$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: sZNDOgQQ2090pH5spvOMXMmkF6Q+Zsi5OGUgGyY2x68= Subject key identifier: 84:BB:A7:A8:19:EF:02:F0:F3:E8:E6:6F:CE:BE:A6:1D:BF:0C:F5:1D Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 2C83707F0BA1C1A1AA11D2AE3D908E89FD216B97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:27:33 +0000 Manifest this update: Tue 21 Jul 2026 05:22:33 +0000 Manifest next update: Wed 22 Jul 2026 06:44:33 +0000 Files and hashes: 1: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: ohytU1zZtgUtrEqkeWy6/TsfgTZaT7qOaNOyhm1oFBo=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:83:70:7f:0b:a1:c1:a1:aa:11:d2:ae:3d:90:8e:89:fd:21:6b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Jul 21 05:22:33 2026 GMT Not After : Jul 22 06:44:33 2026 GMT Subject: CN=84BBA7A819EF02F0F3E8E66FCEBEA61DBF0CF51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:03:61:da:69:39:eb:86:91:7a:7e:2e:76: a9:b5:aa:e1:17:43:12:2e:e2:9b:10:05:4d:47:7a: 79:61:d7:dc:07:36:ef:61:b9:06:5e:1d:d1:8d:14: 18:24:fc:7a:11:6a:84:d9:0a:67:e5:98:40:96:5d: 5b:b3:16:ac:bb:a8:2d:48:65:c0:4a:05:86:bb:be: f7:08:09:e0:bc:0c:92:9c:19:3b:de:f7:88:7a:8e: e7:52:ec:05:c1:81:15:64:aa:04:f4:d3:e9:28:63: e5:f1:1e:d4:1a:51:65:91:f4:bd:a6:38:70:c9:40: e7:96:70:a3:09:c3:44:0c:ce:1c:e1:ff:c1:33:9b: ed:c5:bf:2b:69:88:f2:ac:79:c8:40:d9:19:03:48: 80:cd:48:02:bd:2f:e4:6b:42:14:da:96:51:1f:17: 57:14:c3:0d:c1:59:e6:a6:37:21:5e:cc:6e:70:f0: ea:7c:76:54:f9:74:9c:20:7c:91:be:80:fb:8e:47: 99:cc:72:b5:98:55:6b:23:de:82:cd:8f:df:01:e9: 35:aa:d8:e0:79:b0:a2:ad:ec:27:21:2f:58:5f:73: 0d:c6:02:fe:bf:9c:25:5e:5d:26:07:dc:e4:8f:3a: 01:b3:f8:cb:1b:a5:1b:cb:6d:98:71:c6:87:cb:c5: 88:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BB:A7:A8:19:EF:02:F0:F3:E8:E6:6F:CE:BE:A6:1D:BF:0C:F5:1D X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:28:a1:78:c2:cf:c5:fe:bd:24:bd:4a:ab:37:f9:9a:02:78: 26:74:61:8d:cd:d2:91:97:49:5e:6d:1f:44:fc:16:bd:4f:2d: 3e:9f:44:06:4b:20:c3:aa:cd:42:b7:7f:4f:2f:49:f4:7f:48: 23:0e:4c:f0:25:a8:8d:0e:b6:a2:61:01:32:a4:21:aa:7e:76: b8:3c:f4:cf:37:15:56:f5:fb:00:65:ef:24:e2:db:72:18:fd: d7:e3:3d:f4:08:9f:19:cf:fc:ce:19:0d:da:cc:de:94:e4:9d: 17:91:34:9e:b1:ff:5a:55:d4:76:56:bb:4d:1e:ba:90:92:e9: f9:98:fe:95:fc:fd:bf:c5:01:74:96:79:29:ac:40:42:71:1a: b0:e7:78:4a:99:09:d2:a4:d0:60:f8:ce:47:a0:17:9b:04:70: f0:1e:22:6f:45:b9:52:ce:5b:14:33:5c:f5:05:ae:24:f1:47: 41:8e:85:3f:69:c6:73:24:49:bf:14:b7:0f:36:30:4f:37:6d: 4f:e9:c3:e5:aa:c8:29:c8:73:0f:be:24:3b:b4:10:0b:89:8a: f7:f0:c0:57:90:7a:a8:4c:17:22:a7:87:35:27:2b:a7:f0:19: 8a:75:e8:61:8b:82:fe:f4:88:d7:b2:20:43:a5:56:95:a6:29: 0c:9f:b3:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULINwfwuhwaGqEdKuPZCOif0ha5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA3MjEwNTIyMzNaFw0yNjA3MjIwNjQ0MzNaMDMxMTAvBgNV BAMTKDg0QkJBN0E4MTlFRjAyRjBGM0U4RTY2RkNFQkVBNjFEQkYwQ0Y1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoowNh2mk564aRen4udqm1quEX QxIu4psQBU1Henlh19wHNu9huQZeHdGNFBgk/HoRaoTZCmflmECWXVuzFqy7qC1I ZcBKBYa7vvcICeC8DJKcGTve94h6judS7AXBgRVkqgT00+koY+XxHtQaUWWR9L2m OHDJQOeWcKMJw0QMzhzh/8Ezm+3FvytpiPKsechA2RkDSIDNSAK9L+RrQhTallEf F1cUww3BWeamNyFezG5w8Op8dlT5dJwgfJG+gPuOR5nMcrWYVWsj3oLNj98B6TWq 2OB5sKKt7CchL1hfcw3GAv6/nCVeXSYH3OSPOgGz+MsbpRvLbZhxxofLxYjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLunqBnvAvDz6OZvzr6mHb8M9R0wHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMooXjCz8X+vSS9Sqs3+ZoCeCZ0YY3N0pGX SV5tH0T8Fr1PLT6fRAZLIMOqzUK3f08vSfR/SCMOTPAlqI0OtqJhATKkIap+drg8 9M83FVb1+wBl7yTi23IY/dfjPfQInxnP/M4ZDdrM3pTknReRNJ6x/1pV1HZWu00e upCS6fmY/pX8/b/FAXSWeSmsQEJxGrDneEqZCdKk0GD4zkegF5sEcPAeIm9FuVLO WxQzXPUFriTxR0GOhT9pxnMkSb8Utw82ME83bU/pw+WqyCnIcw++JDu0EAuJivfw wFeQeqhMFyKnhzUnK6fwGYp16GGLgv70iNeyIEOlVpWmKQyfsw4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:47 2026 by rpki-client