$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft File: CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json) Hash identifier: 2eVdPDd/C4GVKrqWHwYHkkJBE2zOKkJP0duHUHrMmrM= Subject key identifier: C8:FD:61:69:80:9C:9E:97:A3:25:1A:58:56:E6:6C:44:32:F7:FF:F9 Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 Certificate issuer: /CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Certificate serial: 74C2BF1065A7AB3FE470CBC40FB2C572B31B4FC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:51:38 +0000 Manifest this update: Thu 24 Sep 2026 04:46:38 +0000 Manifest next update: Fri 25 Sep 2026 07:18:38 +0000 Files and hashes: 1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=) 2: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: V/e7a0qAsu8EtX16IS6wfHHyI1t4lxyr4da3YlmflHI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c2:bf:10:65:a7:ab:3f:e4:70:cb:c4:0f:b2:c5:72:b3:1b:4f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Validity Not Before: Sep 24 04:46:38 2026 GMT Not After : Sep 25 07:18:38 2026 GMT Subject: CN=C8FD6169809C9E97A3251A5856E66C4432F7FFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:48:25:c4:05:72:48:9e:a2:f9:77:86:fd: b3:07:db:80:53:f8:76:10:da:cf:57:31:5f:14:1b: 24:71:91:59:b9:51:f7:e1:db:1a:1d:61:fe:aa:78: 1c:6b:ed:a3:81:49:4e:40:c0:07:aa:f3:3c:ac:a5: 8b:a5:bf:d4:91:94:d9:95:ba:5b:b5:bd:10:99:8f: a2:48:89:c2:5b:09:1d:7a:2b:fb:99:4d:10:86:75: 60:d4:7d:4f:3f:0d:d8:30:ae:c1:97:a4:04:ab:49: 91:12:60:f1:5c:53:ac:2b:c2:db:ea:41:db:b7:35: 5a:24:a2:85:fa:dc:20:0b:34:37:39:02:d4:dc:d8: f8:65:8d:9f:8a:0f:37:9a:19:56:fc:75:bb:54:de: 9f:fb:fc:4f:75:bb:b5:ff:6a:9f:b0:e7:41:a6:0c: 1f:07:63:6c:7c:97:d9:e4:b8:79:14:da:1d:50:dc: 3b:3e:cb:ab:da:6c:5b:90:dd:ed:bb:9e:27:8f:01: 18:16:8b:24:be:60:3a:74:48:3b:7c:55:c8:db:80: e1:63:1b:d4:bc:f8:2a:d6:29:d2:b3:ea:00:bc:15: 20:4e:31:f8:01:c0:2f:cd:6a:47:31:39:6c:4c:1b: 7b:c8:44:db:38:40:c5:f3:1b:2a:27:95:b3:52:92: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FD:61:69:80:9C:9E:97:A3:25:1A:58:56:E6:6C:44:32:F7:FF:F9 X509v3 Authority Key Identifier: keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:37:22:b7:72:c0:61:81:26:e6:48:da:50:c0:88:00:58: 0f:31:5a:1a:29:1d:74:7d:a8:fa:a7:67:ab:89:69:e2:ca:fc: 1e:b9:33:17:9f:d5:93:e5:08:26:1e:db:28:2b:7f:00:e4:7b: 44:b0:8f:84:64:6f:3f:f2:ea:96:73:5e:e4:76:c1:fb:9b:19: 9b:7b:7e:54:77:53:31:9f:21:36:76:9f:7a:82:8a:7e:27:02: dc:30:3b:e7:21:d9:ff:a9:7a:03:3f:d2:e7:4f:bc:05:8d:ec: 5d:e7:7c:e0:80:66:78:61:2b:ce:aa:0f:c3:8e:7d:95:af:03: 0a:bb:68:f5:d6:b0:d3:af:02:45:6a:f5:c9:28:21:db:80:38: f3:e2:db:76:c7:f1:91:c3:ed:03:5f:e6:d4:67:30:a4:ba:b6: 3c:da:2b:e3:79:ff:ba:91:4a:06:7f:c4:a5:72:fb:b3:0d:70: 3c:27:08:27:e1:29:ac:a8:22:ee:d5:34:2f:2b:bf:14:25:e3: 88:46:b7:66:fe:3d:d8:88:23:9d:22:a7:1a:7a:7a:9a:91:db: fa:3c:e2:47:9d:a9:92:e8:89:5d:5b:6a:6e:bb:bf:a2:b9:dc: a1:b9:f4:91:86:64:1c:d1:54:b8:80:c9:ae:56:87:3d:d0:31: 45:8e:a0:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMK/EGWnqz/kcMvED7LFcrMbT8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1RjA2 RjU0MTc0ODAeFw0yNjA5MjQwNDQ2MzhaFw0yNjA5MjUwNzE4MzhaMDMxMTAvBgNV BAMTKEM4RkQ2MTY5ODA5QzlFOTdBMzI1MUE1ODU2RTY2QzQ0MzJGN0ZGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TkglxAVySJ6i+XeG/bMH24BT +HYQ2s9XMV8UGyRxkVm5Uffh2xodYf6qeBxr7aOBSU5AwAeq8zyspYulv9SRlNmV ulu1vRCZj6JIicJbCR16K/uZTRCGdWDUfU8/DdgwrsGXpASrSZESYPFcU6wrwtvq Qdu3NVokooX63CALNDc5AtTc2PhljZ+KDzeaGVb8dbtU3p/7/E91u7X/ap+w50Gm DB8HY2x8l9nkuHkU2h1Q3Ds+y6vabFuQ3e27niePARgWiyS+YDp0SDt8VcjbgOFj G9S8+CrWKdKz6gC8FSBOMfgBwC/NakcxOWxMG3vIRNs4QMXzGyonlbNSkiqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyP1haYCcnpejJRpYVuZsRDL3//kwHwYDVR0j BBgwFoAUzyBNdI2tLRoCTeZtheQl8G9UF0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJmNTk4NmItYzc2NC00Y2Q3LWI0MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4 REFEMkQxQTAyNERFNjZEODVFNDI1RjA2RjU0MTc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjIwNEQ3NDhEQUQyRDFBMDI0REU2NkQ4NUU0MjVGMDZGNTQx NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1 RjA2RjU0MTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwaNyK3csBhgSbmSNpQwIgAWA8xWhopHXR9 qPqnZ6uJaeLK/B65Mxef1ZPlCCYe2ygrfwDke0Swj4Rkbz/y6pZzXuR2wfubGZt7 flR3UzGfITZ2n3qCin4nAtwwO+ch2f+pegM/0udPvAWN7F3nfOCAZnhhK86qD8OO fZWvAwq7aPXWsNOvAkVq9ckoIduAOPPi23bH8ZHD7QNf5tRnMKS6tjzaK+N5/7qR SgZ/xKVy+7MNcDwnCCfhKayoIu7VNC8rvxQl44hGt2b+PdiII50ipxp6epqR2/o8 4kedqZLoiV1bam67v6K53KG59JGGZBzRVLiAya5Whz3QMUWOoCA= -----END CERTIFICATE-----Generated at Thu Sep 24 12:02:22 2026 by rpki-client