$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft (raw, json) Hash identifier: Czc1ewPvjFAjShF2+/G9SBIZSQ7oyMJXgcFT245u6ko= Subject key identifier: E0:DD:65:41:D7:BE:8A:A4:39:BE:C6:8E:A7:D7:9E:9B:F1:32:E8:DB Authority key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Certificate issuer: /CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Certificate serial: 757BB73571AB1F0F57AEFD32A65B818DB19268CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 03:34:39 +0000 Manifest this update: Fri 25 Sep 2026 03:29:39 +0000 Manifest next update: Sat 26 Sep 2026 04:36:39 +0000 Files and hashes: 1: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl (hash: g+57fvU0lraWWwiWFG386ua3yhB/rb3D8NrD/YaIGFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7b:b7:35:71:ab:1f:0f:57:ae:fd:32:a6:5b:81:8d:b1:92:68:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Validity Not Before: Sep 25 03:29:39 2026 GMT Not After : Sep 26 04:36:39 2026 GMT Subject: CN=E0DD6541D7BE8AA439BEC68EA7D79E9BF132E8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:db:2a:07:88:ef:f7:98:f5:00:88:87:d7:6f: fe:c1:5d:18:63:23:31:88:d9:50:78:3f:46:0f:ae: fa:c3:c2:a8:11:e4:60:b9:7c:a9:0f:f3:1f:11:e3: 16:fc:6e:fd:ce:9d:16:78:44:90:2a:b2:2b:97:29: 9e:ff:3f:07:d7:eb:d5:d4:ff:71:cb:94:f3:84:d0: a3:d4:56:cc:da:81:e9:d3:a4:74:14:15:e1:88:75: 57:4e:eb:aa:51:9c:22:e1:14:bb:ee:f4:0c:17:7d: e0:f5:d9:92:2b:f1:61:85:1f:17:7c:49:34:ed:f4: dd:29:38:0e:37:93:76:40:3d:79:08:52:6f:68:48: 3f:9a:6e:36:16:74:b6:0e:50:d1:fc:f6:b5:19:f1: 59:2c:f7:44:3b:1b:28:92:67:f1:ca:8d:b5:9e:16: 26:68:7e:7b:12:0a:ff:98:19:29:3b:cb:ba:44:e7: 6f:6f:85:be:f5:04:49:a6:ec:a4:c2:a1:f3:6d:a5: 74:d1:0f:47:34:13:c2:b1:8c:b7:da:21:80:60:b9: e5:f0:cb:07:8f:db:54:28:0c:f4:8a:a3:12:7d:6c: b1:57:d0:37:04:2c:6d:3d:e2:a2:38:31:79:e9:14: be:f2:03:64:fb:cd:67:3d:ce:ac:91:0f:8d:54:da: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:65:41:D7:BE:8A:A4:39:BE:C6:8E:A7:D7:9E:9B:F1:32:E8:DB X509v3 Authority Key Identifier: keyid:CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fc:a8:e9:b8:c1:c4:bd:8f:60:2f:f0:71:7d:73:e9:0b:34: 8f:b4:91:21:1e:b2:0f:a8:eb:67:ef:9e:3d:65:e4:ab:d8:57: 64:1a:ea:ec:cc:c2:56:90:e8:81:26:ba:b2:bc:51:93:1b:ac: 52:db:5d:39:b1:a1:f6:2b:8e:2f:4e:d4:9f:9c:11:5d:38:02: e2:77:61:27:8d:57:1f:16:c9:36:62:64:d6:06:7b:11:4b:e1: ed:10:d6:1f:45:08:26:a3:85:29:7e:06:36:15:eb:0c:04:59: 96:04:b4:c4:ff:94:72:05:3d:7a:01:af:bf:fb:ac:01:17:d1: de:e6:a9:d7:4f:26:a9:f9:75:7b:04:c3:e5:fa:54:8f:8e:3d: 21:dc:41:94:d7:ff:9a:87:63:4d:ee:98:09:ae:db:62:87:56: f4:8c:91:fe:62:c4:2d:21:76:b8:45:94:e2:4d:4d:3e:03:41: 8e:3c:76:35:5d:d7:b9:f9:7e:e7:f1:35:37:2a:b9:71:d9:4b: 49:fd:01:04:9d:c0:43:6a:64:80:90:af:3a:b9:e9:91:9d:d4: 52:27:71:51:e4:c4:37:c4:59:ea:79:dc:77:05:b2:fd:99:57: 35:63:70:16:6f:81:83:a5:0a:a8:79:5a:83:40:83:64:f5:ee: a3:18:09:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXu3NXGrHw9Xrv0ypluBjbGSaM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNG QURDQkFBMDAeFw0yNjA5MjUwMzI5MzlaFw0yNjA5MjYwNDM2MzlaMDMxMTAvBgNV BAMTKEUwREQ2NTQxRDdCRThBQTQzOUJFQzY4RUE3RDc5RTlCRjEzMkU4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD02yoHiO/3mPUAiIfXb/7BXRhj IzGI2VB4P0YPrvrDwqgR5GC5fKkP8x8R4xb8bv3OnRZ4RJAqsiuXKZ7/PwfX69XU /3HLlPOE0KPUVszagenTpHQUFeGIdVdO66pRnCLhFLvu9AwXfeD12ZIr8WGFHxd8 STTt9N0pOA43k3ZAPXkIUm9oSD+abjYWdLYOUNH89rUZ8Vks90Q7GyiSZ/HKjbWe FiZofnsSCv+YGSk7y7pE529vhb71BEmm7KTCofNtpXTRD0c0E8KxjLfaIYBgueXw yweP21QoDPSKoxJ9bLFX0DcELG094qI4MXnpFL7yA2T7zWc9zqyRD41U2nNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4N1lQde+iqQ5vsaOp9eem/Ey6NswHwYDVR0j BBgwFoAUz5DTI0sm5kPeKeeLKj0Dc/rcuqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2M2U3MWEtOWM4NS00MTc2LThmYTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0 QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNGQURDQkFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjkwRDMyMzRCMjZFNjQzREUyOUU3OEIyQTNEMDM3M0ZBRENC QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAz NzNGQURDQkFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT8qOm4wcS9j2Av8HF9c+kLNI+0kSEesg+o 62fvnj1l5KvYV2Qa6uzMwlaQ6IEmurK8UZMbrFLbXTmxofYrji9O1J+cEV04AuJ3 YSeNVx8WyTZiZNYGexFL4e0Q1h9FCCajhSl+BjYV6wwEWZYEtMT/lHIFPXoBr7/7 rAEX0d7mqddPJqn5dXsEw+X6VI+OPSHcQZTX/5qHY03umAmu22KHVvSMkf5ixC0h drhFlOJNTT4DQY48djVd17n5fufxNTcquXHZS0n9AQSdwENqZICQrzq56ZGd1FIn cVHkxDfEWep53HcFsv2ZVzVjcBZvgYOlCqh5WoNAg2T17qMYCcg= -----END CERTIFICATE-----Generated at Fri Sep 25 12:59:09 2026 by rpki-client