$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: okJ9Chn3muubiXSc8c6O3y7yBxKj2BFhyOk0Gk34aS8= Subject key identifier: A9:6C:59:B7:9C:AC:7C:39:87:8B:B4:E6:27:A3:1A:D6:4C:8F:B9:89 Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 36FB0A67AE0F2BB7281E091995E838D04D11F701 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 18:28:12 +0000 Manifest this update: Fri 25 Sep 2026 18:23:12 +0000 Manifest next update: Sat 26 Sep 2026 20:41:12 +0000 Files and hashes: 1: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) 2: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: HcT7mXJgUAXd2jgfMENLnQHqzf3/s3onDUECva2YgFE=) 3: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fb:0a:67:ae:0f:2b:b7:28:1e:09:19:95:e8:38:d0:4d:11:f7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Sep 25 18:23:12 2026 GMT Not After : Sep 26 20:41:12 2026 GMT Subject: CN=A96C59B79CAC7C39878BB4E627A31AD64C8FB989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:33:d0:c8:01:0e:d6:d2:4b:34:da:14:30: 38:0f:31:e6:16:b7:0d:82:72:50:d8:76:bd:15:78: cd:e7:f3:dd:74:a3:2c:27:bf:25:b7:5a:f0:f6:db: 2b:ef:37:31:bb:07:b0:8f:6c:92:6d:34:0d:24:74: 16:c9:75:f7:25:64:05:9b:b9:4e:c6:75:e1:0a:d9: cb:29:07:bd:e9:fe:a9:95:5b:2a:23:07:03:dc:f7: 11:c0:6e:d3:1d:97:d7:52:f7:1b:b9:d4:da:ff:0e: c2:0f:d0:c7:67:f3:8f:f3:99:db:85:b5:1c:c4:92: 20:67:e6:ba:df:fd:5d:b3:19:e5:ae:af:cc:31:8e: cd:1b:a0:48:e4:19:a6:c2:e2:c6:8b:9a:07:5c:76: 42:c2:90:2e:05:65:d2:94:fd:22:85:1b:82:4d:9a: 09:6c:c2:36:8b:96:02:d8:37:86:3b:c5:b0:09:a4: f1:08:89:0f:81:d8:58:cb:f8:e7:66:46:17:dd:3e: 84:83:c7:e6:3c:c7:36:b3:db:5a:f5:80:f6:59:28: e7:8b:87:ff:dd:35:5d:96:ae:ad:77:3b:71:dd:fa: 53:de:12:2a:45:1d:ca:47:87:6c:45:ce:30:6a:f4: cd:af:f1:fc:1a:26:82:80:57:ee:8c:96:a6:df:5d: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6C:59:B7:9C:AC:7C:39:87:8B:B4:E6:27:A3:1A:D6:4C:8F:B9:89 X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b0:5f:19:f5:9f:5b:7e:a2:59:63:d2:ef:59:44:9b:97:38: ce:29:b1:a5:93:10:09:07:a9:74:c1:30:3e:19:de:c7:40:8e: 74:6e:3c:e5:ab:b7:6e:3c:91:f1:38:e7:2b:17:d4:00:a0:fe: 64:de:f9:f5:b1:83:81:2a:3b:a7:ec:89:bd:5c:fd:85:9d:b5: 1b:d0:2e:4e:9f:95:d4:57:4d:ee:89:79:ad:ff:96:08:26:16: eb:9e:60:0e:8c:1c:3a:9a:0c:ae:23:00:80:f0:4c:3f:c6:c7: 9d:de:ab:d1:d9:d5:0a:d6:d8:e6:83:23:39:0d:5d:09:51:51: 08:b1:f9:ca:87:8b:3f:4c:5c:6c:a0:48:09:de:76:0d:22:7c: 96:cf:ab:87:ea:3b:91:e8:67:a8:63:35:c1:f2:40:0b:83:cc: 45:3c:6c:a9:2a:8b:58:65:05:1b:1c:c8:58:84:99:bc:71:bd: 1c:15:e4:c6:1e:87:cf:18:3e:c1:d4:d2:38:1e:1d:9c:32:d2: 8d:10:1a:be:64:6b:8b:60:43:4d:eb:93:ac:91:64:b4:87:72: fe:cd:1e:bc:9e:c0:2d:6f:78:f1:d9:c4:1a:af:e2:c2:f2:19: fe:73:8e:03:55:c4:3c:6b:61:0c:fb:77:38:dc:8c:08:1b:fe: ed:a4:97:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvsKZ64PK7coHgkZleg40E0R9wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA5MjUxODIzMTJaFw0yNjA5MjYyMDQxMTJaMDMxMTAvBgNV BAMTKEE5NkM1OUI3OUNBQzdDMzk4NzhCQjRFNjI3QTMxQUQ2NEM4RkI5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV8TPQyAEO1tJLNNoUMDgPMeYW tw2CclDYdr0VeM3n8910oywnvyW3WvD22yvvNzG7B7CPbJJtNA0kdBbJdfclZAWb uU7GdeEK2cspB73p/qmVWyojBwPc9xHAbtMdl9dS9xu51Nr/DsIP0Mdn84/zmduF tRzEkiBn5rrf/V2zGeWur8wxjs0boEjkGabC4saLmgdcdkLCkC4FZdKU/SKFG4JN mglswjaLlgLYN4Y7xbAJpPEIiQ+B2FjL+OdmRhfdPoSDx+Y8xzaz21r1gPZZKOeL h//dNV2Wrq13O3Hd+lPeEipFHcpHh2xFzjBq9M2v8fwaJoKAV+6MlqbfXQ8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqWxZt5ysfDmHi7TmJ6Ma1kyPuYkwHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6wXxn1n1t+ollj0u9ZRJuXOM4psaWTEAkH qXTBMD4Z3sdAjnRuPOWrt248kfE45ysX1ACg/mTe+fWxg4EqO6fsib1c/YWdtRvQ Lk6fldRXTe6Jea3/lggmFuueYA6MHDqaDK4jAIDwTD/Gx53eq9HZ1QrW2OaDIzkN XQlRUQix+cqHiz9MXGygSAnedg0ifJbPq4fqO5HoZ6hjNcHyQAuDzEU8bKkqi1hl BRscyFiEmbxxvRwV5MYeh88YPsHU0jgeHZwy0o0QGr5ka4tgQ03rk6yRZLSHcv7N HryewC1vePHZxBqv4sLyGf5zjgNVxDxrYQz7dzjcjAgb/u2kl1o= -----END CERTIFICATE-----Generated at Sat Sep 26 02:03:30 2026 by rpki-client