$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft File: CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft (raw, json) Hash identifier: zCtqImJzu8sRyU3BuAYZGyq6uXxuZz5CY/PrE89zPII= Subject key identifier: 9B:69:42:DD:93:AB:B0:3D:71:86:34:6C:EC:65:F3:01:53:52:0D:65 Authority key identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39 Certificate issuer: /CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39 Certificate serial: 2B5E31F84965987BFE75A1B65EBB2751E1F13BDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft Manifest number: BD Signing time: Sun 20 Sep 2026 11:31:21 +0000 Manifest this update: Sun 20 Sep 2026 11:26:21 +0000 Manifest next update: Mon 21 Sep 2026 14:22:21 +0000 Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: Om/3/8RVQVP4CmrlSjOFvYcq6slIyV0KgfonhTO00tc=) 2: CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl (hash: nfWs6UokpkviopYo0mSicHoGRAoC+qeHrEifJA6lbu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5e:31:f8:49:65:98:7b:fe:75:a1:b6:5e:bb:27:51:e1:f1:3b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39 Validity Not Before: Sep 20 11:26:21 2026 GMT Not After : Sep 21 14:22:21 2026 GMT Subject: CN=9B6942DD93ABB03D7186346CEC65F30153520D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:b7:08:d1:5d:33:03:6a:be:e2:a6:d6:10: 53:a5:f4:16:0d:19:0a:6b:cc:e0:8f:d3:13:2a:81: 9b:bf:0a:b5:25:31:a0:95:3f:a4:d4:5e:34:07:0b: 09:fb:4b:f9:66:23:c2:db:3c:e6:2a:b8:00:8c:26: 2f:0e:8b:d7:93:e8:c1:07:a4:7a:cb:1f:fe:7e:98: 1f:05:97:e1:dc:be:df:95:9b:69:1f:94:9b:9e:1a: d5:18:1b:4c:ee:02:b5:4b:f1:8f:da:1b:a3:1d:1a: 9f:61:46:e8:ea:09:40:86:40:24:f9:56:79:85:44: c5:e2:1e:3a:6e:d3:88:6e:21:71:83:51:b8:40:82: 85:e1:46:63:12:db:6b:a4:9a:94:17:f4:b6:e2:ec: 51:fc:15:bd:fb:f6:41:a3:9d:cf:3c:9e:94:1c:c0: cc:2f:a4:82:8a:ee:66:38:99:6d:58:86:63:2a:4c: 1b:a7:84:ec:69:f7:3b:e0:04:86:6c:07:d8:d6:4f: 9d:7f:e2:38:42:21:85:1c:e3:76:a4:99:fe:85:0a: 27:90:79:0e:2d:96:5b:72:cb:a1:40:86:3a:90:ff: 3c:75:b0:a0:94:a2:90:d8:02:9f:f3:88:99:7a:f9: a9:44:57:c9:e3:71:1b:3f:fe:a7:bd:23:60:df:35: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:69:42:DD:93:AB:B0:3D:71:86:34:6C:EC:65:F3:01:53:52:0D:65 X509v3 Authority Key Identifier: keyid:CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d7:0d:da:71:bd:7a:a0:79:e7:f7:b4:ec:9c:72:ba:ba:5d: a3:e2:6b:47:e0:05:f8:f1:d9:a8:ed:d0:31:7f:c3:85:a3:80: 