$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft File: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft (raw, json) Hash identifier: O97WJkuWcZ9fXtatTwkvyjBGOZJPhPuAZT2BlzDZArc= Subject key identifier: 4F:2F:D5:44:DD:EE:86:03:B2:06:12:8D:2A:07:48:8A:ED:80:FF:17 Authority key identifier: CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 Certificate issuer: /CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Certificate serial: 15C877B6EF47DAF2E5439E250719919619BA6127 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:24:21 +0000 Manifest this update: Mon 21 Sep 2026 14:19:21 +0000 Manifest next update: Tue 22 Sep 2026 17:22:21 +0000 Files and hashes: 1: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl (hash: 2CIM2nC5mxw4WeBSSOYCv3+3xSjTtaNntVkj8PU0eJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c8:77:b6:ef:47:da:f2:e5:43:9e:25:07:19:91:96:19:ba:61:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Validity Not Before: Sep 21 14:19:21 2026 GMT Not After : Sep 22 17:22:21 2026 GMT Subject: CN=4F2FD544DDEE8603B206128D2A07488AED80FF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:ac:1f:a0:6e:77:6d:c1:f1:85:3e:8b:67: 2a:52:51:63:f2:4d:2c:b7:d7:1a:1b:ca:87:2e:79: 85:ad:54:28:c2:37:c8:18:00:9e:00:6b:93:49:2e: 19:12:a5:78:73:06:a0:29:65:32:37:02:35:63:69: 55:d5:8b:a4:11:c5:fb:6c:0a:19:2e:37:01:fb:5a: 0c:b2:95:c8:05:0b:aa:7b:d8:4f:96:7b:7a:45:bb: 5c:31:50:8c:9c:e5:52:f4:79:28:88:33:e7:17:ed: 08:12:ef:34:72:81:24:37:ce:c9:6b:74:62:27:18: 4f:12:87:22:49:74:2a:6f:bf:b2:67:90:27:93:64: fa:94:b5:ed:0c:c0:e0:94:6c:ec:0a:f0:78:83:c3: a0:7e:08:72:b8:b4:1b:48:a3:6b:26:dd:96:cd:68: 5b:07:12:ce:92:ba:62:34:66:9e:b3:95:37:f8:c0: 17:1c:f1:3e:b6:94:62:88:5d:b5:db:75:2b:f7:cc: 51:8a:2f:57:c1:73:44:60:bf:75:52:f5:ba:c0:14: e0:6c:80:72:50:07:a6:c2:f1:29:b6:15:ce:d7:cc: c0:5f:de:ee:08:28:98:bb:9d:03:40:8b:42:f4:09: 28:4d:b2:2d:4c:ba:41:9d:14:40:ea:91:24:74:3c: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2F:D5:44:DD:EE:86:03:B2:06:12:8D:2A:07:48:8A:ED:80:FF:17 X509v3 Authority Key Identifier: keyid:CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d9:0a:52:e7:c4:58:42:6d:38:4c:ed:d6:33:1f:12:0f:9a: 50:2f:88:c7:bb:57:ca:4c:e4:00:c7:a8:74:e5:7f:7e:22:7b: 52:0c:04:14:35:76:50:3b:f6:1a:c1:57:3f:b4:28:6a:05:ef: a1:45:ad:4e:34:7c:6b:de:a9:28:1b:ea:2b:1c:63:d6:25:75: 40:7f:c6:26:06:c8:bb:2c:2e:f0:c8:eb:6a:fa:12:b7:96:b0: f1:5f:0c:2c:24:3b:a2:ac:75:28:44:41:b4:bc:f5:5c:b8:e9: 08:ee:a2:94:70:6c:3f:b7:34:13:f4:01:dc:74:b3:6f:d1:6a: 04:71:56:12:30:77:04:12:98:ca:43:66:6c:16:58:2b:d6:d4: de:9c:98:7b:44:7a:b7:0e:b9:69:fc:f1:ff:da:96:90:dc:7e: 80:d9:da:1b:89:12:ec:25:43:8e:00:3b:17:7b:5c:7a:c2:ca: ff:e7:6e:5a:f4:85:34:09:ae:d3:7f:d2:2a:96:d5:c8:86:f0: ae:c4:86:28:a2:31:1d:18:53:25:a5:71:df:77:73:36:98:28: d7:2d:5a:26:80:df:fd:03:82:18:bd:7c:f9:98:26:e2:9c:b3: dd:76:c6:df:ae:54:e9:61:0a:ef:cd:4a:e8:31:8b:11:c1:ef: c6:72:26:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFch3tu9H2vLlQ54lBxmRlhm6YScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcw NTQ3RUY3ODAeFw0yNjA5MjExNDE5MjFaFw0yNjA5MjIxNzIyMjFaMDMxMTAvBgNV BAMTKDRGMkZENTQ0RERFRTg2MDNCMjA2MTI4RDJBMDc0ODhBRUQ4MEZGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmKwfoG53bcHxhT6LZypSUWPy TSy31xobyocueYWtVCjCN8gYAJ4Aa5NJLhkSpXhzBqApZTI3AjVjaVXVi6QRxfts ChkuNwH7WgyylcgFC6p72E+We3pFu1wxUIyc5VL0eSiIM+cX7QgS7zRygSQ3zslr dGInGE8ShyJJdCpvv7JnkCeTZPqUte0MwOCUbOwK8HiDw6B+CHK4tBtIo2sm3ZbN aFsHEs6SumI0Zp6zlTf4wBcc8T62lGKIXbXbdSv3zFGKL1fBc0Rgv3VS9brAFOBs gHJQB6bC8Sm2Fc7XzMBf3u4IKJi7nQNAi0L0CShNsi1MukGdFEDqkSR0PJ8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTy/VRN3uhgOyBhKNKgdIiu2A/xcwHwYDVR0j BBgwFoAUyvr7kD/mTuX84SzAe92fdwVH73gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVkNzc4NDAtNjA4ZS00NDlhLWIyMmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAz RkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcwNTQ3RUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZBRkI5MDNGRTY0RUU1RkNFMTJDQzA3QkREOUY3NzA1NDdF Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlG NzcwNTQ3RUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHZClLnxFhCbThM7dYzHxIPmlAviMe7V8pM 5ADHqHTlf34ie1IMBBQ1dlA79hrBVz+0KGoF76FFrU40fGveqSgb6iscY9YldUB/ xiYGyLssLvDI62r6EreWsPFfDCwkO6KsdShEQbS89Vy46QjuopRwbD+3NBP0Adx0 s2/RagRxVhIwdwQSmMpDZmwWWCvW1N6cmHtEercOuWn88f/alpDcfoDZ2huJEuwl Q44AOxd7XHrCyv/nblr0hTQJrtN/0iqW1ciG8K7EhiiiMR0YUyWlcd93czaYKNct WiaA3/0Dghi9fPmYJuKcs912xt+uVOlhCu/NSugxixHB78ZyJn0= -----END CERTIFICATE-----Generated at Tue Sep 22 01:23:37 2026 by rpki-client