$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: SHmnVI1dt6B/+9IwOvmPKuOUO/MNU112X7xITchhoDQ= Subject key identifier: D1:2B:38:8A:A9:D9:5E:04:90:7B:9F:B1:35:26:15:DC:48:C0:2D:D7 Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 60CD0A556699F02AF3A4EFD5738AF414EC0C7A53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:11:42 +0000 Manifest this update: Mon 21 Sep 2026 04:06:42 +0000 Manifest next update: Tue 22 Sep 2026 07:39:42 +0000 Files and hashes: 1: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: o0km4bxBIr9Y7NtmQbwXyuE3U0IYh7PlLVOZ+XbzuyY=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cd:0a:55:66:99:f0:2a:f3:a4:ef:d5:73:8a:f4:14:ec:0c:7a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Sep 21 04:06:42 2026 GMT Not After : Sep 22 07:39:42 2026 GMT Subject: CN=D12B388AA9D95E04907B9FB1352615DC48C02DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:23:11:d1:27:bb:bd:25:5b:0c:55:bd:78: 62:5c:b5:15:39:f1:cc:74:68:1b:f9:c9:05:85:93: bb:e6:bc:99:66:4f:da:28:2f:ef:8c:05:ad:9c:99: bf:94:96:ce:62:27:a0:38:f4:52:7f:95:86:d3:d7: 59:0e:6e:d0:c6:f0:ef:6a:e4:7e:f8:c1:33:58:b5: e7:1a:ec:30:8e:5b:58:b3:1d:ea:c9:2f:4e:e4:c1: ba:51:97:63:dd:7a:91:41:ac:37:44:ce:8b:dd:b6: 5e:11:bc:b1:68:2b:cf:fd:8c:d5:75:5f:6b:a0:04: 4a:3a:60:a3:a2:d4:2a:82:6a:36:36:73:d4:a2:37: 61:ac:93:23:0b:35:6a:b6:54:eb:9b:52:29:62:ff: a1:d2:ca:42:b3:63:c6:94:5f:19:1c:e6:e8:ae:bc: 03:1a:be:e4:ba:7c:f0:5d:27:e0:4c:b3:de:17:c3: a7:23:6e:99:1c:fa:32:e8:7f:a6:f7:ff:5a:c3:8c: 4d:de:6f:30:50:54:7f:d3:80:1f:d8:38:9d:5d:ee: 85:d3:e0:17:f0:c4:fb:83:2f:98:c6:bd:68:7b:dd: da:9c:d2:e6:62:12:cd:38:f4:e6:5a:36:8d:ba:72: 89:2e:ca:b6:54:7d:4a:2c:7d:21:99:1a:83:2e:14: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2B:38:8A:A9:D9:5E:04:90:7B:9F:B1:35:26:15:DC:48:C0:2D:D7 X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:95:88:b1:5d:b3:f1:b8:42:59:4a:c2:10:e6:c4:99:5c:d7: 7e:50:e4:d2:bb:ce:a2:e8:f4:b6:a7:7f:fc:9b:3e:43:31:f0: 23:4d:e4:fa:fd:d5:e9:17:e6:b1:28:0a:18:0d:5d:1f:79:a9: de:d3:38:25:2a:4e:e6:86:a6:58:bd:49:91:9d:4d:87:c3:cc: 31:08:01:05:75:28:8c:0a:30:df:c6:56:72:2d:df:9b:fd:3e: 78:d9:3d:2c:17:02:f1:a6:fd:aa:59:95:9a:9c:12:94:17:f1: 1b:6d:dd:bb:e3:34:10:33:7a:bf:97:da:b1:0b:de:a6:41:ca: c7:1b:00:ee:68:2c:ca:79:82:36:98:ee:84:58:e8:b9:b0:21: b3:37:e2:26:dc:75:c9:12:44:fd:de:1f:c0:fc:ea:ac:ec:1a: 4b:92:a4:e5:28:56:79:44:17:95:69:38:3a:6e:04:a2:00:47: dc:a8:12:f2:57:1d:7d:bd:cc:c6:ac:65:38:1b:04:0c:7d:77: 5f:f7:4e:e7:2b:16:b5:fa:da:e1:fd:e0:d3:ac:f6:f8:ac:68: 1e:36:a6:b5:8d:86:ab:79:95:aa:58:21:e8:a8:0a:3a:1f:69: e5:57:98:05:45:fb:d6:b9:f0:83:06:c4:69:a6:65:e8:4c:e4: ae:00:47:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYM0KVWaZ8CrzpO/Vc4r0FOwMelMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA5MjEwNDA2NDJaFw0yNjA5MjIwNzM5NDJaMDMxMTAvBgNV BAMTKEQxMkIzODhBQTlEOTVFMDQ5MDdCOUZCMTM1MjYxNURDNDhDMDJERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrCMR0Se7vSVbDFW9eGJctRU5 8cx0aBv5yQWFk7vmvJlmT9ooL++MBa2cmb+Uls5iJ6A49FJ/lYbT11kObtDG8O9q 5H74wTNYteca7DCOW1izHerJL07kwbpRl2PdepFBrDdEzovdtl4RvLFoK8/9jNV1 X2ugBEo6YKOi1CqCajY2c9SiN2GskyMLNWq2VOubUili/6HSykKzY8aUXxkc5uiu vAMavuS6fPBdJ+BMs94Xw6cjbpkc+jLof6b3/1rDjE3ebzBQVH/TgB/YOJ1d7oXT 4BfwxPuDL5jGvWh73dqc0uZiEs049OZaNo26cokuyrZUfUosfSGZGoMuFLbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Ss4iqnZXgSQe5+xNSYV3EjALdcwHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiViLFds/G4QllKwhDmxJlc135Q5NK7zqLo 9Lanf/ybPkMx8CNN5Pr91ekX5rEoChgNXR95qd7TOCUqTuaGpli9SZGdTYfDzDEI AQV1KIwKMN/GVnIt35v9PnjZPSwXAvGm/apZlZqcEpQX8Rtt3bvjNBAzer+X2rEL 3qZByscbAO5oLMp5gjaY7oRY6LmwIbM34ibcdckSRP3eH8D86qzsGkuSpOUoVnlE F5VpODpuBKIAR9yoEvJXHX29zMasZTgbBAx9d1/3TucrFrX62uH94NOs9visaB42 prWNhqt5lapYIeioCjofaeVXmAVF+9a58IMGxGmmZehM5K4AR+w= -----END CERTIFICATE-----Generated at Mon Sep 21 20:20:17 2026 by rpki-client