$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft File: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft (raw, json) Hash identifier: c3UNy5pktrcnjdzqrwgGSxU1EfF+qhaIlc39dcMiRFg= Subject key identifier: E8:1E:35:4A:D1:F5:58:FE:3A:20:81:BD:9C:78:A2:54:FA:BE:21:66 Authority key identifier: CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 Certificate issuer: /CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Certificate serial: 679000B64C5CA21CDD6B1310C4EB8304001257A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:30:11 +0000 Manifest this update: Thu 17 Sep 2026 05:25:11 +0000 Manifest next update: Fri 18 Sep 2026 07:21:11 +0000 Files and hashes: 1: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl (hash: ygxYZJ21UL47uBCDB9ffrEsb652FMIqClGYmuDNu1gU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:90:00:b6:4c:5c:a2:1c:dd:6b:13:10:c4:eb:83:04:00:12:57:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Validity Not Before: Sep 17 05:25:11 2026 GMT Not After : Sep 18 07:21:11 2026 GMT Subject: CN=E81E354AD1F558FE3A2081BD9C78A254FABE2166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:61:e0:0a:c6:41:24:f7:b7:59:53:9c:7a: 21:5c:da:7f:33:96:bb:2f:e5:90:6d:f6:c1:8c:4b: 60:34:c7:dc:56:f9:61:5d:e3:52:29:c7:bd:d9:14: 2f:a0:f5:2c:93:95:48:60:bc:0a:7b:00:5e:c2:8a: ff:ba:3b:a0:05:60:be:ab:e2:46:24:1e:fb:68:ee: ca:21:7d:c1:a6:bb:a2:ab:6d:74:6f:a3:cb:74:7b: f3:fa:e3:a2:39:32:61:c5:cc:ba:fd:b1:18:b7:1f: 72:5b:60:43:7d:11:07:3a:1a:ef:00:07:2c:b0:c3: 85:8d:4c:00:a1:93:67:b4:21:ab:67:2e:bc:cd:93: 0f:f5:aa:da:7e:a7:07:05:2e:28:27:ee:38:26:0f: 33:25:05:ac:b7:8d:fa:40:64:78:c3:50:3f:68:05: bf:ac:f0:60:fd:fc:b6:77:91:16:42:e0:29:8e:ce: 01:f0:96:56:a4:63:e9:9f:a8:12:24:6f:71:4a:ab: 47:a2:bb:14:e9:56:fe:8e:11:30:e5:5b:40:8e:e2: a9:92:20:1e:ac:d5:e4:fb:f1:91:57:31:c9:d1:02: 3a:7c:b4:25:3a:66:e4:2b:f4:41:6a:08:23:e4:35: d2:ed:ab:d4:8d:87:ca:5f:08:45:37:9d:08:5f:0c: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1E:35:4A:D1:F5:58:FE:3A:20:81:BD:9C:78:A2:54:FA:BE:21:66 X509v3 Authority Key Identifier: keyid:CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:44:41:10:98:36:c3:a0:40:be:af:10:09:d5:a2:37:8f:83: 3e:66:98:b5:c6:d4:7a:67:13:51:35:4a:ce:fe:83:04:61:ca: fc:d6:6f:89:d9:fa:81:b5:9f:3f:8b:86:bd:e9:da:16:4d:ff: 7b:da:fd:b7:cb:30:19:0c:06:fc:78:3a:51:33:a6:a4:d9:5b: 48:68:34:4c:f1:9d:d2:d7:d5:ac:ad:ee:6c:16:1c:b2:89:f0: f4:6f:ed:60:cd:36:13:b8:7b:fd:80:93:b3:42:50:6b:ef:79: 8c:7b:57:81:aa:a8:d0:e5:58:06:de:2f:e1:4a:a4:80:c4:55: a9:1f:0f:a5:cb:e2:52:7b:b8:35:70:c6:1e:f3:ea:02:68:95: 66:90:7e:b0:14:88:68:97:01:4b:d6:46:30:40:18:4e:c3:99: 93:5b:5c:a9:f4:36:5b:35:4d:a9:ea:c1:73:dd:5c:85:e2:ca: 7c:b6:82:bd:88:49:66:5b:8c:12:26:47:93:e3:5e:b2:33:f9: 40:77:66:4d:43:61:1e:8d:de:ec:24:0e:c7:34:95:6e:13:9c: c8:fb:7e:22:b1:d8:8b:1e:77:d4:95:04:4d:67:25:5c:09:1f: 29:e0:dc:ac:0c:27:14:c1:a8:00:cf:ba:62:81:aa:56:ad:b5: f7:0e:69:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5AAtkxcohzdaxMQxOuDBAASV6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcw NTQ3RUY3ODAeFw0yNjA5MTcwNTI1MTFaFw0yNjA5MTgwNzIxMTFaMDMxMTAvBgNV BAMTKEU4MUUzNTRBRDFGNTU4RkUzQTIwODFCRDlDNzhBMjU0RkFCRTIxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp5GHgCsZBJPe3WVOceiFc2n8z lrsv5ZBt9sGMS2A0x9xW+WFd41Ipx73ZFC+g9SyTlUhgvAp7AF7Civ+6O6AFYL6r 4kYkHvto7sohfcGmu6KrbXRvo8t0e/P646I5MmHFzLr9sRi3H3JbYEN9EQc6Gu8A Byyww4WNTAChk2e0IatnLrzNkw/1qtp+pwcFLign7jgmDzMlBay3jfpAZHjDUD9o Bb+s8GD9/LZ3kRZC4CmOzgHwllakY+mfqBIkb3FKq0eiuxTpVv6OETDlW0CO4qmS IB6s1eT78ZFXMcnRAjp8tCU6ZuQr9EFqCCPkNdLtq9SNh8pfCEU3nQhfDAGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6B41StH1WP46IIG9nHiiVPq+IWYwHwYDVR0j BBgwFoAUyvr7kD/mTuX84SzAe92fdwVH73gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVkNzc4NDAtNjA4ZS00NDlhLWIyMmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAz RkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcwNTQ3RUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZBRkI5MDNGRTY0RUU1RkNFMTJDQzA3QkREOUY3NzA1NDdF Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlG NzcwNTQ3RUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtEQRCYNsOgQL6vEAnVojePgz5mmLXG1Hpn E1E1Ss7+gwRhyvzWb4nZ+oG1nz+Lhr3p2hZN/3va/bfLMBkMBvx4OlEzpqTZW0ho NEzxndLX1ayt7mwWHLKJ8PRv7WDNNhO4e/2Ak7NCUGvveYx7V4GqqNDlWAbeL+FK pIDEVakfD6XL4lJ7uDVwxh7z6gJolWaQfrAUiGiXAUvWRjBAGE7DmZNbXKn0Nls1 TanqwXPdXIXiyny2gr2ISWZbjBImR5PjXrIz+UB3Zk1DYR6N3uwkDsc0lW4TnMj7 fiKx2Ised9SVBE1nJVwJHyng3KwMJxTBqADPumKBqlattfcOafY= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:40 2026 by rpki-client