$ rpki-client -vvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: na/ZXXjw6o6cYxIBH7kFmxkFuBorfpI/mAySWrCIGEs= Subject key identifier: 61:68:A4:5E:97:15:EE:B0:F1:EA:C1:88:A0:A6:8D:1F:20:49:D2:44 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 01B17F1FE28B6A6EF25DF46B6A2C17BBE3921AF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:39 +0000 Manifest this update: Tue 12 May 2026 19:30:39 +0000 Manifest next update: Wed 13 May 2026 21:30:39 +0000 Files and hashes: 1: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: ijMsJ5kX6GS9o7AAxgisHYBh+PZo5fTEDZcaWm3+mBU=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b1:7f:1f:e2:8b:6a:6e:f2:5d:f4:6b:6a:2c:17:bb:e3:92:1a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: May 12 19:30:39 2026 GMT Not After : May 13 21:30:39 2026 GMT Subject: CN=6168A45E9715EEB0F1EAC188A0A68D1F2049D244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5d:d5:78:21:bd:f7:eb:b1:09:57:5a:f4:52: 38:2c:b9:2b:d2:4e:da:cf:82:ec:6f:dd:1b:32:d6: aa:0f:e8:46:e4:dd:86:1e:4b:88:8c:69:cd:5e:27: 21:43:4a:5a:ba:9e:ac:6a:a7:c3:8e:e6:79:56:da: bf:26:46:9f:76:30:c8:1f:59:b4:7c:a6:88:4c:8a: d2:87:ff:90:8a:e6:2b:8c:c8:28:51:69:02:47:8f: c6:32:37:a8:65:df:a5:cb:7e:e3:c1:a3:82:45:6f: b2:7f:3e:e0:6c:70:33:df:35:7a:e4:7b:78:dd:24: 16:f0:c1:66:84:29:91:5f:8a:97:a7:e9:a6:ee:ad: 3d:1a:9f:08:0d:f6:69:16:2d:e6:43:46:21:71:aa: 54:c2:e0:f5:ca:6a:f9:29:7f:0a:44:a1:bb:20:76: 40:e3:38:e2:fd:e6:bf:87:2c:76:7a:a8:16:2c:b8: c0:3b:5b:d1:af:80:dc:52:a8:1d:eb:36:22:a9:d6: 68:77:78:c8:89:0b:49:50:65:2b:0b:12:e9:ac:b5: 38:92:52:4f:9f:57:2c:f3:65:7d:18:93:59:a7:6f: b0:6e:d0:e8:3f:fc:52:66:7b:ce:2b:7f:3e:a0:a8: 19:e8:4c:f2:d6:05:6a:2a:d5:c9:82:1c:29:25:31: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:68:A4:5E:97:15:EE:B0:F1:EA:C1:88:A0:A6:8D:1F:20:49:D2:44 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:73:32:4e:6d:dc:02:da:81:3b:be:9f:0a:52:23:a4:7b:98: 5d:51:e6:84:4d:24:ca:5a:60:a8:f1:db:ac:f3:de:06:51:5a: b7:a7:ba:58:59:ec:3b:dc:1a:4a:f0:d3:0e:97:26:44:2c:a3: 07:86:36:9f:2f:ee:49:99:1d:92:1f:3c:0b:f7:8f:68:5f:1c: 53:ef:98:e4:7b:f7:83:10:b8:07:89:93:02:8c:44:71:62:36: 60:bc:95:08:d5:ee:92:cd:00:c4:ec:12:bb:72:5c:c7:00:76: 25:56:a8:63:69:71:73:47:a3:11:55:4d:11:2e:bf:9d:fb:4a: 16:41:a4:cb:5f:63:4a:a5:1e:9c:e6:72:3f:14:df:4b:f1:ab: b3:3b:c2:59:49:da:6e:3d:e6:db:42:8f:3c:e0:54:98:81:68: 13:eb:ff:0b:58:ef:1d:46:b1:95:23:ca:72:48:3e:46:e4:72: 98:ae:0b:bd:dd:b0:34:5a:59:e7:4a:79:6d:f5:ca:06:d5:c4: be:68:23:49:6b:e5:ee:20:b2:4e:fb:7c:41:26:30:ae:6e:10: 64:6a:cb:1e:14:61:14:8a:cf:ad:0d:6d:5c:c7:3e:0b:0f:4a: c0:85:fa:85:7f:c3:ce:24:15:57:c4:a0:b6:83:27:62:c5:d5: ec:19:ae:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAbF/H+KLam7yXfRraiwXu+OSGvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA1MTIxOTMwMzlaFw0yNjA1MTMyMTMwMzlaMDMxMTAvBgNV BAMTKDYxNjhBNDVFOTcxNUVFQjBGMUVBQzE4OEEwQTY4RDFGMjA0OUQyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqXdV4Ib3367EJV1r0UjgsuSvS TtrPguxv3Rsy1qoP6Ebk3YYeS4iMac1eJyFDSlq6nqxqp8OO5nlW2r8mRp92MMgf WbR8pohMitKH/5CK5iuMyChRaQJHj8YyN6hl36XLfuPBo4JFb7J/PuBscDPfNXrk e3jdJBbwwWaEKZFfipen6aburT0anwgN9mkWLeZDRiFxqlTC4PXKavkpfwpEobsg dkDjOOL95r+HLHZ6qBYsuMA7W9GvgNxSqB3rNiKp1mh3eMiJC0lQZSsLEumstTiS Uk+fVyzzZX0Yk1mnb7Bu0Og//FJme84rfz6gqBnoTPLWBWoq1cmCHCklMdBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWikXpcV7rDx6sGIoKaNHyBJ0kQwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhzMk5t3ALagTu+nwpSI6R7mF1R5oRNJMpa YKjx26zz3gZRWrenulhZ7DvcGkrw0w6XJkQsoweGNp8v7kmZHZIfPAv3j2hfHFPv mOR794MQuAeJkwKMRHFiNmC8lQjV7pLNAMTsErtyXMcAdiVWqGNpcXNHoxFVTREu v537ShZBpMtfY0qlHpzmcj8U30vxq7M7wllJ2m495ttCjzzgVJiBaBPr/wtY7x1G sZUjynJIPkbkcpiuC73dsDRaWedKeW31ygbVxL5oI0lr5e4gsk77fEEmMK5uEGRq yx4UYRSKz60NbVzHPgsPSsCF+oV/w84kFVfEoLaDJ2LF1ewZrmM= -----END CERTIFICATE-----Generated at Tue May 12 23:27:41 2026 by rpki-client