$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft (raw, json) Hash identifier: a9frvfTLIzXPz2fdDYd6agyzrEq+osowvB78XvJzaYs= Subject key identifier: 99:E4:F3:43:D2:41:54:87:F3:11:2E:F2:0C:BA:70:D6:9D:1A:B6:41 Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 42CDB57B0B67863228F5EBF175940CEA09B3439B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft Manifest number: EA Signing time: Sat 24 Oct 2026 19:49:00 +0000 Manifest this update: Sat 24 Oct 2026 19:44:00 +0000 Manifest next update: Sun 25 Oct 2026 22:31:00 +0000 Files and hashes: 1: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg=) 2: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl (hash: m3vG+Xr590Bg4l3pxm7+5Q/X3+5au55MuFJmOR/RP78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cd:b5:7b:0b:67:86:32:28:f5:eb:f1:75:94:0c:ea:09:b3:43:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: Oct 24 19:44:00 2026 GMT Not After : Oct 25 22:31:00 2026 GMT Subject: CN=99E4F343D2415487F3112EF20CBA70D69D1AB641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4d:47:34:63:42:2d:14:08:36:32:5b:ea:f6: fb:02:d8:4f:91:b2:91:01:37:58:a0:67:3e:05:38: dd:39:d4:6a:c9:96:f3:c0:7a:64:48:c2:ab:ec:e7: 92:15:06:7c:bc:e7:1f:77:fa:3d:bd:75:5f:5b:55: b4:da:26:e7:a6:22:c9:47:1e:f5:2c:64:65:96:7f: a2:c5:5d:f9:f7:f2:98:f8:bf:de:3e:27:d4:92:b0: da:c2:ed:d9:3b:a5:af:7f:90:e5:93:7f:95:ab:eb: bd:5d:2f:ff:fe:4e:6c:7e:22:8b:7d:40:80:04:37: a7:1f:0b:b0:74:94:97:aa:d7:c5:f4:13:92:71:d7: 4b:dd:39:9e:c0:42:95:9a:44:cc:ae:8d:89:5b:b3: b4:d0:ff:1c:7f:21:f3:78:56:d2:74:40:b7:b1:ad: 5f:fb:7d:d5:86:f1:33:bc:e9:ab:ef:68:d1:f6:30: 09:aa:a8:8a:d9:f9:56:bf:43:c1:83:34:29:93:17: ee:56:9f:60:0f:52:7b:6e:0a:81:3d:21:88:db:83: 9d:b4:6e:9f:22:2d:87:35:67:d3:92:b3:f4:04:3b: cc:a2:0b:58:bb:36:7c:37:cf:f6:63:9d:1e:c5:18: 24:f0:5a:be:cc:af:98:bd:95:28:99:86:2f:1c:0d: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E4:F3:43:D2:41:54:87:F3:11:2E:F2:0C:BA:70:D6:9D:1A:B6:41 X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ef:f0:fa:5a:0d:b1:ed:a5:7b:c1:49:ad:4f:4c:92:05:8b: 2e:b4:30:56:67:74:d6:b0:43:08:f1:5b:9f:ff:0b:26:27:4c: 9f:c9:db:85:b9:17:2e:38:5f:38:15:c3:e3:ef:65:72:ac:ea: 5b:7d:b1:78:e1:70:f2:46:66:28:52:19:ee:db:f7:0b:98:96: 8c:a8:db:98:55:6d:36:28:7b:18:f4:8b:a4:12:93:0b:4d:93: 78:23:e2:d0:41:2d:21:c0:f2:67:bd:d1:a1:7d:e4:68:d1:40: 07:e8:83:8b:1e:6a:29:67:e1:0d:3f:fa:c4:6a:59:fd:a7:ce: 09:b8:e6:96:3b:f2:9c:91:4d:74:62:25:ad:b9:81:03:54:96: be:d2:b6:6b:82:b5:60:b9:20:d8:d3:ff:2a:42:10:0b:f7:80: 60:7f:71:ae:97:af:c7:93:b5:4a:dd:28:d0:28:ff:e6:0a:a3: bd:73:29:5b:e7:a0:00:51:1f:3f:d6:94:9e:e6:13:ec:4e:1a: 14:0c:2e:63:69:12:13:9f:81:95:12:28:fc:8e:8a:57:59:32: 96:96:ad:76:73:3b:32:d8:d0:b5:c0:cd:3c:c8:a6:d0:fe:ba: b1:d4:e4:c6:b8:b6:e3:d6:80:0e:71:2f:d3:51:a5:8f:43:c1: de:e6:48:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQs21ewtnhjIo9evxdZQM6gmzQ5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjEwMjQxOTQ0MDBaFw0yNjEwMjUyMjMxMDBaMDMxMTAvBgNV BAMTKDk5RTRGMzQzRDI0MTU0ODdGMzExMkVGMjBDQkE3MEQ2OUQxQUI2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpTUc0Y0ItFAg2Mlvq9vsC2E+R spEBN1igZz4FON051GrJlvPAemRIwqvs55IVBny85x93+j29dV9bVbTaJuemIslH HvUsZGWWf6LFXfn38pj4v94+J9SSsNrC7dk7pa9/kOWTf5Wr671dL//+Tmx+Iot9 QIAEN6cfC7B0lJeq18X0E5Jx10vdOZ7AQpWaRMyujYlbs7TQ/xx/IfN4VtJ0QLex rV/7fdWG8TO86avvaNH2MAmqqIrZ+Va/Q8GDNCmTF+5Wn2APUntuCoE9IYjbg520 bp8iLYc1Z9OSs/QEO8yiC1i7Nnw3z/ZjnR7FGCTwWr7Mr5i9lSiZhi8cDSPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmeTzQ9JBVIfzES7yDLpw1p0atkEwHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNG QTNEOEEyNUJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/v8PpaDbHtpXvBSa1PTJIFiy60MFZndNaw QwjxW5//CyYnTJ/J24W5Fy44XzgVw+PvZXKs6lt9sXjhcPJGZihSGe7b9wuYloyo 25hVbTYoexj0i6QSkwtNk3gj4tBBLSHA8me90aF95GjRQAfog4seailn4Q0/+sRq Wf2nzgm45pY78pyRTXRiJa25gQNUlr7StmuCtWC5INjT/ypCEAv3gGB/ca6Xr8eT tUrdKNAo/+YKo71zKVvnoABRHz/WlJ7mE+xOGhQMLmNpEhOfgZUSKPyOildZMpaW rXZzOzLY0LXAzTzIptD+urHU5Ma4tuPWgA5xL9NRpY9Dwd7mSGs= -----END CERTIFICATE-----Generated at Sun Oct 25 06:07:46 2026 by rpki-client