$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft File: CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft (raw, json) Hash identifier: i0IbIeijZ0rBLbfkhXQSFPobzrVyTRKxDxLJPClGEBM= Subject key identifier: CB:FB:12:AC:EE:34:0E:E5:7B:73:27:66:F9:E6:9A:1D:80:66:96:8C Authority key identifier: CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A Certificate issuer: /CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Certificate serial: 07E820B50F35863E32CAC48B6E0BF9DCBBCF1941 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:12:22 +0000 Manifest this update: Thu 17 Sep 2026 07:07:22 +0000 Manifest next update: Fri 18 Sep 2026 11:11:22 +0000 Files and hashes: 1: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: dpe3Ov8SWyP+hfFqwN+/clByjqzDrOMWcPK9yAhNZjU=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: cVjK2grNp2IBOxZWQkiaEQoenvaBYh+fRiJEwJpcBbA=) 3: CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl (hash: KVzg5vHkXaAZJd7SgHHeDuaqMbxyGPHQebTXDq1e37U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e8:20:b5:0f:35:86:3e:32:ca:c4:8b:6e:0b:f9:dc:bb:cf:19:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE67EBA55DF1E21D0909B89817E6AC57006883A Validity Not Before: Sep 17 07:07:22 2026 GMT Not After : Sep 18 11:11:22 2026 GMT Subject: CN=CBFB12ACEE340EE57B732766F9E69A1D8066968C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:79:98:61:00:9d:31:eb:4f:34:a5:0d:f1: ac:7f:20:a1:ca:a6:ba:59:23:08:27:6e:38:86:a3: 30:0d:dc:42:29:68:55:5f:6c:aa:5e:d7:76:3a:77: c0:b6:13:b6:84:af:c4:3d:97:5c:41:77:de:60:9d: b9:79:28:91:6d:74:57:ce:87:a3:6d:53:bd:38:2e: 97:31:b7:f5:4e:b2:c0:9e:a1:cc:3f:23:e0:56:c8: 3b:21:85:fd:5a:41:81:e9:a5:8e:5a:79:7a:72:17: 7a:13:e0:e0:47:e2:d9:5d:3a:cf:4f:a5:64:bf:ae: 96:aa:d1:6f:1b:64:5b:e5:50:06:11:c9:40:31:d0: c0:2b:5b:63:1e:a6:22:05:fd:c3:6a:bd:6e:b8:45: 17:43:65:9a:ad:3e:6a:7e:9e:c0:82:0e:a6:a8:a0: e1:b0:55:69:f2:a8:ed:50:e2:98:3c:0c:58:90:00: 16:83:c2:f0:5b:2a:eb:6b:9c:77:c1:65:2e:7c:b5: 6f:57:fb:c0:f7:a7:d2:00:f6:4d:62:57:7f:06:40: 48:de:6c:d9:e2:48:91:ee:2e:54:8b:33:ba:01:18: b3:9f:47:d1:52:3c:f8:1b:20:30:c6:f9:14:95:f5: 8a:ea:2a:c8:d8:0e:a1:e6:96:ad:98:f3:1e:2f:76: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:12:AC:EE:34:0E:E5:7B:73:27:66:F9:E6:9A:1D:80:66:96:8C X509v3 Authority Key Identifier: keyid:CD:E6:7E:BA:55:DF:1E:21:D0:90:9B:89:81:7E:6A:C5:70:06:88:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE67EBA55DF1E21D0909B89817E6AC57006883A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/CDE67EBA55DF1E21D0909B89817E6AC57006883A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9c:c5:6f:52:3c:57:b2:4f:4c:b4:d1:bd:65:9d:68:8d:a7: 