$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: p+yaXUMaZfTVTExQwLSBJVW4ULKPpwNOlMde1aI/UMY= Subject key identifier: BF:BF:3F:E7:22:28:FE:B9:8C:1A:9B:CC:8D:28:2E:62:30:07:44:E9 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 1735B54D8A90F79D97FE821808EEB04D8BF11361 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:15:20 +0000 Manifest this update: Mon 21 Sep 2026 11:10:20 +0000 Manifest next update: Tue 22 Sep 2026 12:26:20 +0000 Files and hashes: 1: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: J6hanmiT5jBM70GWGzjEa7JDaLrJSYN/Dq97ItdlAxs=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:35:b5:4d:8a:90:f7:9d:97:fe:82:18:08:ee:b0:4d:8b:f1:13:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Sep 21 11:10:20 2026 GMT Not After : Sep 22 12:26:20 2026 GMT Subject: CN=BFBF3FE72228FEB98C1A9BCC8D282E62300744E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:de:0b:69:de:d0:07:e0:58:b5:c8:85:87: a9:7a:5c:27:1b:60:45:b9:e4:05:68:9b:c5:85:11: c1:65:b6:b4:3b:ef:8b:12:24:e9:81:d8:80:44:b1: 55:2e:a2:dc:2b:c0:c9:77:83:07:d2:5a:77:36:bd: c8:84:07:91:c7:a8:50:26:69:31:25:92:04:cf:18: 38:15:ab:ce:44:29:fd:a4:06:cc:a0:92:b0:29:7a: cb:5f:96:4e:44:cd:c9:65:fb:e9:2d:19:8c:6f:a9: c2:f2:86:0d:f8:29:b4:b1:f1:81:f5:ed:48:9e:9f: 5a:77:8c:7c:5f:ba:94:ea:42:60:e3:fd:9a:df:0f: 84:35:2f:1a:20:3d:5d:24:2a:6e:6d:04:c0:91:3d: 39:45:32:85:f0:9b:61:de:43:9b:bb:ba:48:39:1f: 64:e1:31:67:5e:fd:7a:25:e2:cd:6e:ff:9f:51:cd: 12:74:92:c7:e0:cd:7c:79:62:10:9e:6b:d1:df:da: b6:db:76:32:cb:7d:e1:ed:f5:60:8a:e5:2c:fe:be: 59:c6:c8:db:6c:4e:ec:53:99:51:aa:51:60:83:24: c2:5b:7d:ab:25:f0:f9:fd:4c:3c:87:07:7f:26:95: 02:58:ac:96:89:c3:04:9a:30:07:37:95:49:6b:cf: 94:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:3F:E7:22:28:FE:B9:8C:1A:9B:CC:8D:28:2E:62:30:07:44:E9 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:8e:17:b6:f8:4f:c3:92:00:66:7e:56:95:f4:a7:1e:23: 8b:61:58:4e:48:5e:0f:2f:38:af:fa:69:47:00:7c:a3:7e:92: fc:f6:04:fc:6f:3f:50:7d:8e:1d:7d:06:1a:fd:ad:ba:d8:26: c9:ef:a0:e2:82:ca:95:22:2f:15:7f:31:f2:8a:d2:4c:3c:8f: 60:94:cb:09:6e:59:34:38:3a:14:1c:eb:6e:55:b5:d7:a4:84: 26:1d:2e:07:22:17:5a:a6:39:a6:91:f5:25:e8:a0:f1:2c:c9: 2b:aa:96:cd:35:33:21:62:eb:e0:d6:fd:47:ca:34:e9:10:b8: a8:f3:15:af:79:1c:e7:35:80:a4:79:0a:8f:23:61:de:70:2a: 8c:d6:ce:1b:3e:a3:67:fa:cb:27:fe:5b:2b:02:01:4d:13:6c: ea:58:f6:bd:97:9d:46:41:cf:b4:76:77:d8:8e:91:df:9b:97: 21:c1:ee:55:5e:c0:8f:1b:53:f9:ab:6d:c5:4a:7a:d9:ec:b9: 4c:11:3e:7e:eb:88:60:83:ab:04:3b:c2:ef:ee:a5:be:6e:0c: ae:f5:02:3f:4b:3f:b6:cf:d7:23:12:a7:2d:5c:25:d1:1e:67: f6:aa:b1:27:ad:8f:a4:47:43:bc:c4:f0:fa:30:2a:dc:54:13: 57:88:73:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzW1TYqQ952X/oIYCO6wTYvxE2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA5MjExMTEwMjBaFw0yNjA5MjIxMjI2MjBaMDMxMTAvBgNV BAMTKEJGQkYzRkU3MjIyOEZFQjk4QzFBOUJDQzhEMjgyRTYyMzAwNzQ0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJ94Lad7QB+BYtciFh6l6XCcb YEW55AVom8WFEcFltrQ774sSJOmB2IBEsVUuotwrwMl3gwfSWnc2vciEB5HHqFAm aTElkgTPGDgVq85EKf2kBsygkrApestflk5Ezcll++ktGYxvqcLyhg34KbSx8YH1 7Uien1p3jHxfupTqQmDj/ZrfD4Q1LxogPV0kKm5tBMCRPTlFMoXwm2HeQ5u7ukg5 H2ThMWde/Xol4s1u/59RzRJ0ksfgzXx5YhCea9Hf2rbbdjLLfeHt9WCK5Sz+vlnG yNtsTuxTmVGqUWCDJMJbfasl8Pn9TDyHB38mlQJYrJaJwwSaMAc3lUlrz5TvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv78/5yIo/rmMGpvMjSguYjAHROkwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHayjhe2+E/DkgBmflaV9KceI4thWE5IXg8v OK/6aUcAfKN+kvz2BPxvP1B9jh19Bhr9rbrYJsnvoOKCypUiLxV/MfKK0kw8j2CU ywluWTQ4OhQc625VtdekhCYdLgciF1qmOaaR9SXooPEsySuqls01MyFi6+DW/UfK NOkQuKjzFa95HOc1gKR5Co8jYd5wKozWzhs+o2f6yyf+WysCAU0TbOpY9r2XnUZB z7R2d9iOkd+blyHB7lVewI8bU/mrbcVKetnsuUwRPn7riGCDqwQ7wu/upb5uDK71 Aj9LP7bP1yMSpy1cJdEeZ/aqsSetj6RHQ7zE8PowKtxUE1eIc6o= -----END CERTIFICATE-----Generated at Mon Sep 21 17:36:39 2026 by rpki-client