$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: 4NaGnfgU0IfEg3InyT22MUbOrGjQYuRwi8898Gb8lBQ= Subject key identifier: 32:3B:56:0E:96:02:F4:6C:C0:7D:D1:37:D3:7B:33:8F:AD:48:FC:B0 Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 170A9586D4088897C608EAAF417FA32FA5E821B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 21:56:28 +0000 Manifest this update: Wed 04 Nov 2026 21:51:28 +0000 Manifest next update: Thu 05 Nov 2026 23:46:28 +0000 Files and hashes: 1: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 3: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: zRKr+9cf7txZ4tlqTVjmZRuXz2Kd69HqNkCw/hjtoWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 23:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0a:95:86:d4:08:88:97:c6:08:ea:af:41:7f:a3:2f:a5:e8:21:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Nov 4 21:51:28 2026 GMT Not After : Nov 5 23:46:28 2026 GMT Subject: CN=323B560E9602F46CC07DD137D37B338FAD48FCB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:62:49:71:26:49:cb:b2:85:5b:d6:2f:ec: 85:9a:ee:1c:f8:ef:34:80:4e:86:2e:20:8d:6c:c9: d3:4d:67:2c:9e:bf:98:d6:04:76:e1:37:a6:31:cf: 77:2a:e4:4e:af:ac:94:0d:0a:7d:a2:b8:1e:af:8f: 82:ff:09:a7:36:39:29:d5:05:21:39:dd:bc:8d:7e: 52:88:0c:e5:be:59:20:19:19:7e:70:fe:1f:53:ef: 4b:e7:e4:8c:e2:37:ad:c9:16:d5:a4:0a:f9:d6:ca: 9c:27:24:a6:df:ba:5b:8f:68:7a:f6:c6:c7:93:d9: 20:95:36:c7:bd:c4:84:a0:62:88:3e:aa:62:db:79: 5a:f3:fc:8f:25:75:c7:d3:0a:d6:50:af:c5:e7:e7: ae:7b:94:a2:53:3a:c7:77:2e:b1:e0:07:63:f1:fe: 54:3a:22:cf:45:31:b8:79:30:48:5a:33:59:3e:da: 7e:18:88:7e:58:be:de:6c:a0:59:ee:f2:01:59:99: 5a:9b:82:b1:fb:b1:ad:0d:56:99:1b:b1:a8:91:c8: f8:c1:f9:0d:07:a8:93:53:a9:11:40:af:cd:24:96: 7b:d6:4a:c5:85:9c:31:72:ef:4b:72:c3:bb:1b:e4: 93:83:0c:8c:c5:f6:1c:0b:ca:f5:59:e7:7c:ec:b4: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3B:56:0E:96:02:F4:6C:C0:7D:D1:37:D3:7B:33:8F:AD:48:FC:B0 X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:79:1f:54:f6:b4:1c:67:b5:63:40:d8:af:8b:a7:36:01:d7: d5:c4:2e:f2:f8:c4:23:38:85:d0:ce:78:f6:d7:64:75:8c:63: 1f:5f:ff:4b:7b:42:28:a0:36:d6:90:51:e0:2d:1d:e9:ed:66: 4a:0a:e3:b1:d3:ab:32:3a:1a:82:dd:77:f9:8d:4b:35:9d:3d: 50:6a:c0:41:59:b8:90:a7:bc:fe:5e:18:34:53:6b:88:74:df: 7e:14:17:63:6d:53:07:08:40:3c:aa:a3:40:72:49:56:64:0b: e4:48:f4:c6:f7:b7:08:2a:d0:a8:cb:48:0f:9f:10:5d:ab:aa: aa:c8:8f:f5:51:2f:f8:1c:1d:ee:a9:5c:d4:b6:81:6f:3b:a8: f9:9c:1d:c7:88:e9:78:f2:79:e1:28:9c:ba:db:36:70:f5:44: f4:7b:04:0c:f5:fb:d9:17:0f:b4:97:71:d4:fb:da:1c:42:14: 71:0f:cb:6b:99:3e:27:be:e8:f5:18:d0:e4:85:bd:d0:61:3a: 44:01:56:6a:1f:e4:58:98:91:29:73:83:49:4b:50:fb:3a:7b: 75:09:2c:4f:12:18:dc:5a:52:a4:85:2a:80:f7:0a:5f:23:ba: 35:a6:1c:2c:36:94:fe:02:38:66:21:44:e1:fa:09:e4:f1:2e: 1c:43:59:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwqVhtQIiJfGCOqvQX+jL6XoIbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjExMDQyMTUxMjhaFw0yNjExMDUyMzQ2MjhaMDMxMTAvBgNV BAMTKDMyM0I1NjBFOTYwMkY0NkNDMDdERDEzN0QzN0IzMzhGQUQ0OEZDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWs2JJcSZJy7KFW9Yv7IWa7hz4 7zSAToYuII1sydNNZyyev5jWBHbhN6Yxz3cq5E6vrJQNCn2iuB6vj4L/Cac2OSnV BSE53byNflKIDOW+WSAZGX5w/h9T70vn5IziN63JFtWkCvnWypwnJKbfuluPaHr2 xseT2SCVNse9xISgYog+qmLbeVrz/I8ldcfTCtZQr8Xn5657lKJTOsd3LrHgB2Px /lQ6Is9FMbh5MEhaM1k+2n4YiH5Yvt5soFnu8gFZmVqbgrH7sa0NVpkbsaiRyPjB +Q0HqJNTqRFAr80klnvWSsWFnDFy70tyw7sb5JODDIzF9hwLyvVZ53zstL37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjtWDpYC9GzAfdE303szj61I/LAwHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx5H1T2tBxntWNA2K+LpzYB19XELvL4xCM4 hdDOePbXZHWMYx9f/0t7QiigNtaQUeAtHentZkoK47HTqzI6GoLdd/mNSzWdPVBq wEFZuJCnvP5eGDRTa4h0334UF2NtUwcIQDyqo0BySVZkC+RI9Mb3twgq0KjLSA+f EF2rqqrIj/VRL/gcHe6pXNS2gW87qPmcHceI6XjyeeEonLrbNnD1RPR7BAz1+9kX D7SXcdT72hxCFHEPy2uZPie+6PUY0OSFvdBhOkQBVmof5FiYkSlzg0lLUPs6e3UJ LE8SGNxaUqSFKoD3Cl8jujWmHCw2lP4COGYhROH6CeTxLhxDWQ4= -----END CERTIFICATE-----Generated at Thu Nov 5 05:23:35 2026 by rpki-client