$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft (raw, json) Hash identifier: sgklxqGhV6wCJvH0Cfh1t2gFwGGCjcDT8Stu7muEPNE= Subject key identifier: 3A:3D:F3:73:6B:E1:5E:84:8B:1A:77:6B:E9:51:B6:12:CB:32:FE:2C Authority key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Certificate issuer: /CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Certificate serial: 431BF618769BAA9A72AE23970E52C8B702C6DECB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft Manifest number: E5 Signing time: Wed 21 Oct 2026 07:07:57 +0000 Manifest this update: Wed 21 Oct 2026 07:02:57 +0000 Manifest next update: Thu 22 Oct 2026 07:20:57 +0000 Files and hashes: 1: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: jl/tgsbbyovIaob82eL8Ip1Qa2Rca9Qb4IBoUsYHZ3M=) 2: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: NQu09oIddLktwWP+5dKMaQL7ObxpBVVxc9iif3qFPwk=) 3: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: omooex5wfOrA0XeW1EKkb/7PiiuJPMeS9GocCi2kkYk=) 4: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: zmOkQPvu0HR5PjSH0/1RM/A5vBfNpV5/4kSzFOHdh2I=) 5: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl (hash: qZ8KIWS7mCFS2ZuHoCRxbCdbH9IQSCvy69KeOUqBN48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 07:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1b:f6:18:76:9b:aa:9a:72:ae:23:97:0e:52:c8:b7:02:c6:de:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Validity Not Before: Oct 21 07:02:57 2026 GMT Not After : Oct 22 07:20:57 2026 GMT Subject: CN=3A3DF3736BE15E848B1A776BE951B612CB32FE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:ba:e2:b7:a8:f2:29:9d:34:97:55:e1:cc: 4e:2e:f3:a4:84:d9:4f:4c:5b:61:09:45:bc:6c:78: 87:44:ec:90:e7:90:fe:a9:f2:25:e6:a2:b2:53:60: 66:11:03:d1:c8:9f:ae:db:c1:25:3c:b6:c1:3f:46: 34:90:77:ec:c2:2e:51:97:f5:49:53:92:f3:e2:27: 00:dd:01:12:a5:5a:c8:b5:0c:68:27:ef:af:7b:5c: 64:0b:ed:7e:aa:ee:53:dc:1d:51:79:f2:cc:a7:f1: 4e:23:a1:27:16:28:d1:ac:f9:94:e9:a1:d3:b5:92: ed:9b:40:88:47:2b:5b:31:0e:28:b8:35:64:8e:f6: a2:9b:77:b2:4a:2c:a2:60:8f:18:4a:b6:b5:47:b3: a8:07:64:3e:8d:f8:00:fb:2d:af:a5:ae:02:76:47: ca:cc:64:99:f0:f8:c9:ca:eb:58:b1:cc:f2:42:95: d3:5c:04:19:37:0d:22:ff:c5:0a:64:5e:cd:73:91: a3:ca:f5:95:f1:32:c9:90:df:46:47:c2:bf:b6:be: 3c:41:cc:b0:63:7b:83:ae:c2:87:2d:5f:9d:be:b6: 39:6a:96:11:b5:19:7c:91:f2:1e:d1:fb:bf:ce:69: e3:66:15:ba:d8:46:d1:88:26:27:bf:e0:84:c4:79: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:F3:73:6B:E1:5E:84:8B:1A:77:6B:E9:51:B6:12:CB:32:FE:2C X509v3 Authority Key