$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft File: CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json) Hash identifier: 4AEB9yDEnPT60Spq1HPcLC5+PmtRRxC+c4ocEtjJDOw= Subject key identifier: A9:70:59:56:55:DB:FC:05:8A:4F:93:46:08:A8:81:E2:67:33:8C:BA Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 Certificate issuer: /CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Certificate serial: 63DFA4001A9FDEBBDDCB119635E17D00C77EA360 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 05:14:11 +0000 Manifest this update: Thu 03 Sep 2026 05:09:11 +0000 Manifest next update: Fri 04 Sep 2026 07:45:11 +0000 Files and hashes: 1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=) 2: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: OszTIJUtntJBsf+oYaHNhH4b5e0K8Bj/MJOM6IRYZAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:df:a4:00:1a:9f:de:bb:dd:cb:11:96:35:e1:7d:00:c7:7e:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Validity Not Before: Sep 3 05:09:11 2026 GMT Not After : Sep 4 07:45:11 2026 GMT Subject: CN=A970595655DBFC058A4F934608A881E267338CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:dd:5d:4a:08:21:0a:bd:e3:78:09:81:d7: 77:c3:e8:b1:4e:91:f5:6d:69:7a:1c:ee:f9:17:b4: d8:71:25:f5:85:c9:54:28:28:1c:4a:a7:6b:50:8e: f2:45:53:23:d6:3c:82:1b:1d:7e:78:3e:ba:ab:6b: 09:cd:47:48:b6:15:02:52:c1:16:3e:a1:6b:18:d6: 26:ec:1c:43:32:07:7f:5b:c9:79:18:4c:0a:2d:ba: f3:45:7d:a7:44:c7:9d:e9:a2:e3:b7:08:7a:88:eb: b7:ed:23:68:74:46:2b:ed:42:4c:e7:c6:d3:1f:f9: 19:85:b7:bb:cc:23:61:c6:60:76:0d:77:79:b7:e2: c0:07:66:8d:1a:2c:ac:37:c8:33:43:bb:d3:b9:d3: 95:5e:4a:4f:0a:f2:7e:f2:a0:14:29:56:48:5d:a0: ba:eb:21:59:31:cd:b0:ae:bb:9b:03:37:c4:90:e3: e7:e0:ea:f1:b0:99:db:58:19:eb:fb:df:1a:46:58: 44:d5:d8:7e:de:11:89:8c:12:bd:f0:87:f3:2e:9f: b1:35:7c:61:7c:3a:eb:d8:88:71:e0:99:1c:e8:f2: f6:64:67:65:ee:80:95:e4:61:9f:fe:07:b6:ac:f3: 41:a5:58:a3:51:9f:d8:f1:3e:d4:64:07:4f:21:80: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:70:59:56:55:DB:FC:05:8A:4F:93:46:08:A8:81:E2:67:33:8C:BA X509v3 Authority Key Identifier: keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:39:93:70:5f:0e:39:97:b7:9c:ef:68:00:87:2e:02:ff:c9: 7f:81:de:eb:b6:21:75:6d:16:ac:fe:2c:fd:a8:44:55:d3:f1: 8d:f5:7e:de:fc:b3:95:cf:2b:b1:3f:c9:3c:02:89:e7:04:60: f0:6c:23:79:bb:4c:17:d7:22:97:71:f4:87:60:fe:7a:4d:47: 3f:d7:6f:27:01:1c:8b:78:c1:c6:1c:25:d3:e9:3d:f8:24:44: 6c:ef:98:46:83:b2:b6:36:ae:94:63:b6:4a:89:7f:42:3a:c2: c6:eb:9f:be:49:36:69:26:3a:ca:59:f8:6c:df:64:e5:6a:83: 20:09:b6:eb:38:6d:c1:24:43:11:79:03:60:1e:d8:65:58:ff: 75:b6:de:be:13:4a:82:bc:c8:6d:1c:57:e8:83:3d:5c:c7:70: c2:90:1d:22:c6:4f:74:4b:f4:a1:ee:7d:27:2a:cf:80:9f:3e: 53:2b:24:24:35:3d:98:49:4f:24:ac:ea:1a:19:4e:63:f1:9e: 25:0e:4e:68:4a:48:0c:e6:68:5c:72:6a:05:c5:e4:3d:0d:2f: 88:1f:a2:57:a2:55:cc:b5:94:25:85:0f:cb:ca:17:95:a6:63: 9f:e2:83:89:5a:25:36:64:92:9a:29:42:a1:ea:80:8e:b0:fc: 0a:5a:59:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9+kABqf3rvdyxGWNeF9AMd+o2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1RjA2 RjU0MTc0ODAeFw0yNjA5MDMwNTA5MTFaFw0yNjA5MDQwNzQ1MTFaMDMxMTAvBgNV BAMTKEE5NzA1OTU2NTVEQkZDMDU4QTRGOTM0NjA4QTg4MUUyNjczMzhDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFt1dSgghCr3jeAmB13fD6LFO kfVtaXoc7vkXtNhxJfWFyVQoKBxKp2tQjvJFUyPWPIIbHX54PrqrawnNR0i2FQJS wRY+oWsY1ibsHEMyB39byXkYTAotuvNFfadEx53pouO3CHqI67ftI2h0RivtQkzn xtMf+RmFt7vMI2HGYHYNd3m34sAHZo0aLKw3yDNDu9O505VeSk8K8n7yoBQpVkhd oLrrIVkxzbCuu5sDN8SQ4+fg6vGwmdtYGev73xpGWETV2H7eEYmMEr3wh/Mun7E1 fGF8OuvYiHHgmRzo8vZkZ2XugJXkYZ/+B7as80GlWKNRn9jxPtRkB08hgOx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqXBZVlXb/AWKT5NGCKiB4mczjLowHwYDVR0j BBgwFoAUzyBNdI2tLRoCTeZtheQl8G9UF0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJmNTk4NmItYzc2NC00Y2Q3LWI0MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4 REFEMkQxQTAyNERFNjZEODVFNDI1RjA2RjU0MTc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjIwNEQ3NDhEQUQyRDFBMDI0REU2NkQ4NUU0MjVGMDZGNTQx NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1 RjA2RjU0MTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJI5k3BfDjmXt5zvaACHLgL/yX+B3uu2IXVt Fqz+LP2oRFXT8Y31ft78s5XPK7E/yTwCiecEYPBsI3m7TBfXIpdx9Idg/npNRz/X bycBHIt4wcYcJdPpPfgkRGzvmEaDsrY2rpRjtkqJf0I6wsbrn75JNmkmOspZ+Gzf ZOVqgyAJtus4bcEkQxF5A2Ae2GVY/3W23r4TSoK8yG0cV+iDPVzHcMKQHSLGT3RL 9KHufScqz4CfPlMrJCQ1PZhJTySs6hoZTmPxniUOTmhKSAzmaFxyagXF5D0NL4gf oleiVcy1lCWFD8vKF5WmY5/ig4laJTZkkpopQqHqgI6w/ApaWUQ= -----END CERTIFICATE-----Generated at Thu Sep 3 07:58:47 2026 by rpki-client