$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft File: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft (raw, json) Hash identifier: 0SkFq6aody//FWwkYa0B1lXOREnTWGFbxp5xCfmY+YI= Subject key identifier: 27:0E:02:37:41:AB:50:15:55:96:5A:0B:E5:D7:9F:F6:95:3D:0C:44 Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Certificate serial: 2A3A8DF5374AD770934BE0F8636F7AD32FF3740E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft Manifest number: B6 Signing time: Tue 15 Sep 2026 08:40:47 +0000 Manifest this update: Tue 15 Sep 2026 08:35:47 +0000 Manifest next update: Wed 16 Sep 2026 12:38:47 +0000 Files and hashes: 1: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl (hash: uSZ0miec6UMVNyc1uZgItB6UCNOIGI4dIv5Mab/kr28=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 12:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3a:8d:f5:37:4a:d7:70:93:4b:e0:f8:63:6f:7a:d3:2f:f3:74:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Validity Not Before: Sep 15 08:35:47 2026 GMT Not After : Sep 16 12:38:47 2026 GMT Subject: CN=270E023741AB501555965A0BE5D79FF6953D0C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:a2:18:3b:9c:84:4a:b2:f5:f6:2d:75:23: bd:f3:26:88:a9:43:3d:16:a1:e6:32:17:19:b5:a7: 91:4e:78:c5:d3:69:50:6f:29:43:87:c3:47:e5:a3: 89:a3:cd:ea:d7:b2:a5:95:44:2b:62:ce:68:76:ec: 81:76:8c:3c:ae:b9:74:31:f4:8d:b3:2f:a2:43:2f: cf:6f:2b:5a:c0:cd:6a:8c:e2:7e:45:24:93:f5:44: 52:31:30:84:c5:96:46:f8:d6:fd:80:0d:57:75:fb: d7:9b:e4:55:a3:c4:45:49:5f:1b:93:95:c6:f7:e4: c0:29:3b:0d:41:cf:09:6a:86:bc:bd:21:d9:a1:ec: df:e5:3f:ad:33:54:6b:a1:bb:d3:c7:7a:85:a1:43: b8:61:89:26:33:74:b9:79:d3:78:62:0f:af:c5:b2: f9:fc:1b:9f:94:43:17:b9:e8:2b:9d:de:4f:54:7e: e3:b7:16:51:93:95:10:6e:30:c5:19:34:65:bd:4a: 0c:7b:ff:c5:cc:e2:b0:e9:3c:cd:39:e7:ba:96:63: ef:da:00:c1:0d:8d:40:e8:e2:70:cc:d6:72:7f:ae: e3:ad:fe:1c:12:00:0f:dc:c5:97:d5:2e:f3:d9:16: 70:3e:10:65:42:70:82:05:2e:3d:02:91:7b:ca:76: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0E:02:37:41:AB:50:15:55:96:5A:0B:E5:D7:9F:F6:95:3D:0C:44 X509v3 Authority Key Identifier: keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:60:9c:c1:6c:cd:0d:2f:e1:0b:d2:db:a7:68:68:5e:48:37: 7a:99:e8:3e:4c:7f:ca:03:89:09:dc:12:78:1c:e6:be:b6:ad: 14:01:6b:25:d9:2f:c3:8b:fa:0a:f2:59:6a:b0:e8:40:d4:3c: 66:98:3c:93:f7:89:22:b5:bb:be:3c:be:eb:7b:bc:c8:31:8f: 13:0a:0b:8e:cf:18:c0:0b:cd:c8:62:6d:ab:d0:b2:0c:ee:d5: 0e:26:34:99:70:81:a2:b6:d4:dd:9f:37:a8:75:6e:57:cb:f9: b7:d0:4d:11:db:e4:c1:9d:33:0a:e4:06:bd:5f:12:24:5a:65: 3c:ab:1e:80:02:45:a6:7d:fe:54:88:4f:10:02:d3:cb:a2:45: be:71:3a:5e:f8:36:ba:e9:1d:b8:08:ec:13:e6:fe:01:3b:c5: 1d:23:fe:9a:d5:c9:e5:bb:b5:f9:4c:73:ce:09:f6:e7:26:95: 32:96:56:ee:79:a4:8d:48:a4:01:31:36:e9:20:44:72:93:a5: e4:dd:b9:12:6e:50:50:74:11:d7:76:9b:d8:3c:79:7f:1d:89: bd:fb:ec:d0:58:f0:6b:8e:8e:68:d8:96:86:e4:2f:aa:df:bd: a8:b4:3f:8f:96:aa:95:7c:2d:82:cc:af:94:0c:31:bc:82:d2: fa:62:41:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjqN9TdK13CTS+D4Y2960y/zdA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC OUUzNkZFODAeFw0yNjA5MTUwODM1NDdaFw0yNjA5MTYxMjM4NDdaMDMxMTAvBgNV BAMTKDI3MEUwMjM3NDFBQjUwMTU1NTk2NUEwQkU1RDc5RkY2OTUzRDBDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/6IYO5yESrL19i11I73zJoip Qz0WoeYyFxm1p5FOeMXTaVBvKUOHw0flo4mjzerXsqWVRCtizmh27IF2jDyuuXQx 9I2zL6JDL89vK1rAzWqM4n5FJJP1RFIxMITFlkb41v2ADVd1+9eb5FWjxEVJXxuT lcb35MApOw1Bzwlqhry9Idmh7N/lP60zVGuhu9PHeoWhQ7hhiSYzdLl503hiD6/F svn8G5+UQxe56Cud3k9UfuO3FlGTlRBuMMUZNGW9Sgx7/8XM4rDpPM0557qWY+/a AMENjUDo4nDM1nJ/ruOt/hwSAA/cxZfVLvPZFnA+EGVCcIIFLj0CkXvKdglVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJw4CN0GrUBVVlloL5def9pU9DEQwHwYDVR0j BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2 NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2 RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBG OEFCOUUzNkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJgnMFszQ0v4QvS26doaF5IN3qZ6D5Mf8oD iQncEngc5r62rRQBayXZL8OL+gryWWqw6EDUPGaYPJP3iSK1u748vut7vMgxjxMK C47PGMALzchibavQsgzu1Q4mNJlwgaK21N2fN6h1blfL+bfQTRHb5MGdMwrkBr1f EiRaZTyrHoACRaZ9/lSITxAC08uiRb5xOl74NrrpHbgI7BPm/gE7xR0j/prVyeW7 tflMc84J9ucmlTKWVu55pI1IpAExNukgRHKTpeTduRJuUFB0Edd2m9g8eX8dib37 7NBY8GuOjmjYlobkL6rfvai0P4+WqpV8LYLMr5QMMbyC0vpiQcU= -----END CERTIFICATE-----Generated at Wed Sep 16 02:49:04 2026 by rpki-client