Identifier: keyid:CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c3:14:e6:6d:65:67:67:a0:e2:25:81:33:83:3d:41:fb:da: a3:84:bc:26:98:be:b1:fd:2a:d1:36:46:c8:39:34:b0:60:e1: e8:83:c6:49:31:49:0b:4a:25:67:4b:cf:46:c5:12:22:1d:62: 4d:28:a9:fa:06:46:3b:5a:8c:66:de:86:73:13:1a:84:fc:c8: 87:8c:19:ea:a3:82:6f:37:39:18:36:8d:18:18:14:d4:e6:99: 01:82:8e:68:32:4a:22:42:98:36:5d:35:88:08:8b:aa:a0:5c: 4a:93:dd:f7:71:49:16:40:15:b5:a0:67:d2:f0:b4:9c:5c:2b: a9:b3:0e:aa:ae:c2:ea:2d:57:23:cd:ea:56:78:cb:99:e7:09: 41:ba:68:79:66:9c:57:0a:13:d0:22:0f:09:2c:ea:88:b8:15: a1:c1:6d:6c:7a:51:83:6a:33:ab:ab:3d:13:30:7e:87:4c:81: 8c:54:17:90:bf:c8:cf:b0:da:38:52:eb:83:f3:70:b8:5f:3d: 34:5f:97:82:d8:bf:dd:4d:4a:bd:00:8d:77:29:b1:9a:2c:99: ea:87:87:02:b4:79:13:8b:0b:38:59:fa:3c:7b:e3:36:97:ea: 8b:d9:41:2e:c1:11:c7:2c:f4:9a:02:92:06:78:40:05:27:85: e3:03:cb:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxv2GHabqppyriOXDlLItwLG3sswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0MTBF RDdENjc3QTAeFw0yNjEwMjEwNzAyNTdaFw0yNjEwMjIwNzIwNTdaMDMxMTAvBgNV BAMTKDNBM0RGMzczNkJFMTVFODQ4QjFBNzc2QkU5NTFCNjEyQ0IzMkZFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcELrit6jyKZ00l1XhzE4u86SE 2U9MW2EJRbxseIdE7JDnkP6p8iXmorJTYGYRA9HIn67bwSU8tsE/RjSQd+zCLlGX 9UlTkvPiJwDdARKlWsi1DGgn7697XGQL7X6q7lPcHVF58syn8U4joScWKNGs+ZTp odO1ku2bQIhHK1sxDii4NWSO9qKbd7JKLKJgjxhKtrVHs6gHZD6N+AD7La+lrgJ2 R8rMZJnw+MnK61ixzPJCldNcBBk3DSL/xQpkXs1zkaPK9ZXxMsmQ30ZHwr+2vjxB zLBje4OuwoctX52+tjlqlhG1GXyR8h7R+7/OaeNmFbrYRtGIJie/4ITEeZ2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOj3zc2vhXoSLGndr6VG2Essy/iwwHwYDVR0j BBgwFoAUzvL5+x293nV+EaxZKz40EO19Z3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWViYmFkYjMtOWFjOC00NmRmLWFiOTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIx REJEREU3NTdFMTFBQzU5MkIzRTM0MTBFRDdENjc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRUYyRjlGQjFEQkRERTc1N0UxMUFDNTkyQjNFMzQxMEVEN0Q2 NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvQ0VGMkY5RkIxREJEREU3NTdFMTFBQzU5MkIzRTM0 MTBFRDdENjc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjDFOZtZWdnoOIlgTODPUH72qOEvCaYvrH9 KtE2Rsg5NLBg4eiDxkkxSQtKJWdLz0bFEiIdYk0oqfoGRjtajGbehnMTGoT8yIeM Geqjgm83ORg2jRgYFNTmmQGCjmgySiJCmDZdNYgIi6qgXEqT3fdxSRZAFbWgZ9Lw tJxcK6mzDqquwuotVyPN6lZ4y5nnCUG6aHlmnFcKE9AiDwks6oi4FaHBbWx6UYNq M6urPRMwfodMgYxUF5C/yM+w2jhS64PzcLhfPTRfl4LYv91NSr0AjXcpsZosmeqH hwK0eROLCzhZ+jx74zaX6ovZQS7BEccs9JoCkgZ4QAUnheMDy0k= -----END CERTIFICATE-----Generated at Wed Oct 21 15:21:47 2026 by rpki-client