$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json) Hash identifier: kodaj/w/fNiZMvyY0CcnvCYoJ9Mv+Csve57o5mS+ff0= Subject key identifier: 6D:EF:F0:7F:E4:97:8C:4A:B3:11:FC:24:BB:7B:80:9F:3A:E4:7C:93 Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Certificate serial: 55EEE48EBDBA3EE5A33AB70C324DC54599E3B5EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft Manifest number: BD Signing time: Sun 20 Sep 2026 08:22:26 +0000 Manifest this update: Sun 20 Sep 2026 08:17:26 +0000 Manifest next update: Mon 21 Sep 2026 10:00:26 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=) 2: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: RkKIv/T8DUfj21mWJblKn0+MOlej+mNo+4MItlQjTw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ee:e4:8e:bd:ba:3e:e5:a3:3a:b7:0c:32:4d:c5:45:99:e3:b5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Validity Not Before: Sep 20 08:17:26 2026 GMT Not After : Sep 21 10:00:26 2026 GMT Subject: CN=6DEFF07FE4978C4AB311FC24BB7B809F3AE47C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:76:f1:46:19:e4:5c:27:a9:b1:fa:cb:e5: 2c:10:dc:17:8e:4f:a4:91:7e:d3:ef:17:ab:b6:f2: ba:3c:6f:f3:a9:1b:a8:4e:d0:10:90:32:46:d6:36: ad:a9:2a:b3:5d:e3:42:95:81:ce:28:d6:c2:85:26: a1:9f:98:ca:67:3d:0c:be:f5:64:fb:55:d5:9f:8f: 8b:49:07:e5:d1:c4:2e:9c:91:b2:88:5f:27:79:48: fb:3c:44:4e:12:ac:27:9b:31:e0:17:71:94:bd:fc: 4f:b5:43:75:de:ab:c0:48:c5:82:91:93:7f:25:9c: 21:8f:65:63:f0:70:66:6a:f2:da:4c:14:57:f1:de: 60:37:4a:91:81:77:23:fe:a9:63:62:3b:79:0c:a8: b8:d4:6f:f3:da:b2:5c:9e:7b:6d:73:81:31:89:81: 9d:a1:45:ed:56:3f:f4:ab:b8:cd:69:b9:18:90:a9: 7e:8b:82:e1:e6:49:92:b8:e7:88:e6:d4:64:fe:94: bc:3e:e0:48:e4:ef:95:07:08:ad:b5:88:91:66:c9: 96:a7:34:a0:54:55:11:ab:32:f2:77:07:c3:e1:66: ee:e2:6c:f7:07:ca:e8:fd:17:cc:54:b1:ed:04:c4: 0a:5f:cf:88:66:c9:13:cf:c8:3a:80:27:4a:5d:e7: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EF:F0:7F:E4:97:8C:4A:B3:11:FC:24:BB:7B:80:9F:3A:E4:7C:93 X509v3 Authority Key Identifier: keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f7:de:99:dc:25:49:70:c3:d0:64:f0:e7:42:7a:7e:f6:95: 85:89:bc:e9:92:81:d4:36:af:24:86:f2:62:b1:f1:d7:2d:2d: 04:d9:d6:92:88:db:c9:d0:13:a5:45:48:83:04:e5:8f:22:74: 0e:4e:c9:59:cc:e3:b6:34:b7:7a:58:76:7d:47:41:60:f6:44: e0:39:f5:0d:6e:13:b0:70:35:09:7d:14:f1:07:da:11:1d:51: c8:e1:67:1f:89:7b:98:09:39:f4:bf:15:6f:c7:c5:1d:20:57: d5:5b:a3:b2:12:94:51:d2:2c:9b:a8:43:61:06:74:e3:80:0d: 77:0d:0d:87:b4:e7:b3:8c:69:30:84:e4:da:8e:4c:28:3e:17: 1a:e1:53:30:7a:2b:06:94:db:97:2b:09:08:44:20:a2:49:0c: b9:68:b3:05:5d:ee:21:f5:0f:c5:44:53:58:ad:6c:d1:cb:a4: 80:a6:2a:98:55:f9:61:fa:48:55:c0:6e:11:68:d4:df:82:4e: 2f:40:cf:18:c6:8f:76:a0:29:4f:6e:81:81:41:a9:7c:59:9b: b5:c0:78:2b:7f:9b:d0:f7:f0:94:59:b4:2f:46:9d:cd:66:23: 49:48:1d:bd:ef:95:eb:f7:95:b9:8e:a2:d7:b4:79:43:f3:df: af:4c:cc:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVe7kjr26PuWjOrcMMk3FRZnjte4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUwMzcw QzA2MzEzNTAeFw0yNjA5MjAwODE3MjZaFw0yNjA5MjExMDAwMjZaMDMxMTAvBgNV BAMTKDZERUZGMDdGRTQ5NzhDNEFCMzExRkMyNEJCN0I4MDlGM0FFNDdDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWwnbxRhnkXCepsfrL5SwQ3BeO T6SRftPvF6u28ro8b/OpG6hO0BCQMkbWNq2pKrNd40KVgc4o1sKFJqGfmMpnPQy+ 9WT7VdWfj4tJB+XRxC6ckbKIXyd5SPs8RE4SrCebMeAXcZS9/E+1Q3Xeq8BIxYKR k38lnCGPZWPwcGZq8tpMFFfx3mA3SpGBdyP+qWNiO3kMqLjUb/Paslyee21zgTGJ gZ2hRe1WP/SruM1puRiQqX6LguHmSZK454jm1GT+lLw+4Ejk75UHCK21iJFmyZan NKBUVRGrMvJ3B8PhZu7ibPcHyuj9F8xUse0ExApfz4hmyRPPyDqAJ0pd52b1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbe/wf+SXjEqzEfwku3uAnzrkfJMwHwYDVR0j BBgwFoAUz1yl4wIxHNDbD+qEDnRQNwwGMTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3OTFiNzMtYmIwOC00YTgzLWExOTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMw MjMxMUNEMERCMEZFQTg0MEU3NDUwMzcwQzA2MzEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjVDQTVFMzAyMzExQ0QwREIwRkVBODQwRTc0NTAzNzBDMDYz MTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUw MzcwQzA2MzEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn33pncJUlww9Bk8OdCen72lYWJvOmSgdQ2 rySG8mKx8dctLQTZ1pKI28nQE6VFSIME5Y8idA5OyVnM47Y0t3pYdn1HQWD2ROA5 9Q1uE7BwNQl9FPEH2hEdUcjhZx+Je5gJOfS/FW/HxR0gV9Vbo7ISlFHSLJuoQ2EG dOOADXcNDYe057OMaTCE5NqOTCg+FxrhUzB6KwaU25crCQhEIKJJDLloswVd7iH1 D8VEU1itbNHLpICmKphV+WH6SFXAbhFo1N+CTi9AzxjGj3agKU9ugYFBqXxZm7XA eCt/m9D38JRZtC9Gnc1mI0lIHb3vlev3lbmOote0eUPz369MzO0= -----END CERTIFICATE-----Generated at Mon Sep 21 03:17:09 2026 by rpki-client