$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: dWHXJpGKkyYYF1JKwI//rNsDT/Pxy5T2BiX7nKO1308= Subject key identifier: 0C:D9:1B:75:F4:45:3E:4A:9A:10:CD:AE:47:3A:39:63:EE:23:AC:38 Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 2CB32FBD3CB9B67C5F249D68337E7A8AEA7FE745 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: EC Signing time: Sun 25 Oct 2026 15:41:12 +0000 Manifest this update: Sun 25 Oct 2026 15:36:12 +0000 Manifest next update: Mon 26 Oct 2026 16:57:12 +0000 Files and hashes: 1: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: 2tPWqE24X0knzMHnXOM/26BE97R1KTZlLG4lWGXGVQQ=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) 3: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b3:2f:bd:3c:b9:b6:7c:5f:24:9d:68:33:7e:7a:8a:ea:7f:e7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Oct 25 15:36:12 2026 GMT Not After : Oct 26 16:57:12 2026 GMT Subject: CN=0CD91B75F4453E4A9A10CDAE473A3963EE23AC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:45:56:91:12:2f:fd:c8:b8:10:ed:10:b7: 04:b7:c3:e5:c5:64:7c:ef:60:a9:5f:77:8f:e2:a0: 1f:65:fb:43:09:ff:88:6d:53:49:4a:f3:62:ed:2f: 35:a5:cf:40:d8:a3:6a:78:ba:de:5d:33:b2:28:4c: 6f:73:d0:4f:f7:68:e3:63:6a:27:98:13:58:5d:c5: fa:e5:d5:50:4d:21:19:f6:7a:66:dd:8a:ad:5c:99: 05:97:29:2d:d4:aa:4b:11:ef:d8:94:2a:9c:3f:9f: 5d:ad:e0:d0:84:d7:53:80:85:30:ef:82:ab:34:82: 49:be:7e:0d:48:7c:81:5a:32:66:52:7d:8b:62:9f: e4:b3:6e:c6:8d:06:48:93:0a:90:d5:f7:c1:a0:e1: 0d:ce:fd:42:9d:73:aa:fe:d3:a1:3a:4a:68:a7:ac: 04:14:c5:35:e9:dc:71:39:1f:d1:13:2d:bc:11:95: 4f:de:ec:e4:70:5e:55:75:93:bc:e1:2d:c0:62:be: 3a:a5:2c:07:c2:4f:7f:4f:1f:73:1d:8f:04:12:7d: 5e:cd:cf:72:16:e6:81:a1:27:b4:63:44:7f:6f:83: 6b:2f:25:d2:52:83:03:ec:87:1a:05:1f:46:bb:53: 3e:2d:59:35:59:a9:00:bd:c9:9e:c1:55:94:1d:b9: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D9:1B:75:F4:45:3E:4A:9A:10:CD:AE:47:3A:39:63:EE:23:AC:38 X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ee:c8:42:89:a7:3b:fb:5f:1e:08:08:c6:4d:42:ab:d1:34: ca:b0:a1:91:3d:37:86:56:71:7a:9d:4a:05:e0:ab:6f:0f:7d: 5d:80:4f:e4:26:e0:4b:2d:51:6c:14:a5:41:67:4d:18:ca:6e: 0b:a2:31:08:c1:f7:27:1d:04:27:b9:79:3d:d7:8e:6a:1c:4d: 07:6c:c2:f1:85:c0:f3:1e:cb:d3:a4:76:89:ae:1c:7e:60:6f: 8e:c4:8e:e2:cf:a6:8d:16:41:64:58:e7:35:54:0f:60:6c:53: 42:4f:0b:69:7e:bf:fd:7b:34:61:22:e8:5f:bf:2b:f9:a3:fd: 0c:4d:2e:93:02:de:7e:18:23:f4:77:81:a7:96:04:b9:f5:15: 29:c7:37:8d:ca:a1:0a:99:62:5f:f8:4b:97:28:23:bf:ad:17: fd:83:ee:45:1a:33:f5:f7:6b:32:26:f2:2d:d9:d5:7b:63:52: fa:9d:45:ef:0c:28:6d:42:7b:f3:41:38:ae:4d:f2:3e:99:13: b7:9e:f3:c8:cd:57:3a:15:15:31:1b:b4:23:63:f8:91:85:73: 97:8d:7d:13:e7:01:96:37:6b:cb:a0:eb:c0:8f:8a:42:65:56: 2f:16:27:b9:f0:a6:1a:52:a9:24:dc:10:4b:54:03:18:38:d2: e8:79:d7:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLMvvTy5tnxfJJ1oM356iup/50UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjEwMjUxNTM2MTJaFw0yNjEwMjYxNjU3MTJaMDMxMTAvBgNV BAMTKDBDRDkxQjc1RjQ0NTNFNEE5QTEwQ0RBRTQ3M0EzOTYzRUUyM0FDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTEVWkRIv/ci4EO0QtwS3w+XF ZHzvYKlfd4/ioB9l+0MJ/4htU0lK82LtLzWlz0DYo2p4ut5dM7IoTG9z0E/3aONj aieYE1hdxfrl1VBNIRn2embdiq1cmQWXKS3UqksR79iUKpw/n12t4NCE11OAhTDv gqs0gkm+fg1IfIFaMmZSfYtin+SzbsaNBkiTCpDV98Gg4Q3O/UKdc6r+06E6Smin rAQUxTXp3HE5H9ETLbwRlU/e7ORwXlV1k7zhLcBivjqlLAfCT39PH3MdjwQSfV7N z3IW5oGhJ7RjRH9vg2svJdJSgwPshxoFH0a7Uz4tWTVZqQC9yZ7BVZQduebxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDNkbdfRFPkqaEM2uRzo5Y+4jrDgwHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfuyEKJpzv7Xx4ICMZNQqvRNMqwoZE9N4ZW cXqdSgXgq28PfV2AT+Qm4EstUWwUpUFnTRjKbguiMQjB9ycdBCe5eT3XjmocTQds wvGFwPMey9OkdomuHH5gb47EjuLPpo0WQWRY5zVUD2BsU0JPC2l+v/17NGEi6F+/ K/mj/QxNLpMC3n4YI/R3gaeWBLn1FSnHN43KoQqZYl/4S5coI7+tF/2D7kUaM/X3 azIm8i3Z1XtjUvqdRe8MKG1Ce/NBOK5N8j6ZE7ee88jNVzoVFTEbtCNj+JGFc5eN fRPnAZY3a8ug68CPikJlVi8WJ7nwphpSqSTcEEtUAxg40uh515Q= -----END CERTIFICATE-----Generated at Mon Oct 26 00:37:48 2026 by rpki-client