$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: 52J/hLnXXCvfFdoez56Ft+fL39VIATxxeI6EG43vzxA= Subject key identifier: C3:40:F6:39:C2:5A:8E:22:ED:28:01:17:2D:8D:24:02:EF:6D:51:E5 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 03DB9653AB0C8BA729F6986F34D1691BD5626C82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 13:27:59 +0000 Manifest this update: Tue 10 Nov 2026 13:22:59 +0000 Manifest next update: Wed 11 Nov 2026 16:16:59 +0000 Files and hashes: 1: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) 3: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: ZENgi3Uc2sPu2D8uPJix4S2YxwBYc5qeNduv3acnrlg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:db:96:53:ab:0c:8b:a7:29:f6:98:6f:34:d1:69:1b:d5:62:6c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Nov 10 13:22:59 2026 GMT Not After : Nov 11 16:16:59 2026 GMT Subject: CN=C340F639C25A8E22ED2801172D8D2402EF6D51E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:69:e6:4d:d4:25:59:ec:6a:01:4e:10:b4: d5:88:a0:5c:31:8f:f8:53:6b:2f:2c:eb:49:21:6f: b6:46:0d:aa:63:ed:39:1a:8a:37:8c:ed:f3:48:87: 1c:c9:e6:92:42:b0:50:0a:8f:d0:bd:cf:35:57:06: 33:0d:87:fd:94:02:e3:2a:28:e9:1d:de:c0:cd:ee: 1e:ff:4c:7d:64:b6:a3:5e:dd:08:bb:bf:02:7d:7b: a3:13:cf:55:16:32:38:49:48:a6:c3:ed:46:2a:50: 0e:9e:31:5a:1d:be:5c:a8:4b:81:49:75:9e:e6:29: e4:4f:a1:d9:94:e8:ff:b0:f0:86:82:79:eb:39:fa: 49:ca:b9:1a:f2:6b:1d:7b:a7:bd:51:71:1c:92:2a: 4d:61:80:e5:28:8f:32:db:93:5a:71:1d:37:57:c5: af:4a:4c:98:8f:58:c6:e6:ea:03:bd:5d:c5:85:d4: d1:50:ba:11:40:75:4a:5e:c4:2a:01:f4:36:43:1f: b5:b0:69:ec:ab:2d:82:ed:f2:d2:ac:b7:30:84:1f: 4b:1f:78:79:50:d5:00:d3:5a:13:48:17:ec:e9:9a: 3d:ee:7d:67:6b:74:60:fc:2f:ef:88:09:61:fe:59: ab:15:be:64:95:a7:f1:c2:50:bb:0c:df:a2:7b:9b: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:40:F6:39:C2:5A:8E:22:ED:28:01:17:2D:8D:24:02:EF:6D:51:E5 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:fc:76:ac:19:04:9e:30:3f:44:56:25:23:66:28:cb:88:87: 85:03:68:03:74:b9:2e:2b:30:e6:b3:c2:62:5e:88:42:9a:92: 60:a4:f5:60:bc:ec:6e:81:97:2c:7a:bd:aa:71:e4:62:07:db: 88:dc:68:49:89:46:33:60:42:ae:68:db:d2:c2:61:c2:01:42: 7a:0e:fe:8f:6a:72:75:22:18:2a:18:e6:13:0e:d2:96:de:d1: 51:7e:20:46:15:8f:c8:37:3e:72:08:fd:62:cd:99:19:45:23: 8a:3e:f1:67:0f:a3:51:c4:5d:ac:d3:43:77:b9:cf:28:83:2a: 32:ac:f0:e2:87:b6:63:6e:51:f8:08:cf:ca:a5:55:0e:9d:bf: dd:de:6c:83:b0:8c:53:a7:f7:95:16:33:9c:78:ff:74:18:ea: f6:75:7a:25:7f:1e:4a:e9:f6:c5:37:75:20:8b:42:6a:0b:d5: d1:e8:9b:85:e9:8b:c2:f6:dc:8b:ae:c6:fc:75:1c:d9:25:65: f1:d7:e8:36:81:dc:32:90:6d:5b:6d:09:2c:73:62:00:f3:ee: af:ff:3d:77:08:d0:40:95:d6:fd:75:95:01:81:15:80:cb:15: 13:2b:b0:55:6e:55:45:59:ab:09:68:2e:8f:b3:65:39:7b:f5: 68:fb:10:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9uWU6sMi6cp9phvNNFpG9VibIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjExMTAxMzIyNTlaFw0yNjExMTExNjE2NTlaMDMxMTAvBgNV BAMTKEMzNDBGNjM5QzI1QThFMjJFRDI4MDExNzJEOEQyNDAyRUY2RDUxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSO2nmTdQlWexqAU4QtNWIoFwx j/hTay8s60khb7ZGDapj7TkaijeM7fNIhxzJ5pJCsFAKj9C9zzVXBjMNh/2UAuMq KOkd3sDN7h7/TH1ktqNe3Qi7vwJ9e6MTz1UWMjhJSKbD7UYqUA6eMVodvlyoS4FJ dZ7mKeRPodmU6P+w8IaCees5+knKuRryax17p71RcRySKk1hgOUojzLbk1pxHTdX xa9KTJiPWMbm6gO9XcWF1NFQuhFAdUpexCoB9DZDH7WwaeyrLYLt8tKstzCEH0sf eHlQ1QDTWhNIF+zpmj3ufWdrdGD8L++ICWH+WasVvmSVp/HCULsM36J7m9nFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw0D2OcJajiLtKAEXLY0kAu9tUeUwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr8dqwZBJ4wP0RWJSNmKMuIh4UDaAN0uS4r MOazwmJeiEKakmCk9WC87G6Blyx6vapx5GIH24jcaEmJRjNgQq5o29LCYcIBQnoO /o9qcnUiGCoY5hMO0pbe0VF+IEYVj8g3PnII/WLNmRlFI4o+8WcPo1HEXazTQ3e5 zyiDKjKs8OKHtmNuUfgIz8qlVQ6dv93ebIOwjFOn95UWM5x4/3QY6vZ1eiV/Hkrp 9sU3dSCLQmoL1dHom4Xpi8L23Iuuxvx1HNklZfHX6DaB3DKQbVttCSxzYgDz7q// PXcI0ECV1v11lQGBFYDLFRMrsFVuVUVZqwloLo+zZTl79Wj7EH0= -----END CERTIFICATE-----Generated at Tue Nov 10 23:07:05 2026 by rpki-client