$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft File: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft (raw, json) Hash identifier: +xFz+Nicn+5vX1d/BTrcmcpI8uU811WqrBmeg3HyFD8= Subject key identifier: A5:B2:A4:67:67:34:A5:16:42:AC:A4:C0:EC:00:A7:B2:D8:7A:E0:DA Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 Certificate issuer: /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Certificate serial: 191A407BAE70E60D650AB0C684F4466315B38397 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:03:15 +0000 Manifest this update: Wed 23 Sep 2026 17:58:15 +0000 Manifest next update: Thu 24 Sep 2026 21:48:15 +0000 Files and hashes: 1: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: eBoaZqyr6WlSbN/AJF6RgzCQyG+1zBmzaFfb/7fN5dY=) 2: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl (hash: ArwvfNJ+txwq4criSgGmH+Z6Aea2haevpElY9v9N9ac=) 3: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: hnbLn0WCQW7tjxDDomIPOhXC1r7ltYUmnmJCJUDX+Hs=) 4: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: CIu+a1x1Ob4TtttYENYOSXpa0Xw1+bkYfz/RVtE/6mo=) 5: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: h+jOCf2n8qXpyofV0yrwta8TGMspkZPZ+KTwYTU4B7c=) 6: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: 9zWseK0VGBFjDjSukC7sEdd2KVTBNcjvlH0F1oisM48=) 7: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: LF0MrR9BI6ohPR99FqHdVyHSCGgsD/4Honm25vFKTtU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1a:40:7b:ae:70:e6:0d:65:0a:b0:c6:84:f4:46:63:15:b3:83:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Validity Not Before: Sep 23 17:58:15 2026 GMT Not After : Sep 24 21:48:15 2026 GMT Subject: CN=A5B2A4676734A51642ACA4C0EC00A7B2D87AE0DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:73:1c:1e:6e:b0:20:1e:40:20:57:8c:12: 03:ee:c6:9b:38:f9:ed:52:f1:d3:76:79:58:54:03: 7f:a2:6c:df:0a:a8:cb:79:b8:d6:2c:19:93:e0:32: fb:0b:4d:e0:c9:91:3d:bd:c5:a6:8b:7a:aa:ee:91: 61:69:a1:45:bf:e3:49:36:ec:ad:26:10:72:7b:14: f3:02:5d:8d:20:d8:d2:4c:7d:c7:6f:7d:8c:c9:be: fb:56:da:4c:19:c5:1e:2d:3f:dc:27:2f:7d:09:66: f8:08:b0:6e:90:7f:34:c7:6b:66:33:53:a9:f6:d7: ac:ec:1e:41:e1:f3:1b:0b:99:3b:b6:42:85:7f:0f: f5:89:1f:c1:e3:29:bf:8a:90:35:d6:7b:e9:c5:b1: 6d:16:d7:52:47:5f:21:f0:46:93:2c:93:e1:df:34: 18:06:96:df:2f:fe:74:61:c8:61:32:b9:75:0b:4b: 0a:c6:f2:67:f1:e1:52:39:e1:28:04:bd:fd:e6:66: 7f:fe:26:83:fa:74:94:9e:53:d1:b3:a7:06:b8:12: 6f:27:44:21:82:c8:97:6d:c7:2b:3f:6e:5b:11:25: 6c:78:e2:f2:b6:f1:82:9b:a2:f9:03:ec:9c:84:f2: fc:9d:a3:63:0c:5d:c3:df:6b:8e:6a:90:54:ff:49: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B2:A4:67:67:34:A5:16:42:AC:A4:C0:EC:00:A7:B2:D8:7A:E0:DA