$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: uETsYPAHP7yL0mg1W12ih3wh6zTPrKIQjkJt1tORhEU= Subject key identifier: 30:2A:78:E6:17:23:45:64:6F:0C:49:21:4A:53:32:C7:73:82:6F:50 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 5CD63EEAE0B2D0F26299AB90BF0D9A01185DDE63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 21:22:52 +0000 Manifest this update: Tue 22 Sep 2026 21:17:52 +0000 Manifest next update: Wed 23 Sep 2026 23:41:52 +0000 Files and hashes: 1: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: R7iqJeJyJYeYXD2vci3BQiZ2C/14ndXnPg5RzEiX9S8=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 23:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d6:3e:ea:e0:b2:d0:f2:62:99:ab:90:bf:0d:9a:01:18:5d:de:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Sep 22 21:17:52 2026 GMT Not After : Sep 23 23:41:52 2026 GMT Subject: CN=302A78E6172345646F0C49214A5332C773826F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:1d:ed:57:3d:00:f0:c4:a0:ec:4b:f9:cd: 47:bb:cf:f5:12:8d:73:39:a8:f9:b4:70:22:a8:1c: 82:c1:54:c4:f9:96:d0:ae:49:16:ac:95:9e:05:b5: 1a:67:2e:bd:86:7d:f7:e1:53:67:81:12:d3:ab:33: 53:e6:fe:b2:4f:79:ec:2e:cb:c2:b6:81:36:8f:d2: 1f:45:73:db:3e:66:62:ca:2c:6f:4a:68:0a:90:f8: f2:bd:4e:ad:89:f7:f2:06:40:e7:29:73:28:5a:c6: 70:21:f4:f5:98:cb:09:5e:20:95:99:2a:e9:75:66: f6:c3:df:d1:11:52:ef:ce:dc:9a:ad:74:29:f3:8e: 0e:42:0d:8e:a2:9f:12:fa:4b:ae:e8:b8:6d:9c:ac: 6c:d9:6a:63:0c:27:d3:4e:a0:88:03:38:c5:25:5f: da:a6:74:da:26:4b:93:3c:ee:cb:a4:6a:66:e6:53: 11:e6:0b:c5:1f:6a:74:66:5c:6c:fe:1e:f6:31:2f: e9:13:16:3a:05:32:55:13:9a:86:fa:6f:ac:68:c5: b3:7e:40:fc:31:63:c2:18:c8:43:fb:2b:e2:a2:8c: 64:50:c3:5c:68:28:8d:f7:33:70:9a:9b:67:a8:e3: b1:36:f4:ec:d1:03:56:b5:5b:75:ab:dd:73:f1:23: 6b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2A:78:E6:17:23:45:64:6F:0C:49:21:4A:53:32:C7:73:82:6F:50 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:32:0c:87:72:bd:cf:e1:e3:7b:43:ab:51:5f:72:95:a1:4f: bd:54:ab:39:39:f6:97:7d:74:a6:fc:c3:67:16:f1:57:90:70: 71:66:93:7b:13:37:fc:02:62:d2:8c:d6:61:3f:b7:f0:f9:9e: 3c:76:a5:20:56:38:17:9b:3c:7e:81:9a:c6:f9:02:25:95:58: 39:d8:67:54:27:e3:13:78:b8:94:19:ad:29:8b:0c:54:93:ce: d2:70:96:86:ce:b5:a8:b3:fa:ff:6a:9d:37:69:f1:8c:41:4a: 38:f2:7d:1c:c2:e7:12:23:2b:28:af:08:f1:53:83:03:cf:8e: 05:fa:7d:76:37:71:7b:98:6c:f8:13:60:37:56:6f:e6:41:c7: de:3e:25:e5:92:ed:46:3d:72:e0:d6:d6:1f:09:f9:dd:87:d7: be:d0:b7:f8:da:73:68:c8:a2:f3:b5:40:d6:35:74:0f:96:f7: 06:3e:09:59:c5:18:dd:cf:49:05:de:42:6a:38:d7:9b:01:5a: 9d:12:b9:38:70:55:f5:d3:6d:23:6e:92:04:f6:d4:bd:eb:1c: cc:aa:02:96:49:c1:9b:ad:0b:63:75:30:38:ae:23:6e:d5:b8: a4:88:6f:d6:40:e5:4f:62:22:81:d7:e6:e7:28:fc:fb:28:8f: e7:96:97:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNY+6uCy0PJimauQvw2aARhd3mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA5MjIyMTE3NTJaFw0yNjA5MjMyMzQxNTJaMDMxMTAvBgNV BAMTKDMwMkE3OEU2MTcyMzQ1NjQ2RjBDNDkyMTRBNTMzMkM3NzM4MjZGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuh3tVz0A8MSg7Ev5zUe7z/US jXM5qPm0cCKoHILBVMT5ltCuSRaslZ4FtRpnLr2GfffhU2eBEtOrM1Pm/rJPeewu y8K2gTaP0h9Fc9s+ZmLKLG9KaAqQ+PK9Tq2J9/IGQOcpcyhaxnAh9PWYywleIJWZ Kul1ZvbD39ERUu/O3JqtdCnzjg5CDY6inxL6S67ouG2crGzZamMMJ9NOoIgDOMUl X9qmdNomS5M87sukambmUxHmC8UfanRmXGz+HvYxL+kTFjoFMlUTmob6b6xoxbN+ QPwxY8IYyEP7K+KijGRQw1xoKI33M3Cam2eo47E29OzRA1a1W3Wr3XPxI2sFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMCp45hcjRWRvDEkhSlMyx3OCb1AwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0yDIdyvc/h43tDq1FfcpWhT71Uqzk59pd9 dKb8w2cW8VeQcHFmk3sTN/wCYtKM1mE/t/D5njx2pSBWOBebPH6Bmsb5AiWVWDnY Z1Qn4xN4uJQZrSmLDFSTztJwlobOtaiz+v9qnTdp8YxBSjjyfRzC5xIjKyivCPFT gwPPjgX6fXY3cXuYbPgTYDdWb+ZBx94+JeWS7UY9cuDW1h8J+d2H177Qt/jac2jI ovO1QNY1dA+W9wY+CVnFGN3PSQXeQmo415sBWp0SuThwVfXTbSNukgT21L3rHMyq ApZJwZutC2N1MDiuI27VuKSIb9ZA5U9iIoHX5uco/Psoj+eWl8M= -----END CERTIFICATE-----Generated at Wed Sep 23 18:59:41 2026 by rpki-client