$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: lECM3pfQg3QH8N+UI3nAAo1tN/FTPTyP0/VOMGRLaxo= Subject key identifier: F4:4F:BE:33:04:26:ED:0C:B7:28:71:0C:D2:62:B6:79:B7:1E:7F:4A Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 106E43727F4B9FCEC1BC69A0F67C19C9EA135A38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:33:37 +0000 Manifest this update: Fri 24 Jul 2026 03:28:37 +0000 Manifest next update: Sat 25 Jul 2026 04:28:37 +0000 Files and hashes: 1: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: wcPYUaMC/fCsugG+oQRG//WS7e4wCMDRHcdKbztWM9c=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6e:43:72:7f:4b:9f:ce:c1:bc:69:a0:f6:7c:19:c9:ea:13:5a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Jul 24 03:28:37 2026 GMT Not After : Jul 25 04:28:37 2026 GMT Subject: CN=F44FBE330426ED0CB728710CD262B679B71E7F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:f5:40:0a:0e:4a:06:0d:40:f1:89:7d:8a: 93:80:7e:f8:4e:e8:4f:8c:67:b8:00:ba:a6:6d:2c: 84:52:4f:95:9d:3f:63:3a:36:78:b6:61:6c:1c:2f: fd:83:5c:15:33:d1:01:10:a6:c2:8b:55:f4:a3:af: be:53:c7:09:d5:1a:54:f6:f6:d5:bf:24:f1:c1:d1: de:6a:9b:67:07:95:32:94:2e:7f:81:b1:2e:2b:7e: 0d:f0:85:6e:38:04:03:23:76:8b:d3:8e:e7:0e:34: dc:58:9b:e8:74:1d:f3:17:69:28:b4:7c:dc:f4:09: 8f:27:34:79:27:dd:a0:3d:71:66:13:df:2e:8a:f9: ca:dd:73:dc:3e:ee:49:8b:f1:3d:ac:08:cc:e1:9b: d1:4a:11:dc:6c:ec:c2:30:9c:c0:79:d2:34:44:17: e5:5b:8d:6e:9f:33:b6:a4:89:c7:cd:a1:71:5e:f0: 70:53:0b:d2:f5:e8:63:1f:10:64:dd:02:8c:93:58: b0:97:b2:7c:48:3a:59:d3:db:5f:cf:40:46:b2:07: 4c:6d:81:e4:e7:63:39:0a:e9:18:2f:9c:68:c6:9f: 9f:f3:1e:c8:b9:64:0e:8c:e0:6b:61:bf:3f:f1:21: 5b:48:64:05:ff:87:d9:fd:54:53:5d:cd:33:8e:c9: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4F:BE:33:04:26:ED:0C:B7:28:71:0C:D2:62:B6:79:B7:1E:7F:4A X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:04:32:eb:87:10:a6:51:01:be:54:c4:c3:88:52:e4:7b:e0: 69:06:78:1f:52:bb:31:aa:cd:c0:e1:cc:6e:ee:cd:09:cb:64: 64:3b:bc:9e:17:bb:a4:4e:da:86:b5:0e:a2:e5:45:48:94:b4: 7b:51:d3:f1:5a:a2:84:8d:a1:08:b1:be:0f:df:d7:a5:c3:b2: 6b:d7:46:14:e6:5c:6e:9f:24:e3:cf:bf:07:51:66:63:5a:a9: 6e:2c:45:b7:5a:7d:f3:50:e5:03:52:a2:7a:14:68:8c:46:59: 6d:08:06:e1:97:5f:ca:c9:61:16:b4:67:ad:af:8b:1c:9a:35: 6c:21:16:e6:92:1c:4f:e3:c5:ad:63:54:f6:41:ef:46:6f:8c: 82:33:24:b8:87:59:98:50:d1:5c:2c:f4:de:50:5f:2e:85:64: 80:c5:94:3d:9e:c1:40:0a:05:19:44:93:2d:75:cb:de:a8:32: 6b:4b:91:61:94:ac:be:3d:17:d7:6a:0f:a4:98:dc:70:0e:8e: f0:6f:88:2e:37:51:7d:45:ec:08:b4:79:2c:8d:57:25:8a:46: f6:86:c9:55:40:f7:fb:89:f9:35:42:4c:76:0e:0f:b5:51:cc: 11:35:58:b3:fe:ff:af:0a:c7:7e:c6:07:a7:93:fd:8f:aa:f3: 80:55:e6:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEG5Dcn9Ln87BvGmg9nwZyeoTWjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA3MjQwMzI4MzdaFw0yNjA3MjUwNDI4MzdaMDMxMTAvBgNV BAMTKEY0NEZCRTMzMDQyNkVEMENCNzI4NzEwQ0QyNjJCNjc5QjcxRTdGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChCfVACg5KBg1A8Yl9ipOAfvhO 6E+MZ7gAuqZtLIRST5WdP2M6Nni2YWwcL/2DXBUz0QEQpsKLVfSjr75TxwnVGlT2 9tW/JPHB0d5qm2cHlTKULn+BsS4rfg3whW44BAMjdovTjucONNxYm+h0HfMXaSi0 fNz0CY8nNHkn3aA9cWYT3y6K+crdc9w+7kmL8T2sCMzhm9FKEdxs7MIwnMB50jRE F+VbjW6fM7akicfNoXFe8HBTC9L16GMfEGTdAoyTWLCXsnxIOlnT21/PQEayB0xt geTnYzkK6RgvnGjGn5/zHsi5ZA6M4Gthvz/xIVtIZAX/h9n9VFNdzTOOyQnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9E++MwQm7Qy3KHEM0mK2ebcef0owHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0EMuuHEKZRAb5UxMOIUuR74GkGeB9SuzGq zcDhzG7uzQnLZGQ7vJ4Xu6RO2oa1DqLlRUiUtHtR0/FaooSNoQixvg/f16XDsmvX RhTmXG6fJOPPvwdRZmNaqW4sRbdaffNQ5QNSonoUaIxGWW0IBuGXX8rJYRa0Z62v ixyaNWwhFuaSHE/jxa1jVPZB70ZvjIIzJLiHWZhQ0Vws9N5QXy6FZIDFlD2ewUAK BRlEky11y96oMmtLkWGUrL49F9dqD6SY3HAOjvBviC43UX1F7Ai0eSyNVyWKRvaG yVVA9/uJ+TVCTHYOD7VRzBE1WLP+/68Kx37GB6eT/Y+q84BV5hw= -----END CERTIFICATE-----Generated at Fri Jul 24 08:56:42 2026 by rpki-client