$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: z3LayEXUlaI8DreEfuqmZdqFtKEKFqzZ+v8rsNuihEE= Subject key identifier: CD:C7:DB:13:7A:A4:87:96:CA:F9:B1:3B:AB:66:56:44:2F:73:F7:F4 Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 09BBBD4934CDDAE22ED0394EB90920BF502B7567 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:17:15 +0000 Manifest this update: Tue 16 Jun 2026 23:12:15 +0000 Manifest next update: Thu 18 Jun 2026 01:54:15 +0000 Files and hashes: 1: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) 3: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: Okm3SR9yKdE87VGW06Ut7IBRnP8MJyVN6LSWq1Airi0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bb:bd:49:34:cd:da:e2:2e:d0:39:4e:b9:09:20:bf:50:2b:75:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Jun 16 23:12:15 2026 GMT Not After : Jun 18 01:54:15 2026 GMT Subject: CN=CDC7DB137AA48796CAF9B13BAB6656442F73F7F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:bb:e5:f1:71:e2:c9:92:4b:d4:36:da:fb: 0e:ad:ed:e1:d9:ee:ef:c4:d2:3d:cd:42:55:aa:f8: 24:3e:c8:eb:25:e1:15:dc:72:f8:c5:8f:22:63:0e: bd:4a:93:31:65:84:29:bd:e2:a3:57:31:e4:05:1f: eb:05:25:46:08:c0:55:e6:ce:9b:bc:8e:56:dc:7a: 15:1f:c5:bb:bc:f2:c4:07:be:1a:b2:e3:32:1a:df: 20:e3:d2:a5:ae:06:dc:f3:27:54:57:48:68:9f:67: ca:33:db:51:0a:bd:62:58:4a:4b:85:54:d9:5e:c8: d9:78:a2:25:57:50:5a:15:85:91:cf:6d:0a:10:57: 52:97:d8:b1:9f:a4:1e:ef:d1:84:9d:23:ac:f9:ec: ff:3b:04:99:b6:8d:b4:e8:ac:af:45:e3:10:7e:27: 02:36:1e:82:a2:8f:00:a6:59:12:ed:93:95:9d:2d: e8:37:7b:3b:39:54:4e:d6:e3:7d:89:ce:84:e4:ae: 99:b9:3c:7f:2f:4f:c5:29:90:aa:14:3a:ce:ab:e0: 7f:f5:46:04:fa:f6:89:54:03:19:3a:f0:7a:88:53: 8a:fe:a7:22:02:b1:ac:ef:d2:63:a0:00:04:81:31: 81:71:9a:7c:08:b9:2e:c7:7c:06:d6:ce:14:ec:03: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C7:DB:13:7A:A4:87:96:CA:F9:B1:3B:AB:66:56:44:2F:73:F7:F4 X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e2:a4:85:c3:cd:75:9a:c7:e3:cf:bc:29:0b:7d:ac:49:67: 63:23:11:82:55:d0:b5:f7:f7:f1:3c:3a:3b:11:cc:40:a0:cb: 79:68:a2:bf:d6:c8:51:80:13:68:93:4a:a1:dd:3a:d6:96:5c: 54:fa:ed:1b:df:dd:d4:6b:15:c4:a8:de:ff:06:59:e8:6a:d3: 58:04:a4:bc:14:09:67:c7:d4:9f:dc:35:1d:42:83:61:5a:a9: 75:12:a6:fa:6f:b2:f2:a1:6d:9c:ee:98:41:8c:14:8f:ca:f1: ac:7c:3b:f8:d7:b8:58:4a:cb:3a:38:61:12:6d:e7:cd:66:fd: 3b:fd:7d:01:fe:1f:0e:b9:52:21:97:31:4a:2d:07:6b:37:18: 2c:c7:6f:0c:31:d5:9b:3b:fb:99:40:5e:20:e2:c4:83:c8:d2: 14:36:58:9e:1e:53:be:56:b8:64:ff:ad:5a:89:ca:40:3b:8d: ce:f6:97:35:bb:7a:c3:7a:cb:1e:de:f7:d4:b7:7c:f3:ef:29: 5e:f5:de:2e:e8:f2:8d:71:41:d7:34:01:5c:4e:50:65:5f:e0: 5a:a9:b1:2c:ac:80:f7:30:c6:99:6d:26:7a:3d:3f:68:39:0b: d2:81:b0:21:1f:64:a5:34:54:06:0a:b7:46:61:85:86:77:58: d7:e9:23:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbu9STTN2uIu0DlOuQkgv1ArdWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA2MTYyMzEyMTVaFw0yNjA2MTgwMTU0MTVaMDMxMTAvBgNV BAMTKENEQzdEQjEzN0FBNDg3OTZDQUY5QjEzQkFCNjY1NjQ0MkY3M0Y3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYB7vl8XHiyZJL1Dba+w6t7eHZ 7u/E0j3NQlWq+CQ+yOsl4RXccvjFjyJjDr1KkzFlhCm94qNXMeQFH+sFJUYIwFXm zpu8jlbcehUfxbu88sQHvhqy4zIa3yDj0qWuBtzzJ1RXSGifZ8oz21EKvWJYSkuF VNleyNl4oiVXUFoVhZHPbQoQV1KX2LGfpB7v0YSdI6z57P87BJm2jbTorK9F4xB+ JwI2HoKijwCmWRLtk5WdLeg3ezs5VE7W432JzoTkrpm5PH8vT8UpkKoUOs6r4H/1 RgT69olUAxk68HqIU4r+pyICsazv0mOgAASBMYFxmnwIuS7HfAbWzhTsAw+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzcfbE3qkh5bK+bE7q2ZWRC9z9/QwHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7ipIXDzXWax+PPvCkLfaxJZ2MjEYJV0LX3 9/E8OjsRzECgy3loor/WyFGAE2iTSqHdOtaWXFT67Rvf3dRrFcSo3v8GWehq01gE pLwUCWfH1J/cNR1Cg2FaqXUSpvpvsvKhbZzumEGMFI/K8ax8O/jXuFhKyzo4YRJt 581m/Tv9fQH+Hw65UiGXMUotB2s3GCzHbwwx1Zs7+5lAXiDixIPI0hQ2WJ4eU75W uGT/rVqJykA7jc72lzW7esN6yx7e99S3fPPvKV713i7o8o1xQdc0AVxOUGVf4Fqp sSysgPcwxpltJno9P2g5C9KBsCEfZKU0VAYKt0ZhhYZ3WNfpI/s= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:12 2026 by rpki-client