$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: tFX+c2xUcZnlyClCYVC1ewcRJ5yTZUoUAvuZTM2CAcw= Subject key identifier: 1F:09:AE:FF:83:78:19:79:97:F2:DD:0F:EE:52:8C:4A:91:AC:8C:3D Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 4CECE3C4CBF26992F5BA64B4A2A2A38CF3A95995 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:49:19 +0000 Manifest this update: Wed 23 Sep 2026 18:44:19 +0000 Manifest next update: Thu 24 Sep 2026 21:52:19 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) 2: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: mCfeez/yvIg6E1ESxJ8cAyLftAlLGqcv/z8RjRybJUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ec:e3:c4:cb:f2:69:92:f5:ba:64:b4:a2:a2:a3:8c:f3:a9:59:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: Sep 23 18:44:19 2026 GMT Not After : Sep 24 21:52:19 2026 GMT Subject: CN=1F09AEFF8378197997F2DD0FEE528C4A91AC8C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:c6:ed:43:45:74:00:9d:fc:bf:1c:e4:0b: c0:e4:36:32:5e:3c:19:f7:45:f4:36:88:e3:7a:89: 56:21:c6:9f:55:0b:64:0c:54:79:0f:c5:78:4e:20: f7:fb:95:9a:28:58:c1:81:33:78:ed:4f:9b:07:60: f1:1d:10:34:74:d2:f7:dd:f0:cf:72:b1:5b:91:49: 87:3a:25:32:01:57:7f:e4:fb:30:9d:69:fd:91:01: 28:8d:4c:48:d7:07:d6:bc:7d:18:7a:41:03:cf:c2: f3:7b:25:f3:d4:03:52:80:52:3d:5c:6b:05:02:c2: 25:b3:14:5e:dc:81:83:3e:40:42:c0:db:a9:9e:3c: 60:65:02:b8:74:8f:70:b2:02:6b:bb:68:69:a6:b6: cd:17:e6:ea:b8:17:9b:2a:33:b4:db:83:44:36:b8: 71:d0:05:bb:fe:5d:53:45:32:61:87:f4:1a:99:a3: 6f:26:5d:ac:07:d5:42:c4:69:0e:a7:68:7b:65:1c: 9c:c2:3f:83:08:02:dc:d2:af:01:dc:df:98:dd:f7: 47:79:75:e2:bc:66:73:e9:8a:dc:b3:e1:5c:4d:dd: 68:eb:90:fe:5b:23:0f:60:61:80:7e:03:87:1e:e9: 9a:26:5d:06:39:6d:1c:72:69:4b:98:4d:1f:e6:a3: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:09:AE:FF:83:78:19:79:97:F2:DD:0F:EE:52:8C:4A:91:AC:8C:3D X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fe:67:07:0a:1d:e7:39:82:60:d3:c6:15:26:9b:8a:02:76: 85:0b:ee:d3:70:01:14:20:a0:db:bc:1b:f0:86:53:7a:d4:26: 0a:d5:8d:6e:c1:bd:97:bf:01:0d:50:f5:72:ff:bb:4e:4f:ce: e7:c3:a1:e3:c7:92:9d:de:29:4f:1c:55:46:2e:ab:80:a1:1f: 9e:c7:c9:9c:eb:4f:01:63:02:12:be:e5:dd:4a:d5:68:68:90: 8e:6b:7d:ba:9f:1a:5b:83:e3:46:6d:40:db:4b:93:3e:39:b1: b0:05:30:1a:00:5e:29:2e:a7:6e:33:58:4c:16:d6:cb:bc:66: 28:bc:45:a5:98:41:c1:50:47:7b:86:49:fc:6d:23:07:39:dc: 0c:5a:92:81:4b:8e:ed:a3:41:76:82:6b:0f:6c:09:3e:b0:f4: 9b:ea:a2:8b:c3:75:fe:09:8a:fc:30:f7:d7:ef:68:08:b2:51: 40:ec:0e:6d:c7:30:87:4d:27:af:2d:65:c2:80:1c:a4:e1:f4: 08:78:b3:0b:bf:86:95:82:b1:e2:54:a7:a5:78:40:91:7d:d9: c9:ca:54:ab:ae:cd:11:b0:dc:e7:38:70:f8:b4:c5:b6:43:f8: 0a:96:61:d1:90:8b:47:9a:f7:e2:b4:98:b6:3d:a9:69:26:7b: 6a:64:2b:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOzjxMvyaZL1umS0oqKjjPOpWZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjA5MjMxODQ0MTlaFw0yNjA5MjQyMTUyMTlaMDMxMTAvBgNV BAMTKDFGMDlBRUZGODM3ODE5Nzk5N0YyREQwRkVFNTI4QzRBOTFBQzhDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgcbtQ0V0AJ38vxzkC8DkNjJe PBn3RfQ2iON6iVYhxp9VC2QMVHkPxXhOIPf7lZooWMGBM3jtT5sHYPEdEDR00vfd 8M9ysVuRSYc6JTIBV3/k+zCdaf2RASiNTEjXB9a8fRh6QQPPwvN7JfPUA1KAUj1c awUCwiWzFF7cgYM+QELA26mePGBlArh0j3CyAmu7aGmmts0X5uq4F5sqM7Tbg0Q2 uHHQBbv+XVNFMmGH9BqZo28mXawH1ULEaQ6naHtlHJzCP4MIAtzSrwHc35jd90d5 deK8ZnPpityz4VxN3WjrkP5bIw9gYYB+A4ce6ZomXQY5bRxyaUuYTR/moyQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwmu/4N4GXmX8t0P7lKMSpGsjD0wHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKj+ZwcKHec5gmDTxhUmm4oCdoUL7tNwARQg oNu8G/CGU3rUJgrVjW7BvZe/AQ1Q9XL/u05PzufDoePHkp3eKU8cVUYuq4ChH57H yZzrTwFjAhK+5d1K1WhokI5rfbqfGluD40ZtQNtLkz45sbAFMBoAXikup24zWEwW 1su8Zii8RaWYQcFQR3uGSfxtIwc53AxakoFLju2jQXaCaw9sCT6w9JvqoovDdf4J ivww99fvaAiyUUDsDm3HMIdNJ68tZcKAHKTh9Ah4swu/hpWCseJUp6V4QJF92cnK VKuuzRGw3Oc4cPi0xbZD+AqWYdGQi0ea9+K0mLY9qWkme2pkKzI= -----END CERTIFICATE-----Generated at Thu Sep 24 09:59:43 2026 by rpki-client