$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: 0K7H0lg5uygDCXWsHVt9Ph7GnFVBV2CFOdmaqi2l7wE= Subject key identifier: 17:B1:F2:F3:88:A5:98:7A:2A:31:B7:57:BD:27:6E:D8:B2:4D:17:32 Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 21B849BEF2F9256D5EEA7E04299C85BA063D0D0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: E0 Signing time: Fri 16 Oct 2026 08:40:07 +0000 Manifest this update: Fri 16 Oct 2026 08:35:07 +0000 Manifest next update: Sat 17 Oct 2026 09:04:07 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) 2: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: YJoTc4V3ShfQVV9Y5ouczMWqFsYLHDC6LBw+UT8TyII=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 5: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 09:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b8:49:be:f2:f9:25:6d:5e:ea:7e:04:29:9c:85:ba:06:3d:0d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Oct 16 08:35:07 2026 GMT Not After : Oct 17 09:04:07 2026 GMT Subject: CN=17B1F2F388A5987A2A31B757BD276ED8B24D1732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:0b:06:22:5a:13:8c:77:25:c6:94:a6:6a: 08:3a:37:bd:b1:a6:fe:28:20:d3:7d:14:96:b5:45: 62:27:c7:31:47:ed:0b:9d:ec:15:27:fd:22:8c:ca: d9:e5:ec:da:95:ef:a0:39:e1:c0:3d:f4:09:74:5d: 53:2f:66:c3:74:59:60:a0:8a:e0:d2:76:a5:6f:14: 43:61:6e:30:00:49:ec:f0:27:97:5d:6a:a0:ba:bb: 76:64:a2:a7:22:96:6f:1a:b6:09:4d:29:49:2f:60: 02:3d:f9:67:02:66:6f:fb:36:5c:c7:77:82:b7:64: 82:be:a1:d5:1f:2e:ed:c4:c0:76:88:5c:96:ae:18: 88:15:49:78:ae:a7:c1:34:50:c6:68:c9:e0:7f:17: 56:8e:33:39:59:44:33:8a:3d:48:db:af:a0:d5:3f: 04:0d:ad:83:de:8e:23:00:1c:9b:9f:ad:c4:8a:5d: 82:a1:3b:31:a5:44:b3:96:fe:6d:05:6b:13:a5:93: 0d:f8:81:33:4e:b5:3e:bc:03:ad:d3:65:0a:52:66: bc:48:b4:dd:3e:36:a1:59:42:09:03:94:df:22:55: 2b:51:bd:5d:98:02:c3:78:03:9f:6e:46:8c:ea:35: 3b:46:3b:42:94:51:ea:03:82:ec:a0:62:ef:54:37: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B1:F2:F3:88:A5:98:7A:2A:31:B7:57:BD:27:6E:D8:B2:4D:17:32 X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:22:7d:a2:1d:46:b0:2d:0f:50:01:32:ae:54:1f:40:40:76: 08:f9:e6:83:4c:71:db:d4:5a:30:be:71:4f:57:c7:de:81:1b: 01:d6:09:23:dd:e1:8f:ce:63:11:20:3f:e0:31:54:d0:6d:56: c7:5c:00:39:e7:3c:c9:fa:1f:d4:ad:c6:10:c0:52:ab:9a:94: 8e:21:5a:9d:b4:f8:cd:bf:83:56:e9:88:bf:81:8f:37:19:f4: 9f:1b:6f:36:cc:cd:1a:a8:67:7d:69:de:4d:f0:ba:22:69:99: 85:d4:bf:2f:43:d5:c8:e1:d0:0e:fe:df:3c:e7:24:56:4c:ab: dc:57:f8:e4:69:87:4c:5a:b9:79:49:4d:48:fc:f2:4a:be:97: 9a:8d:93:f7:6f:94:fd:e1:0c:c5:0c:b5:3d:0e:90:35:bf:1b: db:72:20:3c:7f:21:31:4f:62:2b:3d:28:10:30:61:c3:37:80: 0b:33:66:f5:1f:39:12:a8:3d:52:fb:80:f5:ae:21:61:86:0b: a0:ab:18:90:4f:b1:27:b8:5b:37:70:79:3f:7d:54:04:f8:b0: 1d:28:d4:5b:27:0c:fe:23:f1:8f:26:38:1a:c3:4d:85:48:fe: 01:4d:ab:cf:b9:bd:80:55:35:c8:67:b7:82:57:58:da:80:31: 03:6d:c0:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbhJvvL5JW1e6n4EKZyFugY9DQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjEwMTYwODM1MDdaFw0yNjEwMTcwOTA0MDdaMDMxMTAvBgNV BAMTKDE3QjFGMkYzODhBNTk4N0EyQTMxQjc1N0JEMjc2RUQ4QjI0RDE3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtAsGIloTjHclxpSmagg6N72x pv4oINN9FJa1RWInxzFH7Qud7BUn/SKMytnl7NqV76A54cA99Al0XVMvZsN0WWCg iuDSdqVvFENhbjAASezwJ5ddaqC6u3Zkoqcilm8atglNKUkvYAI9+WcCZm/7NlzH d4K3ZIK+odUfLu3EwHaIXJauGIgVSXiup8E0UMZoyeB/F1aOMzlZRDOKPUjbr6DV PwQNrYPejiMAHJufrcSKXYKhOzGlRLOW/m0FaxOlkw34gTNOtT68A63TZQpSZrxI tN0+NqFZQgkDlN8iVStRvV2YAsN4A59uRozqNTtGO0KUUeoDguygYu9UN733AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF7Hy84ilmHoqMbdXvSdu2LJNFzIwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4ifaIdRrAtD1ABMq5UH0BAdgj55oNMcdvU WjC+cU9Xx96BGwHWCSPd4Y/OYxEgP+AxVNBtVsdcADnnPMn6H9StxhDAUqualI4h Wp20+M2/g1bpiL+BjzcZ9J8bbzbMzRqoZ31p3k3wuiJpmYXUvy9D1cjh0A7+3zzn JFZMq9xX+ORph0xauXlJTUj88kq+l5qNk/dvlP3hDMUMtT0OkDW/G9tyIDx/ITFP Yis9KBAwYcM3gAszZvUfORKoPVL7gPWuIWGGC6CrGJBPsSe4WzdweT99VAT4sB0o 1FsnDP4j8Y8mOBrDTYVI/gFNq8+5vYBVNchnt4JXWNqAMQNtwOk= -----END CERTIFICATE-----Generated at Fri Oct 16 16:24:26 2026 by rpki-client