$ rpki-client -vvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft File: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft (raw, json) Hash identifier: TwIjPgGqZdGMDQAu7GnvgleMuD6st6Vg0C2yCJsFy2k= Subject key identifier: 20:D8:F8:AF:E5:F6:29:A3:B2:0F:56:C9:DB:73:4B:F9:A4:1A:D4:0A Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Certificate serial: 4AA22C30F74D0131E5836923BE2CCF6BB4A93AD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:08:03 +0000 Manifest this update: Fri 24 Jul 2026 11:03:03 +0000 Manifest next update: Sat 25 Jul 2026 13:41:03 +0000 Files and hashes: 1: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl (hash: 5Cw6/gdOS2pXzgixoUEgAYP8FWEgNtfwmBoN7MzmDPg=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a2:2c:30:f7:4d:01:31:e5:83:69:23:be:2c:cf:6b:b4:a9:3a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Validity Not Before: Jul 24 11:03:03 2026 GMT Not After : Jul 25 13:41:03 2026 GMT Subject: CN=20D8F8AFE5F629A3B20F56C9DB734BF9A41AD40A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:4f:b4:b7:7c:41:d8:dc:ae:72:dc:a8:b0: f8:d5:7d:26:f1:e5:aa:ed:00:97:33:e0:88:04:b6: 3a:67:a8:c5:e8:8b:db:1b:d3:78:26:25:a7:de:55: 86:30:ed:3e:5f:a7:1e:98:9b:8a:a5:89:c4:9f:4f: bb:10:99:57:e3:4d:91:9a:73:be:36:2a:61:99:ca: 00:41:a3:f2:3f:5e:3c:07:a5:75:dd:6e:ea:cc:4d: 8b:df:0c:60:88:e4:b1:4e:1c:fb:aa:2e:d8:ce:b1: 19:cb:ef:78:78:96:88:e5:7c:a1:74:62:11:a0:65: 09:6c:57:f2:0e:76:6f:55:26:50:c7:5d:30:8c:4f: 18:05:36:1c:49:d5:f9:03:c3:36:2f:c5:25:09:9e: 76:de:d7:17:8a:0c:d5:3f:cb:e8:d9:33:df:14:57: 75:ea:4b:89:17:95:2c:23:6f:fc:66:54:b4:54:c9: 61:62:c0:7e:70:a2:00:f4:d8:c8:00:cf:3f:fb:b2: 22:33:58:68:bc:67:f1:1a:3f:84:39:77:d6:17:87: 73:51:56:9a:83:57:8e:2c:3b:bb:34:21:39:b0:24: 94:0f:7b:76:2f:61:53:71:94:8e:36:8d:49:4f:c4: 20:9c:aa:8e:81:53:1a:22:8a:9c:32:07:f2:9c:e0: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:F8:AF:E5:F6:29:A3:B2:0F:56:C9:DB:73:4B:F9:A4:1A:D4:0A X509v3 Authority Key Identifier: keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:67:1c:94:1d:c1:ec:87:2d:35:d5:7b:81:2a:ef:f6:17:af: bb:3f:07:7c:ba:5d:ab:22:bc:d3:6b:0a:aa:c4:59:f7:a8:f1: 7e:f9:56:02:63:38:e5:1b:d3:34:ef:ab:d6:aa:d3:cc:6e:f0: f6:53:1e:ae:c0:44:5c:03:52:f3:c0:0f:77:82:ce:89:ea:fa: ad:1a:aa:a3:d8:14:dd:94:d8:42:db:55:f6:f1:36:19:88:f8: 49:13:39:70:7c:b3:84:18:a2:42:cf:e9:95:09:04:ff:00:76: 41:7a:9c:68:d8:f3:ad:f4:ec:4b:79:e6:04:45:60:78:e3:3a: 8a:4c:6e:4f:86:6f:18:db:5f:02:6f:02:1d:f9:c3:5c:5e:6a: 2b:6f:24:bc:0b:7e:4d:73:20:28:5b:bd:b3:f4:a9:11:c1:c6: 79:69:3b:73:40:58:5d:c9:dc:7e:aa:5c:e3:30:30:50:9b:12: 0f:1a:ba:25:2e:71:2b:c6:53:71:f4:40:04:64:58:d5:bb:a2: 37:45:d5:8e:fd:fd:4d:6e:1a:09:c5:6f:11:88:24:72:23:e3: d1:f8:24:2f:64:3b:a1:a2:71:31:0f:9a:c6:26:21:24:3d:90: 56:85:85:37:c0:c0:8e:c8:10:34:c2:41:98:14:ab:cc:f0:a1: 32:17:6e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqIsMPdNATHlg2kjvizPa7SpOtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC OUUzNkZFODAeFw0yNjA3MjQxMTAzMDNaFw0yNjA3MjUxMzQxMDNaMDMxMTAvBgNV BAMTKDIwRDhGOEFGRTVGNjI5QTNCMjBGNTZDOURCNzM0QkY5QTQxQUQ0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+a0+0t3xB2NyuctyosPjVfSbx 5artAJcz4IgEtjpnqMXoi9sb03gmJafeVYYw7T5fpx6Ym4qlicSfT7sQmVfjTZGa c742KmGZygBBo/I/XjwHpXXdburMTYvfDGCI5LFOHPuqLtjOsRnL73h4lojlfKF0 YhGgZQlsV/IOdm9VJlDHXTCMTxgFNhxJ1fkDwzYvxSUJnnbe1xeKDNU/y+jZM98U V3XqS4kXlSwjb/xmVLRUyWFiwH5wogD02MgAzz/7siIzWGi8Z/EaP4Q5d9YXh3NR VpqDV44sO7s0ITmwJJQPe3YvYVNxlI42jUlPxCCcqo6BUxoiipwyB/Kc4N3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINj4r+X2KaOyD1bJ23NL+aQa1AowHwYDVR0j BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2 NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2 RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBG OEFCOUUzNkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpnHJQdweyHLTXVe4Eq7/YXr7s/B3y6Xasi vNNrCqrEWfeo8X75VgJjOOUb0zTvq9aq08xu8PZTHq7ARFwDUvPAD3eCzonq+q0a qqPYFN2U2ELbVfbxNhmI+EkTOXB8s4QYokLP6ZUJBP8AdkF6nGjY86307Et55gRF YHjjOopMbk+GbxjbXwJvAh35w1xeaitvJLwLfk1zIChbvbP0qRHBxnlpO3NAWF3J 3H6qXOMwMFCbEg8auiUucSvGU3H0QARkWNW7ojdF1Y79/U1uGgnFbxGIJHIj49H4 JC9kO6GicTEPmsYmISQ9kFaFhTfAwI7IEDTCQZgUq8zwoTIXbuM= -----END CERTIFICATE-----Generated at Fri Jul 24 15:05:47 2026 by rpki-client