$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft (raw, json) Hash identifier: ERlh49ZPfhcWO1KYMmcCxI3vipVUtb9ORlL2YD0dI8E= Subject key identifier: C9:1F:FD:D3:DB:45:D9:5D:9B:F9:93:BD:3C:B9:3A:BA:03:94:83:5A Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 52AFD7A40E44A371FCD3C8E4B3A4BD90108B28F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:23:34 +0000 Manifest this update: Thu 03 Sep 2026 00:18:34 +0000 Manifest next update: Fri 04 Sep 2026 04:06:34 +0000 Files and hashes: 1: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg=) 2: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl (hash: o9+Q5zp0xnHWTwktiOK/QZy5hVyz+YOmj0/YHNtJPMA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:af:d7:a4:0e:44:a3:71:fc:d3:c8:e4:b3:a4:bd:90:10:8b:28:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: Sep 3 00:18:34 2026 GMT Not After : Sep 4 04:06:34 2026 GMT Subject: CN=C91FFDD3DB45D95D9BF993BD3CB93ABA0394835A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:eb:88:a6:12:a2:eb:b4:df:0b:84:0b:6e:2b: a6:65:13:bf:c0:89:70:03:ae:0f:e8:5b:e0:bd:d5: e5:e9:1c:60:9d:a7:f7:68:2d:ab:12:9a:08:aa:42: 54:82:a9:72:72:c8:5c:29:32:e1:34:de:cf:30:6e: 3d:7b:11:18:cf:50:7e:9b:ac:ae:2c:67:51:bf:d4: d0:94:31:45:d1:0f:c3:f8:9d:ea:bc:16:b9:72:27: 9f:4c:66:f8:99:c8:5e:24:d6:2b:d4:d2:3e:0d:cc: b1:6e:51:21:c8:6f:18:8d:3d:83:6d:c1:05:ca:48: a6:28:d7:62:83:d5:d8:0a:99:04:70:b7:51:b4:5b: 4f:b2:2a:fa:6c:d7:76:9f:e5:f9:81:39:ac:f2:5d: 11:4a:88:bf:40:33:0b:34:64:ad:e7:67:0b:06:18: b1:23:d0:cf:97:a8:67:a3:15:c0:91:c0:8d:ca:cc: ba:3f:2d:b9:0c:48:fa:30:19:b8:a6:e4:a8:1b:03: c4:8e:da:4c:3a:66:01:ae:93:9b:fc:b7:a3:8e:f5: f2:07:e2:e6:22:12:f6:e7:a9:13:02:62:77:41:63: 80:ef:4f:65:56:b6:98:e6:db:32:cc:f0:e5:2b:6a: ff:c0:70:cf:be:fe:61:85:26:39:e1:03:ba:14:b3: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1F:FD:D3:DB:45:D9:5D:9B:F9:93:BD:3C:B9:3A:BA:03:94:83:5A X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f8:12:66:ab:be:6e:d2:77:28:8e:f8:73:53:fa:8e:b7:89: 9a:76:f2:6a:e7:15:38:87:ae:83:a8:5b:eb:50:32:b4:3a:c0: 11:76:31:0e:50:a2:ad:0e:bc:97:5d:68:70:ee:12:19:19:25: 81:06:30:01:a4:81:c0:c2:52:39:ab:de:19:87:0a:ef:d4:30: 04:35:b3:bb:a7:fc:11:ca:5e:02:79:f0:15:2f:a2:95:57:4d: 44:26:05:79:f0:a0:44:f7:5d:7e:36:a0:a0:aa:0e:f0:76:a1: af:70:d7:b5:d4:08:4e:1d:18:ce:25:cc:0e:45:6f:91:df:20: 93:e1:74:dd:3d:5d:0a:1a:01:12:fe:99:7e:80:3e:5e:bf:b8: 12:8d:1f:63:b3:35:df:63:6c:0e:34:2b:9c:04:10:5a:bc:73: 2e:f0:08:e2:34:fd:27:c2:9e:b6:fc:9a:da:63:68:6b:9d:ef: 2b:5b:b8:ff:58:31:62:cf:bb:f6:58:df:65:f9:be:60:78:66: b4:ee:8f:27:ba:80:94:74:a5:d4:e7:75:9d:88:81:a6:01:8d: 28:32:6a:5f:a3:b3:0e:f7:28:a7:d1:a0:7e:0c:5d:44:23:1d: e2:2e:dc:6d:be:71:47:0d:1d:d3:4e:a0:22:ff:bd:16:57:2c: 8f:2b:3e:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUq/XpA5Eo3H808jks6S9kBCLKPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjA5MDMwMDE4MzRaFw0yNjA5MDQwNDA2MzRaMDMxMTAvBgNV BAMTKEM5MUZGREQzREI0NUQ5NUQ5QkY5OTNCRDNDQjkzQUJBMDM5NDgzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv64imEqLrtN8LhAtuK6ZlE7/A iXADrg/oW+C91eXpHGCdp/doLasSmgiqQlSCqXJyyFwpMuE03s8wbj17ERjPUH6b rK4sZ1G/1NCUMUXRD8P4neq8FrlyJ59MZviZyF4k1ivU0j4NzLFuUSHIbxiNPYNt wQXKSKYo12KD1dgKmQRwt1G0W0+yKvps13af5fmBOazyXRFKiL9AMws0ZK3nZwsG GLEj0M+XqGejFcCRwI3KzLo/LbkMSPowGbim5KgbA8SO2kw6ZgGuk5v8t6OO9fIH 4uYiEvbnqRMCYndBY4DvT2VWtpjm2zLM8OUrav/AcM++/mGFJjnhA7oUsxS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyR/909tF2V2b+ZO9PLk6ugOUg1owHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNG QTNEOEEyNUJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACL4Emarvm7SdyiO+HNT+o63iZp28mrnFTiH roOoW+tQMrQ6wBF2MQ5Qoq0OvJddaHDuEhkZJYEGMAGkgcDCUjmr3hmHCu/UMAQ1 s7un/BHKXgJ58BUvopVXTUQmBXnwoET3XX42oKCqDvB2oa9w17XUCE4dGM4lzA5F b5HfIJPhdN09XQoaARL+mX6APl6/uBKNH2OzNd9jbA40K5wEEFq8cy7wCOI0/SfC nrb8mtpjaGud7ytbuP9YMWLPu/ZY32X5vmB4ZrTujye6gJR0pdTndZ2IgaYBjSgy al+jsw73KKfRoH4MXUQjHeIu3G2+cUcNHdNOoCL/vRZXLI8rPgk= -----END CERTIFICATE-----Generated at Thu Sep 3 09:14:12 2026 by rpki-client