$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: B3jp0IkJpE8wRRJPgwYv7R0UsQelo7/PKWtg6Tk4DcQ= Subject key identifier: 12:8D:B8:3B:75:E5:74:D2:FD:E6:DA:C5:CD:43:88:E2:8C:6D:56:F6 Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 72B85448D510457EF1E91556387B2DB1BFB4A237 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: D0 Signing time: Mon 05 Oct 2026 22:42:41 +0000 Manifest this update: Mon 05 Oct 2026 22:37:41 +0000 Manifest next update: Wed 07 Oct 2026 00:40:41 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: qZ7Go/xE/tGOU1ts6WQ/IWVjv69ICCfwlgQkmDCImfQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 14:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b8:54:48:d5:10:45:7e:f1:e9:15:56:38:7b:2d:b1:bf:b4:a2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: Oct 5 22:37:41 2026 GMT Not After : Oct 7 00:40:41 2026 GMT Subject: CN=128DB83B75E574D2FDE6DAC5CD4388E28C6D56F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:35:e0:3d:38:78:54:df:da:68:a4:a4:bf: 81:29:21:7d:68:c8:5b:09:e3:74:a0:20:9e:b2:05: a2:47:31:d5:bd:86:91:3e:b9:98:e6:c8:01:72:bc: b6:a9:4a:c9:71:e2:8c:b3:4c:d6:c2:2b:02:97:f0: 71:7b:04:bd:43:d7:1b:f9:b8:3d:19:be:86:88:44: 87:de:ca:64:09:b3:77:0e:e9:71:c2:b3:e8:10:a4: 27:8d:e9:a2:da:94:4c:d3:b4:a1:a9:a4:1e:41:21: ec:aa:b1:8f:64:9b:73:76:01:9c:24:52:34:d6:75: 85:2e:b7:e6:f8:8e:e7:a7:dd:1b:12:ec:e8:fa:c3: ee:c6:52:07:e1:bb:0e:4d:7b:d1:e8:f5:3b:2d:a2: 50:52:a8:97:06:30:3b:ea:ad:2b:3c:91:2a:42:0c: 28:43:2d:af:54:8b:c5:98:90:f7:13:ae:b5:50:14: 48:f0:d2:09:5a:e8:87:04:ac:84:ad:ec:94:f4:24: c4:9c:51:13:e5:6c:a5:19:e2:d1:c0:1f:55:73:10: cd:64:80:99:fa:35:a7:63:f2:37:c1:f3:50:44:5f: bb:db:ab:2d:21:3f:0d:2e:85:f6:9b:77:82:ad:ae: 7b:e5:eb:28:b7:fb:c8:7a:ca:ff:7d:93:c6:6b:36: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:B8:3B:75:E5:74:D2:FD:E6:DA:C5:CD:43:88:E2:8C:6D:56:F6 X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e4:fc:3e:bd:f9:42:dc:92:fc:63:3a:d9:c5:9f:5a:c4:6a: 94:93:2c:e7:3d:f3:90:cf:39:14:69:31:97:cb:1f:91:00:5a: 37:8c:01:dc:e2:79:79:dd:8a:bc:4c:25:b9:ce:b7:ae:43:d8: d5:4f:eb:e0:a4:9c:cd:f2:b6:ad:21:0d:a8:41:f4:33:2b:c8: 88:9c:eb:6f:60:5d:d7:9d:98:ee:f5:bb:25:c9:77:9f:13:b0: 0f:7d:c8:94:af:23:ac:b1:02:1d:91:3d:4f:36:4b:49:54:c7: cc:c5:8b:ed:0c:70:c3:17:d2:87:07:09:0f:58:1c:62:8c:a3: 36:de:eb:d6:ea:27:35:ad:ff:3b:3d:bc:47:9d:cf:59:b7:2a: 61:68:3a:46:33:45:50:86:b3:86:6d:e2:56:5a:f0:99:67:06: 6c:c6:65:ac:6c:c2:dd:34:17:d9:13:ac:7c:02:b4:c0:ab:5d: 76:7a:52:1d:b9:51:e1:84:d9:93:cc:8e:8e:56:3a:55:f4:8e: 01:5a:1c:a9:c5:6d:bd:3d:f7:19:19:77:00:21:09:00:45:95: 1c:5a:22:34:f0:d4:fa:dc:90:07:d3:e0:1d:6b:de:00:de:45: f5:ef:70:c5:48:ad:5b:dd:51:ea:27:59:9e:69:f3:92:a1:74: 8b:25:32:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrhUSNUQRX7x6RVWOHstsb+0ojcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjEwMDUyMjM3NDFaFw0yNjEwMDcwMDQwNDFaMDMxMTAvBgNV BAMTKDEyOERCODNCNzVFNTc0RDJGREU2REFDNUNENDM4OEUyOEM2RDU2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSzXgPTh4VN/aaKSkv4EpIX1o yFsJ43SgIJ6yBaJHMdW9hpE+uZjmyAFyvLapSslx4oyzTNbCKwKX8HF7BL1D1xv5 uD0ZvoaIRIfeymQJs3cO6XHCs+gQpCeN6aLalEzTtKGppB5BIeyqsY9km3N2AZwk UjTWdYUut+b4juen3RsS7Oj6w+7GUgfhuw5Ne9Ho9TstolBSqJcGMDvqrSs8kSpC DChDLa9Ui8WYkPcTrrVQFEjw0gla6IcErISt7JT0JMScURPlbKUZ4tHAH1VzEM1k gJn6Nadj8jfB81BEX7vbqy0hPw0uhfabd4Ktrnvl6yi3+8h6yv99k8ZrNu13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEo24O3XldNL95trFzUOI4oxtVvYwHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLk/D69+ULckvxjOtnFn1rEapSTLOc985DP ORRpMZfLH5EAWjeMAdzieXndirxMJbnOt65D2NVP6+CknM3ytq0hDahB9DMryIic 629gXdedmO71uyXJd58TsA99yJSvI6yxAh2RPU82S0lUx8zFi+0McMMX0ocHCQ9Y HGKMozbe69bqJzWt/zs9vEedz1m3KmFoOkYzRVCGs4Zt4lZa8JlnBmzGZaxswt00 F9kTrHwCtMCrXXZ6Uh25UeGE2ZPMjo5WOlX0jgFaHKnFbb099xkZdwAhCQBFlRxa IjTw1PrckAfT4B1r3gDeRfXvcMVIrVvdUeonWZ5p85KhdIslMls= -----END CERTIFICATE-----Generated at Tue Oct 6 02:31:09 2026 by rpki-client