$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: ohZWzJEK94VX+K0Oykx5IFyy4jyJLDSeO+cNRzYsWto= Subject key identifier: 2B:55:5C:6D:B5:E0:FB:2B:EE:EE:E9:65:A0:F0:CE:AB:0E:83:9F:6A Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 69F3C90A5BB6C00F6B3B2810E342230AB60BB48D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 04:43:38 +0000 Manifest this update: Thu 03 Sep 2026 04:38:38 +0000 Manifest next update: Fri 04 Sep 2026 07:13:38 +0000 Files and hashes: 1: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: t/VjS/aC9szN+SRe01aqgj0a6ghHuCJ0HNBGUTOg4Rg=) 2: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 07:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f3:c9:0a:5b:b6:c0:0f:6b:3b:28:10:e3:42:23:0a:b6:0b:b4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: Sep 3 04:38:38 2026 GMT Not After : Sep 4 07:13:38 2026 GMT Subject: CN=2B555C6DB5E0FB2BEEEEE965A0F0CEAB0E839F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:1a:67:4b:71:0d:29:31:73:6c:ef:cf:90: 73:7e:99:92:64:8b:38:79:93:5c:2d:a3:ed:d6:c7: 81:d2:c4:de:56:68:93:9d:8b:79:dd:8c:53:7c:6b: b6:e2:24:aa:ef:7b:40:9d:23:a8:62:79:ac:bb:73: e1:6a:69:ee:fd:bf:1b:45:75:b9:9e:0a:17:af:02: f2:bd:15:ba:40:57:02:c9:de:89:fb:3b:39:6b:90: 31:aa:c2:18:5d:a7:c5:c0:8d:55:03:d0:22:61:e1: 36:01:7d:55:10:d2:04:dc:fd:48:bc:9f:ee:b4:b6: 0b:1c:25:6e:e1:25:7c:7b:56:ab:b9:a9:12:da:36: d6:d0:ac:63:ea:96:d3:fa:26:ce:c9:96:9c:be:19: 61:71:8b:fc:28:28:36:69:5d:41:84:8d:73:79:74: 49:4c:96:2b:cf:44:18:7b:cb:fe:5f:f6:3b:3f:68: 75:10:ad:34:4c:da:aa:8e:92:96:ea:2e:ae:71:91: 70:98:4e:7f:19:44:2a:dd:99:d1:ad:f6:b9:ba:56: b2:99:ad:0d:5b:18:ac:aa:ae:cf:f5:a0:63:eb:e4: be:7a:7c:4f:54:13:f9:44:98:c1:f2:d2:ef:b4:0b: 58:19:47:15:55:0f:0c:21:94:cc:63:8c:85:e7:5d: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:55:5C:6D:B5:E0:FB:2B:EE:EE:E9:65:A0:F0:CE:AB:0E:83:9F:6A X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:07:4e:70:b2:21:35:85:f3:94:66:7e:0d:12:c4:60:af:1a: 3e:ae:79:13:f0:cb:5c:b2:61:30:fa:b0:41:71:04:34:65:40: 50:3f:1a:df:12:ff:96:9a:48:01:f0:12:c1:16:f1:32:4f:1b: a1:b6:00:5b:95:67:5b:f5:45:b6:a9:4f:32:f4:24:3a:7f:0a: 3e:88:a8:55:32:c4:73:7b:7a:8d:e9:b2:27:6a:44:bc:e9:8e: 7f:62:05:00:cb:04:f6:23:78:4c:81:00:8e:c7:36:52:94:ae: 83:0f:1e:9c:78:17:c9:7d:ed:dd:5f:10:fb:1b:56:56:66:00: c7:43:d1:d8:da:47:0f:e0:11:9f:11:51:57:13:e1:12:ba:51: 78:e3:da:35:a1:cf:5d:9d:1d:d5:c0:bc:5e:19:4a:d0:b5:31: 07:c5:26:a5:d0:55:2a:80:73:8a:18:5d:27:61:ae:89:10:38: fe:a2:82:ed:22:75:fc:70:7f:85:f1:d0:2f:cd:a4:51:8c:67: 2e:38:9a:e8:48:0c:80:76:4b:47:e5:26:d7:c8:02:78:00:bd: a6:d9:c2:c7:7c:c4:72:fe:36:d7:e5:7f:4b:91:6b:40:fd:c8: 1c:a8:54:1e:8c:64:9b:32:60:19:f1:28:33:a6:8c:20:28:a4: 4a:14:3b:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafPJClu2wA9rOygQ40IjCrYLtI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjA5MDMwNDM4MzhaFw0yNjA5MDQwNzEzMzhaMDMxMTAvBgNV BAMTKDJCNTU1QzZEQjVFMEZCMkJFRUVFRTk2NUEwRjBDRUFCMEU4MzlGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+BpnS3ENKTFzbO/PkHN+mZJk izh5k1wto+3Wx4HSxN5WaJOdi3ndjFN8a7biJKrve0CdI6hieay7c+Fqae79vxtF dbmeChevAvK9FbpAVwLJ3on7OzlrkDGqwhhdp8XAjVUD0CJh4TYBfVUQ0gTc/Ui8 n+60tgscJW7hJXx7Vqu5qRLaNtbQrGPqltP6Js7Jlpy+GWFxi/woKDZpXUGEjXN5 dElMlivPRBh7y/5f9js/aHUQrTRM2qqOkpbqLq5xkXCYTn8ZRCrdmdGt9rm6VrKZ rQ1bGKyqrs/1oGPr5L56fE9UE/lEmMHy0u+0C1gZRxVVDwwhlMxjjIXnXV35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK1VcbbXg+yvu7ulloPDOqw6Dn2owHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAHTnCyITWF85Rmfg0SxGCvGj6ueRPwy1yy YTD6sEFxBDRlQFA/Gt8S/5aaSAHwEsEW8TJPG6G2AFuVZ1v1RbapTzL0JDp/Cj6I qFUyxHN7eo3psidqRLzpjn9iBQDLBPYjeEyBAI7HNlKUroMPHpx4F8l97d1fEPsb VlZmAMdD0djaRw/gEZ8RUVcT4RK6UXjj2jWhz12dHdXAvF4ZStC1MQfFJqXQVSqA c4oYXSdhrokQOP6igu0idfxwf4Xx0C/NpFGMZy44muhIDIB2S0flJtfIAngAvabZ wsd8xHL+Ntflf0uRa0D9yByoVB6MZJsyYBnxKDOmjCAopEoUO4Y= -----END CERTIFICATE-----Generated at Thu Sep 3 12:39:24 2026 by rpki-client