$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: sBYdPle/I2lVvC2mNQO4BWypLTS4r/CUZQpS+SnyD1Q= Subject key identifier: 9F:72:C7:54:59:58:37:5B:C9:90:76:E5:14:EC:91:67:5A:B1:65:71 Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 1937741993155CBC77F01E2E4E29942596F65EB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:27:19 +0000 Manifest this update: Tue 12 May 2026 06:22:19 +0000 Manifest next update: Wed 13 May 2026 10:18:19 +0000 Files and hashes: 1: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: hBInJpm/VOmkKBjkNNFstiHCsl9g9irF8U3MO9TgMQI=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:37:74:19:93:15:5c:bc:77:f0:1e:2e:4e:29:94:25:96:f6:5e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: May 12 06:22:19 2026 GMT Not After : May 13 10:18:19 2026 GMT Subject: CN=9F72C7545958375BC99076E514EC91675AB16571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:cd:ce:5c:c0:d4:10:1f:b2:4c:98:fa:1d: b0:a7:27:c0:0e:6c:2c:b9:12:b6:1b:44:81:69:62: e4:63:43:ef:f0:22:13:2c:fe:e3:5b:ec:5c:18:db: 67:f7:66:3b:f5:0e:7e:44:c0:29:6c:77:eb:6e:e1: 22:4a:48:f4:77:a3:13:42:19:ef:aa:d4:fb:fe:33: 93:38:8c:96:27:dd:be:05:49:6a:ab:9c:66:ab:0e: a7:42:40:9e:c6:21:7f:79:e8:45:4e:d1:60:48:ef: 6e:34:73:c0:47:43:79:ea:39:48:94:9b:14:31:a1: 7f:45:f4:a5:cc:36:9e:31:e8:58:e9:ca:a6:aa:87: 0e:b3:a6:93:36:3c:fc:4b:be:4c:7c:62:93:6f:32: 1c:88:91:6d:77:c5:a8:59:3e:0f:bd:9a:0d:bd:86: 2a:2e:ec:0e:0f:1a:d3:5b:1b:d2:a1:ac:80:18:20: 45:1a:e1:9d:53:75:84:7e:69:d5:18:b8:cf:d8:68: 60:5f:6d:f5:73:fa:59:54:1f:75:da:3c:0b:59:7d: 33:6c:6b:02:15:d4:8c:3a:bc:4c:bd:ed:be:e6:b1: bb:28:f0:ae:89:ae:67:a7:d9:b7:53:e8:b6:43:c2: 6d:5b:ff:b3:23:d7:52:db:c8:75:63:82:59:ca:0f: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:72:C7:54:59:58:37:5B:C9:90:76:E5:14:EC:91:67:5A:B1:65:71 X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0e:09:77:d3:36:25:06:d7:da:b1:a4:f3:ab:d1:23:45:d3: e6:da:79:86:b3:e5:89:bb:a9:03:13:01:c2:02:bd:0e:79:0e: f2:51:06:31:ca:85:36:e9:ca:32:ce:60:15:19:06:a9:21:a5: cf:25:36:ac:c4:a1:79:47:5e:ad:ac:7b:45:e1:59:f4:34:c0: 77:ec:85:b0:7f:75:66:12:94:4c:d9:47:4b:1a:22:9a:e0:01: e5:7f:74:27:a5:74:98:bd:e2:6f:3b:c6:91:cd:06:75:1b:65: cb:e5:5b:f6:8a:42:bd:a3:28:81:c3:d3:ed:06:eb:79:4f:50: 3c:29:b6:bc:9f:b4:81:70:6d:d3:21:ef:4a:37:b6:1a:18:82: 1a:0a:4a:a5:d3:1c:a5:6d:25:1c:1c:ff:be:d0:49:3d:28:14: 4b:0f:49:3c:29:0c:88:d5:73:39:65:94:ee:c2:dc:e6:cb:c5: 46:a8:12:77:29:24:8a:e1:e5:34:c2:67:fc:d1:8e:8c:ea:8d: fc:99:ec:50:ec:c5:19:66:94:dc:c1:c3:9d:52:45:fa:9b:c5: d5:34:24:28:dc:b3:8a:d0:39:af:94:6a:79:5e:73:f1:dd:70: b4:a0:f2:88:a3:9a:ae:36:9a:e3:2f:5f:76:97:cf:38:66:6e: cf:d2:c4:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTd0GZMVXLx38B4uTimUJZb2XrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA1MTIwNjIyMTlaFw0yNjA1MTMxMDE4MTlaMDMxMTAvBgNV BAMTKDlGNzJDNzU0NTk1ODM3NUJDOTkwNzZFNTE0RUM5MTY3NUFCMTY1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGuc3OXMDUEB+yTJj6HbCnJ8AO bCy5ErYbRIFpYuRjQ+/wIhMs/uNb7FwY22f3Zjv1Dn5EwClsd+tu4SJKSPR3oxNC Ge+q1Pv+M5M4jJYn3b4FSWqrnGarDqdCQJ7GIX956EVO0WBI7240c8BHQ3nqOUiU mxQxoX9F9KXMNp4x6Fjpyqaqhw6zppM2PPxLvkx8YpNvMhyIkW13xahZPg+9mg29 hiou7A4PGtNbG9KhrIAYIEUa4Z1TdYR+adUYuM/YaGBfbfVz+llUH3XaPAtZfTNs awIV1Iw6vEy97b7msbso8K6Jrmen2bdT6LZDwm1b/7Mj11LbyHVjglnKD5vrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn3LHVFlYN1vJkHblFOyRZ1qxZXEwHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8OCXfTNiUG19qxpPOr0SNF0+baeYaz5Ym7 qQMTAcICvQ55DvJRBjHKhTbpyjLOYBUZBqkhpc8lNqzEoXlHXq2se0XhWfQ0wHfs hbB/dWYSlEzZR0saIprgAeV/dCeldJi94m87xpHNBnUbZcvlW/aKQr2jKIHD0+0G 63lPUDwptryftIFwbdMh70o3thoYghoKSqXTHKVtJRwc/77QST0oFEsPSTwpDIjV czlllO7C3ObLxUaoEncpJIrh5TTCZ/zRjozqjfyZ7FDsxRlmlNzBw51SRfqbxdU0 JCjcs4rQOa+Uanlec/HdcLSg8oijmq42muMvX3aXzzhmbs/SxMg= -----END CERTIFICATE-----Generated at Wed May 13 04:03:07 2026 by rpki-client