$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft File: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft (raw, json) Hash identifier: o2oryDlcfMnvM4VgUiP0JV2f012RWYtJ1x+q3pvr6gw= Subject key identifier: C8:75:A3:6D:8C:17:5E:F8:38:B4:5C:8D:7B:FA:0F:37:1B:99:F5:B3 Authority key identifier: CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 Certificate issuer: /CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Certificate serial: 394B9B881D56722ED99E2FD5ACCAF68B4ED810B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:18:35 +0000 Manifest this update: Thu 24 Sep 2026 14:13:35 +0000 Manifest next update: Fri 25 Sep 2026 16:48:35 +0000 Files and hashes: 1: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl (hash: YLOfyLrnbdn630mnFfZJAB/gRKZOAJd8LQejzQprFtw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4b:9b:88:1d:56:72:2e:d9:9e:2f:d5:ac:ca:f6:8b:4e:d8:10:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Validity Not Before: Sep 24 14:13:35 2026 GMT Not After : Sep 25 16:48:35 2026 GMT Subject: CN=C875A36D8C175EF838B45C8D7BFA0F371B99F5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:90:41:b8:e8:75:56:75:c8:05:ab:7a:1b: b6:8b:ca:2f:a6:90:c7:3d:66:4e:66:33:cc:07:7f: f6:f5:87:44:a3:13:19:6b:14:a2:65:58:46:0c:10: 3f:5c:f1:8e:9a:40:05:0f:74:d0:47:0e:c4:96:fa: 6e:4c:28:94:3f:d5:e9:95:f4:ef:75:1a:eb:0f:88: b7:c5:f8:9a:6e:c4:bc:2a:ca:39:18:f6:67:d3:89: 0d:a0:a1:8c:cb:70:93:ff:8d:27:dc:42:61:7e:cc: 80:5f:e0:0b:01:68:d8:e4:c8:d9:ca:52:16:78:25: 0b:f0:82:fe:19:a5:b7:21:11:ba:f3:fb:d2:1a:2f: 0c:11:ef:76:b4:40:9e:31:58:0b:ac:4b:37:42:4a: f7:bf:c0:4c:d5:7f:60:26:fb:09:b4:04:0a:88:6a: a0:35:45:6a:a7:ff:28:d9:00:b4:f4:8d:aa:4d:dd: 93:17:54:be:98:83:59:8a:da:d3:2c:d5:c3:f7:b5: 09:56:25:8f:e5:20:9e:e6:ae:5b:61:70:71:d1:0b: da:f4:53:1c:eb:3f:67:cf:90:97:52:f6:e8:86:44: fa:66:8b:e1:52:6f:48:21:6e:c8:27:e7:56:b3:a4: 1f:0c:d0:00:2a:7c:53:1e:88:f1:ee:9f:f6:c1:c6: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:A3:6D:8C:17:5E:F8:38:B4:5C:8D:7B:FA:0F:37:1B:99:F5:B3 X509v3 Authority Key Identifier: keyid:CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c0:d6:50:6b:2d:90:4e:15:be:a5:a9:d2:d0:a2:cd:04:33: 3c:90:26:13:6b:15:58:55:fb:90:9e:6f:b0:36:46:e2:46:3e: c2:be:05:97:b2:5f:a5:98:a9:02:36:ed:0f:4c:dc:02:0e:29: a8:69:f9:cf:0d:a6:a8:1d:ec:b6:ee:95:16:45:f4:ff:34:18: 05:72:c7:4c:f4:01:7f:25:46:1b:9d:60:47:bb:c1:76:96:0c: a2:8f:01:88:3b:fb:02:06:66:97:78:9e:09:d1:c2:6a:f6:3a: d3:18:12:e9:86:66:f9:53:e0:1e:97:ff:0b:94:6f:39:b8:31: b7:2a:40:98:96:7f:66:1c:8e:da:d7:b9:0c:6a:de:dc:67:7b: 71:e6:b9:e2:56:ba:7e:5a:93:1f:22:39:e5:a7:ce:c9:43:52: d8:96:c9:0b:8f:34:15:c3:21:d7:cd:29:c1:e6:eb:e1:42:ed: 75:2e:fe:97:4f:1c:97:1e:54:d8:21:bc:81:63:f5:96:74:07: b2:93:93:f1:78:8f:c7:2d:a4:d2:8a:c0:c6:9d:01:2b:e0:cc: 85:d2:4f:73:4b:23:16:2c:73:cb:40:91:94:e1:76:96:11:22: 01:f0:31:b8:10:e0:ee:f3:fb:dd:4c:38:fb:03:5f:17:e3:aa: ff:cd:aa:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUubiB1Wci7Zni/VrMr2i07YELMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcw NTQ3RUY3ODAeFw0yNjA5MjQxNDEzMzVaFw0yNjA5MjUxNjQ4MzVaMDMxMTAvBgNV BAMTKEM4NzVBMzZEOEMxNzVFRjgzOEI0NUM4RDdCRkEwRjM3MUI5OUY1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzpBBuOh1VnXIBat6G7aLyi+m kMc9Zk5mM8wHf/b1h0SjExlrFKJlWEYMED9c8Y6aQAUPdNBHDsSW+m5MKJQ/1emV 9O91GusPiLfF+JpuxLwqyjkY9mfTiQ2goYzLcJP/jSfcQmF+zIBf4AsBaNjkyNnK UhZ4JQvwgv4ZpbchEbrz+9IaLwwR73a0QJ4xWAusSzdCSve/wEzVf2Am+wm0BAqI aqA1RWqn/yjZALT0japN3ZMXVL6Yg1mK2tMs1cP3tQlWJY/lIJ7mrlthcHHRC9r0 UxzrP2fPkJdS9uiGRPpmi+FSb0ghbsgn51azpB8M0AAqfFMeiPHun/bBxhVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyHWjbYwXXvg4tFyNe/oPNxuZ9bMwHwYDVR0j BBgwFoAUyvr7kD/mTuX84SzAe92fdwVH73gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVkNzc4NDAtNjA4ZS00NDlhLWIyMmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAz RkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcwNTQ3RUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZBRkI5MDNGRTY0RUU1RkNFMTJDQzA3QkREOUY3NzA1NDdF Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlG NzcwNTQ3RUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADA1lBrLZBOFb6lqdLQos0EMzyQJhNrFVhV +5Ceb7A2RuJGPsK+BZeyX6WYqQI27Q9M3AIOKahp+c8Npqgd7LbulRZF9P80GAVy x0z0AX8lRhudYEe7wXaWDKKPAYg7+wIGZpd4ngnRwmr2OtMYEumGZvlT4B6X/wuU bzm4MbcqQJiWf2YcjtrXuQxq3txne3HmueJWun5akx8iOeWnzslDUtiWyQuPNBXD IdfNKcHm6+FC7XUu/pdPHJceVNghvIFj9ZZ0B7KTk/F4j8ctpNKKwMadASvgzIXS T3NLIxYsc8tAkZThdpYRIgHwMbgQ4O7z+91MOPsDXxfjqv/Nqv8= -----END CERTIFICATE-----Generated at Thu Sep 24 21:00:51 2026 by rpki-client