$ rpki-client -vvf rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft (raw, json) Hash identifier: 7Y4ZrwWAzF5k0+Maiu/Mrp0IycbV2Jj6/E7wvDbGtgc= Subject key identifier: 32:73:6C:BE:55:11:94:9E:78:8C:57:C0:34:71:4F:F0:1E:FA:2E:3A Authority key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Certificate issuer: /CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Certificate serial: 4F72ADD403AA06E26379944EE076195A628CD38B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft Manifest number: 0D Signing time: Tue 12 May 2026 07:54:14 +0000 Manifest this update: Tue 12 May 2026 07:49:14 +0000 Manifest next update: Wed 13 May 2026 09:33:14 +0000 Files and hashes: 1: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl (hash: zlz010PywMdP05q1NdP2c3aOwyPAkaA+9rxijHFH4Xc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:72:ad:d4:03:aa:06:e2:63:79:94:4e:e0:76:19:5a:62:8c:d3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Validity Not Before: May 12 07:49:14 2026 GMT Not After : May 13 09:33:14 2026 GMT Subject: CN=32736CBE5511949E788C57C034714FF01EFA2E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:86:ba:89:6a:20:36:a4:ab:1c:4f:b2:02: 35:e2:d8:13:82:ac:4a:85:bd:bb:33:80:d7:08:82: 51:13:a9:c7:18:6a:b4:53:ac:e5:17:6a:51:95:57: 42:f4:d0:98:cc:e4:c5:9e:29:d9:0e:cc:c3:e4:14: cc:6e:52:e6:c2:cc:1b:f3:d8:fa:6a:69:ce:20:a1: 61:c4:3c:4f:94:06:90:05:bb:21:21:cc:39:47:de: 47:36:d3:06:44:41:2b:24:1d:d8:ed:10:5e:9c:1c: 28:d8:c9:ad:3d:c3:3d:16:2f:fa:e9:78:bd:b0:b4: d2:7c:18:b9:cc:f0:ac:4a:47:b6:d3:3e:98:2b:dc: 69:0d:5d:dc:6c:74:b2:1a:0d:56:e9:df:39:c1:7e: 9e:a2:f2:00:a8:44:74:54:3e:bd:2c:76:dc:cd:e4: 79:f5:a7:ce:d4:e5:da:69:b3:4c:0f:fb:75:69:63: 0d:b5:ef:88:95:03:bf:6b:3b:87:53:6b:5a:38:f0: b3:84:ab:63:2f:3f:6b:e5:bd:2d:26:44:f7:a2:30: 55:86:48:05:75:fa:ae:ce:95:57:ef:f4:4a:fa:8c: 37:4a:1a:66:9a:d7:a1:68:54:3a:c3:22:fb:03:d2: 2f:b8:55:f0:8a:32:71:16:b8:d5:c8:d3:c4:1d:bc: 8b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:6C:BE:55:11:94:9E:78:8C:57:C0:34:71:4F:F0:1E:FA:2E:3A X509v3 Authority Key Identifier: keyid:CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:48:f6:07:06:53:13:61:cc:14:a4:cc:12:f7:3b:85:f9:62: b9:a8:31:9b:b4:e2:08:e5:5c:bd:59:9d:72:d7:19:23:ad:a3: 47:eb:ce:84:ae:3d:95:c8:73:28:e5:37:18:b5:8f:9f:42:0f: f0:20:0c:0e:1b:6d:fd:5f:bd:77:54:ed:bf:2a:f3:4d:8b:21: 68:8d:c8:23:0b:4f:51:02:f4:4e:0c:61:8b:e5:e2:91:06:c1: be:43:aa:f6:a5:c5:6f:22:28:d4:96:db:f9:03:8a:f6:d4:30: 4a:1c:72:7f:4b:55:0c:89:86:58:23:5d:f8:c8:14:0d:09:ef: 50:03:cb:ba:c4:fa:34:3d:f3:03:eb:d9:58:d4:30:0b:b4:c9: 7a:a4:a8:88:3e:dc:d5:bb:3e:76:64:30:9c:b9:c5:ea:f2:c3: 45:f5:a9:46:1a:dc:45:f7:52:0b:b6:0e:dc:dd:53:64:8e:f9: d3:7f:93:c7:f4:7c:27:b5:ec:ee:66:84:80:ad:ce:6c:30:86: ff:fe:ff:51:fa:38:54:aa:ae:ec:3b:01:65:a4:7f:d2:8d:d5: b5:7e:84:15:bd:f0:8e:91:f4:c8:2b:57:5f:6f:d6:c1:61:96: 13:e9:15:32:8d:fe:77:4f:99:f9:33:31:a6:95:c5:fe:69:5b: ae:6b:1d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3Kt1AOqBuJjeZRO4HYZWmKM04swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNG QURDQkFBMDAeFw0yNjA1MTIwNzQ5MTRaFw0yNjA1MTMwOTMzMTRaMDMxMTAvBgNV BAMTKDMyNzM2Q0JFNTUxMTk0OUU3ODhDNTdDMDM0NzE0RkYwMUVGQTJFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7Ia6iWogNqSrHE+yAjXi2BOC rEqFvbszgNcIglETqccYarRTrOUXalGVV0L00JjM5MWeKdkOzMPkFMxuUubCzBvz 2Ppqac4goWHEPE+UBpAFuyEhzDlH3kc20wZEQSskHdjtEF6cHCjYya09wz0WL/rp eL2wtNJ8GLnM8KxKR7bTPpgr3GkNXdxsdLIaDVbp3znBfp6i8gCoRHRUPr0sdtzN 5Hn1p87U5dpps0wP+3VpYw2174iVA79rO4dTa1o48LOEq2MvP2vlvS0mRPeiMFWG SAV1+q7OlVfv9Er6jDdKGmaa16FoVDrDIvsD0i+4VfCKMnEWuNXI08QdvIsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMnNsvlURlJ54jFfANHFP8B76LjowHwYDVR0j BBgwFoAUz5DTI0sm5kPeKeeLKj0Dc/rcuqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2M2U3MWEtOWM4NS00MTc2LThmYTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0 QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNGQURDQkFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjkwRDMyMzRCMjZFNjQzREUyOUU3OEIyQTNEMDM3M0ZBRENC QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAz NzNGQURDQkFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBI9gcGUxNhzBSkzBL3O4X5YrmoMZu04gjl XL1ZnXLXGSOto0frzoSuPZXIcyjlNxi1j59CD/AgDA4bbf1fvXdU7b8q802LIWiN yCMLT1EC9E4MYYvl4pEGwb5DqvalxW8iKNSW2/kDivbUMEoccn9LVQyJhlgjXfjI FA0J71ADy7rE+jQ98wPr2VjUMAu0yXqkqIg+3NW7PnZkMJy5xeryw0X1qUYa3EX3 Ugu2DtzdU2SO+dN/k8f0fCe17O5mhICtzmwwhv/+/1H6OFSqruw7AWWkf9KN1bV+ hBW98I6R9MgrV19v1sFhlhPpFTKN/ndPmfkzMaaVxf5pW65rHRE= -----END CERTIFICATE-----Generated at Wed May 13 03:17:06 2026 by rpki-client