$ rpki-client -vvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: 2+qd/JD+7Etwl6de1vBFs4lB7+ydUlf+0F5LSiLcIDQ= Subject key identifier: 77:4E:C5:C4:D2:0D:6D:50:C2:FA:6E:48:F2:D6:92:4D:56:C2:7F:6C Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 6AF85AC9110382DC4E63381F24D132A9C1CA5BA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:57:03 +0000 Manifest this update: Thu 23 Jul 2026 17:52:03 +0000 Manifest next update: Fri 24 Jul 2026 19:01:03 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: OwZP2cSol0TRA4OYuobQHUhouzKM9Yonp9rboE+kPwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f8:5a:c9:11:03:82:dc:4e:63:38:1f:24:d1:32:a9:c1:ca:5b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: Jul 23 17:52:03 2026 GMT Not After : Jul 24 19:01:03 2026 GMT Subject: CN=774EC5C4D20D6D50C2FA6E48F2D6924D56C27F6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:31:39:41:af:2e:de:9b:be:b1:52:de:f6: dc:70:da:8a:48:a8:1d:e5:cb:ea:4a:e9:b8:1c:51: e2:a2:c8:48:36:83:5e:08:57:b8:e3:d5:a5:b6:03: fc:64:89:cd:2b:cc:3c:2b:bc:d1:78:c2:26:47:33: 8d:c9:2a:c1:f8:bd:e8:86:99:b0:c0:10:f9:3a:3a: 8c:08:93:7c:1d:88:0a:d6:cc:f1:9f:75:49:42:3a: b0:bc:3f:7a:0e:54:86:81:8b:8c:58:b7:0d:c8:6e: cf:ae:22:7f:1a:4d:5e:f6:77:fd:18:49:2d:85:71: 81:f6:38:d0:20:f5:68:96:8a:26:fa:8b:bd:4c:27: 6b:72:c7:a4:a4:9a:cd:f8:83:29:27:45:ea:b3:b8: 7d:b3:88:e0:fc:33:40:d1:d4:e0:23:47:26:44:b7: 26:08:6c:16:c6:3a:08:5b:3d:78:cf:82:df:65:e1: 6a:e2:1b:f6:8c:7a:70:ec:18:b6:72:45:05:cb:ba: 48:2c:c1:21:af:27:79:be:36:2f:60:8a:2c:ef:4b: ea:27:3d:4c:c6:ec:30:04:5a:4d:65:1f:83:24:a2: 39:d1:65:38:86:54:41:b7:57:31:14:fb:0e:9c:45: 84:34:b0:ab:a5:60:5b:69:86:c3:8a:72:30:28:6c: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:C5:C4:D2:0D:6D:50:C2:FA:6E:48:F2:D6:92:4D:56:C2:7F:6C X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cf:45:87:7d:33:5f:94:eb:16:8c:26:5e:e2:47:17:38:9b: ff:1d:08:92:a4:9e:76:02:19:fd:6f:71:17:2c:d7:58:c7:5c: f2:41:1c:63:5f:82:aa:0c:12:d3:79:bd:0f:39:f0:ea:54:d7: 15:aa:c5:fd:ab:4d:5c:d9:4e:16:7d:cf:28:45:ef:56:79:fd: 4f:51:d7:b5:a9:2c:58:17:d1:13:c5:86:71:60:09:23:50:08: 0b:29:f3:65:4b:70:da:67:49:d5:d0:af:97:a4:a9:26:69:08: 41:3e:84:6d:b8:f6:96:58:04:5c:6b:d2:db:da:f5:1a:6d:63: a9:2d:14:4e:63:ad:e9:f3:0e:00:2d:43:9b:a4:78:4e:b8:bf: cd:78:50:77:bb:5c:e9:68:6f:bd:23:ae:30:d3:53:78:3b:b6: d4:e2:06:7d:0f:50:13:e8:a8:b3:3c:23:6e:0d:b5:43:b6:15: cf:82:9f:9c:da:0a:cd:04:37:bb:18:a0:97:ac:47:3e:96:32: ec:06:09:3a:ca:ce:69:b9:aa:be:42:e8:e2:c5:a6:5b:20:b4: 71:76:b3:fa:64:03:c8:01:4d:47:a1:08:d5:53:63:27:aa:4e: 7a:fd:36:26:87:29:dd:32:29:54:5c:12:29:2f:d0:9a:3d:6e: ea:29:c7:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavhayREDgtxOYzgfJNEyqcHKW6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjA3MjMxNzUyMDNaFw0yNjA3MjQxOTAxMDNaMDMxMTAvBgNV BAMTKDc3NEVDNUM0RDIwRDZENTBDMkZBNkU0OEYyRDY5MjRENTZDMjdGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD2TE5Qa8u3pu+sVLe9txw2opI qB3ly+pK6bgcUeKiyEg2g14IV7jj1aW2A/xkic0rzDwrvNF4wiZHM43JKsH4veiG mbDAEPk6OowIk3wdiArWzPGfdUlCOrC8P3oOVIaBi4xYtw3Ibs+uIn8aTV72d/0Y SS2FcYH2ONAg9WiWiib6i71MJ2tyx6Skms34gyknReqzuH2ziOD8M0DR1OAjRyZE tyYIbBbGOghbPXjPgt9l4WriG/aMenDsGLZyRQXLukgswSGvJ3m+Ni9giizvS+on PUzG7DAEWk1lH4MkojnRZTiGVEG3VzEU+w6cRYQ0sKulYFtphsOKcjAobFhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd07FxNINbVDC+m5I8taSTVbCf2wwHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7PRYd9M1+U6xaMJl7iRxc4m/8dCJKknnYC Gf1vcRcs11jHXPJBHGNfgqoMEtN5vQ858OpU1xWqxf2rTVzZThZ9zyhF71Z5/U9R 17WpLFgX0RPFhnFgCSNQCAsp82VLcNpnSdXQr5ekqSZpCEE+hG249pZYBFxr0tva 9RptY6ktFE5jrenzDgAtQ5ukeE64v814UHe7XOlob70jrjDTU3g7ttTiBn0PUBPo qLM8I24NtUO2Fc+Cn5zaCs0EN7sYoJesRz6WMuwGCTrKzmm5qr5C6OLFplsgtHF2 s/pkA8gBTUehCNVTYyeqTnr9NiaHKd0yKVRcEikv0Jo9buopxwQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:34:33 2026 by rpki-client