$ rpki-client -vvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: I7P56Oshpop8XWECXUD3M2oNVP3KONL59//cbKYJkro= Subject key identifier: 01:7F:CA:F3:8E:46:98:98:C4:26:4C:C4:24:58:91:6C:B6:F7:BD:90 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 3B65F7AE15B10031E784B9D75F4579BC38E6688F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:40:10 +0000 Manifest this update: Fri 24 Jul 2026 04:35:10 +0000 Manifest next update: Sat 25 Jul 2026 08:26:10 +0000 Files and hashes: 1: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) 3: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: hlIJPshrMGAkukWDccq6duEHSUa3Fr7E0Gqp1o6hi48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:65:f7:ae:15:b1:00:31:e7:84:b9:d7:5f:45:79:bc:38:e6:68:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Jul 24 04:35:10 2026 GMT Not After : Jul 25 08:26:10 2026 GMT Subject: CN=017FCAF38E469898C4264CC42458916CB6F7BD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:fd:fa:9d:57:9c:04:3a:51:12:30:1e:67: 82:a2:f3:3d:dc:1b:91:2d:fd:4b:44:23:49:4e:c8: 4e:13:1c:89:39:9f:9e:47:dc:eb:7c:5a:7b:d5:ad: d7:c1:ab:f4:0b:18:83:2a:b1:06:b6:43:c8:05:71: 57:de:d8:7b:47:09:a1:8f:74:f8:7c:23:d9:e2:cb: c0:62:1a:69:1a:cb:2b:52:e4:f7:6b:3c:f9:ed:10: 23:5f:a6:82:e7:8a:24:36:16:b1:1c:7d:e5:fb:63: bb:dc:d5:cc:09:a4:0b:a1:01:a3:13:f6:3a:d9:53: a6:b7:23:c9:d4:db:50:d6:f7:5d:4a:e7:93:c7:10: 11:4a:9a:8e:18:a3:9f:9e:c7:f3:af:91:51:36:41: f8:e1:15:64:90:5a:3f:f6:cc:c1:c0:45:7d:70:4a: 6e:f8:d2:59:a5:12:d0:2c:11:6e:fc:da:33:8d:e8: 69:b5:ed:c8:c2:8d:94:a0:88:47:ac:15:bf:c6:4b: 72:b1:20:f9:74:b3:55:60:e5:ad:61:3d:6f:e9:95: 92:ed:84:91:03:94:a6:a3:93:0f:fe:60:d1:f6:12: df:28:89:3b:4a:d9:6f:bb:dd:95:5c:c3:88:2d:b7: 0c:8f:a5:b1:0b:c1:42:8d:5a:d1:e6:de:12:7a:44: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7F:CA:F3:8E:46:98:98:C4:26:4C:C4:24:58:91:6C:B6:F7:BD:90 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:37:94:a3:37:a6:17:e8:92:78:f3:c7:7a:65:5c:80:52:82: e4:78:95:7d:a9:19:2f:30:88:d5:a2:6d:c1:2a:35:4e:89:16: 51:d7:d5:c4:f4:c3:ae:4c:66:40:a9:29:75:4c:87:2d:5a:66: fe:53:54:47:c9:a5:18:07:25:80:c3:e8:f4:fd:7d:67:39:cc: 7a:df:86:e3:74:f5:4c:78:68:57:13:e1:2a:c2:e5:f1:39:31: c9:ce:e1:ec:82:b2:dd:24:96:6c:49:90:7f:e2:10:02:64:87: 0d:50:05:8c:d7:df:84:37:11:76:64:34:ff:bd:7e:6a:3f:a7: 8b:da:26:e8:cf:03:58:65:93:b8:cd:31:2d:4d:46:a8:b4:90: 98:17:aa:02:c0:b8:38:85:e9:f4:0e:d8:bb:6b:98:d5:e6:58: 46:5f:a2:5a:70:48:7d:50:fe:83:86:58:b8:60:40:a1:4f:f7: 66:00:8c:5e:07:c8:5c:ba:37:09:2d:8d:d7:23:65:43:b8:ef: b4:08:06:52:41:b9:68:fa:85:cd:46:4b:14:6a:ee:95:58:4d: 4d:a8:a1:61:1c:48:5f:76:73:ca:62:83:33:be:4c:f7:46:74: 7b:a2:3e:fd:22:7d:c7:85:58:40:8b:b1:a4:d1:82:f4:71:81: b3:0e:f8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2X3rhWxADHnhLnXX0V5vDjmaI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA3MjQwNDM1MTBaFw0yNjA3MjUwODI2MTBaMDMxMTAvBgNV BAMTKDAxN0ZDQUYzOEU0Njk4OThDNDI2NENDNDI0NTg5MTZDQjZGN0JEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgv36nVecBDpREjAeZ4Ki8z3c G5Et/UtEI0lOyE4THIk5n55H3Ot8WnvVrdfBq/QLGIMqsQa2Q8gFcVfe2HtHCaGP dPh8I9niy8BiGmkayytS5PdrPPntECNfpoLniiQ2FrEcfeX7Y7vc1cwJpAuhAaMT 9jrZU6a3I8nU21DW911K55PHEBFKmo4Yo5+ex/OvkVE2QfjhFWSQWj/2zMHARX1w Sm740lmlEtAsEW782jON6Gm17cjCjZSgiEesFb/GS3KxIPl0s1Vg5a1hPW/plZLt hJEDlKajkw/+YNH2Et8oiTtK2W+73ZVcw4gttwyPpbELwUKNWtHm3hJ6RMuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAX/K845GmJjEJkzEJFiRbLb3vZAwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw3lKM3phfoknjzx3plXIBSguR4lX2pGS8w iNWibcEqNU6JFlHX1cT0w65MZkCpKXVMhy1aZv5TVEfJpRgHJYDD6PT9fWc5zHrf huN09Ux4aFcT4SrC5fE5McnO4eyCst0klmxJkH/iEAJkhw1QBYzX34Q3EXZkNP+9 fmo/p4vaJujPA1hlk7jNMS1NRqi0kJgXqgLAuDiF6fQO2LtrmNXmWEZfolpwSH1Q /oOGWLhgQKFP92YAjF4HyFy6NwktjdcjZUO477QIBlJBuWj6hc1GSxRq7pVYTU2o oWEcSF92c8pigzO+TPdGdHuiPv0ifceFWECLsaTRgvRxgbMO+D0= -----END CERTIFICATE-----Generated at Fri Jul 24 20:07:25 2026 by rpki-client