$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft File: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft (raw, json) Hash identifier: 2pj1jVQf8FbA1MBmaNU4Oj0eGNTBae6H3fPKwZX7WGg= Subject key identifier: 14:92:B3:69:56:75:DE:12:AD:1C:86:FB:38:20:92:20:86:A2:A8:C1 Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Certificate serial: 5852C7423C8784681107CF928D37EFC2566B3B4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:10:22 +0000 Manifest this update: Tue 22 Sep 2026 07:05:22 +0000 Manifest next update: Wed 23 Sep 2026 08:41:22 +0000 Files and hashes: 1: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl (hash: /eJl5B6Z+C3mDgUS3E2TQWWRkGwARDyU/GFy7oVC8lU=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:52:c7:42:3c:87:84:68:11:07:cf:92:8d:37:ef:c2:56:6b:3b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Validity Not Before: Sep 22 07:05:22 2026 GMT Not After : Sep 23 08:41:22 2026 GMT Subject: CN=1492B3695675DE12AD1C86FB3820922086A2A8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:29:fe:b5:0b:be:a0:45:b2:f7:ca:e3:da: 59:31:de:43:ed:35:96:49:c8:8a:c2:e7:b6:9d:ac: 87:fd:6c:ec:70:9a:2c:d6:b0:e9:52:8d:ae:07:ad: 77:02:23:71:19:05:3e:bb:70:8c:58:1c:70:c8:7e: 20:0c:a2:8e:0a:8d:60:e5:88:83:3c:75:ec:e4:21: 82:c2:e1:18:d0:d4:a7:f8:f5:d1:1e:86:00:51:04: c5:0a:96:98:a6:d5:64:64:85:15:9d:59:72:98:e3: c9:6b:9a:74:2b:a1:58:da:18:6c:8f:3d:30:e3:17: ca:03:f3:e7:20:ef:6f:28:9c:ee:af:69:69:56:e6: d1:2e:20:fb:43:ce:da:e4:95:f8:19:29:ce:1b:d0: ff:d0:d2:0a:72:8b:ee:8e:62:34:df:b2:f8:1d:a7: 9e:b8:f2:66:e4:b6:1a:71:e1:19:3e:b8:e0:29:23: 79:53:fe:15:52:74:0a:a3:99:6d:e1:cd:6c:8d:c0: cb:d7:3c:57:c7:0d:dd:fb:59:84:dc:bd:c6:cc:de: 55:a2:85:be:95:c6:cc:60:f7:d2:4e:27:25:30:ef: f8:f3:e8:a3:7d:b7:59:ba:3b:c8:fd:4c:b8:2c:d6: d7:3c:c0:8d:d2:5b:64:5d:bb:7e:a2:b6:01:5e:2e: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:B3:69:56:75:DE:12:AD:1C:86:FB:38:20:92:20:86:A2:A8:C1 X509v3 Authority Key Identifier: keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f7:b3:7e:d3:4d:43:7b:7f:57:ea:ce:b2:67:ac:be:d9:7a: 39:1a:c6:a1:b8:82:1f:8a:30:11:b1:fb:15:c3:16:44:ab:f4: 9f:eb:40:19:92:6f:39:e4:00:cf:99:7e:08:fe:35:d7:06:40: 8c:c5:e1:ff:92:b0:38:2f:1d:c0:2e:f7:9a:8f:96:4b:1d:6a: 6c:fc:5e:97:09:4c:f3:24:43:ef:b4:c2:91:33:a1:42:16:01: 18:a9:33:f8:dc:8e:7f:1b:e0:8b:7d:b9:3e:fd:08:9d:f6:33: 85:4a:f6:ea:2b:da:93:05:dd:bc:8d:72:26:9a:df:84:e3:76: be:9c:ac:d8:8f:59:60:3b:42:9e:77:f5:2a:b2:f0:1b:b2:83: 7e:23:8a:c3:d8:ca:08:10:b6:af:74:73:7c:6d:30:48:78:6a: 74:ec:f9:c1:4e:50:75:25:ae:69:62:fc:99:0c:6f:10:b0:38: 25:17:72:d2:f5:47:3f:b2:54:5c:4d:ed:28:7c:2b:29:2c:3a: bf:3d:76:dd:34:9e:f6:8c:8c:7f:ee:db:2b:a4:f7:70:ee:f0: 69:fd:85:0f:40:72:48:91:9a:6e:2e:de:80:02:56:26:03:bd: 39:f8:65:47:b2:18:43:0f:54:69:19:4e:e1:33:d4:df:d1:d3: e2:0d:39:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFLHQjyHhGgRB8+SjTfvwlZrO08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC OUUzNkZFODAeFw0yNjA5MjIwNzA1MjJaFw0yNjA5MjMwODQxMjJaMDMxMTAvBgNV BAMTKDE0OTJCMzY5NTY3NURFMTJBRDFDODZGQjM4MjA5MjIwODZBMkE4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNZyn+tQu+oEWy98rj2lkx3kPt NZZJyIrC57adrIf9bOxwmizWsOlSja4HrXcCI3EZBT67cIxYHHDIfiAMoo4KjWDl iIM8dezkIYLC4RjQ1Kf49dEehgBRBMUKlpim1WRkhRWdWXKY48lrmnQroVjaGGyP PTDjF8oD8+cg728onO6vaWlW5tEuIPtDztrklfgZKc4b0P/Q0gpyi+6OYjTfsvgd p5648mbkthpx4Rk+uOApI3lT/hVSdAqjmW3hzWyNwMvXPFfHDd37WYTcvcbM3lWi hb6Vxsxg99JOJyUw7/jz6KN9t1m6O8j9TLgs1tc8wI3SW2Rdu36itgFeLlKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJKzaVZ13hKtHIb7OCCSIIaiqMEwHwYDVR0j BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2 NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2 RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBG OEFCOUUzNkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD3s37TTUN7f1fqzrJnrL7ZejkaxqG4gh+K MBGx+xXDFkSr9J/rQBmSbznkAM+Zfgj+NdcGQIzF4f+SsDgvHcAu95qPlksdamz8 XpcJTPMkQ++0wpEzoUIWARipM/jcjn8b4It9uT79CJ32M4VK9uor2pMF3byNciaa 34Tjdr6crNiPWWA7Qp539Sqy8Buyg34jisPYyggQtq90c3xtMEh4anTs+cFOUHUl rmli/JkMbxCwOCUXctL1Rz+yVFxN7Sh8KyksOr89dt00nvaMjH/u2yuk93Du8Gn9 hQ9AckiRmm4u3oACViYDvTn4ZUeyGEMPVGkZTuEz1N/R0+INOSc= -----END CERTIFICATE-----Generated at Tue Sep 22 16:06:32 2026 by rpki-client