$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft File: CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft (raw, json) Hash identifier: WQp4BLR166FNoSPd912OMqnZ8GiVzXO4t9scbGZe9fI= Subject key identifier: 60:5B:3E:15:A3:05:6E:AC:8E:18:CC:1D:D1:9A:28:D0:26:A5:BF:1C Authority key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 Certificate issuer: /CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Certificate serial: 101BAB54162BEFBCA5F2EB5DA3BF7255E77B787F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft Manifest number: 1C Signing time: Tue 03 Nov 2026 08:03:09 +0000 Manifest this update: Tue 03 Nov 2026 07:58:09 +0000 Manifest next update: Wed 04 Nov 2026 11:55:09 +0000 Files and hashes: 1: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (hash: 0bx4MgyH2bQMlVvATWEJ5kNhaarpH5TLsN+9n5Ryu5I=) 2: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (hash: i4hw81zG+wpHIKAE6dBIhlDgt2/jr9hvRjD+c7DxBOA=) 3: 34352e3234392e3232302e302f32342d3234203d3e203535363634.roa (hash: S/3Z85ZVT8UpF1rmfhz8XRxoN9/G7Zr0H741a+zttAI=) 4: 3130332e3233362e3135302e302f32342d3234203d3e203535363635.roa (hash: cXnC5cl/njjZNoWgKqGJNy+yMsmKCKsijjGKEZpg/jE=) 5: 34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (hash: Vjfy++1UTy4HdciM0b5EcH2pt0NLDYQCKiFurrkzCiE=) 6: CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl (hash: vRs2gceceYBtTAEl7TRa5y4dmQoEW42M/peqK51InLU=) 7: 3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (hash: 7pTX7hEw/cPBB65WrymolMq0XfFtArVsQAjQ8kXobZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1b:ab:54:16:2b:ef:bc:a5:f2:eb:5d:a3:bf:72:55:e7:7b:78:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265 Validity Not Before: Nov 3 07:58:09 2026 GMT Not After : Nov 4 11:55:09 2026 GMT Subject: CN=605B3E15A3056EAC8E18CC1DD19A28D026A5BF1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:14:eb:b7:c6:96:94:76:50:5a:65:58:10: 6b:54:bb:0c:e7:d5:6f:bd:d0:c3:cd:46:59:54:aa: 79:d6:7b:08:47:30:5c:40:b8:1e:9e:19:b5:4a:e9: e3:f3:83:e1:e7:cb:7c:de:98:1f:a4:5f:d6:d4:f7: 15:5e:5b:89:c0:fc:6b:87:95:7a:38:d0:d5:fb:46: 47:44:88:34:d3:4d:ea:62:aa:3c:ba:10:fb:0a:42: 00:8c:c6:7c:46:2f:77:b7:8d:c9:0d:8d:4e:b6:ea: 17:e0:c1:9a:67:39:0d:40:cf:b4:d2:1d:9c:b4:98: eb:f5:b6:cd:43:89:76:d5:93:94:4b:f0:35:3a:d5: f5:08:35:46:4c:a3:15:df:39:ed:31:6d:d5:db:cf: fe:e9:8f:d5:c5:fe:d8:45:8d:81:ad:ba:98:4e:12: cd:08:9c:c5:2f:c0:07:c5:82:b4:f9:ab:67:9f:85: 2a:f5:5b:b3:a1:bf:e1:23:03:82:6a:c9:b6:5f:dd: 23:55:86:96:89:9d:c0:f2:ac:73:aa:b0:a6:38:3a: 88:53:1a:4c:e5:7f:b0:10:79:e7:49:48:c8:21:e5: 63:5f:44:67:51:62:bd:75:bb:c2:42:1d:a9:d7:77: 06:4b:70:11:a4:89:c1:61:5b:b2:cf:d8:9d:ea:fa: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5B:3E:15:A3:05:6E:AC:8E:18:CC:1D:D1:9A:28:D0:26:A5:BF:1C