$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: PZ7gydsG3HPvgojLzOZKGW82Kg6B/vV+JBPCl4biPQ4= Subject key identifier: 74:95:76:83:44:DA:CB:A7:24:22:C5:B6:B4:01:DC:9A:DA:EE:DE:76 Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 2CB23CF7C7F7210265982DDB8DEFAC083F8A6A18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:31:13 +0000 Manifest this update: Thu 24 Sep 2026 08:26:13 +0000 Manifest next update: Fri 25 Sep 2026 10:06:13 +0000 Files and hashes: 1: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: 40DkvcZtCan2d45W0a/ibbNhRTJgkWo6i2/R5jerp9w=) 2: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 5: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b2:3c:f7:c7:f7:21:02:65:98:2d:db:8d:ef:ac:08:3f:8a:6a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Sep 24 08:26:13 2026 GMT Not After : Sep 25 10:06:13 2026 GMT Subject: CN=7495768344DACBA72422C5B6B401DC9ADAEEDE76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:3c:01:e0:f4:49:4c:f4:3d:82:88:b8:78: cf:13:20:b7:a3:6b:39:cc:d6:58:0d:9a:63:9c:40: 68:c1:76:b4:10:99:12:4b:8a:66:47:2d:40:d1:ab: b6:24:80:f6:8b:e0:37:4d:70:ca:9b:0e:7f:01:da: c5:0e:3d:0f:93:35:99:46:8f:85:30:85:09:06:d5: 38:54:9c:ea:71:37:66:f5:be:5f:da:1b:25:5f:28: 10:3a:33:9c:92:fd:c0:53:d5:47:a2:7f:16:36:7c: e0:bd:50:35:6f:42:38:dd:81:94:df:4a:19:68:6b: 1a:54:97:51:42:d3:26:ed:e4:aa:a5:47:8a:8f:ac: 5a:15:17:52:6e:35:38:6e:e5:6b:cf:62:80:53:0f: c6:64:0c:8c:9d:3d:8e:4e:d0:d7:84:81:f1:be:ac: 5f:64:c8:9e:4d:62:20:e9:a8:2f:ee:62:83:58:03: 5b:f1:60:27:35:47:ce:21:fd:51:a1:7b:09:42:e9: 54:34:af:3e:96:1b:5d:0b:34:fb:36:be:a3:5d:87: 2d:e4:09:ee:ed:97:90:71:42:ab:11:91:92:22:23: 58:0c:49:6e:44:62:51:cf:46:81:98:a5:7f:77:dd: 2f:79:21:c1:f3:26:d6:9c:96:b8:71:eb:93:48:14: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:95:76:83:44:DA:CB:A7:24:22:C5:B6:B4:01:DC:9A:DA:EE:DE:76 X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:56:6c:69:aa:33:0a:21:a3:3e:71:b0:fc:fc:a8:c8:60:44: f1:de:af:e4:91:24:48:f6:a3:db:86:74:41:d1:93:01:5d:3d: 48:2a:e3:45:28:fa:94:b4:ff:66:0d:cf:1b:ec:34:3b:04:44: 75:42:1d:ce:24:2a:04:6e:44:66:48:bd:8d:de:e3:48:b5:98: 72:2b:83:ee:04:8e:95:67:4b:df:c6:c7:83:c9:8a:83:ce:01: a4:bc:81:dc:14:b8:8e:e6:8d:c9:bd:b2:25:e1:9b:c5:53:73: f5:08:c7:eb:cf:72:c8:5c:ee:a3:3a:66:27:70:c4:2a:3f:2b: aa:e1:f8:43:91:a2:b3:cc:bf:07:8d:da:b2:0b:9a:5f:a3:19: 54:c3:d0:05:25:05:75:8a:54:c3:4e:68:fa:4e:e1:32:90:a7: cf:98:d3:50:a5:f8:3d:dc:45:8e:e7:1a:84:7b:a2:eb:22:6a: 50:00:89:a1:ca:49:87:6b:a3:11:f3:55:a9:42:8f:a5:c9:83: 75:55:c6:5a:e1:c2:d8:7c:c0:dd:bd:0e:1c:84:68:2c:54:2c: dc:06:1f:84:6a:9f:d6:e6:0f:a6:29:30:29:d5:9a:7a:07:ef: 23:2c:1f:1a:a0:0f:13:0f:86:80:a7:7c:d5:92:a5:00:7a:20: 17:9c:9c:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLI898f3IQJlmC3bje+sCD+KahgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA5MjQwODI2MTNaFw0yNjA5MjUxMDA2MTNaMDMxMTAvBgNV BAMTKDc0OTU3NjgzNDREQUNCQTcyNDIyQzVCNkI0MDFEQzlBREFFRURFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbNDwB4PRJTPQ9goi4eM8TILej aznM1lgNmmOcQGjBdrQQmRJLimZHLUDRq7YkgPaL4DdNcMqbDn8B2sUOPQ+TNZlG j4UwhQkG1ThUnOpxN2b1vl/aGyVfKBA6M5yS/cBT1UeifxY2fOC9UDVvQjjdgZTf ShloaxpUl1FC0ybt5KqlR4qPrFoVF1JuNThu5WvPYoBTD8ZkDIydPY5O0NeEgfG+ rF9kyJ5NYiDpqC/uYoNYA1vxYCc1R84h/VGhewlC6VQ0rz6WG10LNPs2vqNdhy3k Ce7tl5BxQqsRkZIiI1gMSW5EYlHPRoGYpX933S95IcHzJtaclrhx65NIFGAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdJV2g0Tay6ckIsW2tAHcmtru3nYwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlWbGmqMwohoz5xsPz8qMhgRPHer+SRJEj2 o9uGdEHRkwFdPUgq40Uo+pS0/2YNzxvsNDsERHVCHc4kKgRuRGZIvY3e40i1mHIr g+4EjpVnS9/Gx4PJioPOAaS8gdwUuI7mjcm9siXhm8VTc/UIx+vPcshc7qM6Zidw xCo/K6rh+EORorPMvweN2rILml+jGVTD0AUlBXWKVMNOaPpO4TKQp8+Y01Cl+D3c RY7nGoR7ousialAAiaHKSYdroxHzValCj6XJg3VVxlrhwth8wN29DhyEaCxULNwG H4Rqn9bmD6YpMCnVmnoH7yMsHxqgDxMPhoCnfNWSpQB6IBecnNU= -----END CERTIFICATE-----Generated at Thu Sep 24 15:54:38 2026 by rpki-client