$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: sQapX70jbTgkwYxsBTmqzf/TPb45RSJXpw43Xz2AmLo= Subject key identifier: A7:70:69:8E:8E:19:82:B3:F3:F3:E3:97:C6:FC:C0:8A:07:7F:DB:AD Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 1DD151540C44309013E2847BD149EDA47EA02CE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: 9E Signing time: Thu 27 Aug 2026 15:55:04 +0000 Manifest this update: Thu 27 Aug 2026 15:50:04 +0000 Manifest next update: Fri 28 Aug 2026 19:52:04 +0000 Files and hashes: 1: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) 2: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: /0FFNjjQLcY8r9r5iWgL4yd3rP8yxveJXXLAFOWFBL0=) 3: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:51:54:0c:44:30:90:13:e2:84:7b:d1:49:ed:a4:7e:a0:2c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Aug 27 15:50:04 2026 GMT Not After : Aug 28 19:52:04 2026 GMT Subject: CN=A770698E8E1982B3F3F3E397C6FCC08A077FDBAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:e1:e6:5f:4c:84:b8:70:23:0a:20:54:23: cf:b9:79:64:53:8e:4c:44:82:cf:b4:4f:ff:8a:dd: e5:c9:13:05:b1:ed:50:2e:ae:97:86:d5:70:b8:71: c7:5d:8d:19:48:f6:58:a3:61:80:67:7c:c3:a0:dd: 95:3a:f9:b7:cb:ad:26:82:0d:09:8a:b8:d4:1b:7d: 10:3a:91:2d:9a:a4:5a:a5:a0:08:48:53:ba:d4:b7: 59:b1:c6:35:54:ab:31:c3:eb:ca:59:62:42:d4:10: 6c:a8:d7:71:c2:b7:fb:da:6e:79:19:ea:b5:37:d7: 5d:cc:ac:49:33:2e:34:d3:6a:35:31:56:24:cc:df: 70:2c:59:91:cd:db:39:bf:a5:2b:37:57:95:eb:0c: 25:11:fc:e5:06:27:03:b5:43:97:b7:17:62:c3:36: 2a:95:4c:1e:1d:8b:45:04:63:5e:84:e4:f9:2c:8a: 5e:7e:83:cb:b3:0e:81:24:0f:59:11:85:b6:a0:b0: 0a:20:c6:a0:d1:6a:73:86:ee:22:6d:a4:7c:11:47: 34:8b:a4:9a:31:9d:fc:46:95:47:23:21:91:57:c4: 64:e4:73:76:a2:e3:47:1f:17:9e:f0:9d:d3:20:43: 2f:f5:32:0d:51:19:78:1d:9f:65:ad:7d:fd:e8:7c: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:70:69:8E:8E:19:82:B3:F3:F3:E3:97:C6:FC:C0:8A:07:7F:DB:AD X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:92:b6:fe:7c:97:d9:0b:8c:cb:7b:46:af:91:76:57:d4:b3: 8d:f9:20:cc:89:7d:02:bb:72:f8:cb:d0:c8:28:8b:5b:e1:6b: 8c:4e:14:e0:00:48:85:2d:a8:9b:91:41:8e:4e:7c:25:0f:92: 67:a7:29:da:45:d6:9f:2c:8b:bd:e3:6f:60:a2:04:6c:95:9c: 43:b9:bc:57:cb:6f:84:0f:4f:83:d6:65:a3:42:84:86:64:d7: 2d:41:7f:64:4f:93:78:d8:79:87:eb:7d:1f:7c:53:36:a3:6a: a8:77:b3:77:80:e5:ec:20:40:51:f8:83:01:56:ff:dc:24:65: ce:c6:c7:44:8d:1d:bf:c1:ad:12:88:f2:80:67:d9:9d:f8:05: 9c:a1:b6:eb:c9:72:ee:35:f7:ce:e6:03:80:66:1f:89:a7:fa: 68:95:36:23:41:fd:9a:8a:86:28:8f:5c:69:93:0c:f3:0f:16: 95:e5:be:f5:00:49:1d:57:aa:00:49:93:3d:01:b1:a3:a0:0e: 6b:6f:47:4f:89:34:7c:33:50:27:00:84:bb:70:9e:ba:f0:03: 2e:ef:b7:fb:71:af:d2:d1:aa:23:de:85:c4:aa:99:d1:63:f8: ca:a9:40:d8:0e:d8:bb:b8:2b:08:d8:eb:64:bf:ed:9a:5b:95: 12:a5:bd:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdFRVAxEMJAT4oR70UntpH6gLOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjA4MjcxNTUwMDRaFw0yNjA4MjgxOTUyMDRaMDMxMTAvBgNV BAMTKEE3NzA2OThFOEUxOTgyQjNGM0YzRTM5N0M2RkNDMDhBMDc3RkRCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzOHmX0yEuHAjCiBUI8+5eWRT jkxEgs+0T/+K3eXJEwWx7VAurpeG1XC4ccddjRlI9lijYYBnfMOg3ZU6+bfLrSaC DQmKuNQbfRA6kS2apFqloAhIU7rUt1mxxjVUqzHD68pZYkLUEGyo13HCt/vabnkZ 6rU3113MrEkzLjTTajUxViTM33AsWZHN2zm/pSs3V5XrDCUR/OUGJwO1Q5e3F2LD NiqVTB4di0UEY16E5Pksil5+g8uzDoEkD1kRhbagsAogxqDRanOG7iJtpHwRRzSL pJoxnfxGlUcjIZFXxGTkc3ai40cfF57wndMgQy/1Mg1RGXgdn2Wtff3ofDM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp3Bpjo4ZgrPz8+OXxvzAigd/260wHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWStv58l9kLjMt7Rq+RdlfUs435IMyJfQK7 cvjL0Mgoi1vha4xOFOAASIUtqJuRQY5OfCUPkmenKdpF1p8si73jb2CiBGyVnEO5 vFfLb4QPT4PWZaNChIZk1y1Bf2RPk3jYeYfrfR98Uzajaqh3s3eA5ewgQFH4gwFW /9wkZc7Gx0SNHb/BrRKI8oBn2Z34BZyhtuvJcu41987mA4BmH4mn+miVNiNB/ZqK hiiPXGmTDPMPFpXlvvUASR1XqgBJkz0BsaOgDmtvR0+JNHwzUCcAhLtwnrrwAy7v t/txr9LRqiPehcSqmdFj+MqpQNgO2Lu4KwjY62S/7ZpblRKlvYs= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:47 2026 by rpki-client