$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: CBd3OUT95PniFpqOleG0Lxt+F61phnoi3+DEJdIFqjY= Subject key identifier: 8E:5F:6E:15:76:40:1F:16:DC:39:08:E6:2F:B3:D2:16:9D:B1:30:C2 Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 16AE25B6EDFDDA55D2EF65C9E25660AC53D79B1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:10:25 +0000 Manifest this update: Mon 21 Sep 2026 03:05:25 +0000 Manifest next update: Tue 22 Sep 2026 06:10:25 +0000 Files and hashes: 1: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: H6NHo+yb3EJhW+ivXUePpBT9g0DtsdCmpjmeWc5zJMs=) 2: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 3: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 4: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 5: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ae:25:b6:ed:fd:da:55:d2:ef:65:c9:e2:56:60:ac:53:d7:9b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Sep 21 03:05:25 2026 GMT Not After : Sep 22 06:10:25 2026 GMT Subject: CN=8E5F6E1576401F16DC3908E62FB3D2169DB130C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:d3:34:d1:aa:19:ff:56:a2:cd:61:d8:bd: 6b:00:22:08:71:51:c8:50:02:da:78:cd:08:b6:c5: 14:ec:e5:76:0d:c1:47:d1:6c:be:47:59:7c:32:a9: 53:d4:91:6b:b9:1b:c4:a5:07:a1:08:30:78:ad:c5: 80:48:6c:6f:61:ec:74:60:e5:83:9a:f2:c4:3b:55: 9c:12:dc:a7:58:9c:b8:a9:30:df:df:36:16:f0:87: 17:ec:fb:80:70:44:d0:bc:09:6f:9a:e6:d2:69:fd: bc:10:b3:bd:a7:a7:f1:65:7e:b5:f5:a1:08:46:aa: 52:3b:9c:18:3f:eb:12:36:4e:da:77:ec:6b:21:3f: 26:06:03:b1:02:aa:ca:a8:e4:50:30:4e:f7:2d:7c: b8:a3:1b:5b:f2:05:fe:47:30:27:0f:54:b9:fb:d9: 7a:c0:cc:b0:38:1d:e2:a9:1d:84:52:51:08:08:a3: 5f:5f:3a:b0:35:aa:11:c5:cc:5b:2c:99:58:08:1e: 71:15:28:84:a7:d3:2c:da:5a:bd:57:b2:f4:c6:ed: 3b:d2:bf:22:b4:46:e3:db:c2:89:2b:18:dd:4f:2f: 89:bf:a2:7d:cd:a5:69:9f:d3:f2:c3:08:80:dd:aa: 50:cb:be:17:f4:d0:8f:52:b3:f0:1a:25:0e:5c:9c: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5F:6E:15:76:40:1F:16:DC:39:08:E6:2F:B3:D2:16:9D:B1:30:C2 X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ec:78:b3:fb:4f:9b:33:ed:a0:68:3d:e7:0e:40:23:3a:b5: e6:a5:ff:f8:57:16:82:f2:8c:95:db:42:de:89:33:a6:e8:c1: 52:36:ce:9e:4f:42:00:3d:85:46:77:82:11:79:35:a7:61:42: 77:15:36:4b:37:28:ae:27:4f:f9:df:c0:46:a5:37:51:05:2c: 6e:8a:6a:51:f0:76:12:69:66:22:63:40:89:fb:a3:4a:59:cf: 41:ea:45:b7:1e:57:02:75:3c:c7:b2:da:81:77:57:88:29:b1: 11:ea:0c:c8:cf:76:76:00:05:9c:06:a8:3c:a2:80:da:21:ff: af:0c:2c:ac:38:38:b1:c4:04:39:4a:20:c6:52:1d:0c:9b:32: c1:ea:cf:7b:f9:f0:28:35:e1:56:4c:19:2a:6f:1c:8c:33:ae: f5:48:b6:53:3c:6b:15:43:52:59:eb:0d:dd:cc:64:dd:79:a0: 4c:f8:52:39:db:44:39:ae:88:d1:fd:6e:2a:06:22:81:d4:23: 03:1a:fa:40:d3:ef:df:8c:5c:27:31:f3:7c:dc:4d:02:fd:bb: 26:17:ce:20:39:83:7d:f1:f3:ec:f9:0f:b7:a3:e6:0a:6e:9a: 33:79:71:26:6d:fd:13:12:59:b9:ae:21:1d:67:14:5f:38:6c: c5:83:ed:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFq4ltu392lXS72XJ4lZgrFPXmxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA5MjEwMzA1MjVaFw0yNjA5MjIwNjEwMjVaMDMxMTAvBgNV BAMTKDhFNUY2RTE1NzY0MDFGMTZEQzM5MDhFNjJGQjNEMjE2OURCMTMwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+tM00aoZ/1aizWHYvWsAIghx UchQAtp4zQi2xRTs5XYNwUfRbL5HWXwyqVPUkWu5G8SlB6EIMHitxYBIbG9h7HRg 5YOa8sQ7VZwS3KdYnLipMN/fNhbwhxfs+4BwRNC8CW+a5tJp/bwQs72np/FlfrX1 oQhGqlI7nBg/6xI2Ttp37GshPyYGA7ECqsqo5FAwTvctfLijG1vyBf5HMCcPVLn7 2XrAzLA4HeKpHYRSUQgIo19fOrA1qhHFzFssmVgIHnEVKISn0yzaWr1XsvTG7TvS vyK0RuPbwokrGN1PL4m/on3NpWmf0/LDCIDdqlDLvhf00I9Ss/AaJQ5cnPJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjl9uFXZAHxbcOQjmL7PSFp2xMMIwHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnseLP7T5sz7aBoPecOQCM6teal//hXFoLy jJXbQt6JM6bowVI2zp5PQgA9hUZ3ghF5NadhQncVNks3KK4nT/nfwEalN1EFLG6K alHwdhJpZiJjQIn7o0pZz0HqRbceVwJ1PMey2oF3V4gpsRHqDMjPdnYABZwGqDyi gNoh/68MLKw4OLHEBDlKIMZSHQybMsHqz3v58Cg14VZMGSpvHIwzrvVItlM8axVD UlnrDd3MZN15oEz4UjnbRDmuiNH9bioGIoHUIwMa+kDT79+MXCcx83zcTQL9uyYX ziA5g33x8+z5D7ej5gpumjN5cSZt/RMSWbmuIR1nFF84bMWD7XM= -----END CERTIFICATE-----Generated at Mon Sep 21 09:05:37 2026 by rpki-client