$ rpki-client -vvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft File: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft (raw, json) Hash identifier: ociLRBpd0OATXyZkoGa2jUxlSiHQtm2iLfDVUt7nOjc= Subject key identifier: 90:30:42:67:75:91:0F:DD:88:15:F8:BD:71:7C:83:06:E4:2B:6A:D7 Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Certificate serial: 06C56924F20A64DEB03F395B10A1F5CE5DE16981 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:01:51 +0000 Manifest this update: Tue 12 May 2026 02:56:51 +0000 Manifest next update: Wed 13 May 2026 06:48:51 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=) 2: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl (hash: 8VSBcpHbkHuGZX9yXkRh+mj0JqTv0dE/hc1bKT4NkaU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c5:69:24:f2:0a:64:de:b0:3f:39:5b:10:a1:f5:ce:5d:e1:69:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Validity Not Before: May 12 02:56:51 2026 GMT Not After : May 13 06:48:51 2026 GMT Subject: CN=9030426775910FDD8815F8BD717C8306E42B6AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:68:3d:d7:bd:b3:85:df:44:98:6b:8c:4f: db:9d:08:5f:c6:15:27:9e:5d:57:a0:13:d2:0a:a9: 81:0f:20:0c:94:7c:0e:8e:96:0f:8c:41:1f:0f:d8: 84:85:08:b0:ad:11:b5:fd:ee:6f:9f:13:68:cc:c9: a0:58:8c:57:0d:6c:f9:11:ac:bf:51:1e:58:c9:c4: b5:6b:f9:3c:54:52:07:89:56:af:1d:55:91:96:30: 98:c3:83:2b:be:ec:80:16:27:38:f3:03:e2:1d:b8: d7:62:af:16:c4:67:e3:8e:60:02:82:3f:f6:5a:4d: 14:6a:4a:50:9c:bd:0e:b3:d2:d3:ce:0f:49:53:a4: 5d:91:b5:60:d7:5c:a0:a6:9a:fd:00:f3:97:fe:97: 30:9c:a3:dc:6c:76:f6:32:6f:20:08:a3:9d:e1:61: 8a:5b:6d:54:9a:ee:2d:47:75:14:82:23:73:74:12: f3:06:91:13:2b:c3:75:96:d0:01:dd:a5:91:68:d8: 39:5a:a1:04:a4:c7:72:99:80:19:5c:0d:7c:8c:c7: ca:b3:a9:77:26:4f:2e:93:1c:68:f4:2a:71:76:91: 78:19:4d:3b:57:de:c8:fc:d7:32:b9:52:59:6b:a6: ac:d7:4c:64:d1:e9:c3:7f:08:cf:da:d7:2f:61:03: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:42:67:75:91:0F:DD:88:15:F8:BD:71:7C:83:06:E4:2B:6A:D7 X509v3 Authority Key Identifier: keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:bf:f5:cc:40:94:96:d9:17:57:ae:5d:b3:9b:a9:ab:d0: 6a:60:a7:b8:38:38:ff:c7:63:7f:d0:92:60:7f:7d:ad:50:a7: d0:b5:fa:4f:09:e5:6b:21:4c:53:42:4d:7d:3f:80:88:19:f9: ff:3c:94:1f:93:5f:49:c6:f4:7e:46:f5:30:91:c2:0a:7e:86: 95:f6:f2:84:09:31:0e:f2:5a:d5:ca:ce:5b:ce:4e:90:35:97: fb:f6:b6:cc:3d:80:ae:54:87:3f:1b:0d:78:48:36:3e:77:e3: 20:05:2c:52:94:38:40:02:4d:f1:d2:8f:9c:6e:fb:a9:33:e9: 22:5a:9c:e7:d7:ee:44:c4:b8:9e:f5:06:2d:40:e3:0a:d4:18: 06:8e:34:5f:1e:43:a5:a9:db:15:3a:08:25:2f:92:18:78:e0: 56:2e:8f:b5:1e:d5:54:56:4e:8c:be:dc:aa:bc:95:fa:e8:35: 3d:fa:15:b2:54:01:9f:91:33:c8:ea:cf:24:82:dd:c5:c8:51: 67:32:2a:05:85:18:01:e3:b4:50:53:16:9c:f5:ba:62:cc:62: 5c:c6:49:72:4d:2a:72:bb:cd:83:82:19:85:7f:76:93:9e:6e: 7a:a3:82:0d:47:43:0e:df:17:88:0e:16:39:b1:b1:f8:ac:81: 84:aa:48:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsVpJPIKZN6wPzlbEKH1zl3haYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC OUUzNkZFODAeFw0yNjA1MTIwMjU2NTFaFw0yNjA1MTMwNjQ4NTFaMDMxMTAvBgNV BAMTKDkwMzA0MjY3NzU5MTBGREQ4ODE1RjhCRDcxN0M4MzA2RTQyQjZBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2mg9172zhd9EmGuMT9udCF/G FSeeXVegE9IKqYEPIAyUfA6Olg+MQR8P2ISFCLCtEbX97m+fE2jMyaBYjFcNbPkR rL9RHljJxLVr+TxUUgeJVq8dVZGWMJjDgyu+7IAWJzjzA+IduNdirxbEZ+OOYAKC P/ZaTRRqSlCcvQ6z0tPOD0lTpF2RtWDXXKCmmv0A85f+lzCco9xsdvYybyAIo53h YYpbbVSa7i1HdRSCI3N0EvMGkRMrw3WW0AHdpZFo2DlaoQSkx3KZgBlcDXyMx8qz qXcmTy6THGj0KnF2kXgZTTtX3sj81zK5UllrpqzXTGTR6cN/CM/a1y9hA8u9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDBCZ3WRD92IFfi9cXyDBuQratcwHwYDVR0j BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2 NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2 RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBG OEFCOUUzNkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpgv/XMQJSW2RdXrl2zm6mr0Gpgp7g4OP/H Y3/QkmB/fa1Qp9C1+k8J5WshTFNCTX0/gIgZ+f88lB+TX0nG9H5G9TCRwgp+hpX2 8oQJMQ7yWtXKzlvOTpA1l/v2tsw9gK5Uhz8bDXhINj534yAFLFKUOEACTfHSj5xu +6kz6SJanOfX7kTEuJ71Bi1A4wrUGAaONF8eQ6Wp2xU6CCUvkhh44FYuj7Ue1VRW Toy+3Kq8lfroNT36FbJUAZ+RM8jqzySC3cXIUWcyKgWFGAHjtFBTFpz1umLMYlzG SXJNKnK7zYOCGYV/dpOebnqjgg1HQw7fF4gOFjmxsfisgYSqSEo= -----END CERTIFICATE-----Generated at Tue May 12 22:19:28 2026 by rpki-client