$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft File: CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json) Hash identifier: 7v1tXDzMDQlzGrI04BD0+/V7KiFIy9zxZBQ+mmTW5Ww= Subject key identifier: 93:A6:2D:B4:74:F4:86:A1:51:1F:CD:14:87:15:3C:D3:90:B5:6A:3E Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 Certificate issuer: /CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Certificate serial: 0416ED40C02EDB491492E522DA1EA93898AABF62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:27:05 +0000 Manifest this update: Mon 21 Sep 2026 04:22:05 +0000 Manifest next update: Tue 22 Sep 2026 07:38:05 +0000 Files and hashes: 1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=) 2: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: CUkKIF27NvUa34yKpfOZWQrJNx4YWCsHouYtd/T9tJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:16:ed:40:c0:2e:db:49:14:92:e5:22:da:1e:a9:38:98:aa:bf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Validity Not Before: Sep 21 04:22:05 2026 GMT Not After : Sep 22 07:38:05 2026 GMT Subject: CN=93A62DB474F486A1511FCD1487153CD390B56A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a5:97:e5:ff:3e:4e:e4:71:db:6e:ae:f3:52: c5:96:5b:f8:b1:1b:af:f1:7f:53:2b:47:c5:78:77: fa:44:16:a1:ed:f1:4e:a0:1e:1c:ae:6b:12:2b:3a: 49:b6:b5:06:ad:82:39:1d:e4:b2:77:b7:35:a1:af: a2:ca:9b:5b:c3:ed:f5:88:2f:78:64:96:ed:53:3c: d8:d1:3e:1e:63:b6:bd:fc:1a:d2:95:b3:15:fe:ad: cd:47:18:1c:a9:43:4b:05:92:24:6d:70:48:22:ff: a5:13:15:cf:27:06:ab:0e:d5:68:a0:43:26:f5:37: 96:db:30:15:54:01:19:05:67:bd:44:4b:c0:e6:e3: 18:77:47:06:da:c6:b4:81:e8:b5:81:a5:51:d0:9a: d7:cb:4b:44:9f:10:36:3f:c3:24:f7:94:20:b3:a2: b8:93:93:d8:51:c2:05:9b:6f:00:15:6e:cf:b8:95: f7:b5:5d:bc:f4:03:7e:3d:cf:03:86:6b:e3:78:5c: dc:75:61:ad:3b:fe:fe:b8:7c:92:7e:9d:d5:b2:84: 7b:c4:99:cf:2d:3b:11:64:e2:d0:87:99:4e:e1:31: 10:88:84:dc:68:6d:18:10:2c:f6:69:45:be:07:6d: d2:0f:68:e5:e2:3a:d4:e9:18:0c:26:10:68:cd:18: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A6:2D:B4:74:F4:86:A1:51:1F:CD:14:87:15:3C:D3:90:B5:6A:3E X509v3 Authority Key Identifier: keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:11:4f:45:d0:d6:24:92:09:72:c0:d3:e8:7d:c1:04:f0:fd: ad:cc:7c:e1:24:f4:e4:85:34:b8:26:15:a4:f1:b7:f3:e9:16: 19:e6:7f:06:90:d7:14:5e:4b:47:ce:16:67:62:54:7a:1d:fd: 8d:ee:d9:89:87:e1:c0:c8:6c:27:e9:91:56:2e:2f:e7:13:cc: 39:8c:28:83:77:88:9e:ad:4a:fe:74:99:8c:be:88:3a:62:50: 2b:ee:56:c9:86:30:ca:9f:27:92:c7:9c:9d:22:cd:f6:c4:9d: 99:39:98:8a:f7:18:56:6d:be:5b:45:51:0b:c0:ce:43:7f:bf: 67:20:58:1e:52:fb:32:14:b5:95:6d:c8:96:f3:f3:1b:21:01: c7:13:e8:35:06:f4:3b:0d:ca:a4:8f:e6:3f:57:d9:be:5f:a0: 1e:47:64:a7:44:84:70:d6:75:38:be:66:2e:0d:67:35:1a:5b: ba:4f:f8:f4:ec:4e:66:24:52:7b:28:21:d9:70:de:f9:79:71: aa:da:06:c0:c1:3a:f4:11:d0:e1:6e:d8:98:93:54:6f:01:5b: 18:b8:11:b4:34:06:c3:f8:32:5f:b6:42:86:d4:66:60:f0:0f: 31:bc:39:ac:b0:b7:5f:44:d2:4e:5e:cd:5a:90:39:26:c1:8b: d8:eb:07:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBbtQMAu20kUkuUi2h6pOJiqv2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1RjA2 RjU0MTc0ODAeFw0yNjA5MjEwNDIyMDVaFw0yNjA5MjIwNzM4MDVaMDMxMTAvBgNV BAMTKDkzQTYyREI0NzRGNDg2QTE1MTFGQ0QxNDg3MTUzQ0QzOTBCNTZBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmpZfl/z5O5HHbbq7zUsWWW/ix G6/xf1MrR8V4d/pEFqHt8U6gHhyuaxIrOkm2tQatgjkd5LJ3tzWhr6LKm1vD7fWI L3hklu1TPNjRPh5jtr38GtKVsxX+rc1HGBypQ0sFkiRtcEgi/6UTFc8nBqsO1Wig Qyb1N5bbMBVUARkFZ71ES8Dm4xh3RwbaxrSB6LWBpVHQmtfLS0SfEDY/wyT3lCCz oriTk9hRwgWbbwAVbs+4lfe1Xbz0A349zwOGa+N4XNx1Ya07/v64fJJ+ndWyhHvE mc8tOxFk4tCHmU7hMRCIhNxobRgQLPZpRb4HbdIPaOXiOtTpGAwmEGjNGGb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6YttHT0hqFRH80UhxU805C1aj4wHwYDVR0j BBgwFoAUzyBNdI2tLRoCTeZtheQl8G9UF0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJmNTk4NmItYzc2NC00Y2Q3LWI0MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4 REFEMkQxQTAyNERFNjZEODVFNDI1RjA2RjU0MTc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjIwNEQ3NDhEQUQyRDFBMDI0REU2NkQ4NUU0MjVGMDZGNTQx NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1 RjA2RjU0MTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADURT0XQ1iSSCXLA0+h9wQTw/a3MfOEk9OSF NLgmFaTxt/PpFhnmfwaQ1xReS0fOFmdiVHod/Y3u2YmH4cDIbCfpkVYuL+cTzDmM KIN3iJ6tSv50mYy+iDpiUCvuVsmGMMqfJ5LHnJ0izfbEnZk5mIr3GFZtvltFUQvA zkN/v2cgWB5S+zIUtZVtyJbz8xshAccT6DUG9DsNyqSP5j9X2b5foB5HZKdEhHDW dTi+Zi4NZzUaW7pP+PTsTmYkUnsoIdlw3vl5caraBsDBOvQR0OFu2JiTVG8BWxi4 EbQ0BsP4Ml+2QobUZmDwDzG8Oaywt19E0k5ezVqQOSbBi9jrB28= -----END CERTIFICATE-----Generated at Tue Sep 22 01:52:22 2026 by rpki-client