$ rpki-client -vvf rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft File: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft (raw, json) Hash identifier: nA4rLWGseflIBTboeHOjzNJpmewekSQeGjXMHQnTzJE= Subject key identifier: 96:45:41:09:75:82:22:53:84:32:12:C7:98:E9:F7:FF:A2:5D:78:C4 Authority key identifier: CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF Certificate issuer: /CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Certificate serial: 7AACC39B8C68865DCC6F7247546836F4224D10E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft Manifest number: 14 Signing time: Sat 16 May 2026 11:53:19 +0000 Manifest this update: Sat 16 May 2026 11:48:19 +0000 Manifest next update: Sun 17 May 2026 13:44:19 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0a0mRTJ0XyRsHSJ+cQxVKt1197ImdVbMp91dK9yMnIY=) 2: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: UN7kohH8Qopbcnmi1gjKLx1GBx8HbdAU7RiPemVEdmI=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: kIk3y9Le8ITzH0gAYxjapj5XisvK0Ewo2TQq12RAexU=) 4: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: mFbWoTOmfmUy9A6Zdh+QA4OmNagu//HZm5TsZoJfMkA=) 5: CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl (hash: 2s/oYONZ4MJDEAnSbrEcJdU8RxzEQsvZkGmTIgJ9Vyg=) 6: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: TciBEZIFdVzpbJynXTJH57aL9koCtK5qOiPHCneTWcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ac:c3:9b:8c:68:86:5d:cc:6f:72:47:54:68:36:f4:22:4d:10:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE9C14EC2F31A241E032283ABED53A3F48D7DBF Validity Not Before: May 16 11:48:19 2026 GMT Not After : May 17 13:44:19 2026 GMT Subject: CN=9645410975822253843212C798E9F7FFA25D78C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:3e:73:23:20:f0:30:1d:b8:4e:9b:d8:b7: 36:24:fd:e8:d2:51:90:b8:cd:f4:49:70:96:e2:fa: 56:64:67:23:37:cd:51:fa:23:2e:6e:7d:20:ed:a9: fe:cf:75:92:33:cd:87:8f:f7:08:ad:3e:20:12:04: 16:20:db:ac:72:17:c8:8b:88:e9:f6:d0:96:02:56: f2:cf:a1:b3:ca:31:d4:53:91:f8:e3:6e:3c:3a:d6: 55:be:99:40:57:5b:55:60:da:2b:be:4a:1a:be:2f: d5:5c:3e:9e:fe:28:bb:ab:5f:87:eb:e5:f5:cf:dc: a1:63:fb:80:bf:55:c1:fb:d9:98:13:cd:05:f8:4f: 9d:eb:ce:b9:3d:30:17:45:78:b9:bd:63:26:09:e1: e1:7b:e3:e8:3c:82:58:04:8b:0d:5e:34:76:b6:12: 0b:b0:26:2c:c6:8b:ea:b6:a7:ff:83:6b:15:b6:26: ab:b6:e4:80:56:af:c6:99:8d:5c:2e:63:4c:56:f3: 76:c2:cc:98:37:de:0a:81:5a:3c:c1:01:bb:d1:00: 7b:c8:35:18:ec:b0:56:6b:c4:fb:ab:68:f8:95:34: c3:74:33:fc:df:85:2f:e6:fb:d1:ce:17:98:39:f1: 95:31:0a:fd:ca:2d:95:47:c1:48:e6:bd:69:77:2a: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:45:41:09:75:82:22:53:84:32:12:C7:98:E9:F7:FF:A2:5D:78:C4 X509v3 Authority Key