$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: A2SVNvLpIxxEgHEVTBztVgeMfe2UlXPdzYXw1mkycwo= Subject key identifier: F0:AC:B9:C9:EF:10:39:4B:37:25:75:7D:2F:06:76:D0:5C:F3:36:3E Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 751C594FBB44A9CE3706DB904BB290A0F9C6C6BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:34:00 +0000 Manifest this update: Wed 23 Sep 2026 18:29:00 +0000 Manifest next update: Thu 24 Sep 2026 20:19:00 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: 1M7cSr4P/oaJENcsdXL+qOdDjHSrmu63hO+EstGmCtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1c:59:4f:bb:44:a9:ce:37:06:db:90:4b:b2:90:a0:f9:c6:c6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: Sep 23 18:29:00 2026 GMT Not After : Sep 24 20:19:00 2026 GMT Subject: CN=F0ACB9C9EF10394B3725757D2F0676D05CF3363E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:15:6b:c0:b9:bb:70:8e:aa:16:72:6c:ea: 78:b3:01:5a:b8:26:f0:b0:e0:dc:45:e7:24:c0:76: f6:ca:cd:b7:4d:c4:19:61:ce:b8:e4:21:28:c4:54: 5d:cf:7f:16:73:18:fd:24:c8:ea:0c:a1:35:cf:15: 14:fa:b1:90:a5:28:70:e5:46:02:f9:1f:c2:38:ae: f5:3a:1d:64:a1:ad:ac:f7:7a:60:45:ed:82:52:05: 2f:e8:51:ea:09:55:8b:48:51:4f:47:69:93:0f:bc: 5d:af:c1:99:f4:23:dc:33:97:65:2d:85:6c:cb:ff: f7:c9:d7:07:33:9f:30:9c:20:ee:7b:4c:fc:ec:78: bc:59:8a:6e:01:47:25:9e:37:29:35:ff:3a:f2:9c: fa:87:40:43:85:e8:d2:dd:c4:7b:a2:d4:47:38:0e: e4:cd:15:55:f4:0b:aa:e2:df:c4:d0:f2:5e:70:ae: 94:e1:01:16:58:46:df:74:0d:ef:43:19:07:1b:29: 4f:47:e8:22:12:9a:ca:9f:e2:ee:d4:56:4e:d5:5d: 54:fc:25:06:0b:b8:bd:6d:69:1b:18:c6:0f:3b:8d: 08:e4:c5:80:22:ba:75:a3:be:d4:1c:bf:23:f4:94: 28:1d:dc:b5:6d:84:73:39:82:a3:f2:e3:8a:ac:58: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AC:B9:C9:EF:10:39:4B:37:25:75:7D:2F:06:76:D0:5C:F3:36:3E X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:10:af:78:b1:0f:61:c1:4e:76:b1:cd:10:f5:a0:10:be: d1:24:03:57:07:62:6f:fe:da:0b:17:6b:1f:00:fb:de:c0:83: fb:c8:30:b2:2a:75:4b:85:e0:08:52:9f:8e:29:f7:f6:7d:a4: eb:6a:84:8a:ec:29:a5:d3:9a:1c:8e:19:8a:a8:83:3b:f9:62: da:25:80:45:7e:0b:ec:20:5c:68:44:72:2e:29:1b:54:56:53: 40:86:3e:ac:47:97:54:e0:8a:3a:1b:da:4f:f6:ad:23:54:7c: f4:b4:74:2b:bd:3e:68:06:86:4e:e3:23:f8:f2:21:39:7f:a2: 59:f0:e6:05:92:21:f2:8e:b8:28:a0:7d:22:26:2b:d9:74:02: 0f:11:e3:67:28:5a:2b:e6:36:5e:af:a0:30:a9:b8:d0:8d:3c: 8c:d4:e1:9c:01:04:3c:53:68:34:f9:71:7e:67:61:53:e0:87: 84:f0:81:0d:06:3f:a2:8c:c6:eb:4b:bd:f4:9f:af:57:c4:e9: 46:68:39:d8:fc:7b:a9:34:de:19:e2:50:10:01:fa:57:c4:4b: 9f:f8:b0:c9:b6:37:fc:6b:3f:3a:fa:8b:50:27:c1:2f:70:17: a7:de:3b:1e:1e:35:23:5c:45:bb:d1:c8:28:8a:29:94:1c:e6: 30:31:44:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRxZT7tEqc43BtuQS7KQoPnGxrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjA5MjMxODI5MDBaFw0yNjA5MjQyMDE5MDBaMDMxMTAvBgNV BAMTKEYwQUNCOUM5RUYxMDM5NEIzNzI1NzU3RDJGMDY3NkQwNUNGMzM2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyhVrwLm7cI6qFnJs6nizAVq4 JvCw4NxF5yTAdvbKzbdNxBlhzrjkISjEVF3PfxZzGP0kyOoMoTXPFRT6sZClKHDl RgL5H8I4rvU6HWShraz3emBF7YJSBS/oUeoJVYtIUU9HaZMPvF2vwZn0I9wzl2Ut hWzL//fJ1wcznzCcIO57TPzseLxZim4BRyWeNyk1/zrynPqHQEOF6NLdxHui1Ec4 DuTNFVX0C6ri38TQ8l5wrpThARZYRt90De9DGQcbKU9H6CISmsqf4u7UVk7VXVT8 JQYLuL1taRsYxg87jQjkxYAiunWjvtQcvyP0lCgd3LVthHM5gqPy44qsWD7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Ky5ye8QOUs3JXV9LwZ20FzzNj4wHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyAEK94sQ9hwU52sc0Q9aAQvtEkA1cHYm/+ 2gsXax8A+97Ag/vIMLIqdUuF4AhSn44p9/Z9pOtqhIrsKaXTmhyOGYqogzv5Ytol gEV+C+wgXGhEci4pG1RWU0CGPqxHl1Tgijob2k/2rSNUfPS0dCu9PmgGhk7jI/jy ITl/olnw5gWSIfKOuCigfSImK9l0Ag8R42coWivmNl6voDCpuNCNPIzU4ZwBBDxT aDT5cX5nYVPgh4TwgQ0GP6KMxutLvfSfr1fE6UZoOdj8e6k03hniUBAB+lfES5/4 sMm2N/xrPzr6i1AnwS9wF6feOx4eNSNcRbvRyCiKKZQc5jAxRBk= -----END CERTIFICATE-----Generated at Thu Sep 24 03:28:49 2026 by rpki-client