$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: NxmF8zg5QybfSCP7cFuL0Xlb8Bjopbr6zeKujRP+IZ0= Subject key identifier: D9:76:6D:83:2F:38:CB:84:83:DD:2D:EB:80:87:23:91:93:DF:3D:67 Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 46B1298EFD3EE318BA0DABE18A5F786C529E6595 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: BF Signing time: Mon 21 Sep 2026 15:05:13 +0000 Manifest this update: Mon 21 Sep 2026 15:00:13 +0000 Manifest next update: Tue 22 Sep 2026 18:12:13 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) 3: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: 1TRQZwVKkAzKj4tp7rcdNeAganyeg/JKl+HyKbVb6b4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b1:29:8e:fd:3e:e3:18:ba:0d:ab:e1:8a:5f:78:6c:52:9e:65:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Sep 21 15:00:13 2026 GMT Not After : Sep 22 18:12:13 2026 GMT Subject: CN=D9766D832F38CB8483DD2DEB8087239193DF3D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:47:e9:3d:c4:98:71:be:7e:45:21:75:2a: 20:c5:9b:18:07:2d:5a:c7:2d:6c:a5:46:71:40:c4: bb:76:8e:65:0e:21:9d:49:db:2d:bc:93:78:11:7a: ff:29:6a:6b:ab:71:f1:2c:bb:f6:13:37:7b:de:6e: 51:2f:7d:44:42:86:43:c7:83:23:5f:03:05:e7:7c: 57:51:ec:27:c9:ea:bc:96:d3:3d:f5:c1:4d:18:f2: 5a:32:f9:09:0e:54:e8:df:50:82:73:2b:61:30:bd: 19:d2:d8:ae:66:28:ea:17:a5:29:c2:d5:40:39:7b: 5d:67:4c:92:e4:19:49:50:75:19:e6:82:25:e9:91: f2:9c:55:c5:0d:e9:06:9b:f2:ce:07:e7:01:f9:67: e2:f7:35:6c:fe:71:19:35:bf:a2:f4:8e:6b:ef:68: 5b:1c:60:ba:78:d1:5c:15:25:0d:3c:de:4a:1c:2c: 33:be:58:76:65:cb:ec:15:49:06:0c:12:7a:b0:17: 6d:7e:92:61:4b:ca:06:ff:71:23:bc:f1:8c:40:6a: 9e:14:55:58:63:53:c9:dc:7c:bf:a8:68:50:93:2f: 92:fa:15:e9:98:3c:8d:82:bb:3e:2a:31:88:78:6e: 61:86:12:e4:49:67:a5:8a:38:c5:f2:0c:f6:49:20: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:76:6D:83:2F:38:CB:84:83:DD:2D:EB:80:87:23:91:93:DF:3D:67 X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:06:45:9b:a4:9b:61:10:83:62:f3:10:e7:8e:52:07:9b:18: 7c:17:7f:ae:f7:0a:0d:ca:39:d3:6a:0c:4d:fd:38:3d:5e:b3: af:41:3d:fc:67:1b:41:ee:a2:ef:06:91:fc:17:56:ca:4a:61: ce:2e:0c:9b:ed:e8:9a:ac:7b:9e:b2:05:bc:af:09:d1:51:62: 6b:e4:cf:42:dc:c4:7c:e3:04:4d:e4:ef:29:3b:fa:f8:1c:97: 3b:25:93:9e:42:16:2e:2e:b4:ce:10:be:49:2d:4a:eb:ca:b6: e7:81:a4:5d:13:46:9e:70:3b:31:33:22:e5:c2:c6:5c:52:b6: ff:0d:cd:94:e5:dc:c5:0b:65:20:59:96:4f:03:e3:c9:c9:73: 26:ed:ce:bd:cd:78:b6:1a:9d:c3:4d:e9:cd:c0:8f:45:7f:24: 7c:fe:d2:c9:8a:73:c6:e3:b3:e4:58:85:4f:d3:a4:a8:e0:18: 8b:3a:e3:c5:47:78:2a:7d:5e:1e:ac:79:fa:27:1f:5b:64:09: f1:db:17:02:ce:92:9b:f4:e2:ba:d9:b3:03:34:fa:da:23:2b: d4:46:8a:4d:d3:2b:b2:99:ae:8a:f6:4f:90:6c:68:39:e6:44: 44:ca:01:02:51:ce:13:95:07:8b:c3:14:69:37:b1:e1:ec:4d: a5:df:d3:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrEpjv0+4xi6Davhil94bFKeZZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjA5MjExNTAwMTNaFw0yNjA5MjIxODEyMTNaMDMxMTAvBgNV BAMTKEQ5NzY2RDgzMkYzOENCODQ4M0REMkRFQjgwODcyMzkxOTNERjNENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfEfpPcSYcb5+RSF1KiDFmxgH LVrHLWylRnFAxLt2jmUOIZ1J2y28k3gRev8pamurcfEsu/YTN3veblEvfURChkPH gyNfAwXnfFdR7CfJ6ryW0z31wU0Y8loy+QkOVOjfUIJzK2EwvRnS2K5mKOoXpSnC 1UA5e11nTJLkGUlQdRnmgiXpkfKcVcUN6Qab8s4H5wH5Z+L3NWz+cRk1v6L0jmvv aFscYLp40VwVJQ083kocLDO+WHZly+wVSQYMEnqwF21+kmFLygb/cSO88YxAap4U VVhjU8ncfL+oaFCTL5L6FemYPI2Cuz4qMYh4bmGGEuRJZ6WKOMXyDPZJIJQjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XZtgy84y4SD3S3rgIcjkZPfPWcwHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIGRZukm2EQg2LzEOeOUgebGHwXf673Cg3K OdNqDE39OD1es69BPfxnG0Huou8GkfwXVspKYc4uDJvt6Jqse56yBbyvCdFRYmvk z0LcxHzjBE3k7yk7+vgclzslk55CFi4utM4QvkktSuvKtueBpF0TRp5wOzEzIuXC xlxStv8NzZTl3MULZSBZlk8D48nJcybtzr3NeLYancNN6c3Aj0V/JHz+0smKc8bj s+RYhU/TpKjgGIs648VHeCp9Xh6sefonH1tkCfHbFwLOkpv04rrZswM0+tojK9RG ik3TK7KZror2T5BsaDnmRETKAQJRzhOVB4vDFGk3seHsTaXf02U= -----END CERTIFICATE-----Generated at Mon Sep 21 20:54:33 2026 by rpki-client