$ rpki-client -vvf rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft (raw, json) Hash identifier: 31SNhsWL5LDx6nbmB1MgdYsWho/EGCbJr5BA7bOdHrM= Subject key identifier: 70:53:B5:D8:9D:5C:21:C3:3E:0B:00:50:59:30:AC:A0:27:66:A5:7B Authority key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Certificate issuer: /CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Certificate serial: 47BEAD465ED5D28F66693F60E808C4CE31A110C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 04:19:45 +0000 Manifest this update: Fri 24 Jul 2026 04:14:45 +0000 Manifest next update: Sat 25 Jul 2026 04:42:45 +0000 Files and hashes: 1: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl (hash: PLkob+Y34NJpOJ9R9T3CZlHvvrmv0EliLkIE9nuqH2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:be:ad:46:5e:d5:d2:8f:66:69:3f:60:e8:08:c4:ce:31:a1:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Validity Not Before: Jul 24 04:14:45 2026 GMT Not After : Jul 25 04:42:45 2026 GMT Subject: CN=7053B5D89D5C21C33E0B00505930ACA02766A57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:58:6a:51:de:6a:27:57:ec:4a:5b:04:d1: bf:ad:ed:5b:bd:d5:42:5a:e6:1d:61:a0:8a:68:36: 3a:3f:eb:73:96:c8:6c:81:b6:2e:e6:4d:31:3f:3d: d3:b3:21:7c:ff:4e:cd:37:ba:ad:29:e6:7d:56:03: f2:1a:f1:24:c2:4e:08:83:83:05:fe:9e:0e:a6:dd: c9:a7:86:ae:88:85:0b:c5:02:9b:9b:51:8f:9a:ad: c7:19:99:76:1c:f0:d7:80:0e:6d:5d:57:d9:35:aa: 27:f2:5e:8b:1c:b9:1a:ed:2c:60:9d:ed:1b:33:fe: 29:68:bd:e6:5b:ce:a1:5e:d6:8b:20:9a:4e:ea:5d: 6e:fe:7f:3e:30:7b:f1:33:0c:aa:29:e9:bc:25:44: 4e:c5:89:6f:95:98:fe:b9:21:c8:69:b2:7d:38:3a: ab:27:e6:e7:82:52:49:72:82:8c:9e:40:a8:ff:00: 6f:00:9f:ff:3a:62:e6:f3:a6:99:bf:3b:de:d5:29: 9b:d9:1b:7f:65:9a:a2:ef:b2:14:1d:cc:01:90:a4: fb:1a:bf:2e:9a:4c:87:66:c1:db:8a:9d:fe:ea:2d: 8d:28:26:c2:5d:54:cc:5b:1e:0f:fb:3e:0e:88:b7: db:9d:48:e4:ab:8c:06:ff:c3:3e:03:4d:53:b3:f7: a2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:B5:D8:9D:5C:21:C3:3E:0B:00:50:59:30:AC:A0:27:66:A5:7B X509v3 Authority Key Identifier: keyid:CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c2:bc:9a:33:ef:68:e4:f3:2d:ab:a9:2a:62:6e:85:e5:af: f5:ba:43:35:75:a8:e4:75:e1:15:93:7d:b5:95:62:3a:cf:fe: 7b:6e:1d:45:3b:9e:82:39:f2:6e:a2:21:25:c8:82:ff:79:82: f8:9f:0b:59:36:07:9d:4b:92:fc:ce:49:3d:65:71:be:d9:3f: 72:ed:f1:5b:9b:19:c0:bb:80:de:ea:c7:ac:35:6b:16:5c:ae: dc:69:7e:5c:6c:7d:21:f2:2a:bc:3f:d1:02:f0:35:54:ab:0f: 4b:58:65:16:d7:af:3d:e8:6c:04:b5:4b:84:d1:1a:12:3e:70: b2:a1:45:a8:b8:79:aa:26:af:7e:ca:9d:c3:16:88:7e:d1:7f: e1:72:f6:5b:4f:f1:0b:68:f7:5e:8e:cc:24:14:55:b3:e5:4a: d3:94:ff:c8:cb:f9:09:38:20:ec:71:c9:8f:d0:dc:c8:f7:e2: bb:b0:89:18:64:50:39:00:eb:eb:0d:39:a9:40:5b:9a:9e:e7: 41:0c:6e:09:3e:f7:38:34:d7:07:fd:be:d0:7e:09:2f:72:97: 6e:6b:5c:37:6f:b7:6b:1b:cd:fd:73:0c:21:fe:ce:e8:55:2a: e4:78:50:89:c6:d0:9d:5f:1d:1b:f9:23:be:04:2a:ba:fe:45: d3:5c:83:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR76tRl7V0o9maT9g6AjEzjGhEMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNG QURDQkFBMDAeFw0yNjA3MjQwNDE0NDVaFw0yNjA3MjUwNDQyNDVaMDMxMTAvBgNV BAMTKDcwNTNCNUQ4OUQ1QzIxQzMzRTBCMDA1MDU5MzBBQ0EwMjc2NkE1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgVhqUd5qJ1fsSlsE0b+t7Vu9 1UJa5h1hoIpoNjo/63OWyGyBti7mTTE/PdOzIXz/Ts03uq0p5n1WA/Ia8STCTgiD gwX+ng6m3cmnhq6IhQvFApubUY+arccZmXYc8NeADm1dV9k1qifyXoscuRrtLGCd 7Rsz/iloveZbzqFe1osgmk7qXW7+fz4we/EzDKop6bwlRE7FiW+VmP65Ichpsn04 Oqsn5ueCUklygoyeQKj/AG8An/86Yubzppm/O97VKZvZG39lmqLvshQdzAGQpPsa vy6aTIdmwduKnf7qLY0oJsJdVMxbHg/7Pg6It9udSOSrjAb/wz4DTVOz96IPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFO12J1cIcM+CwBQWTCsoCdmpXswHwYDVR0j BBgwFoAUz5DTI0sm5kPeKeeLKj0Dc/rcuqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2M2U3MWEtOWM4NS00MTc2LThmYTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0 QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNGQURDQkFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjkwRDMyMzRCMjZFNjQzREUyOUU3OEIyQTNEMDM3M0ZBRENC QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAz NzNGQURDQkFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzCvJoz72jk8y2rqSpiboXlr/W6QzV1qOR1 4RWTfbWVYjrP/ntuHUU7noI58m6iISXIgv95gvifC1k2B51LkvzOST1lcb7ZP3Lt 8VubGcC7gN7qx6w1axZcrtxpflxsfSHyKrw/0QLwNVSrD0tYZRbXrz3obAS1S4TR GhI+cLKhRai4eaomr37KncMWiH7Rf+Fy9ltP8Qto916OzCQUVbPlStOU/8jL+Qk4 IOxxyY/Q3Mj34ruwiRhkUDkA6+sNOalAW5qe50EMbgk+9zg01wf9vtB+CS9yl25r XDdvt2sbzf1zDCH+zuhVKuR4UInG0J1fHRv5I74EKrr+RdNcg78= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:15 2026 by rpki-client