$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: hyo2EHmGTMyjSnX4GQik7+hJriS+WfQwjP8NhNgk1SI= Subject key identifier: 9C:DF:98:0D:EC:B1:09:F5:8F:39:F7:D4:04:48:98:A0:BD:63:2B:98 Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 39DD2B46FB7CCDA8727AF0E5A581107D7AEA134B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:43:00 +0000 Manifest this update: Tue 02 Jun 2026 14:38:00 +0000 Manifest next update: Wed 03 Jun 2026 18:35:00 +0000 Files and hashes: 1: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: 5EygUEOMCHHIJjAjnF63feQ4EAnc90l6PgOIeydNU+c=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dd:2b:46:fb:7c:cd:a8:72:7a:f0:e5:a5:81:10:7d:7a:ea:13:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Jun 2 14:38:00 2026 GMT Not After : Jun 3 18:35:00 2026 GMT Subject: CN=9CDF980DECB109F58F39F7D4044898A0BD632B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9e:13:d5:87:e8:14:69:22:76:15:09:40:0e: 02:30:f4:b6:94:b0:6d:d5:4e:37:1a:8c:65:7b:5a: 44:03:eb:b3:fb:a7:3f:5f:17:d3:d8:99:10:7e:08: c3:f0:7a:91:1a:1b:46:9d:a6:42:53:8a:63:ad:f3: 89:26:12:a2:c2:2e:4b:d3:d0:82:27:22:c1:31:80: a9:f5:1a:b5:36:5f:62:84:64:79:88:6d:2b:0c:bc: c7:20:68:5e:88:fb:79:b5:ef:ef:75:1f:13:d5:c1: 59:6d:ff:3e:49:76:91:5c:5c:52:67:19:9c:0f:93: 24:4f:20:98:b0:66:b5:c9:df:88:de:2f:d7:43:3d: 4f:21:3d:9c:51:48:22:16:bf:6b:c7:10:8b:64:f6: e0:c4:4f:0a:81:15:fd:32:58:64:9e:cd:26:d1:de: 47:19:a2:a3:b8:d9:05:34:5f:9c:fd:46:00:54:c5: 47:f9:4a:34:01:d3:08:87:40:49:a3:87:f8:7e:0f: 20:e3:bc:d6:da:e4:72:d0:d0:22:35:9e:a4:8f:ac: 67:da:22:1b:a6:c0:6a:bc:1a:63:87:c4:ad:2b:9e: 5a:cd:84:91:a1:bd:b4:e8:48:e5:b3:ec:c9:56:e8: 40:8f:c6:48:90:87:fe:f5:c3:7d:d0:61:74:d4:88: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DF:98:0D:EC:B1:09:F5:8F:39:F7:D4:04:48:98:A0:BD:63:2B:98 X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:84:b4:29:c9:ae:90:db:43:ba:be:ef:5c:21:40:48:54:70: 90:9c:b9:47:95:bf:8d:06:89:4a:b5:e5:52:7e:57:bd:94:f2: e1:08:c9:77:0e:61:d4:eb:73:20:3c:4b:06:82:5b:48:f5:5d: d5:b6:d2:35:d9:fd:9e:2b:04:8c:82:86:32:92:04:15:dd:ee: 9c:81:90:12:eb:66:ae:9d:44:f7:20:ce:72:58:f1:31:c8:7e: 42:a6:88:73:a1:9e:0b:d0:b2:16:88:ec:a2:06:93:8a:77:43: 4d:83:79:a4:08:aa:f1:b7:ad:2e:15:9b:28:16:56:19:e2:f4: 38:0b:43:66:60:c8:67:56:f1:aa:86:da:51:24:e6:9a:f4:ed: 52:1b:8b:3c:03:c0:f2:d2:80:ef:27:ff:64:c8:09:a2:e5:b8: 10:19:1b:ad:b0:a1:38:dc:a1:70:e3:d4:e3:53:b6:ae:92:fd: 9a:17:0a:7e:78:b3:fe:6d:00:ea:98:ad:8f:69:bd:c1:7b:26: 67:91:96:62:b1:45:46:45:97:24:2e:17:4d:c0:1e:69:5a:b2: be:16:bd:47:91:61:d6:7f:fe:c3:fe:fc:3d:1d:18:3a:f5:de: bc:e6:77:15:b7:ab:e7:8a:af:fd:c5:bd:7a:c1:7c:6f:28:f6: d6:2d:42:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOd0rRvt8zahyevDlpYEQfXrqE0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA2MDIxNDM4MDBaFw0yNjA2MDMxODM1MDBaMDMxMTAvBgNV BAMTKDlDREY5ODBERUNCMTA5RjU4RjM5RjdENDA0NDg5OEEwQkQ2MzJCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnhPVh+gUaSJ2FQlADgIw9LaU sG3VTjcajGV7WkQD67P7pz9fF9PYmRB+CMPwepEaG0adpkJTimOt84kmEqLCLkvT 0IInIsExgKn1GrU2X2KEZHmIbSsMvMcgaF6I+3m17+91HxPVwVlt/z5JdpFcXFJn GZwPkyRPIJiwZrXJ34jeL9dDPU8hPZxRSCIWv2vHEItk9uDETwqBFf0yWGSezSbR 3kcZoqO42QU0X5z9RgBUxUf5SjQB0wiHQEmjh/h+DyDjvNba5HLQ0CI1nqSPrGfa IhumwGq8GmOHxK0rnlrNhJGhvbToSOWz7MlW6ECPxkiQh/71w33QYXTUiIZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnN+YDeyxCfWPOffUBEiYoL1jK5gwHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaEtCnJrpDbQ7q+71whQEhUcJCcuUeVv40G iUq15VJ+V72U8uEIyXcOYdTrcyA8SwaCW0j1XdW20jXZ/Z4rBIyChjKSBBXd7pyB kBLrZq6dRPcgznJY8THIfkKmiHOhngvQshaI7KIGk4p3Q02DeaQIqvG3rS4VmygW Vhni9DgLQ2ZgyGdW8aqG2lEk5pr07VIbizwDwPLSgO8n/2TICaLluBAZG62woTjc oXDj1ONTtq6S/ZoXCn54s/5tAOqYrY9pvcF7JmeRlmKxRUZFlyQuF03AHmlasr4W vUeRYdZ//sP+/D0dGDr13rzmdxW3q+eKr/3FvXrBfG8o9tYtQsQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:45 2026 by rpki-client