W2VnlMg=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 4: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 5: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 6: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: mFbWoTOmfmUy9A6Zdh+QA4OmNagu//HZm5TsZoJfMkA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d8:7d:28:a2:94:58:47:1a:d5:ea:ed:2b:9d:dd:c5:01:69:fe:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Jun 13 05:30:46 2026 GMT Not After : Jun 14 08:43:46 2026 GMT Subject: CN=32C7701018B7CE236CD5C4CCE07586371DA4C1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:11:5c:50:e3:0b:09:4c:8c:01:6a:6f:55: b7:e1:43:0b:b6:56:26:ba:44:8a:03:3e:f7:e0:65: d6:3c:61:3a:de:98:4b:3b:d4:71:59:29:03:c1:83: 92:1d:19:50:84:58:77:79:ee:e8:26:d8:b0:fe:45: 7b:c7:bf:d6:c9:8a:16:9d:d1:0a:a0:57:06:ef:7c: b8:44:f9:3c:02:92:ef:9e:ff:6a:51:8c:75:5e:e9: f7:6a:76:02:d4:27:31:76:75:94:fa:72:e0:40:72: f4:6b:e5:90:02:bb:8e:79:38:05:ca:36:52:0e:48: 98:4a:35:5f:f3:17:28:71:5b:96:49:6e:09:04:9d: 7d:83:36:f4:5e:c5:cf:85:b5:c5:c3:6f:97:76:7c: f5:c1:80:6d:45:65:39:b8:85:fc:84:98:0a:ab:fe: 04:08:1d:63:b5:9a:26:4f:a0:4a:ed:49:1c:73:c3: ff:3b:b2:b5:34:0b:e8:92:da:2c:82:a4:d9:67:9b: 45:ad:b3:27:6d:20:98:75:a2:ee:75:f6:eb:1d:66: 03:29:e0:d5:e5:27:fb:04:1f:e1:bb:14:a2:06:f5: a1:f5:eb:06:39:73:78:bf:75:6c:e0:8f:c6:b9:59: 00:27:9b:31:01:93:29:80:31:36:ad:0b:72:4c:0d: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C7:70:10:18:B7:CE:23:6C:D5:C4:CC:E0:75:86:37:1D:A4:C1:FF X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:53:1d:6f:07:c5:9a:0d:30:b6:03:a4:a6:91:3b:34:6c:9e: 14:d7:c8:f5:69:e1:bc:42:78:45:b8:59:ba:75:48:1a:e8:58: 9b:59:c7:32:b6:be:ce:81:2f:58:ba:16:62:6f:c1:50:5b:d3: ba:9e:d4:74:80:f7:0c:69:a4:c1:c3:87:35:41:b1:ac:ee:3b: b6:ac:5a:07:35:31:48:3d:d3:fb:38:f8:1a:0e:7e:d9:ed:dc: f3:60:55:8a:79:6d:91:79:b0:94:a3:a3:10:c8:7c:df:6b:55: 67:5e:83:15:e7:bf:82:bb:e8:cd:5b:6a:a2:b3:b7:53:4f:80: 25:b0:2d:07:d3:f2:18:5c:5c:c1:55:48:b9:5d:c3:1e:f1:f8: af:45:19:a1:40:bb:25:25:87:0e:bf:34:f7:17:9d:bf:ce:4e: 16:90:82:af:a2:84:60:8a:27:fc:5d:2d:fe:97:c3:4e:31:f7: 0c:25:13:37:34:00:c8:d9:05:fe:32:ba:b3:14:0f:35:0b:a3: 11:05:52:0f:23:05:5c:7f:2c:b7:36:31:d3:c0:3e:2e:f7:a0: 6d:c5:71:63:b4:b3:14:3d:aa:3c:31:78:93:a4:39:d0:05:87: 32:a2:60:0a:d6:e5:f9:b7:0f:3e:c9:d4:16:2c:49:1e:19:2c: 1b:f0:e0:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9h9KKKUWEca1ertK53dxQFp/nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA2MTMwNTMwNDZaFw0yNjA2MTQwODQzNDZaMDMxMTAvBgNV BAMTKDMyQzc3MDEwMThCN0NFMjM2Q0Q1QzRDQ0UwNzU4NjM3MURBNEMxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdhFcUOMLCUyMAWpvVbfhQwu2 Via6RIoDPvfgZdY8YTremEs71HFZKQPBg5IdGVCEWHd57ugm2LD+RXvHv9bJihad 0QqgVwbvfLhE+TwCku+e/2pRjHVe6fdqdgLUJzF2dZT6cuBAcvRr5ZACu455OAXK NlIOSJhKNV/zFyhxW5ZJbgkEnX2DNvRexc+FtcXDb5d2fPXBgG1FZTm4hfyEmAqr /gQIHWO1miZPoErtSRxzw/87srU0C+iS2iyCpNlnm0WtsydtIJh1ou519usdZgMp 4NXlJ/sEH+G7FKIG9aH16wY5c3i/dWzgj8a5WQAnmzEBkymAMTatC3JMDdgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsdwEBi3ziNs1cTM4HWGNx2kwf8wHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhTHW8HxZoNMLYDpKaROzRsnhTXyPVp4bxC eEW4Wbp1SBroWJtZxzK2vs6BL1i6FmJvwVBb07qe1HSA9wxppMHDhzVBsazuO7as Wgc1MUg90/s4+BoOftnt3PNgVYp5bZF5sJSjoxDIfN9rVWdegxXnv4K76M1baqKz t1NPgCWwLQfT8hhcXMFVSLldwx7x+K9FGaFAuyUlhw6/NPcXnb/OThaQgq+ihGCK J/xdLf6Xw04x9wwlEzc0AMjZBf4yurMUDzULoxEFUg8jBVx/LLc2MdPAPi73oG3F cWO0sxQ9qjwxeJOkOdAFhzKiYArW5fm3Dz7J1BYsSR4ZLBvw4CU= -----END CERTIFICATE-----Generated at Sat Jun 13 10:49:14 2026 by rpki-client