$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft File: CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json) Hash identifier: vRkeqzcfNwXUk0FNO8kCarzKV6hNiKA/azk+5Ew+e2Y= Subject key identifier: 5E:B5:73:5B:CF:D3:86:C5:56:36:93:B1:69:A7:66:36:47:14:94:89 Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 Certificate issuer: /CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Certificate serial: 0CE0841C72AB6B56C70676E48F92560628104C12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft Manifest number: EB Signing time: Sun 25 Oct 2026 04:10:41 +0000 Manifest this update: Sun 25 Oct 2026 04:05:41 +0000 Manifest next update: Mon 26 Oct 2026 04:10:41 +0000 Files and hashes: 1: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: s70WeXd5WSvCzmM8s3RIGjfChw6ntZSOHAuM6mplGJU=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e0:84:1c:72:ab:6b:56:c7:06:76:e4:8f:92:56:06:28:10:4c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Validity Not Before: Oct 25 04:05:41 2026 GMT Not After : Oct 26 04:10:41 2026 GMT Subject: CN=5EB5735BCFD386C5563693B169A7663647149489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d9:82:87:84:8d:22:c1:4f:e3:f6:b1:b5:23: 64:8e:14:89:56:0a:3f:be:23:c2:8d:d0:24:87:b6: e6:ab:ed:26:13:22:43:1d:cd:d9:b7:cf:fb:5b:4f: a0:d8:55:65:5a:70:87:98:3a:60:ef:23:b7:c6:54: 22:2a:61:2b:bd:01:ce:a5:1d:91:84:31:7b:fd:d5: 6d:05:f7:fc:3a:1b:1b:c4:8e:dc:08:16:5f:fa:15: a0:d3:a5:b1:bb:05:7c:2d:1d:f0:f4:b7:f5:78:79: e6:78:75:ad:78:47:4f:e6:75:0c:e2:b4:a3:08:d4: 15:b2:ba:3a:2a:c8:4c:9c:8c:57:ed:92:a7:b3:65: 39:80:cc:41:2c:6b:73:86:76:06:77:4c:7c:dd:3d: 5f:67:da:37:c9:65:bc:94:01:6f:f7:17:d3:7a:61: 1f:86:8c:79:05:b2:78:0b:bc:be:fe:d2:c0:fe:8b: 4c:9e:57:c8:ee:ad:39:2a:d1:b2:25:db:46:43:ef: 30:4f:09:4b:99:38:66:13:83:ca:8b:a3:3c:5d:bf: 00:4d:95:2e:04:5a:49:84:45:70:e3:03:d5:df:11: 1f:0a:98:0a:ff:b7:19:f0:73:d3:c5:75:42:3d:aa: fc:e9:98:cb:e1:7d:ff:e7:52:24:43:6f:28:87:db: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B5:73:5B:CF:D3:86:C5:56:36:93:B1:69:A7:66:36:47:14:94:89 X509v3 Authority Key Identifier: keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:44:e8:57:35:40:78:0d:05:47:69:82:ce:27:d2:9a:56:22: 33:03:53:b7:a3:03:c7:a1:b3:6b:e5:4b:de:a5:a2:e8:b0:56: ad:3d:42:d5:fc:32:0e:99:5f:81:83:c0:fe:a9:23:46:02:92: 8f:4a:3d:f6:a5:8f:ea:03:cd:6f:00:cb:89:1d:1d:7d:ed:0a: db:85:8d:cc:58:b4:da:f5:16:10:a5:e0:bb:f2:04:76:5c:cb: a8:32:d3:94:41:8a:45:0d:d0:24:93:30:92:80:d2:f9:47:a6: 4e:86:5f:10:6c:14:f3:da:80:23:4e:db:6a:ea:6e:71:3d:1a: e9:61:ae:4d:ce:84:ff:7c:93:7c:4c:25:8a:a7:c4:e0:d1:4b: 5b:1c:c5:9c:f5:04:9f:78:89:0b:9c:51:e8:f3:0f:07:8e:ca: 3a:ec:8a:c3:04:eb:6f:71:38:8d:cd:96:5b:52:d5:85:0e:fe: 0a:9d:37:92:98:65:77:d1:c3:dd:2a:36:4d:f1:5f:ab:8c:2e: d3:14:eb:14:32:8f:41:a3:e3:2e:12:67:79:a5:d0:02:b7:7c: 36:ab:1f:20:59:fb:90:dc:41:bd:b8:58:f4:fb:13:db:14:9b: d3:2a:0b:45:59:c2:d7:bf:9f:b2:b3:2e:ae:69:05:b8:80:0a: 89:b3:a6:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOCEHHKra1bHBnbkj5JWBigQTBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1RjA2 RjU0MTc0ODAeFw0yNjEwMjUwNDA1NDFaFw0yNjEwMjYwNDEwNDFaMDMxMTAvBgNV BAMTKDVFQjU3MzVCQ0ZEMzg2QzU1NjM2OTNCMTY5QTc2NjM2NDcxNDk0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk2YKHhI0iwU/j9rG1I2SOFIlW Cj++I8KN0CSHtuar7SYTIkMdzdm3z/tbT6DYVWVacIeYOmDvI7fGVCIqYSu9Ac6l HZGEMXv91W0F9/w6GxvEjtwIFl/6FaDTpbG7BXwtHfD0t/V4eeZ4da14R0/mdQzi tKMI1BWyujoqyEycjFftkqezZTmAzEEsa3OGdgZ3THzdPV9n2jfJZbyUAW/3F9N6 YR+GjHkFsngLvL7+0sD+i0yeV8jurTkq0bIl20ZD7zBPCUuZOGYTg8qLozxdvwBN lS4EWkmERXDjA9XfER8KmAr/txnwc9PFdUI9qvzpmMvhff/nUiRDbyiH25YnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXrVzW8/ThsVWNpOxaadmNkcUlIkwHwYDVR0j BBgwFoAUzyBNdI2tLRoCTeZtheQl8G9UF0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJmNTk4NmItYzc2NC00Y2Q3LWI0MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4 REFEMkQxQTAyNERFNjZEODVFNDI1RjA2RjU0MTc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjIwNEQ3NDhEQUQyRDFBMDI0REU2NkQ4NUU0MjVGMDZGNTQx NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1 RjA2RjU0MTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1E6Fc1QHgNBUdpgs4n0ppWIjMDU7ejA8eh s2vlS96louiwVq09QtX8Mg6ZX4GDwP6pI0YCko9KPfalj+oDzW8Ay4kdHX3tCtuF jcxYtNr1FhCl4LvyBHZcy6gy05RBikUN0CSTMJKA0vlHpk6GXxBsFPPagCNO22rq bnE9Gulhrk3OhP98k3xMJYqnxODRS1scxZz1BJ94iQucUejzDweOyjrsisME629x OI3NlltS1YUO/gqdN5KYZXfRw90qNk3xX6uMLtMU6xQyj0Gj4y4SZ3ml0AK3fDar HyBZ+5DcQb24WPT7E9sUm9MqC0VZwte/n7KzLq5pBbiAComzplY= -----END CERTIFICATE-----Generated at Sun Oct 25 14:25:07 2026 by rpki-client