$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft (raw, json) Hash identifier: QoKhEZ5wntWp4K5YGk0oTl1BaiR8G18htcgjxZxB8vk= Subject key identifier: E8:17:A9:AB:43:C4:20:66:F5:44:21:B6:25:FF:4D:E3:03:F7:37:AD Authority key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Certificate issuer: /CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Certificate serial: 7E9BA46B7A2D521BDCDF462C5B1BC95ACE9E8D06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:15:12 +0000 Manifest this update: Wed 16 Sep 2026 21:10:12 +0000 Manifest next update: Fri 18 Sep 2026 01:11:12 +0000 Files and hashes: 1: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl (hash: AuUUmWyUy1RJTyG2ZC0Sz4HQd7WTUgh5qvLuNMkIETc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9b:a4:6b:7a:2d:52:1b:dc:df:46:2c:5b:1b:c9:5a:ce:9e:8d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Validity Not Before: Sep 16 21:10:12 2026 GMT Not After : Sep 18 01:11:12 2026 GMT Subject: CN=E817A9AB43C42066F54421B625FF4DE303F737AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e6:67:32:50:14:3b:a6:2d:44:0a:8a:8d:01: 1e:a3:73:d3:61:c6:b7:2e:4b:af:b9:ff:4f:76:75: 29:1d:e3:90:da:9f:bf:f7:36:71:64:5e:b4:2a:9c: de:45:44:12:d6:ad:21:75:ff:fb:47:7c:d5:39:02: 62:9f:97:2a:38:bc:fa:9c:82:17:b2:32:cb:91:03: 87:4d:7c:79:e1:fa:09:10:31:11:64:c4:78:5d:33: b1:3f:71:83:d0:4c:23:ea:83:f7:56:25:14:7e:b3: 57:98:89:04:61:ac:8b:84:39:32:ad:9f:59:dd:7f: 14:b6:24:89:6f:e6:b2:fb:b5:c6:71:bd:c4:f5:1f: 05:76:2f:75:ce:1a:1f:04:d1:fe:f5:5e:bc:4e:18: b8:1f:22:c7:49:34:ff:15:de:72:bd:ac:53:f5:2c: 5c:01:ec:08:6e:96:29:fb:ed:a3:f0:45:5b:20:c6: 68:59:cb:cc:ba:57:6e:0e:85:2d:3d:02:e5:63:41: 1a:29:1e:d3:4b:b7:02:95:25:bf:b8:7a:13:d9:a9: 6b:a3:1a:f5:b4:8e:96:72:5d:dd:47:bf:e1:de:7b: f1:e7:50:d3:44:70:c2:de:ba:2d:38:2d:8d:5e:f7: 10:18:a4:00:79:6b:15:b8:2b:a4:55:00:78:62:6f: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:A9:AB:43:C4:20:66:F5:44:21:B6:25:FF:4D:E3:03:F7:37:AD X509v3 Authority Key Identifier: keyid:CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:21:01:6c:f4:20:14:ef:6b:0d:2f:86:24:52:6c:f4:1c:24: ff:39:e2:95:70:85:0c:5a:cd:da:64:16:9d:34:7d:39:c8:e0: a3:62:c8:f0:a1:0f:71:78:17:6e:81:06:98:3f:bc:f3:46:6c: 41:e7:50:73:ea:01:95:61:d2:ef:52:31:1e:1e:39:97:57:d7: 9f:fd:df:15:8c:31:1e:24:71:eb:42:62:49:16:4d:fd:68:10: 4b:cd:bd:13:a7:92:3f:cb:b1:ff:22:11:60:a2:a1:2c:55:5e: 16:62:b9:f0:a1:a3:a0:b2:c7:2e:f6:01:6c:29:fb:03:54:6e: 73:96:35:f5:48:22:a0:f8:86:54:a8:5d:d1:37:55:8b:72:55: 3a:b3:52:e2:63:36:c5:a2:5c:4c:da:3d:ea:c5:84:02:05:60: 00:de:45:61:a2:e0:03:8c:82:55:c4:c4:73:e1:9b:79:5f:8e: 78:18:bc:f7:8f:21:8d:bb:b0:de:49:c0:8a:d8:95:00:b7:85: a0:56:19:e3:e8:e1:63:fa:77:cb:7c:a0:64:86:1a:b2:7b:e0: dd:29:a8:96:bc:70:06:f3:65:ca:0a:c3:51:a3:34:8e:18:14: 24:cb:0c:f5:bc:14:f7:76:15:a3:f5:42:e3:5a:ac:c2:ab:be: 54:dd:af:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpuka3otUhvc30YsWxvJWs6ejQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNG QURDQkFBMDAeFw0yNjA5MTYyMTEwMTJaFw0yNjA5MTgwMTExMTJaMDMxMTAvBgNV BAMTKEU4MTdBOUFCNDNDNDIwNjZGNTQ0MjFCNjI1RkY0REUzMDNGNzM3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD35mcyUBQ7pi1ECoqNAR6jc9Nh xrcuS6+5/092dSkd45Dan7/3NnFkXrQqnN5FRBLWrSF1//tHfNU5AmKflyo4vPqc gheyMsuRA4dNfHnh+gkQMRFkxHhdM7E/cYPQTCPqg/dWJRR+s1eYiQRhrIuEOTKt n1ndfxS2JIlv5rL7tcZxvcT1HwV2L3XOGh8E0f71XrxOGLgfIsdJNP8V3nK9rFP1 LFwB7Ahulin77aPwRVsgxmhZy8y6V24OhS09AuVjQRopHtNLtwKVJb+4ehPZqWuj GvW0jpZyXd1Hv+Hee/HnUNNEcMLeui04LY1e9xAYpAB5axW4K6RVAHhibwE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Bepq0PEIGb1RCG2Jf9N4wP3N60wHwYDVR0j BBgwFoAUz5DTI0sm5kPeKeeLKj0Dc/rcuqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2M2U3MWEtOWM4NS00MTc2LThmYTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0 QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNGQURDQkFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjkwRDMyMzRCMjZFNjQzREUyOUU3OEIyQTNEMDM3M0ZBRENC QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAz NzNGQURDQkFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGshAWz0IBTvaw0vhiRSbPQcJP854pVwhQxa zdpkFp00fTnI4KNiyPChD3F4F26BBpg/vPNGbEHnUHPqAZVh0u9SMR4eOZdX15/9 3xWMMR4kcetCYkkWTf1oEEvNvROnkj/Lsf8iEWCioSxVXhZiufCho6Cyxy72AWwp +wNUbnOWNfVIIqD4hlSoXdE3VYtyVTqzUuJjNsWiXEzaPerFhAIFYADeRWGi4AOM glXExHPhm3lfjngYvPePIY27sN5JwIrYlQC3haBWGePo4WP6d8t8oGSGGrJ74N0p qJa8cAbzZcoKw1GjNI4YFCTLDPW8FPd2FaP1QuNarMKrvlTdr7A= -----END CERTIFICATE-----Generated at Thu Sep 17 09:30:40 2026 by rpki-client