$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: bUjiat5GwCIHJUGhAKMIKG1GHMqy5VJ5EmLq4Vc/LMo= Subject key identifier: D8:BE:A7:41:B4:5C:6A:76:B1:43:DB:47:D1:0F:AC:E5:2F:E7:1C:38 Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 35BB81C721E49CE85AA3E326DBE4991FB4E000D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: 9E Signing time: Thu 27 Aug 2026 18:48:44 +0000 Manifest this update: Thu 27 Aug 2026 18:43:44 +0000 Manifest next update: Fri 28 Aug 2026 22:14:44 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) 2: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 5: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: hUwCRYFaXR7ZCQSWoEOVvF8tLlfca8M+jBqisoNp5xc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 22:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:bb:81:c7:21:e4:9c:e8:5a:a3:e3:26:db:e4:99:1f:b4:e0:00:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Aug 27 18:43:44 2026 GMT Not After : Aug 28 22:14:44 2026 GMT Subject: CN=D8BEA741B45C6A76B143DB47D10FACE52FE71C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:a4:91:8e:e7:f9:d3:2f:86:9e:38:51:cb: bc:ce:9d:38:0a:8b:cd:b1:cb:30:2b:84:06:4e:c6: 37:4c:2f:24:5c:03:cf:b8:5f:f0:05:50:dc:cd:d2: 27:ae:98:5a:cf:84:32:2a:2e:01:3b:6c:d6:93:65: ae:30:79:49:6f:a8:80:ab:4d:6b:a4:8b:f1:bf:ba: 08:cb:21:61:72:f2:ae:35:22:63:7f:fc:52:50:f5: a3:5f:50:29:5b:c2:94:61:21:10:03:52:34:6c:c1: 9a:26:cd:c6:c0:0d:d9:03:a6:7d:bf:87:e6:cc:b2: ea:81:04:c5:7d:9b:2d:56:a5:e3:65:86:86:bd:3c: 42:4b:c9:76:37:cd:31:ab:8c:d6:e0:ba:cc:d1:38: 09:6a:bf:85:3c:6d:2a:e3:ab:fc:c4:8a:d1:bd:bb: 8f:af:1a:7d:06:3d:25:d4:29:cb:32:0a:6b:f7:f2: 37:0b:91:49:77:e6:8e:04:41:71:42:01:72:a7:a4: a3:93:c3:cd:c8:88:41:fe:ce:fe:c8:63:7b:e4:b0: d2:20:5f:d3:12:48:e9:56:d2:c5:cc:e5:b3:73:6c: 5b:84:31:93:92:e3:6e:56:0f:b8:34:8c:99:0d:25: 6f:60:8b:33:88:96:81:22:96:fc:6e:8f:2a:49:10: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:A7:41:B4:5C:6A:76:B1:43:DB:47:D1:0F:AC:E5:2F:E7:1C:38 X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:06:9d:06:45:f3:13:a3:d6:d3:02:5d:c5:5c:7b:f7:a7:ac: 42:81:1f:a6:e6:fb:02:a5:9e:6b:38:e5:df:ee:c2:fa:a4:1b: ed:83:eb:89:45:26:34:61:5e:8c:7e:1f:ef:0c:be:90:58:c6: ad:9b:03:79:47:d1:ea:34:74:18:6e:ef:62:0f:61:df:4e:d8: ec:58:50:57:2b:97:84:c9:aa:a9:7b:c5:07:e2:7c:0a:32:6a: c7:c5:4c:af:ee:9a:60:a5:00:3e:47:85:fb:92:21:45:30:58: 65:92:07:f5:8f:ef:3c:c7:7a:6f:2e:f3:23:d6:08:48:07:29: 12:1f:42:c0:99:00:0a:7b:5d:1f:28:6a:78:ad:39:ff:c0:65: 71:d6:1f:84:02:38:54:e6:32:de:67:5f:d4:06:48:bc:a8:f9: 68:60:1f:8e:d8:bb:be:1d:99:9a:6d:e5:cc:1e:16:d2:9d:29: 18:92:62:33:ba:6d:63:ed:7a:ef:40:f2:9b:29:cc:b7:ab:c9: 23:d7:65:a1:eb:b7:57:90:5e:f4:fc:65:b0:52:ee:11:55:ce: 67:67:12:b7:57:be:46:2c:93:6d:a0:ed:e8:62:54:83:3f:7a: ec:54:b9:cb:e3:38:cb:4a:b8:a5:2c:65:2d:c1:4c:1c:c0:c7: f4:b4:f2:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbuBxyHknOhao+Mm2+SZH7TgANMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA4MjcxODQzNDRaFw0yNjA4MjgyMjE0NDRaMDMxMTAvBgNV BAMTKEQ4QkVBNzQxQjQ1QzZBNzZCMTQzREI0N0QxMEZBQ0U1MkZFNzFDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2aSRjuf50y+GnjhRy7zOnTgK i82xyzArhAZOxjdMLyRcA8+4X/AFUNzN0ieumFrPhDIqLgE7bNaTZa4weUlvqICr TWuki/G/ugjLIWFy8q41ImN//FJQ9aNfUClbwpRhIRADUjRswZomzcbADdkDpn2/ h+bMsuqBBMV9my1WpeNlhoa9PEJLyXY3zTGrjNbguszROAlqv4U8bSrjq/zEitG9 u4+vGn0GPSXUKcsyCmv38jcLkUl35o4EQXFCAXKnpKOTw83IiEH+zv7IY3vksNIg X9MSSOlW0sXM5bNzbFuEMZOS425WD7g0jJkNJW9gizOIloEilvxujypJEFKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2L6nQbRcanaxQ9tH0Q+s5S/nHDgwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0GnQZF8xOj1tMCXcVce/enrEKBH6bm+wKl nms45d/uwvqkG+2D64lFJjRhXox+H+8MvpBYxq2bA3lH0eo0dBhu72IPYd9O2OxY UFcrl4TJqql7xQfifAoyasfFTK/ummClAD5HhfuSIUUwWGWSB/WP7zzHem8u8yPW CEgHKRIfQsCZAAp7XR8oanitOf/AZXHWH4QCOFTmMt5nX9QGSLyo+WhgH47Yu74d mZpt5cweFtKdKRiSYjO6bWPteu9A8pspzLerySPXZaHrt1eQXvT8ZbBS7hFVzmdn ErdXvkYsk22g7ehiVIM/euxUucvjOMtKuKUsZS3BTBzAx/S08m8= -----END CERTIFICATE-----Generated at Fri Aug 28 04:31:21 2026 by rpki-client