$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: K1Ql+KHfL8nfI3PLKKmT0/+GZFiKHoq4xVqcIQTQbx8= Subject key identifier: B9:C2:41:0B:D9:70:94:7C:67:7E:CC:A8:69:7B:DB:57:7C:CD:69:BA Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 223C36ACB16E2FC728CEF0FFA66DA3A0794E6399 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 09:04:51 +0000 Manifest this update: Sat 13 Jun 2026 08:59:51 +0000 Manifest next update: Sun 14 Jun 2026 12:49:51 +0000 Files and hashes: 1: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) 2: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 3: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 4: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 5: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: rhRCx/D1+baDZ2+02TXJUs/LyNV/m3MoaoaeIm/VV+Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3c:36:ac:b1:6e:2f:c7:28:ce:f0:ff:a6:6d:a3:a0:79:4e:63:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Jun 13 08:59:51 2026 GMT Not After : Jun 14 12:49:51 2026 GMT Subject: CN=B9C2410BD970947C677ECCA8697BDB577CCD69BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:04:a2:79:f5:88:9a:13:c2:db:e2:43:60:c3: cb:a9:08:45:b2:42:0a:61:dc:e7:6c:d1:3d:ec:a9: 3d:ed:25:5a:30:9e:61:b9:eb:e8:d6:27:b4:2c:35: e0:b8:05:87:9f:b5:22:fa:b6:a0:05:d1:16:51:0e: 85:af:fc:20:f5:df:84:de:5f:42:16:e7:be:0e:03: 1e:45:1f:e1:97:ce:99:34:94:c7:a9:b8:2c:5d:3a: 18:fb:52:32:85:09:6a:7c:2b:45:1d:25:59:2a:cc: a9:0e:aa:5c:4d:65:a7:c4:75:41:4f:cb:e5:3a:b0: b3:95:9a:88:82:f1:f1:d2:fe:46:a5:fd:56:95:3f: 7b:05:9d:93:ca:bb:48:a0:5e:ca:07:e8:d7:b5:3a: a2:1a:39:2c:05:f2:e3:42:19:26:92:9f:d2:a4:c0: 2a:96:d1:fd:78:3b:fe:f9:f5:cc:b3:2e:60:06:5d: a6:e6:6a:a5:6d:08:c3:95:1a:c5:0e:0f:5c:90:d3: bb:4d:fe:3d:d2:76:8a:67:70:6c:63:07:9f:c0:80: fa:70:07:ea:62:db:2b:4f:c7:30:17:13:8c:81:75: 83:c6:6c:e3:6b:7b:52:58:61:f1:e1:4e:ed:c9:11: ac:6f:ea:e2:ce:19:18:ba:89:69:4f:51:27:cb:76: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:41:0B:D9:70:94:7C:67:7E:CC:A8:69:7B:DB:57:7C:CD:69:BA X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:75:a7:f0:f9:8f:67:90:6a:ea:8f:7c:c7:b6:74:aa:5c:31: 3e:c3:54:43:65:71:86:7c:b6:b8:b0:9c:86:36:66:4c:ac:ee: dc:f4:d7:58:e3:b4:2d:fb:df:26:e8:62:d9:72:38:36:e6:6c: 59:97:2c:e2:cd:02:4f:53:15:b2:a5:22:f2:7d:b5:db:75:14: 43:b4:cc:92:5b:47:19:f9:a2:91:fa:61:73:3a:4d:01:36:4a: 64:89:9e:cb:15:7d:74:b3:59:61:d3:3e:17:73:69:98:39:cb: 09:3e:d2:b7:cd:5d:3d:5b:6a:eb:f9:9c:c2:43:4e:f0:71:d8: b8:5e:e8:ba:10:11:1e:57:7f:ea:7a:b8:02:83:0c:08:68:a9: 0f:1c:37:60:6e:b5:b2:86:44:61:d3:1c:c7:00:70:da:7d:84: b7:d2:56:dc:0a:1f:f6:40:9a:e0:7f:35:c9:f8:65:23:a6:6b: d2:8e:66:3e:85:e7:9d:1a:21:64:1c:93:bb:fb:30:37:e5:bf: b0:18:c1:85:0b:13:51:c0:80:30:21:31:0b:8d:bc:cf:7a:d7: 43:57:ee:1d:45:35:f8:27:22:94:0f:36:5e:1c:6f:ca:94:62: e8:02:45:f5:79:95:17:cb:e8:1c:7e:42:62:0e:3a:85:02:c3: 67:bc:ce:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjw2rLFuL8cozvD/pm2joHlOY5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA2MTMwODU5NTFaFw0yNjA2MTQxMjQ5NTFaMDMxMTAvBgNV BAMTKEI5QzI0MTBCRDk3MDk0N0M2NzdFQ0NBODY5N0JEQjU3N0NDRDY5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrBKJ59YiaE8Lb4kNgw8upCEWy Qgph3Ods0T3sqT3tJVownmG56+jWJ7QsNeC4BYeftSL6tqAF0RZRDoWv/CD134Te X0IW574OAx5FH+GXzpk0lMepuCxdOhj7UjKFCWp8K0UdJVkqzKkOqlxNZafEdUFP y+U6sLOVmoiC8fHS/kal/VaVP3sFnZPKu0igXsoH6Ne1OqIaOSwF8uNCGSaSn9Kk wCqW0f14O/759cyzLmAGXabmaqVtCMOVGsUOD1yQ07tN/j3SdopncGxjB5/AgPpw B+pi2ytPxzAXE4yBdYPGbONre1JYYfHhTu3JEaxv6uLOGRi6iWlPUSfLdhD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucJBC9lwlHxnfsyoaXvbV3zNabowHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHp1p/D5j2eQauqPfMe2dKpcMT7DVENlcYZ8 triwnIY2Zkys7tz011jjtC373yboYtlyODbmbFmXLOLNAk9TFbKlIvJ9tdt1FEO0 zJJbRxn5opH6YXM6TQE2SmSJnssVfXSzWWHTPhdzaZg5ywk+0rfNXT1bauv5nMJD TvBx2Lhe6LoQER5Xf+p6uAKDDAhoqQ8cN2ButbKGRGHTHMcAcNp9hLfSVtwKH/ZA muB/Ncn4ZSOma9KOZj6F550aIWQck7v7MDflv7AYwYULE1HAgDAhMQuNvM9610NX 7h1FNfgnIpQPNl4cb8qUYugCRfV5lRfL6Bx+QmIOOoUCw2e8zi8= -----END CERTIFICATE-----Generated at Sat Jun 13 15:54:37 2026 by rpki-client