X509v3 Authority Key Identifier: keyid:CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:69:33:b4:ac:09:51:26:17:10:13:a5:87:33:19:d9:66:c2: 7b:5d:ad:10:3b:9b:88:15:86:a3:4d:31:61:c9:f0:32:42:39: b0:fd:d0:f8:02:b0:d4:6f:32:4f:78:28:24:9d:6e:d9:94:a0: ee:1d:82:76:98:dc:de:58:2b:75:69:d1:f2:21:95:06:cd:d2: a5:c1:26:c6:8c:1b:63:59:65:27:1c:fc:ab:56:e9:6d:67:a5: d7:8a:21:e2:30:1f:f5:11:aa:95:39:f0:e6:aa:12:11:5d:54: bf:17:cc:da:fb:6e:60:1e:b8:32:72:bf:9e:ae:10:5a:c0:34: 12:27:42:76:88:f4:b9:63:0d:a7:fb:d3:fa:3e:18:26:82:9d: e1:a6:99:0e:7f:18:48:e7:df:86:d1:d1:98:cd:95:08:a2:36: 9c:b7:92:95:03:be:0d:b4:47:d6:7a:14:c6:cf:4a:ed:ca:43: 46:94:36:fa:ea:1f:98:8d:f7:93:44:18:8c:2b:a3:45:90:38: 8c:98:2a:4e:44:bd:03:dd:a8:a3:c5:0e:ed:48:71:15:12:a9: 58:15:50:2d:cb:6e:d3:eb:3e:2f:bc:44:0c:ba:84:f8:8d:e9: 96:fb:60:f5:e4:f4:17:e8:6d:b9:b4:68:46:b4:2c:5a:d3:f3: 68:25:a2:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBurVBYr77yl8utdo79yVed7eH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZENDZGNTlCRkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZF RjdFNjI2NTAeFw0yNjExMDMwNzU4MDlaFw0yNjExMDQxMTU1MDlaMDMxMTAvBgNV BAMTKDYwNUIzRTE1QTMwNTZFQUM4RTE4Q0MxREQxOUEyOEQwMjZBNUJGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdRTrt8aWlHZQWmVYEGtUuwzn 1W+90MPNRllUqnnWewhHMFxAuB6eGbVK6ePzg+Hny3zemB+kX9bU9xVeW4nA/GuH lXo40NX7RkdEiDTTTepiqjy6EPsKQgCMxnxGL3e3jckNjU626hfgwZpnOQ1Az7TS HZy0mOv1ts1DiXbVk5RL8DU61fUINUZMoxXfOe0xbdXbz/7pj9XF/thFjYGtuphO Es0InMUvwAfFgrT5q2efhSr1W7Ohv+EjA4JqybZf3SNVhpaJncDyrHOqsKY4OohT Gkzlf7AQeedJSMgh5WNfRGdRYr11u8JCHanXdwZLcBGkicFhW7LP2J3q+k9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYFs+FaMFbqyOGMwd0Zoo0CalvxwwHwYDVR0j BBgwFoAUz9RvWb/OjgeZf/OI59PY1u9+YmUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEzNzc5ODktNzE2Zi00OGE1LTkwOGUtMTk4NDAwMmYzMjNkLzAvQ0ZENDZGNTlC RkNFOEUwNzk5N0ZGMzg4RTdEM0Q4RDZFRjdFNjI2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkQ0NkY1OUJGQ0U4RTA3OTk3RkYzODhFN0QzRDhENkVGN0U2 MjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEzNzc5ODktNzE2Zi00OGE1LTkw OGUtMTk4NDAwMmYzMjNkLzAvQ0ZENDZGNTlCRkNFOEUwNzk5N0ZGMzg4RTdEM0Q4 RDZFRjdFNjI2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZpM7SsCVEmFxATpYczGdlmwntdrRA7m4gV hqNNMWHJ8DJCObD90PgCsNRvMk94KCSdbtmUoO4dgnaY3N5YK3Vp0fIhlQbN0qXB JsaMG2NZZScc/KtW6W1npdeKIeIwH/URqpU58OaqEhFdVL8XzNr7bmAeuDJyv56u EFrANBInQnaI9LljDaf70/o+GCaCneGmmQ5/GEjn34bR0ZjNlQiiNpy3kpUDvg20 R9Z6FMbPSu3KQ0aUNvrqH5iN95NEGIwro0WQOIyYKk5EvQPdqKPFDu1IcRUSqVgV UC3LbtPrPi+8RAy6hPiN6Zb7YPXk9Bfobbm0aEa0LFrT82gloh8= -----END CERTIFICATE-----Generated at Tue Nov 3 12:06:31 2026 by rpki-client