$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: BPP7pu+ltj8L9Q6dpcE1QniuzByNSkRoOs/jf0XulPU= Subject key identifier: 75:4A:C2:49:5B:6A:01:6D:A5:89:81:7D:AA:D2:97:C6:CC:97:E8:29 Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 0DC665705CF2FEA812D37CC2D660EC6C7211DA13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 15:35:24 +0000 Manifest this update: Wed 23 Sep 2026 15:30:24 +0000 Manifest next update: Thu 24 Sep 2026 16:27:24 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) 3: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: lMq1uEQP19QH8OyFArnV5ricNvSlttDSW/ZrXqBLGvo=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 5: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c6:65:70:5c:f2:fe:a8:12:d3:7c:c2:d6:60:ec:6c:72:11:da:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Sep 23 15:30:24 2026 GMT Not After : Sep 24 16:27:24 2026 GMT Subject: CN=754AC2495B6A016DA589817DAAD297C6CC97E829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:b8:1b:bf:1e:77:5a:02:a5:c2:ee:04:18: 3a:15:a4:61:20:3b:b7:7d:76:67:ec:cd:26:32:76: f0:c9:47:c9:c2:2e:c2:3c:1e:d4:f9:0d:70:b9:72: df:a4:77:48:7e:9c:a7:65:ef:47:f5:08:1a:43:0b: 9f:ae:f1:c1:59:49:25:9c:b2:b1:f2:56:30:ee:05: 2e:6c:26:f5:be:31:cb:e6:56:b8:ca:dc:9d:67:65: 1d:da:81:c5:d9:f8:31:7c:08:ee:db:8e:12:85:d4: 52:19:7e:bc:b6:f7:bf:cf:0b:2e:ba:56:cf:3b:a3: 2d:7c:63:ac:b5:1a:67:f0:f7:05:c7:39:d9:05:9c: d2:01:ab:31:a4:19:cd:3f:f2:8d:19:b0:aa:23:b8: a0:2d:79:98:dc:ce:03:0f:25:5d:7a:0c:29:cb:fd: 95:c3:08:a2:e4:89:91:25:46:2c:80:e4:aa:6b:61: 54:a6:0c:4c:5c:73:fb:ca:df:bb:c6:6d:fb:6b:41: 20:49:10:64:a2:47:eb:69:34:b5:93:d9:98:88:b3: 42:e5:51:38:c0:21:f1:c5:c8:d3:8e:6f:4f:77:29: 73:b6:c7:5a:f0:4b:ca:8a:1b:36:b3:8e:43:65:02: ba:5f:4a:f7:62:18:78:9b:af:f1:e0:db:7d:c4:4e: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4A:C2:49:5B:6A:01:6D:A5:89:81:7D:AA:D2:97:C6:CC:97:E8:29 X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2d:d7:81:38:48:72:7a:9b:7f:43:63:d8:3c:32:f1:cd:a2: e7:b6:ff:92:28:f7:d9:ff:89:e7:04:9e:7f:f2:36:76:bf:dd: 3b:68:db:f1:10:2c:a0:ba:bb:7f:d3:cd:71:f4:7c:56:cf:02: 66:8b:ed:f9:4e:3b:7b:38:53:7f:b9:09:42:7d:29:c6:a8:1e: 19:cc:fa:7a:6d:bc:f5:28:61:4c:b1:55:7f:06:e5:74:67:ce: ec:c3:6c:24:80:42:cf:66:a4:a0:6e:66:e2:21:1a:df:27:de: 19:2c:76:b6:25:a3:96:89:49:22:f1:d8:18:d4:07:ba:5a:64: 97:e5:bf:1c:46:08:ad:0e:ef:0a:d2:29:85:89:d1:76:f0:f5: ec:10:f8:43:66:d7:7a:60:ab:76:d6:65:db:51:03:bf:75:30: 8f:52:c8:5d:6e:7f:a4:f1:e1:a7:5e:80:52:47:ba:8e:16:6d: c0:67:e9:69:03:b5:5e:eb:c6:0a:a7:99:45:72:c7:09:a0:d2: e8:4b:71:b1:1b:06:3c:92:ff:71:c5:67:f6:b5:5e:15:1b:a0: ce:af:83:55:84:82:9c:f1:87:d7:4b:7e:84:ee:9c:62:2b:a1: 47:f3:e8:e9:90:8c:b2:9d:6a:35:44:51:33:42:05:e3:08:0c: 63:70:99:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDcZlcFzy/qgS03zC1mDsbHIR2hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA5MjMxNTMwMjRaFw0yNjA5MjQxNjI3MjRaMDMxMTAvBgNV BAMTKDc1NEFDMjQ5NUI2QTAxNkRBNTg5ODE3REFBRDI5N0M2Q0M5N0U4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIbgbvx53WgKlwu4EGDoVpGEg O7d9dmfszSYydvDJR8nCLsI8HtT5DXC5ct+kd0h+nKdl70f1CBpDC5+u8cFZSSWc srHyVjDuBS5sJvW+McvmVrjK3J1nZR3agcXZ+DF8CO7bjhKF1FIZfry297/PCy66 Vs87oy18Y6y1Gmfw9wXHOdkFnNIBqzGkGc0/8o0ZsKojuKAteZjczgMPJV16DCnL /ZXDCKLkiZElRiyA5KprYVSmDExcc/vK37vGbftrQSBJEGSiR+tpNLWT2ZiIs0Ll UTjAIfHFyNOOb093KXO2x1rwS8qKGzazjkNlArpfSvdiGHibr/Hg233ETg4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUrCSVtqAW2liYF9qtKXxsyX6CkwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADot14E4SHJ6m39DY9g8MvHNoue2/5Io99n/ iecEnn/yNna/3Tto2/EQLKC6u3/TzXH0fFbPAmaL7flOO3s4U3+5CUJ9KcaoHhnM +nptvPUoYUyxVX8G5XRnzuzDbCSAQs9mpKBuZuIhGt8n3hksdrYlo5aJSSLx2BjU B7paZJflvxxGCK0O7wrSKYWJ0Xbw9ewQ+ENm13pgq3bWZdtRA791MI9SyF1uf6Tx 4adegFJHuo4WbcBn6WkDtV7rxgqnmUVyxwmg0uhLcbEbBjyS/3HFZ/a1XhUboM6v g1WEgpzxh9dLfoTunGIroUfz6OmQjLKdajVEUTNCBeMIDGNwmUY= -----END CERTIFICATE-----Generated at Thu Sep 24 07:25:00 2026 by rpki-client