X509v3 Authority Key Identifier: keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:77:d7:13:0a:e4:3a:22:4b:58:d3:68:b8:ae:b4:1e:be:3b: 7b:ea:9f:14:a1:81:0c:87:2a:22:a6:ba:a8:e7:96:f4:de:3f: f6:de:2a:58:63:f1:35:9c:75:06:15:f8:27:cb:fe:11:21:88: ab:de:c9:ba:51:58:1e:14:90:5a:0a:71:44:38:23:b6:c5:db: b5:10:d3:89:6c:07:8a:8b:5f:01:16:8d:aa:b5:9e:ff:60:86: 62:f2:86:87:09:03:16:29:a6:7f:02:6f:4d:6b:1a:cd:de:2c: 89:87:d0:9a:a3:cd:41:f8:0e:84:0a:ef:3f:d0:36:f2:45:25: 08:89:c2:e6:1b:1c:fb:d1:ea:f2:bb:3c:cc:c4:4b:de:4f:6c: c1:3e:45:d2:1f:67:75:84:de:b7:12:5b:83:79:0e:fb:5d:3a: 45:9e:9e:51:46:a5:73:b8:47:12:44:72:1f:cf:d8:26:d4:5d: a4:5d:e6:3e:c2:2c:1b:16:53:43:ce:38:e2:07:14:b7:71:45: c8:85:e0:da:e5:b6:06:bc:d4:d8:e2:d3:ec:08:54:7b:65:05: 71:fe:93:fd:8f:59:fa:3d:23:1a:9e:99:03:6f:bb:41:05:6b: 86:23:42:f9:08:02:01:a1:29:d4:26:2c:d8:dd:a0:ea:96:c6: ff:df:a4:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRpAe65w5g1lCrDGhPRGYxWzg5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENC Q0MwNkJFNjAeFw0yNjA5MjMxNzU4MTVaFw0yNjA5MjQyMTQ4MTVaMDMxMTAvBgNV BAMTKEE1QjJBNDY3NjczNEE1MTY0MkFDQTRDMEVDMDBBN0IyRDg3QUUwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBnMcHm6wIB5AIFeMEgPuxps4 +e1S8dN2eVhUA3+ibN8KqMt5uNYsGZPgMvsLTeDJkT29xaaLeqrukWFpoUW/40k2 7K0mEHJ7FPMCXY0g2NJMfcdvfYzJvvtW2kwZxR4tP9wnL30JZvgIsG6QfzTHa2Yz U6n216zsHkHh8xsLmTu2QoV/D/WJH8HjKb+KkDXWe+nFsW0W11JHXyHwRpMsk+Hf NBgGlt8v/nRhyGEyuXULSwrG8mfx4VI54SgEvf3mZn/+JoP6dJSeU9Gzpwa4Em8n RCGCyJdtxys/blsRJWx44vK28YKbovkD7JyE8vydo2MMXcPfa45qkFT/ST0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpbKkZ2c0pRZCrKTA7ACnsth64NowHwYDVR0j BBgwFoAUz2d9xKDp9S5FjX94bBEATLzAa+YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5OWMxYWYtZDljNy00ZmZkLWJhMDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRB MEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENCQ0MwNkJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjY3N0RDNEEwRTlGNTJFNDU4RDdGNzg2QzExMDA0Q0JDQzA2 QkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAw NENCQ0MwNkJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx31xMK5DoiS1jTaLiutB6+O3vqnxShgQyH KiKmuqjnlvTeP/beKlhj8TWcdQYV+CfL/hEhiKveybpRWB4UkFoKcUQ4I7bF27UQ 04lsB4qLXwEWjaq1nv9ghmLyhocJAxYppn8Cb01rGs3eLImH0JqjzUH4DoQK7z/Q NvJFJQiJwuYbHPvR6vK7PMzES95PbME+RdIfZ3WE3rcSW4N5DvtdOkWenlFGpXO4 RxJEch/P2CbUXaRd5j7CLBsWU0POOOIHFLdxRciF4Nrltga81Nji0+wIVHtlBXH+ k/2PWfo9IxqemQNvu0EFa4YjQvkIAgGhKdQmLNjdoOqWxv/fpBM= -----END CERTIFICATE-----Generated at Wed Sep 23 23:13:19 2026 by rpki-client