Identifier: keyid:CF:E9:C1:4E:C2:F3:1A:24:1E:03:22:83:AB:ED:53:A3:F4:8D:7D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/CFE9C14EC2F31A241E032283ABED53A3F48D7DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e2:44:fb:fa:52:17:41:74:45:31:53:09:79:7f:de:da:d5: 22:a6:d9:03:33:ab:fe:46:63:90:05:00:6e:a8:2c:71:93:8b: cd:30:12:c9:e2:98:be:63:f0:b4:b2:f0:61:91:5f:b0:cc:60: 9b:54:5f:7b:d3:60:64:9c:7e:a5:bc:ed:5f:c7:fc:18:bc:c8: e8:7a:33:45:99:7d:f9:58:85:50:2a:7a:69:b2:99:ac:39:0e: c6:95:be:61:84:cd:1f:a4:17:8a:ac:16:93:82:bd:40:17:e4: 15:39:17:2a:85:4a:91:e2:93:b7:dc:28:24:36:64:83:9e:3c: a7:da:54:83:89:5d:5f:02:3d:51:f2:d3:12:52:5b:fc:a5:f2: 90:d1:09:8f:51:eb:6f:68:06:25:a1:d2:e5:ca:08:85:ec:9a: fe:b6:f3:3a:3a:07:31:25:fa:47:90:82:86:07:16:45:15:e1: fa:8e:81:c8:90:eb:35:93:74:9e:d1:1c:a6:4a:ca:e5:d5:e5: eb:5b:e4:2e:10:20:de:94:3e:53:66:49:26:ac:d9:95:2b:3f: e2:bc:76:17:f5:30:c2:67:06:44:ac:a1:43:a1:b5:7c:30:df: 12:31:5f:79:f5:01:91:9e:3b:44:77:ea:1e:eb:04:4f:72:26: 4a:ef:73:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqzDm4xohl3Mb3JHVGg29CJNEOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNG NDhEN0RCRjAeFw0yNjA1MTYxMTQ4MTlaFw0yNjA1MTcxMzQ0MTlaMDMxMTAvBgNV BAMTKDk2NDU0MTA5NzU4MjIyNTM4NDMyMTJDNzk4RTlGN0ZGQTI1RDc4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOj5zIyDwMB24TpvYtzYk/ejS UZC4zfRJcJbi+lZkZyM3zVH6Iy5ufSDtqf7PdZIzzYeP9witPiASBBYg26xyF8iL iOn20JYCVvLPobPKMdRTkfjjbjw61lW+mUBXW1Vg2iu+Shq+L9VcPp7+KLurX4fr 5fXP3KFj+4C/VcH72ZgTzQX4T53rzrk9MBdFeLm9YyYJ4eF74+g8glgEiw1eNHa2 EguwJizGi+q2p/+DaxW2Jqu25IBWr8aZjVwuY0xW83bCzJg33gqBWjzBAbvRAHvI NRjssFZrxPuraPiVNMN0M/zfhS/m+9HOF5g58ZUxCv3KLZVHwUjmvWl3Kq31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkVBCXWCIlOEMhLHmOn3/6JdeMQwHwYDVR0j BBgwFoAUz+nBTsLzGiQeAyKDq+1To/SNfb8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2RiNmIzYmMtZmE2NS00OWYzLWFmNjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVD MkYzMUEyNDFFMDMyMjgzQUJFRDUzQTNGNDhEN0RCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkU5QzE0RUMyRjMxQTI0MUUwMzIyODNBQkVENTNBM0Y0OEQ3 REJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvQ0ZFOUMxNEVDMkYzMUEyNDFFMDMyMjgzQUJFRDUz QTNGNDhEN0RCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbiRPv6UhdBdEUxUwl5f97a1SKm2QMzq/5G Y5AFAG6oLHGTi80wEsnimL5j8LSy8GGRX7DMYJtUX3vTYGScfqW87V/H/Bi8yOh6 M0WZfflYhVAqemmymaw5DsaVvmGEzR+kF4qsFpOCvUAX5BU5FyqFSpHik7fcKCQ2 ZIOePKfaVIOJXV8CPVHy0xJSW/yl8pDRCY9R629oBiWh0uXKCIXsmv628zo6BzEl +keQgoYHFkUV4fqOgciQ6zWTdJ7RHKZKyuXV5etb5C4QIN6UPlNmSSas2ZUrP+K8 dhf1MMJnBkSsoUOhtXww3xIxX3n1AZGeO0R36h7rBE9yJkrvc5c= -----END CERTIFICATE-----Generated at Sun May 17 00:03:23 2026 by rpki-client