$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: kHQufojzNIDu1Lvohsrz801tKlFIHlR+gHJvj2DM7iM= Subject key identifier: 62:87:2E:31:27:0E:BB:20:04:16:70:F5:B6:58:F9:35:5A:09:68:E1 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 3EB2D2F7BD6978ACCA05881A040CEA71CBC606C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 02:36:16 +0000 Manifest this update: Wed 04 Nov 2026 02:31:16 +0000 Manifest next update: Thu 05 Nov 2026 03:22:16 +0000 Files and hashes: 1: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) 3: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: x35Ep8VrCDjse1sgNIZD3LLqB9xmrboANmuPRipvoGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b2:d2:f7:bd:69:78:ac:ca:05:88:1a:04:0c:ea:71:cb:c6:06:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Nov 4 02:31:16 2026 GMT Not After : Nov 5 03:22:16 2026 GMT Subject: CN=62872E31270EBB20041670F5B658F9355A0968E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:2c:d8:66:5e:35:2e:3f:23:c5:9d:2a:6f: 17:d3:39:62:fa:04:12:d1:49:46:92:b6:d7:11:56: 58:87:07:f5:42:f9:24:25:93:d0:28:82:5e:0b:61: 17:0d:38:1b:d3:e5:7a:a7:d8:37:73:c2:0a:8c:d7: 01:70:bb:2a:02:95:b2:a5:74:8c:98:b8:71:90:65: e7:70:06:b8:e7:cc:0f:99:fb:d0:a3:f5:a7:71:37: 6f:81:7d:bc:7c:d6:3a:03:99:66:07:0c:d8:5d:ef: 60:67:dd:15:fd:b8:a1:a9:5c:f4:73:60:1e:a1:3d: 87:70:14:74:68:9e:77:3a:5c:64:c7:e6:b3:4a:64: 42:ec:1e:0a:7b:be:a6:5a:3b:68:97:86:70:9f:81: 42:b9:ea:0d:73:40:40:3c:84:44:ef:f8:2b:9d:52: 74:a0:88:bc:73:e3:94:5d:33:11:1a:f0:6c:8c:8f: 44:00:73:21:ce:5e:dc:f8:45:eb:c6:96:28:1d:96: e4:17:bb:78:16:cc:5d:fc:ea:48:f3:8c:3a:7e:1b: a1:9d:34:3b:e6:49:4f:6b:d3:ad:7f:0d:07:7a:5e: 47:66:dc:44:21:5e:ca:33:1d:f3:1f:8d:81:77:29: ed:67:f5:c7:51:e6:91:34:3f:b2:ef:cf:d8:41:c1: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:87:2E:31:27:0E:BB:20:04:16:70:F5:B6:58:F9:35:5A:09:68:E1 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6f:9f:ef:4e:df:26:a5:3a:1f:b3:9e:16:a4:57:aa:17:ed: 94:51:79:b2:b7:9c:be:43:70:e4:f9:d6:6d:58:2c:d2:9f:80: 7a:67:6c:6a:9f:0c:25:7a:75:9d:99:31:49:09:93:f2:fe:dc: f1:f9:2f:1f:a2:2f:f2:99:fd:ed:1b:aa:cb:7d:c2:15:24:8b: d5:55:0e:cf:94:de:59:ae:c4:ba:c0:09:56:9a:ba:c1:09:8c: 7b:e6:42:e7:10:48:76:52:72:a2:1b:78:fe:02:db:c2:33:99: 33:0f:39:31:60:8c:42:4f:fa:c7:1f:5d:70:cd:20:de:76:30: e9:c3:16:f2:4d:99:70:4e:f3:cd:55:f3:7c:89:ba:97:33:83: 43:87:e7:18:09:be:b4:26:81:b1:7f:e3:dd:1d:29:c7:82:39: 7c:01:0c:3c:c8:37:34:bf:78:bb:76:b7:8a:43:fe:c5:9c:ed: 15:b1:cb:1f:32:70:54:9e:4c:0f:85:41:39:7c:5c:92:19:d9: 15:5a:10:87:bd:80:42:96:ea:67:9d:4e:bc:8e:d9:b1:29:22: e9:2b:e7:df:8c:c1:63:7c:1b:67:d2:f0:40:31:93:3f:06:ae: cc:eb:82:87:aa:ce:ca:6b:28:09:62:57:59:cd:e1:76:4d:2a: 16:2b:be:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrLS971peKzKBYgaBAzqccvGBsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjExMDQwMjMxMTZaFw0yNjExMDUwMzIyMTZaMDMxMTAvBgNV BAMTKDYyODcyRTMxMjcwRUJCMjAwNDE2NzBGNUI2NThGOTM1NUEwOTY4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MyzYZl41Lj8jxZ0qbxfTOWL6 BBLRSUaSttcRVliHB/VC+SQlk9Aogl4LYRcNOBvT5Xqn2DdzwgqM1wFwuyoClbKl dIyYuHGQZedwBrjnzA+Z+9Cj9adxN2+Bfbx81joDmWYHDNhd72Bn3RX9uKGpXPRz YB6hPYdwFHRonnc6XGTH5rNKZELsHgp7vqZaO2iXhnCfgUK56g1zQEA8hETv+Cud UnSgiLxz45RdMxEa8GyMj0QAcyHOXtz4RevGligdluQXu3gWzF386kjzjDp+G6Gd NDvmSU9r061/DQd6Xkdm3EQhXsozHfMfjYF3Ke1n9cdR5pE0P7Lvz9hBwWivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYocuMScOuyAEFnD1tlj5NVoJaOEwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVvn+9O3yalOh+znhakV6oX7ZRRebK3nL5D cOT51m1YLNKfgHpnbGqfDCV6dZ2ZMUkJk/L+3PH5Lx+iL/KZ/e0bqst9whUki9VV Ds+U3lmuxLrACVaausEJjHvmQucQSHZScqIbeP4C28IzmTMPOTFgjEJP+scfXXDN IN52MOnDFvJNmXBO881V83yJupczg0OH5xgJvrQmgbF/490dKceCOXwBDDzINzS/ eLt2t4pD/sWc7RWxyx8ycFSeTA+FQTl8XJIZ2RVaEIe9gEKW6medTryO2bEpIukr 59+MwWN8G2fS8EAxkz8GrszrgoeqzsprKAliV1nN4XZNKhYrvpY= -----END CERTIFICATE-----Generated at Wed Nov 4 06:45:58 2026 by rpki-client