40:0e:c6:ec:4c:38:b1:cf:f7:95:9c:7b:9a:53:4a:f1:34:10: d7:3f:1a:80:47:20:03:b1:7c:8b:73:92:6d:1f:8f:22:24:85: 2d:83:78:b6:4f:d7:86:c8:09:89:70:7a:a1:d7:61:4e:2a:53: f9:0c:d5:1e:be:48:b1:ed:a8:a0:13:75:c0:5f:65:bd:76:41: 6e:c6:49:15:b0:bd:bf:e2:dc:c0:28:e8:23:28:2c:c1:f5:ba: 93:d0:57:d3:04:cd:d5:73:3b:21:c7:f7:d7:ae:b2:e8:1c:26: b6:ac:17:62:df:50:54:d4:c1:a1:f4:9d:f6:39:8f:dd:7b:c4: 10:73:9a:06:72:7a:5f:0b:0c:d2:f7:97:35:30:b4:ba:d6:47: 76:bc:f1:f6:bf:d8:bb:1a:3c:9a:6b:2e:00:a6:ee:b2:e5:88: a2:4e:63:01:c8:54:47:aa:bd:fe:92:1b:b2:b4:4c:85:f4:e8: 45:e6:e1:18:f4:ca:71:44:5a:a0:ce:83:57:33:8d:d4:50:d4: b8:2e:ea:cd:a1:5b:1b:37:d7:86:ef:22:9a:c4:7e:55:2a:74: a1:cf:7b:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK14x+EllmHv+daG2XrsnUeHxO9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1NUU3NDEyODcxQUIwRjQyMzQ3RTJGRUUxRjY4MTUw MzVDN0MzOTAeFw0yNjA5MjAxMTI2MjFaFw0yNjA5MjExNDIyMjFaMDMxMTAvBgNV BAMTKDlCNjk0MkREOTNBQkIwM0Q3MTg2MzQ2Q0VDNjVGMzAxNTM1MjBENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrLcI0V0zA2q+4qbWEFOl9BYN GQprzOCP0xMqgZu/CrUlMaCVP6TUXjQHCwn7S/lmI8LbPOYquACMJi8Oi9eT6MEH pHrLH/5+mB8Fl+Hcvt+Vm2kflJueGtUYG0zuArVL8Y/aG6MdGp9hRujqCUCGQCT5 VnmFRMXiHjpu04huIXGDUbhAgoXhRmMS22ukmpQX9Lbi7FH8Fb379kGjnc88npQc wMwvpIKK7mY4mW1YhmMqTBunhOxp9zvgBIZsB9jWT51/4jhCIYUc43akmf6FCieQ eQ4tlltyy6FAhjqQ/zx1sKCUopDYAp/ziJl6+alEV8njcRs//qe9I2DfNfGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2lC3ZOrsD1xhjRs7GXzAVNSDWUwHwYDVR0j BBgwFoAUz1XnQShxqw9CNH4v7h9oFQNcfDkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRjNmNjZDItODg5Ny00YTRlLTgxY2UtYzM2MWE1ZTY4ZGQ2LzAvQ0Y1NUU3NDEy ODcxQUIwRjQyMzQ3RTJGRUUxRjY4MTUwMzVDN0MzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjU1RTc0MTI4NzFBQjBGNDIzNDdFMkZFRTFGNjgxNTAzNUM3 QzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvQ0Y1NUU3NDEyODcxQUIwRjQyMzQ3RTJGRUUxRjY4 MTUwMzVDN0MzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/XDdpxvXqgeef3tOyccrq6XaPia0fgBfjx 2ajt0DF/w4WjgEAOxuxMOLHP95Wce5pTSvE0ENc/GoBHIAOxfItzkm0fjyIkhS2D eLZP14bICYlweqHXYU4qU/kM1R6+SLHtqKATdcBfZb12QW7GSRWwvb/i3MAo6CMo LMH1upPQV9MEzdVzOyHH99eusugcJrasF2LfUFTUwaH0nfY5j917xBBzmgZyel8L DNL3lzUwtLrWR3a88fa/2LsaPJprLgCm7rLliKJOYwHIVEeqvf6SG7K0TIX06EXm 4Rj0ynFEWqDOg1czjdRQ1Lgu6s2hWxs314bvIprEflUqdKHPe6M= -----END CERTIFICATE-----Generated at Mon Sep 21 03:01:46 2026 by rpki-client