$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: 7vSAWVuK5vFquy9rrLpLKREsJMDEB0dLtvE7hVPZdgc= Subject key identifier: B7:CD:32:03:81:CF:8B:51:76:5B:3D:CD:16:33:3A:E9:56:A9:73:A8 Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 77AE8995DF512C99BFAF39A1964717A2E5EAAC57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:00:34 +0000 Manifest this update: Thu 24 Sep 2026 03:55:34 +0000 Manifest next update: Fri 25 Sep 2026 05:14:34 +0000 Files and hashes: 1: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: VaAl7zjnF1GfMVPPHXslOIWOWn9DLKBucKEmgVoUZCI=) 2: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 3: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) 4: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 5: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ae:89:95:df:51:2c:99:bf:af:39:a1:96:47:17:a2:e5:ea:ac:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Sep 24 03:55:34 2026 GMT Not After : Sep 25 05:14:34 2026 GMT Subject: CN=B7CD320381CF8B51765B3DCD16333AE956A973A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:b1:aa:56:5e:45:f1:fb:fb:d8:52:74:68: 65:91:f5:b5:ae:0d:72:a3:24:01:b8:51:e2:4d:f5: b4:77:df:02:3e:ee:93:08:7a:23:ab:a8:ce:43:05: 7f:c5:03:64:6b:3b:bf:7c:ff:29:7a:96:d3:72:07: 8a:27:5f:69:50:5b:bd:63:72:82:0e:33:7a:52:63: cf:8b:60:38:59:93:18:77:a8:00:19:63:cc:49:66: c2:0d:2a:e3:81:fd:f9:2e:96:15:8b:a5:da:77:f8: c3:74:19:1c:60:36:35:a7:ce:d2:3c:ef:2a:38:cd: c1:07:36:37:30:91:8e:f2:f9:52:c5:ba:7c:00:3b: 28:d3:97:76:74:96:66:72:7f:c3:4f:01:31:10:9c: 7a:36:10:88:c2:74:04:36:0f:fa:c0:dc:bb:21:b2: 27:41:ad:7c:1c:62:1e:16:57:a6:8f:b3:a9:c6:ba: 7c:9a:f1:cd:ff:57:4c:3c:14:6e:86:83:82:e4:75: e4:21:61:95:bf:cd:e3:b9:42:27:76:cb:2f:5c:9e: 78:23:05:eb:b0:e6:6f:b2:ea:fb:9e:02:48:6f:78: f8:fd:c9:84:c8:0a:c1:4a:81:9f:01:96:87:6d:da: 19:79:c1:ba:fd:8d:76:b4:0d:5f:1d:53:86:64:58: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CD:32:03:81:CF:8B:51:76:5B:3D:CD:16:33:3A:E9:56:A9:73:A8 X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:af:f1:e7:e1:bc:b9:78:88:e1:ea:d2:9b:11:1f:af:90:f5: c5:a8:48:cb:31:93:2c:d3:93:32:b1:e3:e4:69:43:57:d4:30: 83:61:15:a2:33:64:16:eb:c6:2f:08:a1:20:0f:a9:e9:79:3a: b6:9a:69:70:20:58:3d:cd:de:cd:74:4f:ff:21:c3:3c:7b:fa: dd:c7:49:92:b1:49:c7:44:6c:20:13:8a:08:eb:8d:f0:bb:ec: ed:96:d8:5f:d1:a5:3b:e2:c0:2f:1a:91:47:89:e6:c9:31:26: db:da:57:bc:44:43:e3:93:8f:41:ed:17:90:53:c7:7d:1c:c1: fd:01:ce:0f:01:00:53:a8:4b:2e:9d:20:6d:f6:86:35:ad:07: 6a:c1:94:a7:ab:42:cb:00:00:e5:8a:7e:1d:f9:cf:9b:d5:96: c7:0f:6c:7b:b6:cb:f4:09:6c:f0:ec:f6:29:b1:c9:e8:94:fb: a1:74:0d:12:71:3d:50:b5:fb:bd:90:95:5f:10:83:3a:7e:4d: 5f:2c:0e:3b:a7:8b:e0:6d:05:82:f9:1b:2b:29:94:b0:50:e8: 47:2d:81:10:f7:5b:79:1d:b1:1d:8f:7c:67:c6:67:dc:23:ec: 0f:6a:72:e1:f5:93:00:6a:a6:1c:90:f2:d5:42:3a:53:a2:70: 8b:cb:0d:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd66Jld9RLJm/rzmhlkcXouXqrFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjA5MjQwMzU1MzRaFw0yNjA5MjUwNTE0MzRaMDMxMTAvBgNV BAMTKEI3Q0QzMjAzODFDRjhCNTE3NjVCM0RDRDE2MzMzQUU5NTZBOTczQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVyrGqVl5F8fv72FJ0aGWR9bWu DXKjJAG4UeJN9bR33wI+7pMIeiOrqM5DBX/FA2RrO798/yl6ltNyB4onX2lQW71j coIOM3pSY8+LYDhZkxh3qAAZY8xJZsINKuOB/fkulhWLpdp3+MN0GRxgNjWnztI8 7yo4zcEHNjcwkY7y+VLFunwAOyjTl3Z0lmZyf8NPATEQnHo2EIjCdAQ2D/rA3Lsh sidBrXwcYh4WV6aPs6nGunya8c3/V0w8FG6Gg4LkdeQhYZW/zeO5Qid2yy9cnngj Beuw5m+y6vueAkhvePj9yYTICsFKgZ8Blodt2hl5wbr9jXa0DV8dU4ZkWD4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt80yA4HPi1F2Wz3NFjM66Vapc6gwHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2v8efhvLl4iOHq0psRH6+Q9cWoSMsxkyzT kzKx4+RpQ1fUMINhFaIzZBbrxi8IoSAPqel5OraaaXAgWD3N3s10T/8hwzx7+t3H SZKxScdEbCATigjrjfC77O2W2F/RpTviwC8akUeJ5skxJtvaV7xEQ+OTj0HtF5BT x30cwf0Bzg8BAFOoSy6dIG32hjWtB2rBlKerQssAAOWKfh35z5vVlscPbHu2y/QJ bPDs9imxyeiU+6F0DRJxPVC1+72QlV8Qgzp+TV8sDjuni+BtBYL5GysplLBQ6Ect gRD3W3kdsR2PfGfGZ9wj7A9qcuH1kwBqphyQ8tVCOlOicIvLDWw= -----END CERTIFICATE-----Generated at Thu Sep 24 06:06:24 2026 by rpki-client