$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft (raw, json) Hash identifier: o6DUP3GauIPD0tQ9mgVxquXx47UWAvDS8aale1UHIMU= Subject key identifier: FD:59:0D:DF:44:BE:09:FF:81:1D:0A:6A:0B:E9:29:70:32:C6:91:F2 Authority key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Certificate issuer: /CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Certificate serial: 3DBE0B96F2283A846961B887372BAC1CE703C7E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:02:32 +0000 Manifest this update: Mon 21 Sep 2026 12:57:32 +0000 Manifest next update: Tue 22 Sep 2026 13:04:32 +0000 Files and hashes: 1: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl (hash: CUW5pAC2q9YEFAc3ASXZsZhooi5lvBw3JBlzVy9HPFk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:be:0b:96:f2:28:3a:84:69:61:b8:87:37:2b:ac:1c:e7:03:c7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Validity Not Before: Sep 21 12:57:32 2026 GMT Not After : Sep 22 13:04:32 2026 GMT Subject: CN=FD590DDF44BE09FF811D0A6A0BE9297032C691F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:7f:60:cd:47:3f:d9:ab:49:b6:79:69:a0: da:cf:76:35:b4:56:8d:71:bd:89:eb:10:ef:01:c7: 7e:a7:c2:53:52:7e:06:36:fc:1d:c2:a0:b9:4d:0a: b9:c7:11:75:d9:28:62:b3:f6:26:c7:cc:ae:71:52: d1:f2:5f:ba:ca:35:ed:8a:b8:fb:74:3a:6c:19:bc: 95:6d:f1:7d:56:67:d8:c6:bf:41:af:01:37:70:5f: 7c:18:f8:8b:ff:e4:99:ab:81:8d:78:71:fd:ee:83: 2f:24:e0:08:ec:0c:cb:94:22:5f:3a:7a:51:6d:83: be:92:45:c3:d7:36:30:c5:3b:50:aa:26:b1:ee:13: 8e:22:ec:a3:e9:b1:12:4e:6f:a5:e9:a5:9a:1c:c8: 6b:31:c1:0e:ff:7e:18:38:5f:79:53:11:14:a0:a7: ff:b3:38:a3:6d:b3:07:1a:bc:9e:a2:75:69:9b:3e: 1d:8f:02:36:9b:48:c4:1b:f1:7b:8e:01:b3:95:ff: bd:66:d2:a4:2e:9d:15:66:5b:f0:39:48:b6:17:ff: 7b:ad:a1:67:76:69:9e:9c:a3:12:5b:11:78:45:f5: 74:85:4f:d8:e4:35:06:44:5c:c3:df:95:38:c3:6e: 48:53:79:54:de:00:08:0a:61:fc:f5:2a:25:30:df: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:59:0D:DF:44:BE:09:FF:81:1D:0A:6A:0B:E9:29:70:32:C6:91:F2 X509v3 Authority Key Identifier: keyid:CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:a1:f5:a2:14:15:0b:79:35:f9:e2:25:a5:b2:0a:99:7e:b8: 70:19:a4:56:84:bf:28:6f:e7:4a:e0:b5:54:46:1a:20:d4:cb: 70:ee:e7:b1:42:71:0a:75:cc:36:40:44:10:b7:8e:fc:1c:73: f8:2a:07:2a:d7:69:49:23:18:3e:1a:81:a4:dc:e8:f0:be:f2: 7a:5b:b5:d2:71:7e:9a:26:3d:33:7c:30:bf:f9:bf:0b:43:e9: 86:1f:7d:bf:d2:f8:d9:ce:21:e5:ee:f7:19:56:69:f0:76:dc: 95:ec:5b:7b:90:86:a9:82:03:ee:ff:4a:b4:31:18:80:79:ad: 82:21:aa:31:e4:86:c6:26:7d:9c:c7:df:04:9b:49:8b:a2:32: be:d2:f4:13:12:87:d0:48:81:0e:3c:e3:12:4b:1a:46:a0:fb: d5:6d:09:8a:fd:e7:8e:e5:87:1a:84:33:c5:04:2d:d1:ea:40: c0:1e:e0:dc:3c:99:0f:c2:2b:54:6a:67:dd:3d:f3:d9:97:0b: e0:91:af:85:a7:38:36:77:31:ba:2b:d2:6c:23:a0:49:70:76: 4e:bd:13:b1:3e:2e:bc:22:e8:1d:c1:2a:4a:ea:f1:9a:6b:15: d4:5d:06:c3:90:e5:19:6d:c3:82:a2:65:29:3f:61:eb:6c:9b: f4:af:73:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPb4LlvIoOoRpYbiHNyusHOcDx+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNG QURDQkFBMDAeFw0yNjA5MjExMjU3MzJaFw0yNjA5MjIxMzA0MzJaMDMxMTAvBgNV BAMTKEZENTkwRERGNDRCRTA5RkY4MTFEMEE2QTBCRTkyOTcwMzJDNjkxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5H9gzUc/2atJtnlpoNrPdjW0 Vo1xvYnrEO8Bx36nwlNSfgY2/B3CoLlNCrnHEXXZKGKz9ibHzK5xUtHyX7rKNe2K uPt0OmwZvJVt8X1WZ9jGv0GvATdwX3wY+Iv/5JmrgY14cf3ugy8k4AjsDMuUIl86 elFtg76SRcPXNjDFO1CqJrHuE44i7KPpsRJOb6XppZocyGsxwQ7/fhg4X3lTERSg p/+zOKNtswcavJ6idWmbPh2PAjabSMQb8XuOAbOV/71m0qQunRVmW/A5SLYX/3ut oWd2aZ6coxJbEXhF9XSFT9jkNQZEXMPflTjDbkhTeVTeAAgKYfz1KiUw3wLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/VkN30S+Cf+BHQpqC+kpcDLGkfIwHwYDVR0j BBgwFoAUz5DTI0sm5kPeKeeLKj0Dc/rcuqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2M2U3MWEtOWM4NS00MTc2LThmYTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0 QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNGQURDQkFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjkwRDMyMzRCMjZFNjQzREUyOUU3OEIyQTNEMDM3M0ZBRENC QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAz NzNGQURDQkFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMmh9aIUFQt5NfniJaWyCpl+uHAZpFaEvyhv 50rgtVRGGiDUy3Du57FCcQp1zDZARBC3jvwcc/gqByrXaUkjGD4agaTc6PC+8npb tdJxfpomPTN8ML/5vwtD6YYffb/S+NnOIeXu9xlWafB23JXsW3uQhqmCA+7/SrQx GIB5rYIhqjHkhsYmfZzH3wSbSYuiMr7S9BMSh9BIgQ484xJLGkag+9VtCYr9547l hxqEM8UELdHqQMAe4Nw8mQ/CK1RqZ90989mXC+CRr4WnODZ3Mbor0mwjoElwdk69 E7E+Lrwi6B3BKkrq8ZprFdRdBsOQ5Rltw4KiZSk/Yetsm/Svc7o= -----END CERTIFICATE-----Generated at Tue Sep 22 02:25:59 2026 by rpki-client