$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: +rjZX2vzWjksSlaoNF3k3W8ViZkBOQJQEmgjLClLZvE= Subject key identifier: E8:02:13:7D:4F:8C:E9:32:5D:84:1B:54:FE:CD:BC:D3:4B:7B:4B:68 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 4E5BD4A729311A3995C01B904286E31696C7DAEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:15:06 +0000 Manifest this update: Thu 17 Sep 2026 01:10:06 +0000 Manifest next update: Fri 18 Sep 2026 02:41:06 +0000 Files and hashes: 1: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: +lbtNtbSg2ETxtP8CaCXm599zsuxJYTDBCIXp0A1oLs=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5b:d4:a7:29:31:1a:39:95:c0:1b:90:42:86:e3:16:96:c7:da:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Sep 17 01:10:06 2026 GMT Not After : Sep 18 02:41:06 2026 GMT Subject: CN=E802137D4F8CE9325D841B54FECDBCD34B7B4B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:49:c5:dd:6d:b8:50:fc:f6:56:9c:28:c5: 23:db:3b:64:aa:99:0c:e8:ea:0a:5b:b0:a5:83:61: f0:c8:2a:ec:ee:a0:3b:bf:e2:3c:1a:fa:56:be:cc: 7b:f2:57:ac:c3:43:49:1f:da:d9:b3:b5:d5:19:44: 27:ea:c0:8c:1e:df:64:09:8d:86:ad:49:5c:e8:f9: 3d:07:f6:ff:12:61:1d:d2:96:84:ca:f4:7d:04:7f: 49:6d:29:f6:5c:bf:4a:b3:38:1b:57:f1:17:5d:b2: 59:e7:09:6f:58:c3:5b:8d:10:f4:dd:20:91:c0:a9: 83:77:62:3b:96:ff:d6:22:7a:e3:84:5c:1a:69:e4: 33:bd:4e:5b:13:a9:6b:9c:90:d3:c5:e2:44:70:f7: f9:63:b9:9b:19:7d:e5:3b:44:ee:0a:0f:f9:94:08: e8:5c:54:86:5d:4b:44:b4:f4:2f:13:ef:52:58:1a: c7:59:50:57:01:f7:86:81:42:1c:06:39:f2:ca:25: 47:86:9a:e9:c6:48:a9:15:f0:84:7e:c7:a7:87:d3: c1:c6:d5:47:1d:37:87:d8:48:48:91:d7:11:c0:ae: 7d:c9:56:e8:51:7e:35:cc:4b:20:1e:2e:d1:b5:f1: 40:8b:a0:f5:41:5d:f0:af:ae:0a:6f:ce:93:de:b3: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:02:13:7D:4F:8C:E9:32:5D:84:1B:54:FE:CD:BC:D3:4B:7B:4B:68 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:83:11:f5:d1:b7:e0:c7:0c:63:0b:ce:27:4d:a1:b7:92:07: 76:a4:bd:0a:da:b4:f9:e7:0d:15:7a:07:cf:06:df:26:ab:37: 16:98:86:9e:f6:17:b0:50:d6:f8:84:7b:30:d4:ec:fc:35:91: 98:4d:18:c0:e9:73:fd:66:dd:e4:8e:39:c4:00:a7:ba:1e:20: 31:9d:3e:7f:b6:9a:f4:ff:f0:55:79:09:5d:3d:2a:61:ba:ba: e7:10:b1:c9:7a:a1:7d:e0:c9:ee:d8:ae:6d:19:65:cd:f0:67: 75:28:bf:50:0d:3f:de:bc:91:94:f7:6d:87:97:24:25:67:15: 42:ee:55:8d:45:b9:53:7d:63:1b:46:43:63:1c:d4:e4:45:16: f5:4e:98:49:87:32:8a:a9:d1:01:c0:3e:9f:6a:6f:4d:1b:df: ae:86:79:9b:84:3d:3b:64:e9:66:bd:e1:d2:85:4a:f3:c7:4c: 78:c7:fd:b0:b0:b7:69:28:c4:62:79:54:93:07:a1:58:bb:ee: 55:38:9d:a1:51:38:6c:3d:ce:2d:42:bf:30:e3:b1:a3:79:7a: a9:4b:16:c5:0f:07:b0:23:26:8e:e6:08:05:f9:b7:dc:d9:f6: e7:d0:3b:10:38:cb:b3:3a:e4:29:d5:80:c0:87:5f:5f:62:29: e9:2a:e8:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlvUpykxGjmVwBuQQobjFpbH2u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA5MTcwMTEwMDZaFw0yNjA5MTgwMjQxMDZaMDMxMTAvBgNV BAMTKEU4MDIxMzdENEY4Q0U5MzI1RDg0MUI1NEZFQ0RCQ0QzNEI3QjRCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQREnF3W24UPz2VpwoxSPbO2Sq mQzo6gpbsKWDYfDIKuzuoDu/4jwa+la+zHvyV6zDQ0kf2tmztdUZRCfqwIwe32QJ jYatSVzo+T0H9v8SYR3SloTK9H0Ef0ltKfZcv0qzOBtX8RddslnnCW9Yw1uNEPTd IJHAqYN3YjuW/9YieuOEXBpp5DO9TlsTqWuckNPF4kRw9/ljuZsZfeU7RO4KD/mU COhcVIZdS0S09C8T71JYGsdZUFcB94aBQhwGOfLKJUeGmunGSKkV8IR+x6eH08HG 1UcdN4fYSEiR1xHArn3JVuhRfjXMSyAeLtG18UCLoPVBXfCvrgpvzpPes581AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6AITfU+M6TJdhBtU/s2800t7S2gwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWDEfXRt+DHDGMLzidNobeSB3akvQratPnn DRV6B88G3yarNxaYhp72F7BQ1viEezDU7Pw1kZhNGMDpc/1m3eSOOcQAp7oeIDGd Pn+2mvT/8FV5CV09KmG6uucQscl6oX3gye7Yrm0ZZc3wZ3Uov1ANP968kZT3bYeX JCVnFULuVY1FuVN9YxtGQ2Mc1ORFFvVOmEmHMoqp0QHAPp9qb00b366GeZuEPTtk 6Wa94dKFSvPHTHjH/bCwt2koxGJ5VJMHoVi77lU4naFROGw9zi1CvzDjsaN5eqlL FsUPB7AjJo7mCAX5t9zZ9ufQOxA4y7M65CnVgMCHX19iKekq6Pk= -----END CERTIFICATE-----Generated at Thu Sep 17 13:43:39 2026 by rpki-client