$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: HeGfD2GwAdVgQzpPrSvXzguKypWYowmEyAniOxBAD/c= Subject key identifier: 55:CD:FE:6E:00:06:F9:01:B1:9B:BD:0A:BB:53:9D:48:D2:E4:F9:B0 Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 26D68D0F52F6E1277DE783C9BC25753D00D82300 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:48:52 +0000 Manifest this update: Thu 24 Sep 2026 18:43:52 +0000 Manifest next update: Fri 25 Sep 2026 19:02:52 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) 3: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: 7OU9ZNaoJfZ899d8zAk5+U20Sx9RmPxZU4Trsltd1rA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d6:8d:0f:52:f6:e1:27:7d:e7:83:c9:bc:25:75:3d:00:d8:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Sep 24 18:43:52 2026 GMT Not After : Sep 25 19:02:52 2026 GMT Subject: CN=55CDFE6E0006F901B19BBD0ABB539D48D2E4F9B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:09:27:5f:18:df:b9:0e:6c:d9:58:60:b6: 79:04:5c:bb:be:d5:4d:0e:e5:c4:34:f0:ef:82:7b: 67:7c:54:76:a1:2c:1d:f5:83:3a:c4:cb:d1:a7:9e: 29:2a:da:3e:ed:49:f6:75:a6:56:bb:f7:2a:61:5a: 68:ff:d0:ab:d3:7d:47:45:b7:af:fb:4e:a9:a9:38: 87:cd:09:8f:26:4a:f5:be:c1:db:cf:0b:1d:96:ec: 47:ba:c0:91:c9:88:46:ff:f6:85:14:e8:df:b4:b4: 22:8c:27:b1:91:01:4d:27:5a:2e:66:62:1f:db:a3: 46:d1:b6:9e:22:85:f2:2d:d6:f8:03:50:55:d0:5c: 10:fb:45:5d:c7:0c:ad:76:05:75:b7:28:30:d7:f6: c1:04:99:20:07:eb:e9:55:f7:d8:67:29:3f:21:0a: a5:66:4f:dd:9c:87:a8:36:49:41:3d:aa:85:36:0e: f2:6d:dd:17:72:c3:cb:78:e0:e6:f2:d0:93:98:24: 0a:05:f8:50:fe:60:8a:6b:5a:15:35:ed:bf:a4:f9: 92:a4:81:17:63:d9:d1:38:cb:27:4d:47:96:29:df: d5:24:fc:8f:c4:3e:93:d1:16:da:78:63:5f:cc:40: 27:15:b0:e2:a2:16:b4:70:82:98:bb:b6:51:7d:db: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CD:FE:6E:00:06:F9:01:B1:9B:BD:0A:BB:53:9D:48:D2:E4:F9:B0 X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:01:81:a1:ce:44:8e:c3:ac:72:41:8f:9d:a2:c8:d3:4f:e2: 50:af:c5:40:62:2f:10:5a:87:f0:d4:af:d3:1d:ef:a7:59:9a: 2f:96:f1:b0:a2:6d:c4:d0:07:85:95:68:71:2a:46:8b:e5:dd: 06:da:43:d9:fa:a2:9b:9b:7a:ff:ca:37:19:62:52:05:19:d9: 4f:c1:b0:ad:36:6f:a1:87:60:d4:1f:e7:3e:90:c2:ff:65:5b: 18:6b:00:25:53:37:ff:19:24:4f:6d:14:f6:5b:dc:b4:d9:04: af:75:6b:3d:85:73:05:5c:f3:8c:19:c1:2f:33:91:58:c8:a2: 12:7a:bb:69:12:2d:45:37:94:76:d3:3c:8d:a9:f7:4a:4c:c6: a4:32:78:ff:52:a1:15:e6:18:a0:c3:01:d4:61:03:5b:58:df: 27:7e:ec:f0:93:a1:63:46:ba:eb:7d:13:cf:07:f4:b8:a6:f4: 56:d5:48:7b:59:81:99:6d:70:40:14:b5:be:8e:d5:bd:7d:bd: 5c:cc:a0:d2:90:8b:30:f7:57:58:92:25:47:4d:9c:7d:3f:ae: 47:d2:4c:fe:8b:9c:13:e7:8a:8a:0f:69:0d:06:7e:1f:3c:ae: dc:00:0d:4d:b1:98:ef:a0:1f:0f:3c:23:e5:a5:59:25:5a:72: eb:8d:8f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtaND1L24Sd954PJvCV1PQDYIwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjA5MjQxODQzNTJaFw0yNjA5MjUxOTAyNTJaMDMxMTAvBgNV BAMTKDU1Q0RGRTZFMDAwNkY5MDFCMTlCQkQwQUJCNTM5RDQ4RDJFNEY5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04wknXxjfuQ5s2VhgtnkEXLu+ 1U0O5cQ08O+Ce2d8VHahLB31gzrEy9Gnnikq2j7tSfZ1pla79yphWmj/0KvTfUdF t6/7TqmpOIfNCY8mSvW+wdvPCx2W7Ee6wJHJiEb/9oUU6N+0tCKMJ7GRAU0nWi5m Yh/bo0bRtp4ihfIt1vgDUFXQXBD7RV3HDK12BXW3KDDX9sEEmSAH6+lV99hnKT8h CqVmT92ch6g2SUE9qoU2DvJt3Rdyw8t44Oby0JOYJAoF+FD+YIprWhU17b+k+ZKk gRdj2dE4yydNR5Yp39Uk/I/EPpPRFtp4Y1/MQCcVsOKiFrRwgpi7tlF924LnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVc3+bgAG+QGxm70Ku1OdSNLk+bAwHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkBgaHORI7DrHJBj52iyNNP4lCvxUBiLxBa h/DUr9Md76dZmi+W8bCibcTQB4WVaHEqRovl3QbaQ9n6opubev/KNxliUgUZ2U/B sK02b6GHYNQf5z6Qwv9lWxhrACVTN/8ZJE9tFPZb3LTZBK91az2FcwVc84wZwS8z kVjIohJ6u2kSLUU3lHbTPI2p90pMxqQyeP9SoRXmGKDDAdRhA1tY3yd+7PCToWNG uut9E88H9Lim9FbVSHtZgZltcEAUtb6O1b19vVzMoNKQizD3V1iSJUdNnH0/rkfS TP6LnBPniooPaQ0Gfh88rtwADU2xmO+gHw88I+WlWSVacuuNj78= -----END CERTIFICATE-----Generated at Thu Sep 24 23:28:06 2026 by rpki-client