$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: t/mbgQZREz3mhiPjhJiJfb10jjEUXRlgc5+RgbJoHMQ= Subject key identifier: C7:3A:EB:EB:7F:58:DA:7F:63:CA:A5:8F:5D:22:41:4F:77:E8:0B:F9 Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: 1A993A1ED1D355E2167C1E6976763C6F0D9FAC7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: BB Signing time: Mon 21 Sep 2026 07:46:18 +0000 Manifest this update: Mon 21 Sep 2026 07:41:18 +0000 Manifest next update: Tue 22 Sep 2026 10:42:18 +0000 Files and hashes: 1: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: YFN/nmKBkO6jkd0ckDXtZIkWFGen3dWtHE/lUBOgV5Y=) 2: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) 3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:99:3a:1e:d1:d3:55:e2:16:7c:1e:69:76:76:3c:6f:0d:9f:ac:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: Sep 21 07:41:18 2026 GMT Not After : Sep 22 10:42:18 2026 GMT Subject: CN=C73AEBEB7F58DA7F63CAA58F5D22414F77E80BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:70:a9:49:04:74:b0:4a:f8:7b:9f:1b:62: 44:6b:2a:45:2a:f0:80:2a:65:98:32:87:0b:a0:c6: da:69:05:fc:63:3f:3a:06:69:03:7d:b4:98:a2:37: af:3d:c4:df:f0:bf:67:fc:93:d5:54:3d:7b:b4:f2: 1a:ad:c1:12:39:3c:1c:61:1e:ba:31:b6:ef:09:35: f6:3c:6e:af:0d:ef:b2:d6:85:c0:fb:31:1a:54:97: e5:d6:f8:20:16:52:26:e6:5b:5a:63:45:ef:fe:93: 7f:34:0b:21:62:a9:96:22:fe:81:9d:f7:53:5d:ad: 6a:4b:66:5f:ac:d1:ce:3f:44:dc:a1:7d:14:7b:e9: 18:a1:89:68:6f:23:16:4b:36:28:66:ee:9f:15:ae: b4:e1:06:67:08:9e:a7:a3:44:ce:f1:6b:7f:87:5c: 8a:17:36:0f:c9:59:36:25:0a:70:58:f4:6a:3a:4b: b0:3a:35:11:65:98:6f:1d:7b:c7:57:b6:c7:f1:29: c7:5c:3d:01:98:b6:da:be:87:a4:35:e4:9a:c2:44: 15:b2:74:b9:eb:30:a3:58:4b:24:4c:4f:96:2c:62: 7d:bb:34:17:2c:3a:2c:e3:b0:1c:dd:0c:d0:cf:c5: 18:94:cf:e6:c3:a7:be:95:c5:c6:b6:42:04:a0:08: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:EB:EB:7F:58:DA:7F:63:CA:A5:8F:5D:22:41:4F:77:E8:0B:F9 X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1e:d1:43:7f:8a:62:9c:21:c3:e2:0e:03:19:be:58:e7:2e: 57:e5:2b:de:af:fc:69:ac:51:48:38:aa:ed:b9:db:36:45:0e: 89:05:0e:30:e4:a9:d0:2b:48:29:33:45:08:82:78:28:e2:6c: e3:66:e7:5b:70:94:89:0f:67:16:23:da:97:95:1a:61:42:d3: fb:56:6f:c9:c4:e1:59:76:2c:88:a2:57:56:b7:0a:18:59:8d: 66:1e:dd:01:01:6a:8b:62:1a:fb:72:68:c9:ea:e8:12:c8:d0: 7c:42:b9:0f:59:a6:6b:23:26:40:39:9e:37:c3:e4:63:41:e9: f4:69:65:53:69:4b:3a:e6:8e:90:fe:44:b0:b5:23:4a:92:84: cb:a2:5b:60:1d:6b:e8:0e:8e:b4:b7:bc:f6:ac:be:c0:70:e2: b3:d2:07:52:1a:f2:7c:c3:c9:44:09:ef:79:f1:46:7a:a6:8f: 73:ed:25:37:dc:02:d6:6f:31:e3:6f:98:78:d1:62:82:f1:8f: 97:8d:2b:2e:f9:5f:12:98:c3:d4:08:5f:5d:42:7c:8a:f7:87: a2:e3:40:3e:a1:b6:6e:94:ea:fd:ab:b9:49:8a:6c:08:d2:a2: d9:e6:52:3b:2d:eb:6f:cb:8f:79:f9:7e:9b:52:51:47:30:c9: 64:3d:38:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGpk6HtHTVeIWfB5pdnY8bw2frH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjA5MjEwNzQxMThaFw0yNjA5MjIxMDQyMThaMDMxMTAvBgNV BAMTKEM3M0FFQkVCN0Y1OERBN0Y2M0NBQTU4RjVEMjI0MTRGNzdFODBCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIzHCpSQR0sEr4e58bYkRrKkUq 8IAqZZgyhwugxtppBfxjPzoGaQN9tJiiN689xN/wv2f8k9VUPXu08hqtwRI5PBxh Hroxtu8JNfY8bq8N77LWhcD7MRpUl+XW+CAWUibmW1pjRe/+k380CyFiqZYi/oGd 91NdrWpLZl+s0c4/RNyhfRR76RihiWhvIxZLNihm7p8VrrThBmcInqejRM7xa3+H XIoXNg/JWTYlCnBY9Go6S7A6NRFlmG8de8dXtsfxKcdcPQGYttq+h6Q15JrCRBWy dLnrMKNYSyRMT5YsYn27NBcsOizjsBzdDNDPxRiUz+bDp76Vxca2QgSgCCTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxzrr639Y2n9jyqWPXSJBT3foC/kwHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoe0UN/imKcIcPiDgMZvljnLlflK96v/Gms UUg4qu252zZFDokFDjDkqdArSCkzRQiCeCjibONm51twlIkPZxYj2peVGmFC0/tW b8nE4Vl2LIiiV1a3ChhZjWYe3QEBaotiGvtyaMnq6BLI0HxCuQ9ZpmsjJkA5njfD 5GNB6fRpZVNpSzrmjpD+RLC1I0qShMuiW2Ada+gOjrS3vPasvsBw4rPSB1Ia8nzD yUQJ73nxRnqmj3PtJTfcAtZvMeNvmHjRYoLxj5eNKy75XxKYw9QIX11CfIr3h6Lj QD6htm6U6v2ruUmKbAjSotnmUjst62/Lj3n5fptSUUcwyWQ9OCI= -----END CERTIFICATE-----Generated at Mon Sep 21 16:29:33 2026 by rpki-client