$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft (raw, json) Hash identifier: baSlf0hPIfbjAGneK5NFA6it6fle02ixGHuq2lfNiUw= Subject key identifier: B8:F3:39:BC:B1:E9:5B:08:03:1A:46:71:C7:25:E1:EA:03:89:91:0A Authority key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Certificate issuer: /CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Certificate serial: 7EDC2B258DB48A5D674FEF3C5B997EF502C09E20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 11:35:54 +0000 Manifest this update: Sun 25 Oct 2026 11:30:54 +0000 Manifest next update: Mon 26 Oct 2026 14:58:54 +0000 Files and hashes: 1: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: Fdccteawm8p+b48M0aaG/VtbesmEvdRHnNtrJ03BLvI=) 2: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: z6kI94sxzHsqlH3E/LSFr36Xmy4KrSkD+IFv+WC4jTo=) 3: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl (hash: 4bWnLi218xloWk0/f3NY970iqGOOhGglbUKNjuTCZOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:dc:2b:25:8d:b4:8a:5d:67:4f:ef:3c:5b:99:7e:f5:02:c0:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Validity Not Before: Oct 25 11:30:54 2026 GMT Not After : Oct 26 14:58:54 2026 GMT Subject: CN=B8F339BCB1E95B08031A4671C725E1EA0389910A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:1c:90:71:ec:9d:a0:89:3a:a7:ef:61:c1: 53:9c:cd:f5:55:58:e2:69:3f:8e:d9:40:05:d9:2b: 9e:97:0d:f7:cd:05:f0:62:ed:e6:f2:72:ac:b6:f6: c7:8e:45:41:ef:97:7f:2c:e9:35:42:fb:bd:cb:ec: a6:3a:70:19:44:d7:16:01:c1:46:5f:35:75:cb:e4: c1:cd:82:09:73:6f:b2:1a:80:2b:6d:57:f8:08:1b: 45:be:f7:63:65:dc:b5:8c:69:c4:85:08:46:18:9a: b4:80:0b:78:57:2a:5e:20:df:21:14:d9:3d:76:90: 82:e7:ba:2b:34:bb:c3:e0:0b:77:26:69:56:07:7f: 93:ca:62:86:a3:57:57:8a:9d:51:65:f0:58:8f:c0: 70:d0:31:87:c3:1a:0b:1e:34:fb:18:57:5d:59:c3: 25:e3:80:15:28:68:a8:b0:cd:38:2e:da:20:6f:31: f3:cf:db:90:bc:aa:bc:d7:8e:68:89:df:4c:47:3a: a7:19:c8:5f:72:cf:58:1e:15:1c:c1:7b:25:99:6d: b8:b3:cb:c5:30:f0:6c:30:ae:a7:9d:e5:ab:c4:a6: 7d:09:53:ad:e9:4f:e7:b6:84:4e:b4:90:85:db:d2: c0:aa:18:82:36:96:3d:23:75:3b:94:84:4f:98:a9: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F3:39:BC:B1:E9:5B:08:03:1A:46:71:C7:25:E1:EA:03:89:91:0A X509v3 Authority Key Identifier: keyid:05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c7:dd:11:a0:65:7a:e8:ed:7b:89:b0:c0:9c:18:76:d8:ac: 16:45:f8:dc:cc:3b:de:35:c7:32:6d:ef:20:88:9c:2d:de:7e: c5:ab:c9:10:e7:89:16:49:b0:e2:75:e8:28:48:45:e9:b1:f9: 05:42:f3:23:49:c2:7c:41:be:7c:98:c6:59:63:0c:19:c6:a2: 0c:42:6f:97:b0:3c:be:af:ac:9b:d5:56:88:62:b3:1d:f5:50: d3:11:79:94:b1:bf:76:84:81:bf:d3:77:43:df:57:ce:61:69: 32:ca:a6:b9:88:13:a9:6f:d3:e9:8d:12:23:7b:d1:f3:29:3f: 31:1e:1a:90:23:67:d9:6b:ab:ef:69:b8:d0:21:cf:9f:a4:bb: 8b:1f:b6:9a:b6:89:52:53:72:e5:a4:e9:2e:3c:92:44:ff:f6: 90:77:a3:79:4f:f9:2a:02:f5:ff:ac:be:fa:25:47:73:c3:31: c3:59:83:35:6e:c1:7e:89:79:44:d5:e9:7f:6d:77:26:31:f0: cf:63:9e:da:64:b1:de:c8:5b:ae:92:aa:bc:d2:74:b7:fb:0f: 05:65:69:ac:af:05:ad:f0:6a:0f:ac:84:00:01:64:ca:81:1a: a1:50:6a:90:4f:48:7f:cc:9b:6f:53:54:37:f4:ab:a1:96:e6: ee:a2:0e:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftwrJY20il1nT+88W5l+9QLAniAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNBODYy QTJCMjBFQjAeFw0yNjEwMjUxMTMwNTRaFw0yNjEwMjYxNDU4NTRaMDMxMTAvBgNV BAMTKEI4RjMzOUJDQjFFOTVCMDgwMzFBNDY3MUM3MjVFMUVBMDM4OTkxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuehyQceydoIk6p+9hwVOczfVV WOJpP47ZQAXZK56XDffNBfBi7ebycqy29seORUHvl38s6TVC+73L7KY6cBlE1xYB wUZfNXXL5MHNgglzb7IagCttV/gIG0W+92Nl3LWMacSFCEYYmrSAC3hXKl4g3yEU 2T12kILnuis0u8PgC3cmaVYHf5PKYoajV1eKnVFl8FiPwHDQMYfDGgseNPsYV11Z wyXjgBUoaKiwzTgu2iBvMfPP25C8qrzXjmiJ30xHOqcZyF9yz1geFRzBeyWZbbiz y8Uw8Gwwrqed5avEpn0JU63pT+e2hE60kIXb0sCqGII2lj0jdTuUhE+YqVkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuPM5vLHpWwgDGkZxxyXh6gOJkQowHwYDVR0j BBgwFoAUBc+eFhfs+L4C8v36J/E6hiorIOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmZDQyMzQtMTMyMy00ZjBlLWI2ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYx N0VDRjhCRTAyRjJGREZBMjdGMTNBODYyQTJCMjBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNUNGOUUxNjE3RUNGOEJFMDJGMkZERkEyN0YxM0E4NjJBMkIy MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmZDQyMzQtMTMyMy00ZjBlLWI2 ODYtMWQ3MmFjYjg4MDI5LzAvMDVDRjlFMTYxN0VDRjhCRTAyRjJGREZBMjdGMTNB ODYyQTJCMjBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzH3RGgZXro7XuJsMCcGHbYrBZF+NzMO941 xzJt7yCInC3efsWryRDniRZJsOJ16ChIRemx+QVC8yNJwnxBvnyYxlljDBnGogxC b5ewPL6vrJvVVohisx31UNMReZSxv3aEgb/Td0PfV85haTLKprmIE6lv0+mNEiN7 0fMpPzEeGpAjZ9lrq+9puNAhz5+ku4sftpq2iVJTcuWk6S48kkT/9pB3o3lP+SoC 9f+svvolR3PDMcNZgzVuwX6JeUTV6X9tdyYx8M9jntpksd7IW66SqrzSdLf7DwVl aayvBa3wag+shAABZMqBGqFQapBPSH/Mm29TVDf0q6GW5u6iDgc= -----END CERTIFICATE-----Generated at Sun Oct 25 18:47:07 2026 by rpki-client