$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft File: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft (raw, json) Hash identifier: hVwuKP8/5sCMHmLBZzUaiCfaA13rZaAR3fq3BHwJtcU= Subject key identifier: 43:BC:85:26:BA:8F:F9:C1:A7:C2:CD:C7:C8:4E:71:03:A7:42:B7:28 Authority key identifier: CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 Certificate issuer: /CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Certificate serial: 2DBBE1468DF11B8C3DFFAE883E08A36713016194 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 13:46:51 +0000 Manifest this update: Thu 23 Jul 2026 13:41:51 +0000 Manifest next update: Fri 24 Jul 2026 14:35:51 +0000 Files and hashes: 1: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl (hash: O8URPi1S7n68YHi3a5o5GgtdUOocVazSBqgm8jet5Eo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bb:e1:46:8d:f1:1b:8c:3d:ff:ae:88:3e:08:a3:67:13:01:61:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Validity Not Before: Jul 23 13:41:51 2026 GMT Not After : Jul 24 14:35:51 2026 GMT Subject: CN=43BC8526BA8FF9C1A7C2CDC7C84E7103A742B728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:f8:92:39:79:69:35:f5:bd:d1:74:0d:bc: 5e:99:25:1e:ed:43:c0:c3:43:57:b8:3f:51:dc:56: cc:fd:61:78:da:c2:13:96:17:8b:2b:04:8d:70:7d: d0:25:9d:50:d4:15:f0:18:71:a7:e7:d4:d7:e8:18: 5f:5b:e9:be:cf:8f:d6:02:0c:e7:25:ed:f1:a3:af: ff:7c:79:2d:24:3d:da:da:34:ed:71:42:d2:4b:e3: 65:17:a5:b1:f9:39:16:08:f9:21:a8:fb:e5:cb:cc: d7:94:1d:d7:3a:28:23:76:11:01:8c:e0:34:8d:7a: 1c:de:b5:f6:f9:b6:d4:ad:81:7f:3e:4a:d6:f9:c4: 68:0f:b5:e2:06:64:6c:5d:74:35:b2:80:bc:66:9a: d3:b0:5b:7a:56:3a:6e:ce:6a:47:92:27:90:ac:04: 24:0c:6e:e6:61:32:ba:55:de:14:ef:8c:54:b6:1b: 9c:94:c9:b9:64:d3:b1:c9:70:5e:a2:5a:e5:5b:f4: 2b:84:84:bc:58:37:25:21:9d:fe:c7:c9:10:83:64: c2:16:20:8a:5c:47:22:e3:10:89:8a:94:dc:b4:69: 95:cc:71:a4:18:17:38:64:d8:67:92:5f:80:9a:ba: 4c:fa:a0:2e:ec:65:a3:4b:1e:5e:c8:50:86:16:db: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:85:26:BA:8F:F9:C1:A7:C2:CD:C7:C8:4E:71:03:A7:42:B7:28 X509v3 Authority Key Identifier: keyid:CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:08:27:47:2a:9e:f5:c8:01:a0:4d:6d:51:f3:ed:36:cb:95: 30:7f:50:09:f0:c5:6b:22:e5:23:58:d9:48:d3:73:0e:d5:6f: 5b:af:3a:d6:7d:8b:9a:4b:11:b2:ac:0b:09:d2:17:d4:37:52: e0:35:29:79:93:bb:7c:4c:ed:dc:68:0d:95:7f:d5:93:d8:4b: 70:09:d5:dc:e5:0e:b5:77:81:56:cb:7d:4c:65:cd:19:d7:1c: 9e:08:ef:c8:0a:7d:11:41:46:09:cb:66:d5:ec:b5:04:71:4a: ba:c9:3a:e7:8a:3d:63:2e:2b:eb:fa:fb:0f:2d:33:d6:08:ca: 36:f1:67:c4:d3:c0:ac:ff:22:0b:99:f8:46:8b:0d:54:e7:d2: 57:32:c4:c9:57:da:74:b4:37:93:8e:4f:25:8c:2d:e8:81:e2: 85:39:3a:40:02:d5:7d:cf:6c:3f:e7:ff:b4:10:b7:4b:67:53: e0:be:4e:b5:e1:f4:ab:6b:7d:6b:bf:6c:34:6b:07:21:26:c5: 3e:a4:69:c9:30:b9:fa:14:3c:78:ef:81:5d:44:5a:c5:9d:2c: 48:64:fd:96:89:7b:8c:8e:d0:8d:a9:5a:d7:6d:56:51:23:19: 8a:0b:6f:e3:86:48:41:96:49:17:09:52:1e:92:56:51:7e:84: 1b:ca:ca:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbvhRo3xG4w9/66IPgijZxMBYZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcw NTQ3RUY3ODAeFw0yNjA3MjMxMzQxNTFaFw0yNjA3MjQxNDM1NTFaMDMxMTAvBgNV BAMTKDQzQkM4NTI2QkE4RkY5QzFBN0MyQ0RDN0M4NEU3MTAzQTc0MkI3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzviSOXlpNfW90XQNvF6ZJR7t Q8DDQ1e4P1HcVsz9YXjawhOWF4srBI1wfdAlnVDUFfAYcafn1NfoGF9b6b7Pj9YC DOcl7fGjr/98eS0kPdraNO1xQtJL42UXpbH5ORYI+SGo++XLzNeUHdc6KCN2EQGM 4DSNehzetfb5ttStgX8+Stb5xGgPteIGZGxddDWygLxmmtOwW3pWOm7OakeSJ5Cs BCQMbuZhMrpV3hTvjFS2G5yUyblk07HJcF6iWuVb9CuEhLxYNyUhnf7HyRCDZMIW IIpcRyLjEImKlNy0aZXMcaQYFzhk2GeSX4Caukz6oC7sZaNLHl7IUIYW262JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7yFJrqP+cGnws3HyE5xA6dCtygwHwYDVR0j BBgwFoAUyvr7kD/mTuX84SzAe92fdwVH73gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVkNzc4NDAtNjA4ZS00NDlhLWIyMmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAz RkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcwNTQ3RUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZBRkI5MDNGRTY0RUU1RkNFMTJDQzA3QkREOUY3NzA1NDdF Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlG NzcwNTQ3RUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoIJ0cqnvXIAaBNbVHz7TbLlTB/UAnwxWsi 5SNY2UjTcw7Vb1uvOtZ9i5pLEbKsCwnSF9Q3UuA1KXmTu3xM7dxoDZV/1ZPYS3AJ 1dzlDrV3gVbLfUxlzRnXHJ4I78gKfRFBRgnLZtXstQRxSrrJOueKPWMuK+v6+w8t M9YIyjbxZ8TTwKz/IguZ+EaLDVTn0lcyxMlX2nS0N5OOTyWMLeiB4oU5OkAC1X3P bD/n/7QQt0tnU+C+TrXh9KtrfWu/bDRrByEmxT6kackwufoUPHjvgV1EWsWdLEhk /ZaJe4yO0I2pWtdtVlEjGYoLb+OGSEGWSRcJUh6SVlF+hBvKyqc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:22 2026 by rpki-client