19:1a:34:73:7c:83:12:20:57:90:c1:b6:0e:35:eb:a3:f6:75: d3:af:c6:55:71:54:a3:46:ed:3d:92:7a:09:71:48:6e:42:30: ef:12:9d:62:77:65:5c:ea:59:13:f8:92:53:83:b1:a4:ca:14: 02:be:ef:37:7c:d8:7d:8c:0c:cc:16:1a:da:d6:55:59:a2:ef: 59:d0:c5:47:be:a8:74:fb:07:12:70:42:c2:87:d0:ca:84:4d: a3:0a:cf:89:c8:74:a9:b7:cb:07:e4:d5:cf:37:a1:fa:8e:09: ae:a9:a7:b9:98:41:ce:63:dd:17:7f:65:52:a7:01:59:da:da: 20:cc:e2:3d:70:ea:f9:32:37:8c:44:b9:f4:b2:76:0f:6d:dc: 5e:dd:4b:1e:b8:09:b0:3f:cc:7a:88:98:d4:d2:db:a4:60:83: 04:59:38:1f:5f:de:58:88:5c:1d:3e:a5:e0:66:59:6b:b9:ce: b0:72:ce:fe:4b:4c:2c:a5:37:aa:ae:76:f6:85:d2:7b:00:b7: aa:68:69:c8:bd:f6:60:da:79:69:c9:d8:90:e3:28:23:23:89: 26:c2:79:c4:2d:20:34:d5:34:63:07:66:78:d3:da:29:2f:86: 1c:b4:23:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+ggtQ81hj4yysSLbgv53LvPGUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3 MDA2ODgzQTAeFw0yNjA5MTcwNzA3MjJaFw0yNjA5MTgxMTExMjJaMDMxMTAvBgNV BAMTKENCRkIxMkFDRUUzNDBFRTU3QjczMjc2NkY5RTY5QTFEODA2Njk2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuF3mYYQCdMetPNKUN8ax/IKHK prpZIwgnbjiGozAN3EIpaFVfbKpe13Y6d8C2E7aEr8Q9l1xBd95gnbl5KJFtdFfO h6NtU704Lpcxt/VOssCeocw/I+BWyDshhf1aQYHppY5aeXpyF3oT4OBH4tldOs9P pWS/rpaq0W8bZFvlUAYRyUAx0MArW2MepiIF/cNqvW64RRdDZZqtPmp+nsCCDqao oOGwVWnyqO1Q4pg8DFiQABaDwvBbKutrnHfBZS58tW9X+8D3p9IA9k1iV38GQEje bNniSJHuLlSLM7oBGLOfR9FSPPgbIDDG+RSV9YrqKsjYDqHmlq2Y8x4vdjzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy/sSrO40DuV7cydm+eaaHYBmlowwHwYDVR0j BBgwFoAUzeZ+ulXfHiHQkJuJgX5qxXAGiDowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y5YzAyOWEtZGI1MS00YTBlLTkyMDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1 NURGMUUyMUQwOTA5Qjg5ODE3RTZBQzU3MDA2ODgzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2N0VCQTU1REYxRTIxRDA5MDlCODk4MTdFNkFDNTcwMDY4 ODNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvQ0RFNjdFQkE1NURGMUUyMUQwOTA5Qjg5ODE3RTZB QzU3MDA2ODgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADucxW9SPFeyT0y00b1lnWiNpxkaNHN8gxIg V5DBtg4166P2ddOvxlVxVKNG7T2SeglxSG5CMO8SnWJ3ZVzqWRP4klODsaTKFAK+ 7zd82H2MDMwWGtrWVVmi71nQxUe+qHT7BxJwQsKH0MqETaMKz4nIdKm3ywfk1c83 ofqOCa6pp7mYQc5j3Rd/ZVKnAVna2iDM4j1w6vkyN4xEufSydg9t3F7dSx64CbA/ zHqImNTS26RggwRZOB9f3liIXB0+peBmWWu5zrByzv5LTCylN6qudvaF0nsAt6po aci99mDaeWnJ2JDjKCMjiSbCecQtIDTVNGMHZnjT2ikvhhy0IwI= -----END CERTIFICATE-----Generated at Thu Sep 17 16:50:03 2026 by rpki-client