$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: eGOVWN5sFnmWtPLQ+nBuDtLF6hGwaHFKFrBAEiDz7p0= Subject key identifier: 3D:86:94:C2:AE:7C:20:08:D5:7B:49:21:9B:10:98:42:92:E6:18:1A Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 3FA0031AAC8714732EE468E7C30093C8C7FE1682 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:52:14 +0000 Manifest this update: Wed 16 Sep 2026 22:47:14 +0000 Manifest next update: Fri 18 Sep 2026 01:30:14 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: VaG5q38Swy7VLkwJB70jaYGLaZzO/8ca6FlRmd/qxDE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a0:03:1a:ac:87:14:73:2e:e4:68:e7:c3:00:93:c8:c7:fe:16:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: Sep 16 22:47:14 2026 GMT Not After : Sep 18 01:30:14 2026 GMT Subject: CN=3D8694C2AE7C2008D57B49219B10984292E6181A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e0:6f:91:af:50:6c:0d:44:6c:92:9b:b2:dc: d3:6d:05:0e:46:85:d7:5d:c2:ac:52:cb:8d:1f:58: 7f:48:33:cc:17:1f:97:5c:cf:a8:5b:9e:6c:3d:70: 47:66:01:07:47:93:b6:c5:cd:5f:b5:9c:3d:6a:c5: 96:0f:88:ac:45:d1:99:de:dc:ac:f9:1c:68:ca:09: aa:10:c6:5f:45:61:33:34:92:a2:01:56:8d:ff:f2: 21:58:73:28:30:5b:b5:30:5f:f2:d1:a2:26:1b:1e: da:ce:ab:a1:67:2c:3a:ce:2d:5f:60:8d:e4:8f:63: e5:e0:63:44:f0:78:f0:28:18:b5:cf:39:ad:e6:d5: a3:20:d7:41:30:da:91:6e:a0:ae:dc:18:50:09:40: 73:77:97:81:5d:c1:d5:34:59:05:8c:a7:95:4a:ae: 98:91:e1:8d:4e:ae:f8:56:79:89:bc:99:44:4c:7e: b3:64:fe:db:21:b0:7d:0f:a0:45:d7:48:7e:da:74: 8b:74:bd:af:82:be:89:37:8e:9b:35:88:4a:7e:6d: f5:cb:00:56:16:68:a5:17:a1:61:9c:33:5a:47:a8: 36:13:0e:eb:6d:17:58:ba:9e:5f:b0:d9:51:6c:e7: 27:60:78:14:e6:65:f4:8b:c3:dd:13:11:6a:b4:85: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:86:94:C2:AE:7C:20:08:D5:7B:49:21:9B:10:98:42:92:E6:18:1A X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0d:48:4c:13:05:53:e8:6c:95:a8:77:63:9e:24:0d:65:ec: be:f9:0d:cc:c8:e1:0b:65:54:89:d3:35:a2:3b:ed:44:00:55: 58:8f:a5:46:26:79:de:ea:90:39:d8:1f:24:b5:05:a0:ca:bc: e1:6a:e4:91:1b:4e:83:23:c6:3e:b8:dc:4f:a8:4c:2f:da:f3: d9:bd:89:c6:94:6f:09:81:7a:0e:cd:38:e5:23:31:75:46:96: 4f:63:e0:47:93:58:f7:50:6b:9b:55:38:f6:63:bf:28:b4:28: ed:61:98:b8:df:66:5f:3c:93:c0:98:fa:40:1a:f1:9b:4a:f6: 1b:4e:12:02:1c:9b:ec:41:43:e1:bb:46:03:8f:66:ab:56:7c: 2a:53:08:63:d3:22:74:39:5f:ec:74:3d:e8:2d:27:53:96:24: b9:f5:50:dd:c2:f6:0f:e4:25:67:0e:93:cc:d8:2a:2a:35:b1: ed:13:2d:e8:af:5c:d8:d1:34:48:c2:e5:69:1d:6d:c2:eb:f9: 6a:ee:e8:15:69:78:f4:75:9a:45:90:d4:1e:68:06:b1:7f:df: fc:a4:ac:47:0c:64:33:a9:c9:e6:2a:e3:95:1c:a1:c4:37:04: 87:b0:16:13:d4:5d:f2:e2:d4:c3:cb:1a:f4:c8:40:dd:7e:1a: f6:96:fc:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6ADGqyHFHMu5GjnwwCTyMf+FoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjA5MTYyMjQ3MTRaFw0yNjA5MTgwMTMwMTRaMDMxMTAvBgNV BAMTKDNEODY5NEMyQUU3QzIwMDhENTdCNDkyMTlCMTA5ODQyOTJFNjE4MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL4G+Rr1BsDURskpuy3NNtBQ5G hdddwqxSy40fWH9IM8wXH5dcz6hbnmw9cEdmAQdHk7bFzV+1nD1qxZYPiKxF0Zne 3Kz5HGjKCaoQxl9FYTM0kqIBVo3/8iFYcygwW7UwX/LRoiYbHtrOq6FnLDrOLV9g jeSPY+XgY0TwePAoGLXPOa3m1aMg10Ew2pFuoK7cGFAJQHN3l4FdwdU0WQWMp5VK rpiR4Y1OrvhWeYm8mURMfrNk/tshsH0PoEXXSH7adIt0va+Cvok3jps1iEp+bfXL AFYWaKUXoWGcM1pHqDYTDuttF1i6nl+w2VFs5ydgeBTmZfSLw90TEWq0hROZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYaUwq58IAjVe0khmxCYQpLmGBowHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsNSEwTBVPobJWod2OeJA1l7L75DczI4Qtl VInTNaI77UQAVViPpUYmed7qkDnYHyS1BaDKvOFq5JEbToMjxj643E+oTC/a89m9 icaUbwmBeg7NOOUjMXVGlk9j4EeTWPdQa5tVOPZjvyi0KO1hmLjfZl88k8CY+kAa 8ZtK9htOEgIcm+xBQ+G7RgOPZqtWfCpTCGPTInQ5X+x0PegtJ1OWJLn1UN3C9g/k JWcOk8zYKio1se0TLeivXNjRNEjC5WkdbcLr+Wru6BVpePR1mkWQ1B5oBrF/3/yk rEcMZDOpyeYq45UcocQ3BIewFhPUXfLi1MPLGvTIQN1+GvaW/Jg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:05:11 2026 by rpki-client