$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json) Hash identifier: ppwxNf+gZxCcerqGDt1g5WMrNwcbLvJuePdFVXd2fgk= Subject key identifier: 40:B0:2D:1F:DF:4A:A7:C6:E5:80:5E:27:E9:E9:E0:35:32:D8:50:27 Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Certificate serial: 605F131DA74E92E82F01C581FF647E89FFAEAA6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft Manifest number: FE Signing time: Mon 09 Nov 2026 06:44:01 +0000 Manifest this update: Mon 09 Nov 2026 06:39:01 +0000 Manifest next update: Tue 10 Nov 2026 07:52:01 +0000 Files and hashes: 1: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: 6EXNNRBqhJ5OjE6SIqea9tv0HjRBj1qJcSEzYX/6i9o=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5f:13:1d:a7:4e:92:e8:2f:01:c5:81:ff:64:7e:89:ff:ae:aa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Validity Not Before: Nov 9 06:39:01 2026 GMT Not After : Nov 10 07:52:01 2026 GMT Subject: CN=40B02D1FDF4AA7C6E5805E27E9E9E03532D85027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:57:f0:4a:00:4c:5d:14:b3:d4:4f:02:fc:d3: 5b:cb:c8:ab:81:95:a4:e8:da:0e:62:bb:ef:c0:01: 73:20:70:dd:af:57:1c:c2:d6:f0:3b:35:fb:79:4c: 86:7d:b5:fe:9e:41:1f:91:bc:a3:1a:c1:2c:12:bc: ba:e5:fc:78:e9:02:63:91:10:3e:81:fe:72:c7:d3: 03:68:89:d6:77:7f:81:32:4a:73:eb:b8:c8:88:5b: 24:b3:76:bb:49:f2:99:cb:ae:d6:54:42:2a:cb:74: 82:c9:6e:43:74:ac:81:0b:a7:61:9f:04:5d:45:46: 14:64:b3:87:34:9a:4c:6f:63:c1:c0:19:b1:1a:0d: 15:fe:a6:4a:40:bf:31:dc:78:0e:e1:d6:36:76:0a: 1b:39:e7:74:3f:b1:5c:25:43:bd:a1:03:dc:7e:b5: 54:b4:70:e7:c6:0e:53:9c:63:2a:47:1d:f6:d1:d0: 4a:89:20:65:37:fe:e1:f2:55:3e:28:a9:7d:bd:c6: 73:c2:da:42:b0:d1:48:f0:b8:e1:4f:ef:6d:88:c5: 10:7b:64:a9:5e:02:c3:17:79:0f:97:1e:09:86:ca: f7:ad:99:b0:93:d1:67:e3:49:69:c8:f7:77:b8:a5: f4:7f:ff:44:53:d8:a8:60:74:7d:d6:59:c4:f7:57: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:2D:1F:DF:4A:A7:C6:E5:80:5E:27:E9:E9:E0:35:32:D8:50:27 X509v3 Authority Key Identifier: keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:67:b6:8e:df:e9:67:63:a6:9f:63:7d:38:91:25:84:d1:df: 70:af:a6:82:2d:cf:15:9c:71:c8:81:de:27:72:f1:bb:c7:6a: cb:3a:4e:e8:8c:1b:39:5b:a9:17:fd:19:8a:f4:6c:56:f5:18: ee:14:e1:6d:19:47:ed:61:63:2c:1b:df:d9:34:b6:60:b9:ac: 22:49:e3:5e:1f:b1:bb:e2:24:ff:3f:b6:21:e5:65:fe:0e:c7: 2a:94:b6:4a:13:a3:9d:1a:a7:43:4c:6a:4b:d4:df:6d:aa:df: ca:ec:df:88:37:ac:79:e3:4d:36:a4:ae:23:5a:7c:27:0e:3f: 6e:65:08:6d:f2:3c:09:0d:a3:f3:5f:f5:54:b4:58:95:09:39: 68:5a:68:bc:20:32:0c:0d:d1:f4:22:82:43:fb:f2:2b:c6:81: 0a:60:a9:3c:97:1b:b1:f5:10:a5:e8:b5:82:ef:17:69:35:68: 02:f7:07:04:21:b5:a4:be:00:bb:89:fc:62:88:e7:d7:8f:c7: 55:83:31:d7:6f:76:f5:35:f1:ce:41:c8:8a:42:9c:3b:b2:f6: 6d:56:02:3b:59:cc:98:4a:42:d5:65:a8:9a:1b:2f:95:54:c7: 1e:58:54:69:a2:83:fc:33:46:a2:29:5b:59:a3:92:2b:cc:61: 17:70:eb:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYF8THadOkugvAcWB/2R+if+uqmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUwMzcw QzA2MzEzNTAeFw0yNjExMDkwNjM5MDFaFw0yNjExMTAwNzUyMDFaMDMxMTAvBgNV BAMTKDQwQjAyRDFGREY0QUE3QzZFNTgwNUUyN0U5RTlFMDM1MzJEODUwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfV/BKAExdFLPUTwL801vLyKuB laTo2g5iu+/AAXMgcN2vVxzC1vA7Nft5TIZ9tf6eQR+RvKMawSwSvLrl/HjpAmOR ED6B/nLH0wNoidZ3f4EySnPruMiIWySzdrtJ8pnLrtZUQirLdILJbkN0rIELp2Gf BF1FRhRks4c0mkxvY8HAGbEaDRX+pkpAvzHceA7h1jZ2Chs553Q/sVwlQ72hA9x+ tVS0cOfGDlOcYypHHfbR0EqJIGU3/uHyVT4oqX29xnPC2kKw0UjwuOFP722IxRB7 ZKleAsMXeQ+XHgmGyvetmbCT0WfjSWnI93e4pfR//0RT2KhgdH3WWcT3V0dDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLAtH99Kp8blgF4n6engNTLYUCcwHwYDVR0j BBgwFoAUz1yl4wIxHNDbD+qEDnRQNwwGMTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3OTFiNzMtYmIwOC00YTgzLWExOTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMw MjMxMUNEMERCMEZFQTg0MEU3NDUwMzcwQzA2MzEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjVDQTVFMzAyMzExQ0QwREIwRkVBODQwRTc0NTAzNzBDMDYz MTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUw MzcwQzA2MzEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhnto7f6Wdjpp9jfTiRJYTR33CvpoItzxWc cciB3idy8bvHass6TuiMGzlbqRf9GYr0bFb1GO4U4W0ZR+1hYywb39k0tmC5rCJJ 414fsbviJP8/tiHlZf4OxyqUtkoTo50ap0NMakvU322q38rs34g3rHnjTTakriNa fCcOP25lCG3yPAkNo/Nf9VS0WJUJOWhaaLwgMgwN0fQigkP78ivGgQpgqTyXG7H1 EKXotYLvF2k1aAL3BwQhtaS+ALuJ/GKI59ePx1WDMddvdvU18c5ByIpCnDuy9m1W AjtZzJhKQtVlqJobL5VUxx5YVGmig/wzRqIpW1mjkivMYRdw6ww= -----END CERTIFICATE-----Generated at Mon Nov 9 23:51:50 2026 by rpki-client