$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft File: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft (raw, json) Hash identifier: spjcpSnob68F3Pr4NxUYR2oIztXgJ82TcA2UB9EAhbk= Subject key identifier: 75:27:98:CD:63:16:A8:39:D2:76:50:0B:5E:7A:D1:D4:35:26:DD:2C Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 Certificate issuer: /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Certificate serial: 0B01579E7C7919B45979348E62B9354B85610D35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft Manifest number: BE Signing time: Sun 20 Sep 2026 16:06:53 +0000 Manifest this update: Sun 20 Sep 2026 16:01:53 +0000 Manifest next update: Mon 21 Sep 2026 16:14:53 +0000 Files and hashes: 1: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: hnbLn0WCQW7tjxDDomIPOhXC1r7ltYUmnmJCJUDX+Hs=) 2: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: LF0MrR9BI6ohPR99FqHdVyHSCGgsD/4Honm25vFKTtU=) 3: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: h+jOCf2n8qXpyofV0yrwta8TGMspkZPZ+KTwYTU4B7c=) 4: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: 9zWseK0VGBFjDjSukC7sEdd2KVTBNcjvlH0F1oisM48=) 5: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: eBoaZqyr6WlSbN/AJF6RgzCQyG+1zBmzaFfb/7fN5dY=) 6: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl (hash: rO7zK6UPJup7hshXz5NpbalkJiMvGUlgBsUThuTux1Q=) 7: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: CIu+a1x1Ob4TtttYENYOSXpa0Xw1+bkYfz/RVtE/6mo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:01:57:9e:7c:79:19:b4:59:79:34:8e:62:b9:35:4b:85:61:0d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Validity Not Before: Sep 20 16:01:53 2026 GMT Not After : Sep 21 16:14:53 2026 GMT Subject: CN=752798CD6316A839D276500B5E7AD1D43526DD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:6b:26:0e:fb:57:b9:0e:d5:1d:f0:d0:a7: 4b:5e:23:a5:61:b7:1f:a7:13:f7:52:44:41:00:6b: ca:89:f0:02:f9:33:02:95:cb:aa:1a:69:13:c2:25: cd:94:f7:76:f1:96:1b:fc:8d:09:52:2a:c8:7e:9a: 29:c4:d4:ca:47:03:22:46:37:7e:6f:1d:3e:80:ee: 00:72:40:39:48:1c:6e:1b:d9:9c:df:e6:9e:fa:a3: d5:b2:3e:61:3b:6e:a8:69:2c:30:c6:f8:7f:c0:be: 80:56:8e:1f:6c:5f:37:f6:27:22:b2:36:14:41:b5: e1:82:c4:15:ea:6a:d0:df:cd:54:f2:db:95:d0:4e: b5:63:70:6b:63:14:c4:97:35:c8:fd:b6:ce:5e:82: d2:28:9f:6f:69:cb:d3:42:57:9d:a3:4c:a0:a8:6f: 1e:79:26:d7:22:61:d1:89:bf:46:74:15:26:74:c3: ce:f6:18:d8:a0:21:42:ec:8e:da:89:33:8c:13:61: 9f:8e:ab:f8:58:b7:22:81:cc:9e:a4:ee:58:8a:f9: 19:f3:ac:35:6b:9e:3a:e1:52:69:58:cd:03:e7:2f: 4b:70:ee:c8:8c:8b:5b:a3:db:f0:3a:d1:28:09:9c: 