$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft File: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft (raw, json) Hash identifier: cNHj/XdWZaTTFBtj1+mNqBhV+iglG2xyNp9ggc/Lkuk= Subject key identifier: 14:E1:84:39:43:D7:3A:57:78:2B:12:8D:BC:B4:BD:8B:CE:BD:88:41 Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Certificate serial: 57006D0A698388A4C9EB253D82A15154442E15B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:00:41 +0000 Manifest this update: Wed 23 Sep 2026 19:55:41 +0000 Manifest next update: Thu 24 Sep 2026 23:25:41 +0000 Files and hashes: 1: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl (hash: hr7CsT+zNzT01mzeUxo0s+eb9t/Nt1gH8dClcNHAk/g=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:00:6d:0a:69:83:88:a4:c9:eb:25:3d:82:a1:51:54:44:2e:15:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Validity Not Before: Sep 23 19:55:41 2026 GMT Not After : Sep 24 23:25:41 2026 GMT Subject: CN=14E1843943D73A57782B128DBCB4BD8BCEBD8841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ed:64:5b:f7:a4:e4:3e:87:2a:ad:55:47:b1: 37:b0:00:7f:d0:25:02:f4:b4:a5:12:19:79:84:0c: 13:1f:02:2e:f9:9b:d3:d7:19:d2:c8:bf:c9:c3:17: ba:fd:16:f8:54:ef:f8:f3:57:53:2a:eb:5c:17:26: 10:cc:a1:6e:c7:76:74:b6:37:d8:d4:27:1d:73:a8: 3a:8b:d4:48:b6:72:70:5d:f3:ad:75:fe:5d:d0:82: 51:4d:3d:44:0a:b0:e4:04:87:61:5c:86:6f:e1:eb: d8:3c:e4:af:08:f1:85:5e:71:18:8e:44:8e:f3:13: 8d:48:24:70:b2:59:9b:32:ea:8f:dc:d2:c9:5f:66: cf:d9:d2:40:53:2c:7e:fa:fc:4b:d8:01:29:2f:01: 3d:7e:80:bc:6b:6d:a3:44:2e:73:30:aa:e3:46:3c: 20:6a:2b:f2:57:d6:3a:14:c3:cc:93:16:1e:88:38: 8f:22:04:f7:3a:ce:31:67:3c:2f:2e:d6:50:43:17: 9f:62:eb:27:f3:6f:0c:e8:b4:4d:d5:81:e4:f4:44: 13:e2:db:de:64:dd:e3:ea:19:99:e6:41:d0:ad:90: 10:5f:25:21:1f:c7:ad:13:2f:db:50:55:ff:04:e8: 8d:ea:f4:78:e6:10:09:4c:59:c3:8f:7c:e7:0a:50: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:84:39:43:D7:3A:57:78:2B:12:8D:BC:B4:BD:8B:CE:BD:88:41 X509v3 Authority Key Identifier: keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:91:9b:7a:c2:5a:84:df:d4:20:a3:ac:f6:81:c3:2f:b6:52: 10:42:16:f0:93:23:08:5a:4c:e8:a2:34:ee:3e:dc:d7:30:f7: d5:7d:07:07:98:4d:67:72:6d:a2:5e:cd:c1:36:ea:65:1a:60: 7e:04:30:4a:54:8d:0a:f6:06:92:56:81:73:9c:30:fb:19:39: a5:1d:90:31:93:02:43:b6:3c:bb:5b:91:43:3f:c1:9a:8d:12: 63:47:9b:c2:e0:6b:08:e5:08:bb:87:0b:12:dc:cf:7b:aa:3b: 6c:31:a9:e5:03:4e:33:41:7d:c4:c1:6f:80:a7:fb:bd:ab:74: db:ab:91:de:7d:f2:df:b8:5b:65:3b:62:54:55:22:f0:9f:d6: ef:ae:cf:d7:6d:15:50:fa:54:88:61:b0:3f:9f:96:58:1e:1b: 94:81:68:25:b2:35:3d:04:b6:dc:1a:7e:6b:f0:7f:ad:09:0b: 93:3e:b9:c6:7f:a0:cc:f3:6b:b7:c3:30:bf:77:ae:6d:86:a3: f3:54:77:ba:a7:8d:a9:dc:62:e7:e9:d3:98:ea:7c:84:fe:61: 4f:8f:6f:54:43:61:de:f7:df:85:be:06:61:07:db:16:d6:62: 13:d5:79:6e:f4:27:16:83:23:88:62:c4:3f:37:29:00:8d:d2: c7:6a:c6:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwBtCmmDiKTJ6yU9gqFRVEQuFbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC OUUzNkZFODAeFw0yNjA5MjMxOTU1NDFaFw0yNjA5MjQyMzI1NDFaMDMxMTAvBgNV BAMTKDE0RTE4NDM5NDNENzNBNTc3ODJCMTI4REJDQjRCRDhCQ0VCRDg4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7WRb96TkPocqrVVHsTewAH/Q JQL0tKUSGXmEDBMfAi75m9PXGdLIv8nDF7r9FvhU7/jzV1Mq61wXJhDMoW7HdnS2 N9jUJx1zqDqL1Ei2cnBd8611/l3QglFNPUQKsOQEh2Fchm/h69g85K8I8YVecRiO RI7zE41IJHCyWZsy6o/c0slfZs/Z0kBTLH76/EvYASkvAT1+gLxrbaNELnMwquNG PCBqK/JX1joUw8yTFh6IOI8iBPc6zjFnPC8u1lBDF59i6yfzbwzotE3VgeT0RBPi 295k3ePqGZnmQdCtkBBfJSEfx60TL9tQVf8E6I3q9HjmEAlMWcOPfOcKUAXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOGEOUPXOld4KxKNvLS9i869iEEwHwYDVR0j BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2 NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2 RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBG OEFCOUUzNkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmRm3rCWoTf1CCjrPaBwy+2UhBCFvCTIwha TOiiNO4+3Ncw99V9BweYTWdybaJezcE26mUaYH4EMEpUjQr2BpJWgXOcMPsZOaUd kDGTAkO2PLtbkUM/wZqNEmNHm8LgawjlCLuHCxLcz3uqO2wxqeUDTjNBfcTBb4Cn +72rdNurkd598t+4W2U7YlRVIvCf1u+uz9dtFVD6VIhhsD+fllgeG5SBaCWyNT0E ttwafmvwf60JC5M+ucZ/oMzza7fDML93rm2Go/NUd7qnjancYufp05jqfIT+YU+P b1RDYd7334W+BmEH2xbWYhPVeW70JxaDI4hixD83KQCN0sdqxpc= -----END CERTIFICATE-----Generated at Thu Sep 24 12:41:49 2026 by rpki-client