$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft (raw, json) Hash identifier: cg9scnLX9W8KlFlSGbKFihD1g1GUboX1N+mOPAADxSw= Subject key identifier: A7:04:17:1A:0B:4D:61:CF:AC:5B:32:E9:A0:7B:3A:66:B2:A2:58:00 Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 1C09A85357153A963735C5C0F6646675F67E7508 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:18:57 +0000 Manifest this update: Wed 23 Sep 2026 10:13:57 +0000 Manifest next update: Thu 24 Sep 2026 10:24:57 +0000 Files and hashes: 1: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl (hash: BeHvfZepSLcWkMO7kMIry1+jqm6/SmNcaWHxfmk2q+s=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:09:a8:53:57:15:3a:96:37:35:c5:c0:f6:64:66:75:f6:7e:75:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: Sep 23 10:13:57 2026 GMT Not After : Sep 24 10:24:57 2026 GMT Subject: CN=A704171A0B4D61CFAC5B32E9A07B3A66B2A25800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:82:dd:cd:17:5c:72:23:5b:7f:cd:6e:c5: 0a:bc:47:2f:c0:b0:9e:8e:50:2e:17:eb:4e:db:15: 4d:60:b8:a6:97:24:35:6d:10:0f:47:bb:3f:c8:59: 9c:b2:1f:0a:76:a2:45:72:4b:b1:ac:1d:ad:95:3a: f1:97:44:39:0b:8d:44:06:da:c1:51:95:15:b9:ea: 03:f1:f4:fc:33:52:a5:23:3d:53:da:75:05:6f:73: f6:3b:6d:be:3f:6a:9a:f6:96:0c:0a:b3:57:d3:69: fd:36:8d:b8:33:52:8d:09:df:c0:50:7f:a9:3f:3f: 0f:76:5f:b2:fc:3d:2b:61:39:02:32:09:bd:dd:22: 2c:c9:49:62:6b:7f:56:97:26:00:aa:56:88:86:f7: 73:9e:dc:f6:ed:5c:7b:4f:46:02:98:f5:40:96:29: 66:b3:e3:3b:c9:eb:5e:79:84:16:c5:aa:21:2e:f6: 93:ab:6c:df:fc:f3:4c:22:2c:3b:cd:75:2d:90:33: 47:2e:91:b9:a9:26:1b:aa:e0:e9:67:e6:8a:d7:c2: 71:73:e8:f3:e4:f8:77:a9:d1:d5:8b:59:68:e5:77: 6d:fe:41:86:9c:ee:8d:2f:05:4d:b1:96:6b:ea:99: dd:db:d3:0d:0b:e1:ab:d7:b7:9c:f5:c2:b7:d6:52: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:04:17:1A:0B:4D:61:CF:AC:5B:32:E9:A0:7B:3A:66:B2:A2:58:00 X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ea:ce:f9:4b:25:09:b5:96:58:e9:3f:6c:5a:78:da:6f:62: 98:77:06:68:ad:a8:a8:24:47:87:13:06:58:58:49:2f:d0:b5: a1:69:16:db:8e:7c:d5:a6:2c:7b:05:fb:ef:8c:bb:89:1a:c4: 41:d3:c0:5e:3a:02:8b:60:96:a8:4c:63:e8:99:77:a5:89:7a: ec:a5:67:2a:40:46:2f:d5:7d:ad:45:c1:58:87:ba:be:b8:a3: ec:eb:73:07:12:a9:e2:b0:f3:8c:0c:5d:31:90:f5:a6:84:96: 64:77:92:15:b0:2a:61:a9:41:ac:ff:cc:04:37:fa:e3:a3:b1: 41:05:8c:61:bf:dc:b9:67:90:09:88:a6:9b:ee:48:13:09:76: fb:76:1b:ce:cd:ce:b3:f1:1d:1c:58:8a:b9:de:2a:bd:d0:91: f1:9c:91:28:54:8e:af:8f:60:2b:0f:2e:9f:94:df:99:f5:e9: 70:c2:ac:fb:5a:11:c0:93:5d:8e:d7:8c:3c:12:e6:85:5c:3e: ed:31:80:ce:8b:48:31:05:18:24:24:4b:4d:51:e9:07:7e:4e: 74:34:c0:83:22:43:ac:fb:5e:fc:f0:dd:2b:26:cf:f7:3a:9c: d1:bf:04:0d:a7:e3:78:b3:2f:a3:93:dd:d0:3f:b4:8b:96:67: 95:48:3b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHAmoU1cVOpY3NcXA9mRmdfZ+dQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjA5MjMxMDEzNTdaFw0yNjA5MjQxMDI0NTdaMDMxMTAvBgNV BAMTKEE3MDQxNzFBMEI0RDYxQ0ZBQzVCMzJFOUEwN0IzQTY2QjJBMjU4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OYLdzRdcciNbf81uxQq8Ry/A sJ6OUC4X607bFU1guKaXJDVtEA9Huz/IWZyyHwp2okVyS7GsHa2VOvGXRDkLjUQG 2sFRlRW56gPx9PwzUqUjPVPadQVvc/Y7bb4/apr2lgwKs1fTaf02jbgzUo0J38BQ f6k/Pw92X7L8PSthOQIyCb3dIizJSWJrf1aXJgCqVoiG93Oe3PbtXHtPRgKY9UCW KWaz4zvJ6155hBbFqiEu9pOrbN/880wiLDvNdS2QM0cukbmpJhuq4Oln5orXwnFz 6PPk+Hep0dWLWWjld23+QYac7o0vBU2xlmvqmd3b0w0L4avXt5z1wrfWUheLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpwQXGgtNYc+sWzLpoHs6ZrKiWAAwHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNG QTNEOEEyNUJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3qzvlLJQm1lljpP2xaeNpvYph3BmitqKgk R4cTBlhYSS/QtaFpFtuOfNWmLHsF+++Mu4kaxEHTwF46AotglqhMY+iZd6WJeuyl ZypARi/Vfa1FwViHur64o+zrcwcSqeKw84wMXTGQ9aaElmR3khWwKmGpQaz/zAQ3 +uOjsUEFjGG/3LlnkAmIppvuSBMJdvt2G87NzrPxHRxYirneKr3QkfGckShUjq+P YCsPLp+U35n16XDCrPtaEcCTXY7XjDwS5oVcPu0xgM6LSDEFGCQkS01R6Qd+TnQ0 wIMiQ6z7Xvzw3Ssmz/c6nNG/BA2n43izL6OT3dA/tIuWZ5VIO0U= -----END CERTIFICATE-----Generated at Thu Sep 24 04:34:50 2026 by rpki-client