$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: BmH3Xh6Np3cN9HIJMkp2H2DwUvbxWsQTpn3ya3pz0nc= Subject key identifier: D1:2F:80:64:04:4E:6A:1A:5D:C5:D8:E2:14:A7:EA:CF:C5:B9:2F:71 Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 2F47AECAA85252194D84CED3B598083DB8EC5AEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 11:39:08 +0000 Manifest this update: Sat 14 Nov 2026 11:34:08 +0000 Manifest next update: Sun 15 Nov 2026 13:34:08 +0000 Files and hashes: 1: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 2: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 3: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) 4: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: guvORnI2UAwjpzD05NDf8p8nnzqz69qHqjolm+yw0X0=) 5: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:47:ae:ca:a8:52:52:19:4d:84:ce:d3:b5:98:08:3d:b8:ec:5a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Nov 14 11:34:08 2026 GMT Not After : Nov 15 13:34:08 2026 GMT Subject: CN=D12F8064044E6A1A5DC5D8E214A7EACFC5B92F71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:85:5c:01:56:0c:2e:a5:f1:e5:a7:ec:86: 82:f6:8b:a1:b8:45:06:5b:ac:0a:70:a6:a6:0e:0e: 3c:6c:8b:37:cb:5f:29:17:b1:4a:53:56:40:39:5c: 20:8e:52:83:c6:f9:40:b4:b6:f7:14:65:e3:45:72: 1a:88:03:4d:31:1c:1f:2c:7a:fe:8f:c6:eb:c2:23: 42:47:6d:69:00:14:74:36:db:45:19:70:55:45:f7: bc:2c:a7:c3:dd:f3:1c:86:3f:a1:5c:d5:1c:ae:d3: 79:f9:d3:ae:c7:e7:a5:e4:63:06:bb:93:69:5c:3b: e1:f0:df:dd:ac:41:93:54:23:09:91:95:f1:fa:b0: 7f:53:06:e1:29:52:4f:f9:11:7e:9f:10:23:d0:02: 31:7f:66:b5:3b:ae:75:a0:ef:a5:b9:de:ac:ef:43: dd:ca:63:4d:48:d1:93:bf:f1:c4:71:46:ce:21:fa: 92:4f:81:bf:13:34:dd:55:a5:32:15:50:4c:bc:16: 9d:5f:8e:fb:b6:dd:9a:c7:8f:77:90:1d:4b:0a:f1: 71:70:b3:35:e6:b4:ba:17:3a:00:5e:70:72:b6:e2: 41:2a:27:ce:57:1c:88:45:25:fe:3e:58:ee:f8:29: bc:a9:16:8b:c8:1e:b1:aa:47:c1:79:8d:03:87:72: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2F:80:64:04:4E:6A:1A:5D:C5:D8:E2:14:A7:EA:CF:C5:B9:2F:71 X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c4:85:54:f9:42:8c:af:e2:fa:20:1e:55:86:3d:84:55:5b: dd:d7:ff:33:0c:49:3e:6d:81:15:c3:d8:79:74:c7:a9:b5:6e: a8:50:0a:ec:4e:cf:bc:a8:36:44:84:3b:94:81:d2:19:f3:b5: fa:88:d6:ad:78:f4:54:3e:49:12:fe:21:f8:08:bf:0e:d2:b3: f8:b5:00:ae:fa:3a:bc:a3:e7:53:da:da:8b:3e:40:59:c1:07: f0:00:77:1a:e1:16:78:b8:3e:20:0a:fe:69:fd:af:9d:9c:0d: c3:1c:8a:8b:23:35:71:02:05:ce:36:47:b3:2d:88:00:26:33: 67:1c:bd:ab:c4:57:d4:f1:ce:7a:b7:bf:a8:4f:1e:5e:2c:46: e8:29:ac:de:48:b8:07:af:6e:49:71:92:5a:b1:6e:d2:5e:34: 3d:c8:9c:e0:ee:03:2d:a4:da:c4:94:d0:95:01:a4:f1:05:bf: e9:6b:7a:71:cf:b7:43:32:84:96:9c:9b:ad:5d:ef:e8:a4:2f: 9d:8b:8e:c3:3d:9b:65:00:6b:29:88:cd:2d:52:ea:7e:b8:58: e6:71:8d:68:5b:80:29:32:ab:cb:78:d5:72:1f:aa:5c:00:b5: 17:91:91:cc:08:67:4e:83:27:9e:ee:d8:3b:4c:55:52:e4:dd: f2:86:c5:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0euyqhSUhlNhM7TtZgIPbjsWuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjExMTQxMTM0MDhaFw0yNjExMTUxMzM0MDhaMDMxMTAvBgNV BAMTKEQxMkY4MDY0MDQ0RTZBMUE1REM1RDhFMjE0QTdFQUNGQzVCOTJGNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAYVcAVYMLqXx5afshoL2i6G4 RQZbrApwpqYODjxsizfLXykXsUpTVkA5XCCOUoPG+UC0tvcUZeNFchqIA00xHB8s ev6PxuvCI0JHbWkAFHQ220UZcFVF97wsp8Pd8xyGP6Fc1Ryu03n5067H56XkYwa7 k2lcO+Hw392sQZNUIwmRlfH6sH9TBuEpUk/5EX6fECPQAjF/ZrU7rnWg76W53qzv Q93KY01I0ZO/8cRxRs4h+pJPgb8TNN1VpTIVUEy8Fp1fjvu23ZrHj3eQHUsK8XFw szXmtLoXOgBecHK24kEqJ85XHIhFJf4+WO74KbypFovIHrGqR8F5jQOHcuntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0S+AZAROahpdxdjiFKfqz8W5L3EwHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvEhVT5Qoyv4vogHlWGPYRVW93X/zMMST5t gRXD2Hl0x6m1bqhQCuxOz7yoNkSEO5SB0hnztfqI1q149FQ+SRL+IfgIvw7Ss/i1 AK76Oryj51Pa2os+QFnBB/AAdxrhFni4PiAK/mn9r52cDcMciosjNXECBc42R7Mt iAAmM2ccvavEV9Txznq3v6hPHl4sRugprN5IuAevbklxklqxbtJeND3InODuAy2k 2sSU0JUBpPEFv+lrenHPt0MyhJacm61d7+ikL52LjsM9m2UAaymIzS1S6n64WOZx jWhbgCkyq8t41XIfqlwAtReRkcwIZ06DJ57u2DtMVVLk3fKGxXY= -----END CERTIFICATE-----Generated at Sat Nov 14 23:32:21 2026 by rpki-client