$ rpki-client -vvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: 1HmzscsqILs7qt7aFXS8scy0mh5biEumZfTYNkHT53g= Subject key identifier: C1:D1:22:B1:EB:46:45:12:86:A4:03:89:53:B4:83:EA:C6:41:90:D1 Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 426B3137A716F04424E8C5F83B9EFDD442BEBFAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: 0E Signing time: Wed 13 May 2026 01:50:51 +0000 Manifest this update: Wed 13 May 2026 01:45:51 +0000 Manifest next update: Thu 14 May 2026 04:44:51 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: 5iyo8UH5qb0BCTLtSW7Z7K5e+SGoR81K6Bq80EvaEtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6b:31:37:a7:16:f0:44:24:e8:c5:f8:3b:9e:fd:d4:42:be:bf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: May 13 01:45:51 2026 GMT Not After : May 14 04:44:51 2026 GMT Subject: CN=C1D122B1EB46451286A4038953B483EAC64190D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:cc:9d:f2:ec:bc:c7:d3:e7:66:c6:19:2f: 8c:ca:bd:0c:5b:4b:22:99:e0:ff:14:da:32:7c:5f: 75:ae:11:f2:46:1d:cb:52:bc:c2:1a:6f:ee:50:55: 30:41:30:96:37:93:85:31:8f:9c:d6:d5:ac:01:c6: 2c:3a:7e:c8:4f:00:a2:01:ed:9c:be:f0:08:bb:bc: bd:f1:4d:45:52:c9:11:e6:d1:a1:a1:8a:fa:29:87: 33:61:c0:c1:01:32:26:4c:87:8a:27:e2:0a:31:ff: 95:38:45:31:5d:d8:9f:f0:ad:89:6d:f4:e0:72:89: 5a:e4:03:a5:96:a4:36:69:61:96:80:12:34:b0:56: e1:c2:58:0c:3c:76:6c:17:c0:33:3e:8c:e6:19:81: a0:99:a5:95:92:58:0f:37:12:8b:f6:fc:bb:05:04: 7f:4d:02:75:9b:06:3c:d2:b6:13:d5:72:7b:2e:e9: 15:eb:7e:91:d6:35:65:54:72:47:e1:0f:6a:a2:d2: f6:f8:86:58:82:6f:c1:8b:b6:0d:5a:46:e7:6e:88: 79:cb:65:42:a6:6a:c4:4d:c6:0c:0e:87:69:13:63: 9c:f2:8f:ac:67:e3:71:25:8d:b7:50:8a:04:4d:bc: bc:fe:dc:82:a6:97:a4:9b:2b:18:ca:76:f7:64:f7: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D1:22:B1:EB:46:45:12:86:A4:03:89:53:B4:83:EA:C6:41:90:D1 X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:78:04:d1:44:f7:77:b1:a0:e5:5e:2a:ef:17:36:1a:1b:dd: d7:82:0d:f8:b9:de:83:c0:13:51:b4:15:81:94:40:6e:73:f3: 77:dc:8d:7d:33:d9:4f:cb:35:50:96:83:a1:35:80:8e:80:da: 0d:d6:e9:85:95:99:88:2c:22:c8:de:00:ae:e5:de:a1:26:e7: e4:02:6b:ed:02:34:a3:d4:5b:83:6f:9c:82:79:44:3d:cb:7d: f5:25:88:db:89:46:6b:f8:0a:07:d8:7a:31:60:61:fc:ec:a8: 3f:57:0c:be:f8:af:1a:f0:b3:b3:11:4f:69:0a:87:e9:47:ff: 4b:72:22:22:fc:72:ca:6b:c3:4c:b8:cd:de:6d:86:e1:93:fd: ca:79:2b:2f:57:34:9b:a4:7f:b0:3b:a5:d1:90:e5:c4:11:66: a8:d5:1a:1f:21:ea:63:23:f7:32:ff:e7:0b:77:6b:3c:ec:6c: a8:76:96:e0:28:e6:6f:43:b1:65:5c:73:e2:b2:4d:96:a1:fd: c3:f0:c4:28:f0:bd:97:dd:63:b5:69:f2:5e:1f:e8:4a:85:12: fa:f1:d7:13:e2:78:a5:e3:69:24:b6:25:22:80:36:c8:c4:1f: 93:10:4f:2c:b1:21:fe:c0:04:1b:88:d5:74:9d:31:4c:69:76: 1e:0d:1d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmsxN6cW8EQk6MX4O5791EK+v60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjA1MTMwMTQ1NTFaFw0yNjA1MTQwNDQ0NTFaMDMxMTAvBgNV BAMTKEMxRDEyMkIxRUI0NjQ1MTI4NkE0MDM4OTUzQjQ4M0VBQzY0MTkwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAsyd8uy8x9PnZsYZL4zKvQxb SyKZ4P8U2jJ8X3WuEfJGHctSvMIab+5QVTBBMJY3k4Uxj5zW1awBxiw6fshPAKIB 7Zy+8Ai7vL3xTUVSyRHm0aGhivophzNhwMEBMiZMh4on4gox/5U4RTFd2J/wrYlt 9OByiVrkA6WWpDZpYZaAEjSwVuHCWAw8dmwXwDM+jOYZgaCZpZWSWA83Eov2/LsF BH9NAnWbBjzSthPVcnsu6RXrfpHWNWVUckfhD2qi0vb4hliCb8GLtg1aRuduiHnL ZUKmasRNxgwOh2kTY5zyj6xn43EljbdQigRNvLz+3IKml6SbKxjKdvdk9/DRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwdEisetGRRKGpAOJU7SD6sZBkNEwHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp4BNFE93exoOVeKu8XNhob3deCDfi53oPA E1G0FYGUQG5z83fcjX0z2U/LNVCWg6E1gI6A2g3W6YWVmYgsIsjeAK7l3qEm5+QC a+0CNKPUW4NvnIJ5RD3LffUliNuJRmv4CgfYejFgYfzsqD9XDL74rxrws7MRT2kK h+lH/0tyIiL8csprw0y4zd5thuGT/cp5Ky9XNJukf7A7pdGQ5cQRZqjVGh8h6mMj 9zL/5wt3azzsbKh2luAo5m9DsWVcc+KyTZah/cPwxCjwvZfdY7Vp8l4f6EqFEvrx 1xPieKXjaSS2JSKANsjEH5MQTyyxIf7ABBuI1XSdMUxpdh4NHaY= -----END CERTIFICATE-----Generated at Wed May 13 07:14:49 2026 by rpki-client