$ rpki-client -vvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: XT+Kj9okC/GsqU9wtGN3YgDl0j+vjB7iSyIyrv7MKgY= Subject key identifier: 8C:D4:B5:C0:E4:BF:1F:FB:8A:A8:F9:7F:F0:94:C1:F3:E6:60:62:67 Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 7C6E097F472B9F4338C18AA5FFF6A6F7738CAC4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:36:03 +0000 Manifest this update: Tue 12 May 2026 22:31:03 +0000 Manifest next update: Wed 13 May 2026 23:27:03 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) 2: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: rOB1thz9Wo79pIofm2+Nt1IlsPfZpKvrqy4ZOBGBFwg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6e:09:7f:47:2b:9f:43:38:c1:8a:a5:ff:f6:a6:f7:73:8c:ac:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: May 12 22:31:03 2026 GMT Not After : May 13 23:27:03 2026 GMT Subject: CN=8CD4B5C0E4BF1FFB8AA8F97FF094C1F3E6606267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:a7:ee:bd:ae:c9:17:b2:57:c2:9e:83:b8: 80:fb:72:74:32:41:21:51:c2:b3:b5:ac:5b:68:9c: 32:8c:5d:22:1b:49:64:d0:e7:98:2a:27:f8:ba:a9: 1f:ad:21:66:b6:ea:6c:c3:94:ff:93:d5:8d:62:cb: 04:31:eb:a2:ec:67:73:2f:71:de:50:18:0d:5f:70: 01:80:9f:6b:fe:25:2b:1b:da:b9:9f:88:d5:4b:29: 2f:2d:12:e9:de:ea:c3:24:71:e4:9d:60:1b:38:37: 40:16:35:83:10:9f:75:db:a6:21:7d:07:99:dd:25: 1c:cf:57:b9:46:9f:84:0a:b2:98:2a:00:44:e8:48: b6:8b:03:47:a1:b2:a0:d3:f5:23:56:44:eb:14:0f: 44:68:24:a9:c2:40:15:b0:f5:f9:ad:9e:0a:3d:9f: 11:aa:81:dd:ec:b3:0c:6c:36:fd:1a:bc:96:cc:be: c2:0e:5f:ab:15:23:de:8e:34:d7:ea:cc:04:54:32: 69:ef:8b:e0:7a:f2:80:e7:fc:75:44:8f:15:0f:d9: 84:f2:aa:d0:fc:2d:f5:2f:1e:16:e7:6b:9e:be:1f: 04:8b:17:25:82:98:fc:83:d5:fe:66:ff:03:f6:dd: b4:15:dc:44:9b:86:39:db:24:eb:3c:43:03:a1:5c: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D4:B5:C0:E4:BF:1F:FB:8A:A8:F9:7F:F0:94:C1:F3:E6:60:62:67 X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5c:47:e6:11:98:f0:da:35:3d:87:6f:dc:20:fa:63:48:db: 4c:36:d8:87:33:5c:6c:e5:f2:c0:5c:79:64:fe:8b:24:d7:f2: 37:7b:ac:ab:e3:6e:c4:d6:bf:e3:ef:fc:25:90:de:5d:51:ec: 9b:09:b8:56:58:64:d8:4e:ac:36:df:ea:b1:99:28:eb:39:03: 3e:8c:5e:aa:4e:8e:a1:d7:1b:8b:1f:b3:03:d5:0f:65:e7:c2: c9:e1:3e:d3:45:0c:57:38:68:40:07:ca:b3:b5:e9:f9:f9:80: 9b:ee:0c:5a:5a:dd:4f:56:22:e5:b0:69:5a:f2:e4:79:64:62: 93:cf:2f:fb:71:14:c2:f5:de:90:80:c1:ec:f1:d4:36:ec:37: a8:31:9a:9b:8a:ef:c9:27:0f:51:cf:83:2f:65:c2:3b:fc:4a: d9:7c:4a:b3:6b:04:68:14:e1:50:ae:19:6a:bd:74:84:36:62: f6:9a:e4:dc:82:0b:2b:d3:38:18:bd:c1:1f:cf:6a:d0:d0:17: e2:a1:d6:14:45:c6:a8:6d:c2:1e:b9:0a:bd:93:b8:79:54:80: 6a:e2:87:74:9b:9f:66:aa:76:90:4c:38:6d:97:58:50:d7:69: a6:5a:82:b9:42:52:8b:d2:bc:7d:28:67:c2:21:91:04:e9:d4: f3:53:0a:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfG4Jf0crn0M4wYql//am93OMrEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjA1MTIyMjMxMDNaFw0yNjA1MTMyMzI3MDNaMDMxMTAvBgNV BAMTKDhDRDRCNUMwRTRCRjFGRkI4QUE4Rjk3RkYwOTRDMUYzRTY2MDYyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7afuva7JF7JXwp6DuID7cnQy QSFRwrO1rFtonDKMXSIbSWTQ55gqJ/i6qR+tIWa26mzDlP+T1Y1iywQx66LsZ3Mv cd5QGA1fcAGAn2v+JSsb2rmfiNVLKS8tEune6sMkceSdYBs4N0AWNYMQn3XbpiF9 B5ndJRzPV7lGn4QKspgqAEToSLaLA0ehsqDT9SNWROsUD0RoJKnCQBWw9fmtngo9 nxGqgd3sswxsNv0avJbMvsIOX6sVI96ONNfqzARUMmnvi+B68oDn/HVEjxUP2YTy qtD8LfUvHhbna56+HwSLFyWCmPyD1f5m/wP23bQV3ESbhjnbJOs8QwOhXBFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNS1wOS/H/uKqPl/8JTB8+ZgYmcwHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENcR+YRmPDaNT2Hb9wg+mNI20w22IczXGzl 8sBceWT+iyTX8jd7rKvjbsTWv+Pv/CWQ3l1R7JsJuFZYZNhOrDbf6rGZKOs5Az6M XqpOjqHXG4sfswPVD2XnwsnhPtNFDFc4aEAHyrO16fn5gJvuDFpa3U9WIuWwaVry 5HlkYpPPL/txFML13pCAwezx1DbsN6gxmpuK78knD1HPgy9lwjv8Stl8SrNrBGgU 4VCuGWq9dIQ2Yvaa5NyCCyvTOBi9wR/PatDQF+Kh1hRFxqhtwh65Cr2TuHlUgGri h3Sbn2aqdpBMOG2XWFDXaaZagrlCUovSvH0oZ8IhkQTp1PNTClk= -----END CERTIFICATE-----Generated at Wed May 13 01:34:14 2026 by rpki-client