$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: o7h1OiKSfC191YRXtU02LzY7QuUIoII8ymPodonZp2M= Subject key identifier: 99:95:94:B5:23:55:1B:90:6E:B8:09:A6:AD:E6:87:36:61:28:A7:2D Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 5BB0D4FC4D34F37A9D75C44B0EABE2D5DCEFB8DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: EB Signing time: Sat 24 Oct 2026 23:54:00 +0000 Manifest this update: Sat 24 Oct 2026 23:49:00 +0000 Manifest next update: Mon 26 Oct 2026 03:40:00 +0000 Files and hashes: 1: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: aqwqlxB1NNeeehJnxmV9xV++Sl78KU6fh2ZGre7zZA4=) 2: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b0:d4:fc:4d:34:f3:7a:9d:75:c4:4b:0e:ab:e2:d5:dc:ef:b8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: Oct 24 23:49:00 2026 GMT Not After : Oct 26 03:40:00 2026 GMT Subject: CN=999594B523551B906EB809A6ADE687366128A72D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:a6:fb:de:53:b7:68:63:fc:5c:24:ad:b0: fd:50:20:cc:af:61:89:32:05:1c:a2:f8:d9:f2:df: f1:46:45:dc:b1:e6:ad:27:c5:f2:a9:8a:29:4f:03: e9:65:7f:6e:e0:4f:4c:43:d8:ef:ee:6c:b2:3c:15: fe:e8:4b:96:5d:e6:91:db:f6:49:bf:f3:34:99:7e: 33:12:57:18:d1:69:22:44:af:7a:09:f4:39:62:b7: b1:dd:fd:b3:8e:a1:db:a4:37:a2:61:c8:0d:ec:c5: f0:17:ae:6d:93:29:1a:3e:d8:3a:87:14:46:64:37: 55:ba:0c:64:49:d0:6b:81:d7:2a:8f:b5:e2:07:0f: 40:df:45:77:c0:7d:82:af:8f:c4:ff:1b:53:ec:a8: d2:36:36:b3:20:19:e2:6e:65:4e:db:f1:30:8e:5f: 43:03:d2:00:cb:bb:6f:af:21:00:c5:5a:43:9e:da: 0e:73:da:11:fe:38:b3:48:2a:de:bb:b4:70:b1:44: 2d:3b:0a:b3:78:a2:fe:b3:5b:da:07:45:39:72:44: 85:37:a3:8c:93:3b:d6:f4:2f:76:e2:46:02:8b:45: bb:2d:4b:33:96:c1:f6:dd:2c:39:46:32:e4:c1:ec: 1a:ad:45:b0:07:5e:30:dd:b7:c6:6b:fd:f1:a2:df: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:94:B5:23:55:1B:90:6E:B8:09:A6:AD:E6:87:36:61:28:A7:2D X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:57:ad:13:0c:b6:1e:23:30:67:56:94:99:d3:85:be:b4:0f: cf:4a:6e:e1:a3:39:71:f1:38:ea:bd:1f:7e:e9:6a:ea:d4:c7: 6c:db:5e:9f:02:f7:f7:01:0b:3a:31:01:42:8b:bc:86:47:68: 12:47:bb:79:f6:72:da:11:ea:0f:57:99:76:39:db:81:09:c7: 9c:f7:c0:47:ee:b1:7f:24:7d:c6:e1:b3:1c:5c:8a:a5:d2:7b: 5b:6b:19:b0:43:ee:a8:ee:32:f1:0e:ea:1f:13:cf:6c:d9:80: 6e:48:5c:e2:d3:b0:bd:41:f4:07:0e:98:2b:f7:6d:4c:78:59: 1e:16:1a:8a:12:09:c3:73:19:3f:fa:8b:c2:46:0c:9d:0d:43: ab:b9:21:0a:47:55:5c:eb:b7:0e:b3:de:8f:27:b3:32:d7:0d: 05:5a:4c:23:88:a8:7a:0f:63:3b:30:2d:bf:6e:8f:c1:5b:3a: 81:69:64:c5:29:40:09:86:5a:ec:35:2e:e7:58:50:99:24:03: 0e:1c:cb:49:4d:13:a5:4c:8e:d5:61:0c:8a:ec:4f:ea:c7:38: ba:be:10:7b:28:e8:b6:5f:bf:49:7c:aa:21:38:b6:4d:90:70: a5:ae:13:4c:ab:4d:8b:60:a1:52:b8:20:29:72:6b:19:8a:e5: 69:4d:8a:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7DU/E0083qddcRLDqvi1dzvuNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjEwMjQyMzQ5MDBaFw0yNjEwMjYwMzQwMDBaMDMxMTAvBgNV BAMTKDk5OTU5NEI1MjM1NTFCOTA2RUI4MDlBNkFERTY4NzM2NjEyOEE3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWqb73lO3aGP8XCStsP1QIMyv YYkyBRyi+Nny3/FGRdyx5q0nxfKpiilPA+llf27gT0xD2O/ubLI8Ff7oS5Zd5pHb 9km/8zSZfjMSVxjRaSJEr3oJ9Dlit7Hd/bOOodukN6JhyA3sxfAXrm2TKRo+2DqH FEZkN1W6DGRJ0GuB1yqPteIHD0DfRXfAfYKvj8T/G1PsqNI2NrMgGeJuZU7b8TCO X0MD0gDLu2+vIQDFWkOe2g5z2hH+OLNIKt67tHCxRC07CrN4ov6zW9oHRTlyRIU3 o4yTO9b0L3biRgKLRbstSzOWwfbdLDlGMuTB7BqtRbAHXjDdt8Zr/fGi3w0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZWUtSNVG5BuuAmmreaHNmEopy0wHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRXrRMMth4jMGdWlJnThb60D89KbuGjOXHx OOq9H37paurUx2zbXp8C9/cBCzoxAUKLvIZHaBJHu3n2ctoR6g9XmXY524EJx5z3 wEfusX8kfcbhsxxciqXSe1trGbBD7qjuMvEO6h8Tz2zZgG5IXOLTsL1B9AcOmCv3 bUx4WR4WGooSCcNzGT/6i8JGDJ0NQ6u5IQpHVVzrtw6z3o8nszLXDQVaTCOIqHoP YzswLb9uj8FbOoFpZMUpQAmGWuw1LudYUJkkAw4cy0lNE6VMjtVhDIrsT+rHOLq+ EHso6LZfv0l8qiE4tk2QcKWuE0yrTYtgoVK4IClyaxmK5WlNirE= -----END CERTIFICATE-----Generated at Sun Oct 25 12:39:41 2026 by rpki-client