$ rpki-client -vvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft File: CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json) Hash identifier: PofQZ7/I+s89GhoxrfoTzinWDlXZUa156tjE9wO9VdM= Subject key identifier: D8:89:38:4C:14:A5:53:F5:B2:51:D9:EF:6C:DD:49:FA:42:76:43:C1 Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 Certificate issuer: /CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Certificate serial: 2B6D2A34FBF4B6AFE8F28270BFF3D68789CAC426 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:34:01 +0000 Manifest this update: Tue 12 May 2026 18:29:01 +0000 Manifest next update: Wed 13 May 2026 22:17:01 +0000 Files and hashes: 1: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: zIntMBEF3cJExqu90WT3w1sSFTRjHFjIU7/D3uvyY7c=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6d:2a:34:fb:f4:b6:af:e8:f2:82:70:bf:f3:d6:87:89:ca:c4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Validity Not Before: May 12 18:29:01 2026 GMT Not After : May 13 22:17:01 2026 GMT Subject: CN=D889384C14A553F5B251D9EF6CDD49FA427643C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:f3:4a:99:18:92:d6:b7:8e:35:40:9b:ed: 06:0e:26:c0:07:67:9c:a4:c4:87:7b:e8:c8:6e:f4: 92:26:b6:c3:c7:8a:38:a3:bb:2b:8c:05:5c:5f:38: 39:a5:95:1c:37:44:f6:0d:be:a0:27:56:5f:7e:d9: e5:87:a9:4f:2a:d8:52:f0:fc:cd:bf:5f:f9:b2:b8: 5c:18:9f:93:49:ae:f2:7c:8c:5c:44:01:73:5f:92: 81:9f:9f:bb:a1:21:8f:be:a0:76:a2:32:ce:5c:93: fc:3d:43:69:6a:a3:0a:9a:95:1e:72:a4:40:d6:4a: 68:df:29:b2:b1:9b:42:d6:37:87:4f:ae:23:a7:f9: e9:d9:b9:73:09:d5:44:57:50:7c:1d:4e:75:11:5b: 3d:02:a5:1b:fc:d5:83:50:c8:a0:f7:45:24:f9:50: 2a:58:fe:b6:8e:85:ba:bf:98:c2:1e:c5:7b:05:7a: 7d:90:e4:11:c0:44:f1:65:4f:49:c0:9f:16:07:77: ac:18:f0:f3:94:35:70:71:9a:42:ea:ca:d4:16:ef: 13:fc:72:c3:c7:42:71:00:21:61:78:7a:c3:2e:6f: 43:3c:17:a3:04:db:78:01:53:3f:3a:f6:cb:7e:cc: c9:a8:6d:b8:5f:38:77:e3:9f:f4:52:ed:78:d6:1f: 26:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:89:38:4C:14:A5:53:F5:B2:51:D9:EF:6C:DD:49:FA:42:76:43:C1 X509v3 Authority Key Identifier: keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:8b:12:94:e3:f2:4c:91:34:71:81:fb:df:2a:a2:40:96:12: 68:eb:88:d2:ed:9f:dd:5e:f4:81:1b:7e:8f:52:44:fc:22:f7: 43:ed:23:09:5a:76:a1:14:53:4b:51:c0:45:90:4b:c2:59:64: 16:81:84:32:f6:59:3a:c6:3f:a4:08:d3:ff:9b:ad:98:a5:d4: 19:6d:27:c2:f7:d7:86:39:7f:5f:55:62:46:63:39:af:67:37: ba:79:79:f5:c7:a4:d4:76:92:f7:db:05:f8:25:18:43:93:ab: 64:55:6d:a5:4b:13:f6:d0:11:df:90:27:1b:a1:30:df:e3:5e: 57:f4:c7:06:ee:64:35:7d:db:7e:6c:60:49:ad:4d:be:98:6a: 82:eb:f3:54:d6:b7:8b:1e:6a:af:d0:2f:d8:89:3e:f1:32:6d: 0c:f1:9b:c6:58:13:1e:85:46:0f:57:c9:30:ad:72:f5:80:13: 6b:13:62:88:e8:26:71:b1:b8:31:f5:fc:0b:5e:69:77:60:04: 57:6b:c0:db:dd:9c:ac:cd:a9:9c:ee:18:c5:c8:2e:87:2d:71: 82:6e:92:f8:50:22:73:6d:83:ac:67:c2:15:e3:57:3d:6e:c9: aa:a1:87:47:6a:e0:54:50:88:95:d3:36:d6:6b:26:50:bd:43: 90:3f:8a:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK20qNPv0tq/o8oJwv/PWh4nKxCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1RjA2 RjU0MTc0ODAeFw0yNjA1MTIxODI5MDFaFw0yNjA1MTMyMjE3MDFaMDMxMTAvBgNV BAMTKEQ4ODkzODRDMTRBNTUzRjVCMjUxRDlFRjZDREQ0OUZBNDI3NjQzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2fNKmRiS1reONUCb7QYOJsAH Z5ykxId76Mhu9JImtsPHijijuyuMBVxfODmllRw3RPYNvqAnVl9+2eWHqU8q2FLw /M2/X/myuFwYn5NJrvJ8jFxEAXNfkoGfn7uhIY++oHaiMs5ck/w9Q2lqowqalR5y pEDWSmjfKbKxm0LWN4dPriOn+enZuXMJ1URXUHwdTnURWz0CpRv81YNQyKD3RST5 UCpY/raOhbq/mMIexXsFen2Q5BHARPFlT0nAnxYHd6wY8POUNXBxmkLqytQW7xP8 csPHQnEAIWF4esMub0M8F6ME23gBUz869st+zMmobbhfOHfjn/RS7XjWHyYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Ik4TBSlU/WyUdnvbN1J+kJ2Q8EwHwYDVR0j BBgwFoAUzyBNdI2tLRoCTeZtheQl8G9UF0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJmNTk4NmItYzc2NC00Y2Q3LWI0MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4 REFEMkQxQTAyNERFNjZEODVFNDI1RjA2RjU0MTc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjIwNEQ3NDhEQUQyRDFBMDI0REU2NkQ4NUU0MjVGMDZGNTQx NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1 RjA2RjU0MTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMmLEpTj8kyRNHGB+98qokCWEmjriNLtn91e 9IEbfo9SRPwi90PtIwladqEUU0tRwEWQS8JZZBaBhDL2WTrGP6QI0/+brZil1Blt J8L314Y5f19VYkZjOa9nN7p5efXHpNR2kvfbBfglGEOTq2RVbaVLE/bQEd+QJxuh MN/jXlf0xwbuZDV9235sYEmtTb6YaoLr81TWt4seaq/QL9iJPvEybQzxm8ZYEx6F Rg9XyTCtcvWAE2sTYojoJnGxuDH1/AteaXdgBFdrwNvdnKzNqZzuGMXILoctcYJu kvhQInNtg6xnwhXjVz1uyaqhh0dq4FRQiJXTNtZrJlC9Q5A/iuU= -----END CERTIFICATE-----Generated at Tue May 12 22:19:44 2026 by rpki-client