$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json) Hash identifier: inKKp4Bdt6LzfgZx9XKry99q38GJVah8Q7OFVww25g8= Subject key identifier: 7D:09:1C:E2:82:30:CD:EF:6A:F4:FD:22:39:90:2F:2D:70:23:69:C9 Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Certificate serial: 502CE59EA89E7494F02742C13BB18E553331F326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft Manifest number: E8 Signing time: Fri 23 Oct 2026 21:15:40 +0000 Manifest this update: Fri 23 Oct 2026 21:10:40 +0000 Manifest next update: Sat 24 Oct 2026 21:22:40 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=) 2: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: WOBBBeS3bLkjxKnlK/fCs09xILNf923GcuAQPMg3stM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 21:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2c:e5:9e:a8:9e:74:94:f0:27:42:c1:3b:b1:8e:55:33:31:f3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Validity Not Before: Oct 23 21:10:40 2026 GMT Not After : Oct 24 21:22:40 2026 GMT Subject: CN=7D091CE28230CDEF6AF4FD2239902F2D702369C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:01:03:71:27:48:f3:f4:e3:4d:a6:d3:fd: a3:93:fd:11:72:91:72:db:04:02:56:df:7a:b9:62: d1:e5:9d:2b:a2:bc:d2:e5:ec:b0:15:6d:ea:18:01: ff:de:46:27:44:f6:53:4b:c5:be:bb:7e:b1:e7:6b: 6b:00:51:b6:ba:38:05:ea:a5:2e:c6:b5:e3:8e:46: 0a:c5:57:46:82:f7:0f:aa:38:85:ef:48:c0:41:66: 87:dd:a0:ef:3d:f1:17:45:b6:ed:71:ad:13:30:20: 51:a9:81:33:27:6f:35:01:30:dc:bb:46:c6:73:ba: a1:b3:3c:dc:a2:2e:3d:44:80:3f:97:8a:b8:ba:30: d2:52:72:8c:56:87:b4:35:e9:a4:77:0b:32:81:1f: 64:ff:c9:41:7c:f1:1b:11:88:f4:21:03:db:17:ad: 01:bd:63:5a:02:93:bc:70:2e:df:ec:20:05:dc:69: 6e:11:7b:b6:a7:82:84:33:74:48:23:0f:e5:34:9b: 20:23:59:47:e6:a4:66:46:6e:a1:35:73:c3:66:66: a1:09:97:94:8b:c4:e1:71:44:65:aa:77:ff:41:ca: f2:0a:50:e9:6f:3d:34:89:4e:39:da:be:db:1a:1d: b1:55:10:41:91:3e:60:09:9e:24:0c:a8:2f:5b:27: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:09:1C:E2:82:30:CD:EF:6A:F4:FD:22:39:90:2F:2D:70:23:69:C9 X509v3 Authority Key Identifier: keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e0:a1:a3:7c:17:ed:9b:ef:c5:91:82:01:d8:77:d3:94:bf: 75:8b:0e:ef:6b:33:58:51:c3:fd:54:d9:43:67:c5:d7:77:f1: 41:83:53:db:5f:45:f0:5f:cf:24:01:f4:8d:46:37:73:d2:e8: 61:1a:8a:e1:c6:ad:7f:82:f9:d8:b1:95:92:86:68:45:bd:91: 64:17:ca:1e:ef:f4:81:ae:4e:2c:a8:a0:d9:08:5b:2d:2c:a0: f1:d9:94:3f:28:ac:a1:de:ec:83:c9:c8:86:36:9e:fd:a9:9b: 4b:06:74:71:e5:54:a7:64:0d:19:db:88:35:78:4a:5b:e7:e4: c0:3f:85:fd:28:26:de:79:07:d1:e6:b6:59:c6:23:06:cc:1d: 3e:a2:eb:97:75:05:a5:e8:ee:39:e6:c5:29:8d:44:52:d2:4c: df:d8:d0:17:79:bb:4d:65:ef:33:22:a1:f9:08:bb:2e:a7:1b: b1:20:92:00:92:77:61:13:36:03:d5:9f:6a:12:ea:39:55:f4: 4d:de:c7:ce:1c:17:aa:00:0f:fd:ae:87:55:66:14:a1:61:f5: 22:43:be:e5:41:2f:bc:f1:dc:9e:25:ea:1d:4a:24:06:45:79: a8:d8:7d:1a:e4:b5:23:75:b3:ad:81:d4:c7:61:e3:e0:02:00: 33:a6:55:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCzlnqiedJTwJ0LBO7GOVTMx8yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUwMzcw QzA2MzEzNTAeFw0yNjEwMjMyMTEwNDBaFw0yNjEwMjQyMTIyNDBaMDMxMTAvBgNV BAMTKDdEMDkxQ0UyODIzMENERUY2QUY0RkQyMjM5OTAyRjJENzAyMzY5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClkgEDcSdI8/TjTabT/aOT/RFy kXLbBAJW33q5YtHlnSuivNLl7LAVbeoYAf/eRidE9lNLxb67frHna2sAUba6OAXq pS7GteOORgrFV0aC9w+qOIXvSMBBZofdoO898RdFtu1xrRMwIFGpgTMnbzUBMNy7 RsZzuqGzPNyiLj1EgD+Xiri6MNJScoxWh7Q16aR3CzKBH2T/yUF88RsRiPQhA9sX rQG9Y1oCk7xwLt/sIAXcaW4Re7angoQzdEgjD+U0myAjWUfmpGZGbqE1c8NmZqEJ l5SLxOFxRGWqd/9ByvIKUOlvPTSJTjnavtsaHbFVEEGRPmAJniQMqC9bJwNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQkc4oIwze9q9P0iOZAvLXAjackwHwYDVR0j BBgwFoAUz1yl4wIxHNDbD+qEDnRQNwwGMTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3OTFiNzMtYmIwOC00YTgzLWExOTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMw MjMxMUNEMERCMEZFQTg0MEU3NDUwMzcwQzA2MzEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjVDQTVFMzAyMzExQ0QwREIwRkVBODQwRTc0NTAzNzBDMDYz MTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUw MzcwQzA2MzEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKngoaN8F+2b78WRggHYd9OUv3WLDu9rM1hR w/1U2UNnxdd38UGDU9tfRfBfzyQB9I1GN3PS6GEaiuHGrX+C+dixlZKGaEW9kWQX yh7v9IGuTiyooNkIWy0soPHZlD8orKHe7IPJyIY2nv2pm0sGdHHlVKdkDRnbiDV4 Slvn5MA/hf0oJt55B9HmtlnGIwbMHT6i65d1BaXo7jnmxSmNRFLSTN/Y0Bd5u01l 7zMiofkIuy6nG7EgkgCSd2ETNgPVn2oS6jlV9E3ex84cF6oAD/2uh1VmFKFh9SJD vuVBL7zx3J4l6h1KJAZFeajYfRrktSN1s62B1Mdh4+ACADOmVes= -----END CERTIFICATE-----Generated at Sat Oct 24 09:49:00 2026 by rpki-client