$ rpki-client -vvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: UyG86Yzw2UQ7gRUJcVzW/uUxC5mYAcWCRhkas7ETfUU= Subject key identifier: 3B:B2:EB:FB:71:88:89:EF:87:21:E5:EE:D9:92:93:62:78:A8:00:D8 Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 5EF3EB43FE7DFCE0940134DBB6B883C86D5D8C08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:39:55 +0000 Manifest this update: Fri 24 Jul 2026 00:34:55 +0000 Manifest next update: Sat 25 Jul 2026 01:54:55 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) 2: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: gjvd/i2EPJ1cYrcHuEekR/csaN8SbmgHnOu7LYnloBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:eb:43:fe:7d:fc:e0:94:01:34:db:b6:b8:83:c8:6d:5d:8c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: Jul 24 00:34:55 2026 GMT Not After : Jul 25 01:54:55 2026 GMT Subject: CN=3BB2EBFB718889EF8721E5EED992936278A800D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:83:fb:3f:f5:37:c0:17:49:8d:a6:67:cf: 1e:a9:e3:d3:f3:db:21:26:8e:91:ce:bb:26:87:b0: fd:10:05:8d:ca:33:f6:f2:36:cf:7c:7f:09:38:96: fd:2c:db:c8:f3:d7:77:bb:32:58:aa:c9:09:17:5e: e4:8b:11:ef:b6:d2:58:78:10:80:36:20:63:25:1b: c0:99:43:fa:c5:65:89:cd:25:33:bb:21:87:36:94: 4c:ea:6c:40:ae:38:90:3f:c0:b0:a7:62:ec:1f:65: 41:50:74:01:cc:c5:0c:41:c0:97:32:27:cf:24:0e: 6e:05:df:fc:ca:53:3c:28:b0:72:be:52:d7:b9:5d: f0:ab:b5:09:a7:e7:b7:14:a4:54:5b:92:47:7a:93: 95:80:62:14:dd:dd:ff:a0:13:4c:01:7b:33:c5:ac: 00:1e:78:0f:56:16:2c:c7:6f:9c:4a:cd:4c:06:c9: 76:c5:75:49:27:fd:48:76:9a:0d:e0:00:52:59:93: 1c:6b:31:77:f0:e6:d1:a5:b5:b1:88:f6:65:c8:60: 48:57:e9:7c:fa:fb:a2:db:5b:12:60:b9:cb:0f:e3: f3:8f:8e:8e:b7:20:a6:bc:44:16:14:d3:8f:a3:f7: 6f:28:9e:63:ae:f7:d1:7b:c4:ae:22:b9:48:51:76: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B2:EB:FB:71:88:89:EF:87:21:E5:EE:D9:92:93:62:78:A8:00:D8 X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e6:f7:32:77:47:1e:19:38:22:9c:fa:0e:43:e8:a2:5c:91: b0:f5:39:6b:fd:b5:11:5d:13:ff:a4:60:f3:a9:73:07:c4:63: 74:a0:65:c6:68:cc:51:e2:d5:98:6a:7d:a2:70:5f:68:19:68: 38:bb:65:3a:fa:41:98:16:d0:3a:39:4f:55:f9:a8:de:a9:51: a8:9b:c5:d1:bb:28:5d:74:75:af:73:23:5d:10:16:af:f1:8b: bb:40:ae:46:bd:e6:95:81:f0:9e:32:b8:90:18:11:ff:17:26: 20:c8:2a:2c:83:b0:67:98:f0:99:fd:cf:36:02:e1:5c:c5:17: 8a:08:91:81:ba:c0:f6:ef:f8:a1:61:b8:ad:70:60:77:e5:e4: a5:eb:0f:e4:cb:1c:77:74:08:a3:99:9e:ac:2f:ae:cf:39:e9: 72:fa:71:1e:85:87:58:be:a6:8e:03:02:89:56:d2:2e:9f:86: a1:3a:9c:8d:54:a8:52:ef:49:6c:7d:1f:18:8c:c2:68:eb:50: 60:58:64:da:4e:f7:30:5a:39:1c:eb:c5:64:93:81:f1:ef:0e: d2:d7:f0:ea:17:19:91:9c:56:a5:79:b0:87:30:f7:57:1b:52: a7:73:7d:64:d6:07:8b:21:90:6c:ae:1a:a6:10:a6:b2:4a:7d: 04:ea:4c:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvPrQ/59/OCUATTbtriDyG1djAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjA3MjQwMDM0NTVaFw0yNjA3MjUwMTU0NTVaMDMxMTAvBgNV BAMTKDNCQjJFQkZCNzE4ODg5RUY4NzIxRTVFRUQ5OTI5MzYyNzhBODAwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZYP7P/U3wBdJjaZnzx6p49Pz 2yEmjpHOuyaHsP0QBY3KM/byNs98fwk4lv0s28jz13e7MliqyQkXXuSLEe+20lh4 EIA2IGMlG8CZQ/rFZYnNJTO7IYc2lEzqbECuOJA/wLCnYuwfZUFQdAHMxQxBwJcy J88kDm4F3/zKUzwosHK+Ute5XfCrtQmn57cUpFRbkkd6k5WAYhTd3f+gE0wBezPF rAAeeA9WFizHb5xKzUwGyXbFdUkn/Uh2mg3gAFJZkxxrMXfw5tGltbGI9mXIYEhX 6Xz6+6LbWxJgucsP4/OPjo63IKa8RBYU04+j928onmOu99F7xK4iuUhRds2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7Lr+3GIie+HIeXu2ZKTYnioANgwHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXm9zJ3Rx4ZOCKc+g5D6KJckbD1OWv9tRFd E/+kYPOpcwfEY3SgZcZozFHi1ZhqfaJwX2gZaDi7ZTr6QZgW0Do5T1X5qN6pUaib xdG7KF10da9zI10QFq/xi7tArka95pWB8J4yuJAYEf8XJiDIKiyDsGeY8Jn9zzYC 4VzFF4oIkYG6wPbv+KFhuK1wYHfl5KXrD+TLHHd0CKOZnqwvrs856XL6cR6Fh1i+ po4DAolW0i6fhqE6nI1UqFLvSWx9HxiMwmjrUGBYZNpO9zBaORzrxWSTgfHvDtLX 8OoXGZGcVqV5sIcw91cbUqdzfWTWB4shkGyuGqYQprJKfQTqTPM= -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:21 2026 by rpki-client