$ rpki-client -vvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: z9/d7Q1G+VbuVauh00Kmf8svsHVtnG0AmdhFYSAIyBM= Subject key identifier: A8:07:84:CF:FD:85:97:3E:DC:53:2A:FE:30:AE:2D:E6:4C:3F:0A:93 Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 7D73BE246B477B12903AE1F5D2DBFD70532BB232 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 23:08:01 +0000 Manifest this update: Thu 23 Jul 2026 23:03:01 +0000 Manifest next update: Sat 25 Jul 2026 00:19:01 +0000 Files and hashes: 1: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: 0lNOb8M02ZD96fjPqeLHjx42g9hOS7WDVfBeFGARRrw=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) 3: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:73:be:24:6b:47:7b:12:90:3a:e1:f5:d2:db:fd:70:53:2b:b2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Jul 23 23:03:01 2026 GMT Not After : Jul 25 00:19:01 2026 GMT Subject: CN=A80784CFFD85973EDC532AFE30AE2DE64C3F0A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:5b:fa:a0:be:6c:1d:7a:40:6c:40:cf:fd: 41:60:dd:f3:4f:ad:0d:4b:00:92:43:f3:fd:68:27: 81:63:a0:a0:5e:bb:d2:4c:b0:89:c2:c8:95:c2:f5: dd:76:83:37:26:70:35:6b:09:7c:f7:44:d1:fe:5c: a2:c3:63:bf:47:62:69:73:85:28:a1:70:48:a8:0d: 22:d3:4e:12:e0:87:1a:8a:64:5c:ab:13:d1:52:c6: 68:ee:32:99:d8:40:96:8d:38:46:99:56:3b:d4:dd: 5d:24:4e:38:4f:43:41:be:d4:db:f5:64:ed:1a:45: 3b:98:93:30:07:bb:63:ca:8e:6f:03:9a:41:89:b7: b3:1a:29:31:72:f5:42:91:1c:a8:c6:9f:be:6f:0b: 29:5b:79:fe:a1:ec:48:64:e3:b6:c2:d5:4e:4a:b3: 25:11:8d:ea:9e:59:53:5d:87:16:6a:ea:52:c7:c9: 6d:e1:0e:66:c4:b2:60:38:b1:94:62:97:39:01:cc: ec:01:51:60:76:7f:f5:4c:ff:7e:fa:f8:a6:5f:00: 25:5c:34:5b:bc:23:12:85:d7:3b:88:9f:a2:cc:ff: f5:82:a0:04:29:e6:8c:3f:ed:52:a7:56:18:df:97: e5:5e:5a:0c:e0:33:fb:ef:61:7d:6d:16:e2:73:23: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:84:CF:FD:85:97:3E:DC:53:2A:FE:30:AE:2D:E6:4C:3F:0A:93 X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1f:0e:26:55:f4:23:59:e2:3a:f8:a6:3a:7b:02:b0:31:24: 92:f0:94:ed:8c:0b:3f:45:8f:52:c8:e2:4b:cf:38:3f:4d:4c: 52:b5:d0:2b:11:5a:f8:be:29:0e:44:34:ea:bb:3c:e7:2a:9d: d9:26:ff:8c:50:ee:73:82:48:d8:cc:9c:29:8d:3f:38:23:88: 6e:12:2f:cb:de:34:e8:e0:21:7b:8e:51:49:9b:7f:eb:68:45: 15:9c:c5:32:37:e8:18:65:92:92:ba:26:c1:ce:a1:c2:64:6c: 26:85:86:a1:4a:26:21:1f:1e:b9:c0:16:81:52:8e:6a:fc:dc: 32:ac:4c:4b:e5:1d:de:c7:98:6c:a1:a2:44:52:72:d6:94:af: d6:f6:b4:1b:8f:ed:64:a0:16:5c:7a:b2:28:18:8e:3d:2d:81: 7d:12:2d:bc:da:93:bb:47:40:ab:ca:e6:8c:30:4f:78:4f:2c: ac:e7:1c:44:fd:c8:c3:59:8c:c3:47:58:e0:e2:e0:50:91:87: e9:37:25:a8:74:5e:0c:35:69:69:df:49:46:33:86:71:e4:79: 8d:43:de:0b:87:86:d1:87:d0:70:1e:25:3a:97:2b:5e:77:01: 56:f2:c9:18:01:2e:c4:a2:8c:4c:6f:8c:fe:90:17:03:6e:6c: 2e:42:10:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXO+JGtHexKQOuH10tv9cFMrsjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjA3MjMyMzAzMDFaFw0yNjA3MjUwMDE5MDFaMDMxMTAvBgNV BAMTKEE4MDc4NENGRkQ4NTk3M0VEQzUzMkFGRTMwQUUyREU2NEMzRjBBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopFv6oL5sHXpAbEDP/UFg3fNP rQ1LAJJD8/1oJ4FjoKBeu9JMsInCyJXC9d12gzcmcDVrCXz3RNH+XKLDY79HYmlz hSihcEioDSLTThLghxqKZFyrE9FSxmjuMpnYQJaNOEaZVjvU3V0kTjhPQ0G+1Nv1 ZO0aRTuYkzAHu2PKjm8DmkGJt7MaKTFy9UKRHKjGn75vCylbef6h7Ehk47bC1U5K syURjeqeWVNdhxZq6lLHyW3hDmbEsmA4sZRilzkBzOwBUWB2f/VM/376+KZfACVc NFu8IxKF1zuIn6LM//WCoAQp5ow/7VKnVhjfl+VeWgzgM/vvYX1tFuJzIyH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAeEz/2Flz7cUyr+MK4t5kw/CpMwHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkfDiZV9CNZ4jr4pjp7ArAxJJLwlO2MCz9F j1LI4kvPOD9NTFK10CsRWvi+KQ5ENOq7POcqndkm/4xQ7nOCSNjMnCmNPzgjiG4S L8veNOjgIXuOUUmbf+toRRWcxTI36BhlkpK6JsHOocJkbCaFhqFKJiEfHrnAFoFS jmr83DKsTEvlHd7HmGyhokRSctaUr9b2tBuP7WSgFlx6sigYjj0tgX0SLbzak7tH QKvK5owwT3hPLKznHET9yMNZjMNHWODi4FCRh+k3Jah0Xgw1aWnfSUYzhnHkeY1D 3guHhtGH0HAeJTqXK153AVbyyRgBLsSijExvjP6QFwNubC5CEFs= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:22 2026 by rpki-client