$ rpki-client -vvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json) Hash identifier: /ilZiVxPCW4lMtNY9CTO6PCRoNX8wLPxb/gILW5XfXI= Subject key identifier: 3A:A7:10:4D:53:F9:6C:29:7E:39:FF:7C:8A:E5:8C:57:44:87:33:3A Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Certificate serial: 791A10835DA066D52838CFCA1D2E6948D59664EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:46:15 +0000 Manifest this update: Tue 12 May 2026 05:41:15 +0000 Manifest next update: Wed 13 May 2026 08:35:15 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=) 2: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: RmrMSlurOu4mqUoDyM0fsyRVIiYl1uRmMCgl5OD+d/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1a:10:83:5d:a0:66:d5:28:38:cf:ca:1d:2e:69:48:d5:96:64:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Validity Not Before: May 12 05:41:15 2026 GMT Not After : May 13 08:35:15 2026 GMT Subject: CN=3AA7104D53F96C297E39FF7C8AE58C574487333A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:32:2c:24:91:40:d0:e9:a2:b6:82:3f:c5: 0d:b7:85:b8:13:28:c5:cc:f8:b4:6e:3a:94:2a:54: 1e:65:07:48:f5:90:75:6a:67:e0:95:fd:dc:c8:85: cf:1d:a9:10:8e:6c:8e:ca:36:2f:89:e0:39:27:a0: b2:87:3b:d5:a2:91:0e:fb:fa:1e:52:46:42:64:ce: 80:a0:0b:65:08:bb:53:df:39:1f:3f:e9:80:04:9e: fd:c9:5f:b1:75:e7:d3:49:77:bd:74:84:23:36:ce: 65:68:32:79:47:a9:41:61:17:7c:ca:b9:8f:ce:5e: 6d:e1:31:25:57:84:21:97:d7:0c:d5:c1:b7:d9:7e: 25:5f:ba:e5:3d:d4:15:d4:67:90:c0:d5:c4:91:f0: 73:0e:40:fa:84:f9:19:2c:fd:af:c9:a3:bb:7a:81: 19:8e:a1:54:7a:77:b0:1f:dd:9d:7b:4f:e5:63:8c: 29:24:79:0a:64:8c:34:b6:09:da:f8:b4:7d:3c:31: 63:80:f4:84:f1:43:ce:67:a8:7a:f3:f3:e4:06:da: 66:ef:b4:ce:64:46:a2:90:e2:76:33:08:08:08:04: 2b:f5:34:17:c3:9e:f8:4d:21:37:e4:cc:e7:f6:49: 25:e1:32:b9:73:06:b2:fe:07:cd:f8:01:c4:af:80: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A7:10:4D:53:F9:6C:29:7E:39:FF:7C:8A:E5:8C:57:44:87:33:3A X509v3 Authority Key Identifier: keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:da:ca:4c:9b:a8:85:e0:63:97:a1:47:c5:ac:28:55:0d:88: 05:dc:c5:4d:a0:d6:24:aa:1d:fc:7c:71:bb:fb:10:3a:fa:71: b5:07:e7:83:2e:d5:fc:1f:fe:2b:9e:78:7f:5e:a2:91:01:5b: c6:e3:b3:0a:0e:05:72:9e:f9:d2:cc:01:fb:35:35:a2:66:67: a6:ac:3b:cb:94:62:45:b1:c7:c1:fe:f9:b5:af:7c:4c:3a:d9: 6a:85:a9:29:68:f8:c4:e9:9a:01:a0:da:f7:4e:fc:5c:c6:4e: f2:3e:7b:53:8a:a5:9f:45:1f:78:15:ef:01:ea:d6:06:83:6b: e4:6d:42:cf:37:56:f2:8b:91:c4:fe:eb:9c:11:9b:47:bd:40: f0:2e:4d:b8:98:26:9d:8f:63:3a:63:74:7a:f6:fa:d9:23:99: 53:e3:5a:c6:9b:8a:60:05:90:30:f0:e2:fa:52:e8:69:87:70: 73:9d:30:e7:68:e0:04:3b:89:98:a2:d0:90:da:00:70:15:36: 7f:ee:fb:80:d8:f3:a0:d3:14:15:ca:49:53:a2:4a:9e:08:3f: 1d:24:e4:2f:0b:d8:6c:54:84:31:29:18:35:2a:a4:c1:9d:50: 20:83:58:a8:9b:33:fd:81:a6:94:81:0d:c3:c0:bb:ed:9a:c9: e4:3f:79:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRoQg12gZtUoOM/KHS5pSNWWZO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUwMzcw QzA2MzEzNTAeFw0yNjA1MTIwNTQxMTVaFw0yNjA1MTMwODM1MTVaMDMxMTAvBgNV BAMTKDNBQTcxMDRENTNGOTZDMjk3RTM5RkY3QzhBRTU4QzU3NDQ4NzMzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4TIsJJFA0OmitoI/xQ23hbgT KMXM+LRuOpQqVB5lB0j1kHVqZ+CV/dzIhc8dqRCObI7KNi+J4DknoLKHO9WikQ77 +h5SRkJkzoCgC2UIu1PfOR8/6YAEnv3JX7F159NJd710hCM2zmVoMnlHqUFhF3zK uY/OXm3hMSVXhCGX1wzVwbfZfiVfuuU91BXUZ5DA1cSR8HMOQPqE+Rks/a/Jo7t6 gRmOoVR6d7Af3Z17T+VjjCkkeQpkjDS2Cdr4tH08MWOA9ITxQ85nqHrz8+QG2mbv tM5kRqKQ4nYzCAgIBCv1NBfDnvhNITfkzOf2SSXhMrlzBrL+B834AcSvgNBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqcQTVP5bCl+Of98iuWMV0SHMzowHwYDVR0j BBgwFoAUz1yl4wIxHNDbD+qEDnRQNwwGMTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3OTFiNzMtYmIwOC00YTgzLWExOTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMw MjMxMUNEMERCMEZFQTg0MEU3NDUwMzcwQzA2MzEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjVDQTVFMzAyMzExQ0QwREIwRkVBODQwRTc0NTAzNzBDMDYz MTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUw MzcwQzA2MzEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbaykybqIXgY5ehR8WsKFUNiAXcxU2g1iSq Hfx8cbv7EDr6cbUH54Mu1fwf/iueeH9eopEBW8bjswoOBXKe+dLMAfs1NaJmZ6as O8uUYkWxx8H++bWvfEw62WqFqSlo+MTpmgGg2vdO/FzGTvI+e1OKpZ9FH3gV7wHq 1gaDa+RtQs83VvKLkcT+65wRm0e9QPAuTbiYJp2PYzpjdHr2+tkjmVPjWsabimAF kDDw4vpS6GmHcHOdMOdo4AQ7iZii0JDaAHAVNn/u+4DY86DTFBXKSVOiSp4IPx0k 5C8L2GxUhDEpGDUqpMGdUCCDWKibM/2BppSBDcPAu+2ayeQ/eV4= -----END CERTIFICATE-----Generated at Tue May 12 22:52:32 2026 by rpki-client