$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft (raw, json) Hash identifier: I9/BMEaGcxsCXvjYwR/qJsn6pltlW0+Ll1CLBjMAxow= Subject key identifier: 90:D5:87:40:80:51:76:BD:CF:A6:96:7E:1B:25:5B:15:33:D3:3B:5A Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 382BBFEC1E956C31F610A091C71A318313C049E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft Manifest number: BD Signing time: Mon 21 Sep 2026 06:50:03 +0000 Manifest this update: Mon 21 Sep 2026 06:45:03 +0000 Manifest next update: Tue 22 Sep 2026 08:15:03 +0000 Files and hashes: 1: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl (hash: fjoiOWFU4iTau9VYX1S8ni7UshkDq6DLI8V6AhQHw1M=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2b:bf:ec:1e:95:6c:31:f6:10:a0:91:c7:1a:31:83:13:c0:49:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: Sep 21 06:45:03 2026 GMT Not After : Sep 22 08:15:03 2026 GMT Subject: CN=90D58740805176BDCFA6967E1B255B1533D33B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:73:c6:60:74:38:e1:c4:34:06:dd:1f:59: 38:4b:1c:97:48:b4:80:69:c5:e7:f9:69:18:fc:5d: 05:db:1b:2a:35:92:63:51:7e:6a:c1:ca:10:2a:a5: dd:7d:eb:db:a0:df:12:f9:44:f2:da:a9:57:ea:27: 41:d5:2d:c7:57:24:19:72:8d:f4:a6:85:fd:2c:05: 05:47:f4:87:a3:3a:1c:75:45:f7:52:28:b4:2b:88: 35:83:c3:6c:4c:7b:bb:d7:12:39:3c:6f:8e:28:95: b7:20:e2:ad:cb:6e:f5:7e:f5:26:3b:b0:59:f8:cf: 6a:f5:1c:0d:4a:5f:18:a7:8e:72:47:bc:3d:98:1d: 40:8f:81:f2:b9:34:37:bf:b4:6b:48:86:1c:43:01: 3d:8a:4a:34:25:ea:46:93:68:98:d7:34:33:7c:01: 79:7e:96:30:69:58:93:ee:6c:1c:31:8e:15:78:9d: 8d:d6:c3:5a:ca:80:65:00:37:ec:f4:cf:9b:2d:03: f2:1f:46:7c:c6:c2:17:d0:a7:f3:44:2c:cd:6c:6a: 8d:c5:3b:06:6e:62:92:f7:8a:32:93:b4:e4:c7:25: 62:71:0c:4b:e2:5b:ff:e0:20:0e:cd:9e:8b:ff:a0: 97:84:01:26:f4:74:97:a0:4c:83:21:ce:ed:b2:03: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D5:87:40:80:51:76:BD:CF:A6:96:7E:1B:25:5B:15:33:D3:3B:5A X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9e:2f:bb:52:1b:30:f1:47:8e:b2:62:ff:66:e5:24:c7:e4: 1d:7d:f8:5f:ad:6a:4f:19:1a:c5:70:99:40:0f:fe:d3:ad:84: df:37:c7:b0:71:62:6f:6f:9b:81:c5:70:23:a4:6d:7a:91:de: 23:0e:ba:17:a2:bc:a2:11:08:8c:50:26:15:5d:35:dc:1c:6d: b7:5e:de:2d:6f:60:16:d4:a3:4e:9f:2f:97:94:fa:fa:fd:94: 8d:f6:28:66:d0:59:71:c3:b5:cd:54:6a:44:e0:44:36:c0:7f: ba:80:7f:58:90:8a:02:d7:22:44:0a:0c:eb:a3:b0:68:d8:ea: aa:46:0e:74:52:b0:e5:27:60:c7:60:16:68:a4:ff:1b:ab:76: 85:d8:14:49:84:ea:61:ec:62:c1:93:49:7e:75:16:3f:53:5f: ea:ae:4e:08:5f:9f:7d:10:9b:54:1e:4d:4d:ad:b3:03:fd:b6: 65:bb:45:8a:ba:e5:20:7a:a6:d2:d9:10:3b:49:20:1a:40:85: 0e:a9:89:07:06:c3:29:51:0e:d1:a5:55:b6:7e:59:99:81:1f: a5:01:97:0c:14:50:53:82:5b:57:ea:a4:17:07:9b:1e:5f:7b: 90:e2:f9:88:e3:9b:68:78:00:a8:5c:0e:a3:1b:23:f2:a0:6d: 81:f7:9f:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCu/7B6VbDH2EKCRxxoxgxPASeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjA5MjEwNjQ1MDNaFw0yNjA5MjIwODE1MDNaMDMxMTAvBgNV BAMTKDkwRDU4NzQwODA1MTc2QkRDRkE2OTY3RTFCMjU1QjE1MzNEMzNCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JXPGYHQ44cQ0Bt0fWThLHJdI tIBpxef5aRj8XQXbGyo1kmNRfmrByhAqpd1969ug3xL5RPLaqVfqJ0HVLcdXJBly jfSmhf0sBQVH9IejOhx1RfdSKLQriDWDw2xMe7vXEjk8b44olbcg4q3LbvV+9SY7 sFn4z2r1HA1KXxinjnJHvD2YHUCPgfK5NDe/tGtIhhxDAT2KSjQl6kaTaJjXNDN8 AXl+ljBpWJPubBwxjhV4nY3Ww1rKgGUAN+z0z5stA/IfRnzGwhfQp/NELM1sao3F OwZuYpL3ijKTtOTHJWJxDEviW//gIA7Nnov/oJeEASb0dJegTIMhzu2yA9FVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNWHQIBRdr3PppZ+GyVbFTPTO1owHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNG QTNEOEEyNUJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByeL7tSGzDxR46yYv9m5STH5B19+F+tak8Z GsVwmUAP/tOthN83x7BxYm9vm4HFcCOkbXqR3iMOuheivKIRCIxQJhVdNdwcbbde 3i1vYBbUo06fL5eU+vr9lI32KGbQWXHDtc1UakTgRDbAf7qAf1iQigLXIkQKDOuj sGjY6qpGDnRSsOUnYMdgFmik/xurdoXYFEmE6mHsYsGTSX51Fj9TX+quTghfn30Q m1QeTU2tswP9tmW7RYq65SB6ptLZEDtJIBpAhQ6piQcGwylRDtGlVbZ+WZmBH6UB lwwUUFOCW1fqpBcHmx5fe5Di+Yjjm2h4AKhcDqMbI/KgbYH3n/s= -----END CERTIFICATE-----Generated at Mon Sep 21 17:41:54 2026 by rpki-client