40:00:ce:c6:db:ce:4d:ae:3c:8d:fe:93:4d:85:1f: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:27:98:CD:63:16:A8:39:D2:76:50:0B:5E:7A:D1:D4:35:26:DD:2C X509v3 Authority Key Identifier: keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f2:69:4d:62:d4:4d:56:d0:c2:cd:b2:d5:40:37:15:35:be: 3a:a5:c8:93:dd:5e:8c:c9:68:91:ee:c3:2a:29:a7:bb:ac:90: bf:76:91:47:cc:22:07:68:f9:f9:4b:69:6a:cc:66:13:50:d7: d6:4d:34:81:80:e4:73:0d:61:ea:e0:c5:b7:8e:07:d5:21:59: 83:86:84:9d:f5:7f:12:f9:02:7a:55:66:a3:6a:9d:45:96:2b: ad:3b:73:38:b2:57:4e:ef:6d:7d:0b:b9:a8:56:50:86:a8:80: 78:2e:6b:54:67:ca:72:27:fd:59:93:3d:9a:cb:f9:eb:fc:5c: f4:8f:c8:40:cf:66:87:1f:5d:48:2f:33:df:06:c6:f4:af:d2: 5c:9a:88:ef:b4:e0:54:6c:b8:51:3f:c7:15:ab:02:b6:81:7a: 32:3b:ba:f4:d0:c0:33:45:46:ff:82:94:6d:30:38:d9:57:3e: db:8f:cd:4e:27:d9:d8:cb:f0:18:ba:c5:68:76:ef:96:1f:8e: d0:72:4e:4a:a9:7a:ab:c6:58:80:15:a8:67:1e:4e:09:b5:5c: 69:4d:87:91:3f:58:2e:fa:4d:38:71:77:9c:30:23:6e:9a:7e: 81:df:ed:fc:8e:b2:75:fa:91:20:0e:9e:37:2d:25:7c:5d:75: 28:28:92:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwFXnnx5GbRZeTSOYrk1S4VhDTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENC Q0MwNkJFNjAeFw0yNjA5MjAxNjAxNTNaFw0yNjA5MjExNjE0NTNaMDMxMTAvBgNV BAMTKDc1Mjc5OENENjMxNkE4MzlEMjc2NTAwQjVFN0FEMUQ0MzUyNkREMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnWsmDvtXuQ7VHfDQp0teI6Vh tx+nE/dSREEAa8qJ8AL5MwKVy6oaaRPCJc2U93bxlhv8jQlSKsh+minE1MpHAyJG N35vHT6A7gByQDlIHG4b2Zzf5p76o9WyPmE7bqhpLDDG+H/AvoBWjh9sXzf2JyKy NhRBteGCxBXqatDfzVTy25XQTrVjcGtjFMSXNcj9ts5egtIon29py9NCV52jTKCo bx55JtciYdGJv0Z0FSZ0w872GNigIULsjtqJM4wTYZ+Oq/hYtyKBzJ6k7liK+Rnz rDVrnjrhUmlYzQPnL0tw7siMi1uj2/A60SgJnEAAzsbbzk2uPI3+k02FH5e9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdSeYzWMWqDnSdlALXnrR1DUm3SwwHwYDVR0j BBgwFoAUz2d9xKDp9S5FjX94bBEATLzAa+YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5OWMxYWYtZDljNy00ZmZkLWJhMDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRB MEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENCQ0MwNkJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjY3N0RDNEEwRTlGNTJFNDU4RDdGNzg2QzExMDA0Q0JDQzA2 QkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAw NENCQ0MwNkJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzyaU1i1E1W0MLNstVANxU1vjqlyJPdXozJ aJHuwyopp7uskL92kUfMIgdo+flLaWrMZhNQ19ZNNIGA5HMNYergxbeOB9UhWYOG hJ31fxL5AnpVZqNqnUWWK607cziyV07vbX0LuahWUIaogHgua1RnynIn/VmTPZrL +ev8XPSPyEDPZocfXUgvM98GxvSv0lyaiO+04FRsuFE/xxWrAraBejI7uvTQwDNF Rv+ClG0wONlXPtuPzU4n2djL8Bi6xWh275YfjtByTkqpeqvGWIAVqGceTgm1XGlN h5E/WC76TThxd5wwI26afoHf7fyOsnX6kSAOnjctJXxddSgokoQ= -----END CERTIFICATE-----Generated at Mon Sep 21 10:41:15 2026 by rpki-client