$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: 5mbiTlcFD7kFDctnDNkbvUHMp4ZiO/9uC28whmMmgoQ= Subject key identifier: 64:A2:C2:93:90:D1:79:D7:8A:82:88:87:1F:E3:0C:7E:BC:DA:AD:78 Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 4B7C878420A615D0DF176F02B613293DD3EED57A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:53:11 +0000 Manifest this update: Thu 24 Sep 2026 13:48:11 +0000 Manifest next update: Fri 25 Sep 2026 14:04:11 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) 2: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: c2lqX/WzGZq/39R68uXI6sdmu0rFs6uPb9K79PE5B74=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7c:87:84:20:a6:15:d0:df:17:6f:02:b6:13:29:3d:d3:ee:d5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: Sep 24 13:48:11 2026 GMT Not After : Sep 25 14:04:11 2026 GMT Subject: CN=64A2C29390D179D78A8288871FE30C7EBCDAAD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:99:7b:bc:a5:20:a1:67:b9:fb:e2:1f:38: 8d:fa:59:2b:07:45:21:07:19:32:5e:47:55:69:5a: 19:76:13:86:62:d9:40:4a:06:06:03:ba:7c:e4:d4: 3d:d6:7d:94:89:bd:d6:01:c2:bb:0a:e8:71:ee:d5: fc:3b:be:93:58:77:e5:89:e1:90:1d:6a:93:7a:50: 05:94:e2:9a:92:78:69:f5:25:85:8b:f1:04:06:8d: cb:b1:d2:92:52:02:36:c0:c7:36:b3:59:b4:d6:9f: 14:bb:11:b4:59:7b:e8:35:73:41:74:75:57:6d:50: ef:18:27:f6:86:82:fc:44:2f:59:d5:44:41:e6:44: 97:b9:79:be:e4:7d:21:ca:94:6c:89:09:e0:93:8a: f5:4c:0b:6a:53:00:7d:3c:cf:1c:40:f6:b5:5f:a7: e4:91:a0:24:14:59:74:06:74:e6:e3:b5:8e:95:e0: 99:1f:a4:a1:c2:a3:ab:57:80:87:99:b2:78:a6:71: b2:7e:25:c7:8a:35:a7:9f:fe:d3:67:e0:1a:34:45: c5:fe:20:1e:2b:fc:04:58:2a:0e:bd:e2:bf:21:63: b6:c6:01:25:ed:60:fb:73:1f:2b:fc:f3:63:d8:5f: 63:5b:bc:3f:38:70:0d:34:4b:11:99:e6:59:44:b7: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A2:C2:93:90:D1:79:D7:8A:82:88:87:1F:E3:0C:7E:BC:DA:AD:78 X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e6:b4:4a:b8:e1:d7:e3:8e:97:ab:7a:47:ac:45:fd:d3:b9: e0:99:d9:ba:5c:e6:24:e3:2c:28:bc:03:3a:e4:62:e9:47:91: 1b:7e:8a:3b:58:9d:0a:e8:3e:19:12:a7:00:d1:5d:0c:c0:9c: 5b:ba:ea:d6:de:1d:6f:c1:c6:d6:ca:8b:f2:4d:9f:7d:96:14: 6b:98:f1:3e:d5:4b:4d:86:ca:44:4a:4c:54:2e:1d:92:35:ff: 1b:93:62:e8:ac:63:87:e6:3e:6b:67:28:f4:14:e4:79:83:df: f7:31:48:67:92:e4:96:a1:44:1f:79:04:6a:99:f0:42:a6:d6: 83:9d:9b:91:e4:b9:e3:64:36:b5:13:f4:ac:62:29:0a:83:ab: 6c:77:d9:64:67:b6:a1:0b:48:76:a4:55:30:8c:b0:2a:7a:97: 91:b7:fe:c0:fe:66:83:26:a9:62:e2:0f:06:f1:8a:18:62:96: 8d:ac:9a:05:78:64:73:60:eb:1d:55:ed:ee:4a:b3:7e:c9:ee: 46:a5:f0:9a:6b:aa:3a:ef:d8:96:11:0e:7f:67:1e:bb:df:a4: 45:77:71:44:3c:09:8b:c1:6a:72:b4:ca:cc:5a:f2:29:fc:53: 4e:6a:56:09:79:e6:c5:6e:3d:9e:4b:3a:cb:85:3f:ba:11:a0: a6:06:32:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3yHhCCmFdDfF28CthMpPdPu1XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjA5MjQxMzQ4MTFaFw0yNjA5MjUxNDA0MTFaMDMxMTAvBgNV BAMTKDY0QTJDMjkzOTBEMTc5RDc4QTgyODg4NzFGRTMwQzdFQkNEQUFENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfaJl7vKUgoWe5++IfOI36WSsH RSEHGTJeR1VpWhl2E4Zi2UBKBgYDunzk1D3WfZSJvdYBwrsK6HHu1fw7vpNYd+WJ 4ZAdapN6UAWU4pqSeGn1JYWL8QQGjcux0pJSAjbAxzazWbTWnxS7EbRZe+g1c0F0 dVdtUO8YJ/aGgvxEL1nVREHmRJe5eb7kfSHKlGyJCeCTivVMC2pTAH08zxxA9rVf p+SRoCQUWXQGdObjtY6V4JkfpKHCo6tXgIeZsnimcbJ+JceKNaef/tNn4Bo0RcX+ IB4r/ARYKg694r8hY7bGASXtYPtzHyv882PYX2NbvD84cA00SxGZ5llEt0sVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZKLCk5DRedeKgoiHH+MMfrzarXgwHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjmtEq44dfjjperekesRf3TueCZ2bpc5iTj LCi8AzrkYulHkRt+ijtYnQroPhkSpwDRXQzAnFu66tbeHW/BxtbKi/JNn32WFGuY 8T7VS02GykRKTFQuHZI1/xuTYuisY4fmPmtnKPQU5HmD3/cxSGeS5JahRB95BGqZ 8EKm1oOdm5HkueNkNrUT9KxiKQqDq2x32WRntqELSHakVTCMsCp6l5G3/sD+ZoMm qWLiDwbxihhilo2smgV4ZHNg6x1V7e5Ks37J7kal8Jprqjrv2JYRDn9nHrvfpEV3 cUQ8CYvBanK0ysxa8in8U05qVgl55sVuPZ5LOsuFP7oRoKYGMmY= -----END CERTIFICATE-----Generated at Fri Sep 25 00:32:59 2026 by rpki-client