$ rpki-client -vvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: eqPrrkAd0qHxR1vrp4Y67MeNB3tJk6rTLLaciPDUzIo= Subject key identifier: D2:EE:CF:36:A4:75:26:C2:CB:82:86:01:36:34:00:5E:6F:F0:4A:2A Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 1BAC88EC52A48E33ECEEF9D4643981F5B974571F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: 61 Signing time: Mon 13 Jul 2026 08:24:15 +0000 Manifest this update: Mon 13 Jul 2026 08:19:15 +0000 Manifest next update: Tue 14 Jul 2026 10:52:15 +0000 Files and hashes: 1: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: uL339750w8hZ0DBBcnuyEg42ZiajIdGdTMGJGKUdXwo=) 2: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: mFbWoTOmfmUy9A6Zdh+QA4OmNagu//HZm5TsZoJfMkA=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 4: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) 5: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) 6: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 10:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ac:88:ec:52:a4:8e:33:ec:ee:f9:d4:64:39:81:f5:b9:74:57:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: Jul 13 08:19:15 2026 GMT Not After : Jul 14 10:52:15 2026 GMT Subject: CN=D2EECF36A47526C2CB8286013634005E6FF04A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:c4:3e:97:b2:19:aa:a4:ef:90:d8:32:04: b3:f5:49:e5:0f:26:32:79:18:e3:76:0c:22:07:f5: c3:2f:f7:f3:dc:1b:79:a8:b5:3d:1e:99:b2:50:95: 71:74:87:6d:24:17:64:6f:0d:c6:13:ee:87:8d:84: e1:a9:41:c6:c9:25:76:c2:b3:52:47:06:be:50:32: 33:7e:9e:a9:84:f3:45:e9:f6:a1:9c:ff:13:f3:c5: 72:1d:10:74:80:0d:df:04:be:be:ff:3f:bd:a3:1f: ab:62:dc:30:20:70:1d:3b:0c:22:dd:75:6b:b8:19: bf:48:73:6b:ad:00:8e:95:11:fe:50:22:ce:7b:b1: 93:40:4b:5a:15:bd:1d:ea:e3:16:d1:d9:2d:5a:ef: 41:e4:fb:df:01:ae:d9:47:97:a7:84:79:01:9a:c5: b0:97:0f:19:55:88:0c:32:3c:d6:dd:d0:97:e2:65: 75:02:25:45:b4:78:47:7f:35:6b:b2:f0:7e:19:a0: be:58:d2:63:f9:4e:a2:f6:6d:46:bf:ea:ed:30:4d: 4a:22:d7:83:2e:99:82:da:a4:f6:58:36:d3:51:a4: a9:fc:1a:86:26:75:02:06:a7:35:d2:f2:38:86:c0: b9:c4:9c:5f:0b:b2:c3:bb:db:de:8b:e4:9b:10:33: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:CF:36:A4:75:26:C2:CB:82:86:01:36:34:00:5E:6F:F0:4A:2A X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f5:51:08:11:2a:96:d4:dc:84:a1:39:7a:ea:4c:7f:88:8c: 5f:a0:45:20:5b:46:0a:67:2a:03:e4:81:50:45:34:79:e6:9f: d8:d9:35:76:a2:3d:ad:04:f4:14:3c:de:48:47:dc:60:31:05: 4c:b7:ae:b2:60:a7:0a:eb:22:df:b0:9a:b6:0c:ac:2f:3c:bf: 03:f6:27:ad:3d:b7:9d:25:81:32:0f:c4:1a:45:50:d6:28:91: 38:43:f3:b7:1d:c7:43:6f:67:38:82:88:ac:d6:e6:f9:2e:b8: 60:2b:ac:d8:ac:04:04:1b:c0:c8:b8:42:8e:7e:22:0f:af:2a: 5a:8a:73:d9:a0:1b:05:ec:31:54:5e:cf:5d:36:fb:33:0f:08: db:01:c8:2b:03:ef:9f:53:22:ee:64:0e:1d:5f:c0:cc:25:a6: bf:13:46:d7:fd:48:65:b3:3a:8c:d8:d8:d0:76:11:4f:47:a9: f6:73:dc:c4:2b:bf:a6:0f:e2:f4:09:df:90:71:00:c2:9d:d4: 65:d1:04:23:2e:fe:0c:6f:85:82:15:36:86:c8:c5:48:2a:e4: 47:bd:a5:e6:84:19:0a:b4:bc:04:5e:1b:df:df:ec:ff:9b:c5: 7b:58:e4:9a:7a:98:de:0d:20:b8:7c:fd:c5:a2:cd:b4:23:ca: 4c:dd:17:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6yI7FKkjjPs7vnUZDmB9bl0Vx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA3MTMwODE5MTVaFw0yNjA3MTQxMDUyMTVaMDMxMTAvBgNV BAMTKEQyRUVDRjM2QTQ3NTI2QzJDQjgyODYwMTM2MzQwMDVFNkZGMDRBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5MQ+l7IZqqTvkNgyBLP1SeUP JjJ5GON2DCIH9cMv9/PcG3motT0embJQlXF0h20kF2RvDcYT7oeNhOGpQcbJJXbC s1JHBr5QMjN+nqmE80Xp9qGc/xPzxXIdEHSADd8Evr7/P72jH6ti3DAgcB07DCLd dWu4Gb9Ic2utAI6VEf5QIs57sZNAS1oVvR3q4xbR2S1a70Hk+98BrtlHl6eEeQGa xbCXDxlViAwyPNbd0JfiZXUCJUW0eEd/NWuy8H4ZoL5Y0mP5TqL2bUa/6u0wTUoi 14MumYLapPZYNtNRpKn8GoYmdQIGpzXS8jiGwLnEnF8LssO7296L5JsQMwL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0u7PNqR1JsLLgoYBNjQAXm/wSiowHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH1UQgRKpbU3IShOXrqTH+IjF+gRSBbRgpn KgPkgVBFNHnmn9jZNXaiPa0E9BQ83khH3GAxBUy3rrJgpwrrIt+wmrYMrC88vwP2 J609t50lgTIPxBpFUNYokThD87cdx0NvZziCiKzW5vkuuGArrNisBAQbwMi4Qo5+ Ig+vKlqKc9mgGwXsMVRez102+zMPCNsByCsD759TIu5kDh1fwMwlpr8TRtf9SGWz OozY2NB2EU9HqfZz3MQrv6YP4vQJ35BxAMKd1GXRBCMu/gxvhYIVNobIxUgq5Ee9 peaEGQq0vAReG9/f7P+bxXtY5Jp6mN4NILh8/cWizbQjykzdF4w= -----END CERTIFICATE-----Generated at Tue Jul 14 03:40:09 2026 by rpki-client