$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json) Hash identifier: fPkoe2aSfPCYD/pkW/CC06StvgW+U7Lk4N8ePdSiBaU= Subject key identifier: 1B:FF:15:1A:ED:A9:87:62:6A:E6:A3:A0:32:3D:80:71:D3:C6:2A:0D Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Certificate serial: 080C8D5D2818FB19075F83ADBA7F9621B474F4F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:24:51 +0000 Manifest this update: Thu 24 Sep 2026 07:19:51 +0000 Manifest next update: Fri 25 Sep 2026 10:37:51 +0000 Files and hashes: 1: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: CHLRkGkW+Dy9BcV10jmw67JYhFDZ5xoqziuc7SoIOgM=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0c:8d:5d:28:18:fb:19:07:5f:83:ad:ba:7f:96:21:b4:74:f4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Validity Not Before: Sep 24 07:19:51 2026 GMT Not After : Sep 25 10:37:51 2026 GMT Subject: CN=1BFF151AEDA987626AE6A3A0323D8071D3C62A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:95:09:d2:2a:c6:21:bc:43:7a:49:fd:5d: f2:5c:26:d6:1e:fc:28:5b:30:a8:9b:0f:79:c2:16: 4b:e6:4b:2b:fc:a7:40:00:6c:80:ed:ce:5e:c2:3a: e1:d0:33:c4:89:e2:ec:99:a5:12:74:85:54:76:95: e5:39:a1:a1:05:dd:2c:0c:4d:4d:98:a5:39:c5:03: 86:8a:de:6c:26:13:42:47:a3:73:da:61:76:d1:56: 1f:b7:5e:af:5d:f3:90:e6:63:d8:d8:89:3d:13:c0: 6b:9e:fe:b8:bb:c8:10:ee:ac:8f:cf:3e:b5:58:de: 8f:c9:fb:32:56:7c:7b:62:97:9d:c0:29:d8:84:3d: d1:f9:09:b0:46:a7:c2:5c:ba:f2:e8:c8:7e:2a:5d: 80:f9:4a:90:a3:3d:b6:69:44:a5:a4:66:52:ee:16: 8e:ae:52:f6:9c:fa:85:46:76:44:16:b1:f6:6c:b1: 7f:08:06:32:28:7d:c2:f3:95:b1:7c:d2:bd:66:1a: 8e:ef:59:9d:01:22:d3:e4:ce:44:62:50:19:00:9c: 16:a8:da:33:81:1c:83:cb:23:29:66:ec:52:9e:40: 66:c1:1f:72:22:29:7a:b8:8c:86:18:0a:f7:c8:76: a1:9d:8b:42:86:8c:de:b0:5b:74:74:31:bf:6c:2b: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FF:15:1A:ED:A9:87:62:6A:E6:A3:A0:32:3D:80:71:D3:C6:2A:0D X509v3 Authority Key Identifier: keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a4:4a:f2:a8:1d:c0:ee:57:f4:33:58:f9:4b:62:f8:de:00: ef:bf:b9:ff:5e:19:ef:34:a8:7a:c0:db:40:ca:9f:45:51:fd: ad:54:4d:97:4a:66:6c:78:24:51:da:4d:7f:52:85:21:c4:ec: 50:54:0c:5e:97:4c:da:6f:62:06:8d:22:10:5e:29:88:48:f6: 45:6b:0a:2e:fc:45:47:57:79:d1:6c:7e:ab:f7:b2:b2:9a:0f: 00:b1:86:10:36:5a:db:34:f6:a3:19:9e:73:c9:e8:11:c0:79: 20:53:e5:4f:d0:ea:21:b3:18:0e:a3:64:6b:99:b2:7b:e1:ff: 75:e1:56:e8:e3:43:02:9b:e2:86:70:11:81:73:ac:f1:c7:af: f7:e8:f8:3c:03:e7:f7:9b:a1:65:4f:0c:b6:eb:f0:6e:2c:7e: 7c:0e:e0:af:4b:a1:15:ff:2c:13:47:f5:c7:ea:97:c7:65:2d: a0:27:52:d3:ee:2d:ca:7e:27:7b:fe:6b:1c:e3:ce:36:9d:b2: da:30:5c:d1:12:b1:35:04:87:4d:3c:51:d7:08:4f:bf:50:76: c4:4f:2f:eb:e9:79:be:91:62:49:de:45:74:b8:53:9c:51:0b: 68:be:28:7f:d1:f6:72:45:b0:d2:ef:70:4e:f8:fc:89:5e:76: b3:73:ca:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAyNXSgY+xkHX4Otun+WIbR09PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUwMzcw QzA2MzEzNTAeFw0yNjA5MjQwNzE5NTFaFw0yNjA5MjUxMDM3NTFaMDMxMTAvBgNV BAMTKDFCRkYxNTFBRURBOTg3NjI2QUU2QTNBMDMyM0Q4MDcxRDNDNjJBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhJUJ0irGIbxDekn9XfJcJtYe /ChbMKibD3nCFkvmSyv8p0AAbIDtzl7COuHQM8SJ4uyZpRJ0hVR2leU5oaEF3SwM TU2YpTnFA4aK3mwmE0JHo3PaYXbRVh+3Xq9d85DmY9jYiT0TwGue/ri7yBDurI/P PrVY3o/J+zJWfHtil53AKdiEPdH5CbBGp8JcuvLoyH4qXYD5SpCjPbZpRKWkZlLu Fo6uUvac+oVGdkQWsfZssX8IBjIofcLzlbF80r1mGo7vWZ0BItPkzkRiUBkAnBao 2jOBHIPLIylm7FKeQGbBH3IiKXq4jIYYCvfIdqGdi0KGjN6wW3R0Mb9sK4yxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/8VGu2ph2Jq5qOgMj2AcdPGKg0wHwYDVR0j BBgwFoAUz1yl4wIxHNDbD+qEDnRQNwwGMTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3OTFiNzMtYmIwOC00YTgzLWExOTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMw MjMxMUNEMERCMEZFQTg0MEU3NDUwMzcwQzA2MzEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjVDQTVFMzAyMzExQ0QwREIwRkVBODQwRTc0NTAzNzBDMDYz MTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUw MzcwQzA2MzEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADakSvKoHcDuV/QzWPlLYvjeAO+/uf9eGe80 qHrA20DKn0VR/a1UTZdKZmx4JFHaTX9ShSHE7FBUDF6XTNpvYgaNIhBeKYhI9kVr Ci78RUdXedFsfqv3srKaDwCxhhA2Wts09qMZnnPJ6BHAeSBT5U/Q6iGzGA6jZGuZ snvh/3XhVujjQwKb4oZwEYFzrPHHr/fo+DwD5/eboWVPDLbr8G4sfnwO4K9LoRX/ LBNH9cfql8dlLaAnUtPuLcp+J3v+axzjzjadstowXNESsTUEh008UdcIT79QdsRP L+vpeb6RYkneRXS4U5xRC2i+KH/R9nJFsNLvcE74/IledrNzyhs= -----END CERTIFICATE-----Generated at Thu Sep 24 22:01:05 2026 by rpki-client