$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: MucsOUjYBOEj2RavtXYsm16WBV13aARm3rdeQvX8nqQ= Subject key identifier: C8:E3:E9:B3:3A:33:2E:BA:D4:9A:0D:52:2F:41:CC:15:5C:7A:7A:EC Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 2106E521A1379FB4D531BB6441B3CA4551F28177 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 09:22:42 +0000 Manifest this update: Tue 10 Nov 2026 09:17:42 +0000 Manifest next update: Wed 11 Nov 2026 10:06:42 +0000 Files and hashes: 1: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: L5KvZb3C0EWaaBuh2oJb4QhpD6E772BzdkyN8vBKve4=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 5: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:06:e5:21:a1:37:9f:b4:d5:31:bb:64:41:b3:ca:45:51:f2:81:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Nov 10 09:17:42 2026 GMT Not After : Nov 11 10:06:42 2026 GMT Subject: CN=C8E3E9B33A332EBAD49A0D522F41CC155C7A7AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:60:e2:25:66:f5:df:0e:cb:17:45:d3:43: 1e:6b:e5:fd:c5:e0:11:0b:3f:ce:99:80:47:86:f1: 73:d6:d4:ea:2e:3b:d7:9f:7a:be:3c:8b:f4:83:5f: 8d:99:82:c1:e6:68:6b:8c:08:0a:92:5d:07:11:cb: 3d:fc:c8:d4:7d:5f:f4:4a:1f:fb:07:a5:69:f2:79: bb:e7:8a:d2:d1:ef:87:c5:e7:d4:ff:71:14:f2:81: b9:8a:43:ac:a0:9d:a2:a1:80:8c:5c:98:e2:b2:30: b8:ff:10:b8:79:6d:48:ba:34:2b:f0:70:e6:18:60: 8e:04:37:41:ca:16:f7:15:80:8e:65:38:7c:2d:2a: e7:03:50:38:d3:23:b0:89:aa:16:9b:7a:52:cb:db: ac:68:62:2a:e0:7c:05:a9:c9:4a:ac:b5:5d:86:6f: 63:59:14:8e:14:aa:0f:52:26:46:67:11:3e:ff:0b: 6c:4f:e2:3a:5c:be:29:1f:f0:ed:89:e3:27:69:70: bf:d6:58:f0:14:77:42:20:b3:f0:28:0f:6d:d2:ac: 08:49:4f:0b:d1:fc:36:69:5f:7f:fb:2e:66:28:24: bb:dd:50:78:5c:bb:fa:a7:a6:e9:1b:3b:46:8e:92: 1f:10:52:27:a9:9d:e6:b4:2e:50:e7:a3:8a:cf:f3: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:E9:B3:3A:33:2E:BA:D4:9A:0D:52:2F:41:CC:15:5C:7A:7A:EC X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:68:21:fe:04:19:3d:03:83:d4:a2:ad:16:85:ac:1f:41:1b: df:ef:58:c6:3d:1e:42:1c:e2:6d:39:0c:9f:5d:97:a1:ed:a2: 2a:00:5c:a5:96:a1:06:3d:f5:1c:1f:73:62:26:e0:99:07:ee: c9:5c:d2:1a:c7:bd:3b:2d:78:03:6c:45:65:5f:88:f6:64:53: e4:fc:d1:6a:dc:7f:b5:36:fd:3a:82:d4:0e:a7:ff:a3:ea:dc: 8b:be:ae:94:a8:c7:d9:47:da:7f:28:f9:4e:40:d3:f0:59:24: aa:6e:aa:08:3f:13:31:79:12:e6:15:d8:6a:fb:12:f0:e8:99: 0a:5d:52:1e:79:ce:6e:58:48:d3:d5:c4:d9:6b:91:9f:1c:8d: 69:82:73:b2:ef:f3:e6:40:28:f0:6b:6f:e2:50:60:ed:dc:7c: 06:aa:11:80:d7:fe:f4:99:03:90:27:e4:98:fa:71:c5:d3:5d: 7f:c4:63:a1:d3:af:88:d7:e6:11:02:2b:c6:ba:f7:ec:e7:23: 6d:b0:be:1d:5f:c8:93:4b:c2:94:19:e8:40:2a:f7:3f:ce:02: c7:41:1b:62:f4:9a:74:7d:7d:12:63:52:a2:84:e2:66:1d:22: 42:45:a5:86:e3:de:b3:7e:10:d1:a2:da:d5:f9:8c:66:35:56: 64:b2:02:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQblIaE3n7TVMbtkQbPKRVHygXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjExMTAwOTE3NDJaFw0yNjExMTExMDA2NDJaMDMxMTAvBgNV BAMTKEM4RTNFOUIzM0EzMzJFQkFENDlBMEQ1MjJGNDFDQzE1NUM3QTdBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxf2DiJWb13w7LF0XTQx5r5f3F 4BELP86ZgEeG8XPW1OouO9efer48i/SDX42ZgsHmaGuMCAqSXQcRyz38yNR9X/RK H/sHpWnyebvnitLR74fF59T/cRTygbmKQ6ygnaKhgIxcmOKyMLj/ELh5bUi6NCvw cOYYYI4EN0HKFvcVgI5lOHwtKucDUDjTI7CJqhabelLL26xoYirgfAWpyUqstV2G b2NZFI4Uqg9SJkZnET7/C2xP4jpcvikf8O2J4ydpcL/WWPAUd0Igs/AoD23SrAhJ TwvR/DZpX3/7LmYoJLvdUHhcu/qnpukbO0aOkh8QUiepnea0LlDno4rP8zb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyOPpszozLrrUmg1SL0HMFVx6euwwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRoIf4EGT0Dg9SirRaFrB9BG9/vWMY9HkIc 4m05DJ9dl6HtoioAXKWWoQY99Rwfc2Im4JkH7slc0hrHvTsteANsRWVfiPZkU+T8 0Wrcf7U2/TqC1A6n/6Pq3Iu+rpSox9lH2n8o+U5A0/BZJKpuqgg/EzF5EuYV2Gr7 EvDomQpdUh55zm5YSNPVxNlrkZ8cjWmCc7Lv8+ZAKPBrb+JQYO3cfAaqEYDX/vSZ A5An5Jj6ccXTXX/EY6HTr4jX5hECK8a69+znI22wvh1fyJNLwpQZ6EAq9z/OAsdB G2L0mnR9fRJjUqKE4mYdIkJFpYbj3rN+ENGi2tX5jGY1VmSyAhU= -----END CERTIFICATE-----Generated at Tue Nov 10 16:31:22 2026 by rpki-client