$ rpki-client -vvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft File: CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json) Hash identifier: or+ax4UPXPXZfLXzZCrnHX5dNz75PUyWImYInVfwU8Y= Subject key identifier: 3E:0C:1F:4D:1E:75:F3:3B:6A:17:7E:FB:C8:64:AC:61:9C:5E:3F:FD Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 Certificate issuer: /CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Certificate serial: 1F8C8FA8D2F480CE57215C8FF6AF8E5D8E50064C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:01:45 +0000 Manifest this update: Fri 24 Jul 2026 05:56:45 +0000 Manifest next update: Sat 25 Jul 2026 08:18:45 +0000 Files and hashes: 1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=) 2: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: 0QekPSgp0CW8uS/gcKCiLuMpXyQIeqqs7iiFcByj6lk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8c:8f:a8:d2:f4:80:ce:57:21:5c:8f:f6:af:8e:5d:8e:50:06:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Validity Not Before: Jul 24 05:56:45 2026 GMT Not After : Jul 25 08:18:45 2026 GMT Subject: CN=3E0C1F4D1E75F33B6A177EFBC864AC619C5E3FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:83:9b:a1:77:8b:c1:93:d4:92:08:ad:54: 4a:2e:70:d3:09:90:44:16:87:3d:14:7b:dc:2b:3e: 4c:3d:a0:a9:d7:5f:d8:1d:0a:84:0a:7c:1e:4e:66: d9:cc:6a:ca:20:2f:a6:7e:be:67:c3:7f:46:b5:84: 64:e4:28:fb:d7:66:d2:f8:2b:0e:d5:5f:c3:23:5e: 63:b4:87:07:c3:8d:6d:30:15:99:e3:45:51:28:bf: 8b:65:3f:78:47:d3:97:cc:45:81:44:15:77:c2:66: cb:da:57:2c:11:13:9a:19:dc:3b:bd:8a:64:b8:82: bc:9d:5c:e9:7f:b6:b2:b4:63:01:cd:95:6d:a9:d4: 71:ba:c1:f6:f3:f4:f4:15:9d:de:3a:3b:1d:cf:67: 89:38:c9:c3:1a:59:8b:35:d0:03:c5:52:92:85:a0: 23:e6:57:70:b9:5e:cd:fd:e8:8e:12:9b:b3:ee:df: 36:60:14:9e:e9:a8:f8:63:c6:c8:d0:20:39:7e:e2: ce:c0:a7:6a:8c:60:78:22:34:90:18:f0:0d:1d:aa: db:df:5f:27:af:f2:b0:0e:53:59:ea:6f:9d:94:bc: a7:20:82:2d:86:14:aa:d7:f2:73:b0:53:ea:11:6b: b3:b4:13:60:7e:8f:9c:25:6b:6d:61:9c:de:32:24: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0C:1F:4D:1E:75:F3:3B:6A:17:7E:FB:C8:64:AC:61:9C:5E:3F:FD X509v3 Authority Key Identifier: keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:06:7c:a8:1f:90:fe:ce:43:e2:93:90:ae:10:11:84:ab:16: 20:16:45:5f:49:50:36:76:76:82:3d:d7:89:fe:14:53:4d:a0: 05:de:6d:a0:0c:5c:ed:98:2b:00:ec:fe:4f:5f:cb:fb:a8:a7: 38:b5:51:fd:c9:2b:09:b4:3e:e2:42:84:e9:d8:82:ca:33:da: b2:c0:f9:99:78:59:1e:f1:84:87:3c:31:ca:9a:0d:ad:bb:d4: 94:32:ec:41:a7:e6:ac:b1:b4:58:e3:62:5b:d1:54:65:b1:bd: 43:83:ce:6f:11:a8:07:b4:71:45:b6:98:1b:1f:a1:0a:82:f5: 19:ef:31:3c:2c:0b:30:9e:9b:1b:ce:fb:06:ff:9f:dd:69:36: 20:3c:3a:cb:4f:ab:51:c4:b9:a1:e9:38:bd:9f:74:15:b8:37: 86:2a:b5:61:99:22:05:11:5d:e8:b0:0d:e7:1b:91:71:30:78: 8d:0e:bf:e9:f8:b1:0b:d3:ae:8f:d8:56:e0:e8:03:bb:dd:07: 59:58:e8:4a:e1:71:80:d8:49:04:0a:57:fc:99:4b:38:8a:3e: d2:f7:80:28:95:f2:b0:cd:d1:20:2d:5d:f0:12:a1:e3:32:8b: ba:ed:5d:fd:91:76:20:b8:24:6e:ed:3e:80:35:51:31:8e:65: a1:a7:f9:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4yPqNL0gM5XIVyP9q+OXY5QBkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1RjA2 RjU0MTc0ODAeFw0yNjA3MjQwNTU2NDVaFw0yNjA3MjUwODE4NDVaMDMxMTAvBgNV BAMTKDNFMEMxRjREMUU3NUYzM0I2QTE3N0VGQkM4NjRBQzYxOUM1RTNGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRIOboXeLwZPUkgitVEoucNMJ kEQWhz0Ue9wrPkw9oKnXX9gdCoQKfB5OZtnMasogL6Z+vmfDf0a1hGTkKPvXZtL4 Kw7VX8MjXmO0hwfDjW0wFZnjRVEov4tlP3hH05fMRYFEFXfCZsvaVywRE5oZ3Du9 imS4grydXOl/trK0YwHNlW2p1HG6wfbz9PQVnd46Ox3PZ4k4ycMaWYs10APFUpKF oCPmV3C5Xs396I4Sm7Pu3zZgFJ7pqPhjxsjQIDl+4s7Ap2qMYHgiNJAY8A0dqtvf Xyev8rAOU1nqb52UvKcggi2GFKrX8nOwU+oRa7O0E2B+j5wla21hnN4yJPUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPgwfTR518ztqF377yGSsYZxeP/0wHwYDVR0j BBgwFoAUzyBNdI2tLRoCTeZtheQl8G9UF0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJmNTk4NmItYzc2NC00Y2Q3LWI0MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4 REFEMkQxQTAyNERFNjZEODVFNDI1RjA2RjU0MTc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjIwNEQ3NDhEQUQyRDFBMDI0REU2NkQ4NUU0MjVGMDZGNTQx NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1 RjA2RjU0MTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQGfKgfkP7OQ+KTkK4QEYSrFiAWRV9JUDZ2 doI914n+FFNNoAXebaAMXO2YKwDs/k9fy/uopzi1Uf3JKwm0PuJChOnYgsoz2rLA +Zl4WR7xhIc8McqaDa271JQy7EGn5qyxtFjjYlvRVGWxvUODzm8RqAe0cUW2mBsf oQqC9RnvMTwsCzCemxvO+wb/n91pNiA8OstPq1HEuaHpOL2fdBW4N4YqtWGZIgUR XeiwDecbkXEweI0Ov+n4sQvTro/YVuDoA7vdB1lY6ErhcYDYSQQKV/yZSziKPtL3 gCiV8rDN0SAtXfASoeMyi7rtXf2RdiC4JG7tPoA1UTGOZaGn+fo= -----END CERTIFICATE-----Generated at Fri Jul 24 08:52:39 2026 by rpki-client