$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft File: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft (raw, json) Hash identifier: HruukbF5oK/dS73Mz1VVpLgKB/NM84iGVMk5aapr5gQ= Subject key identifier: 6B:8B:E7:7A:EF:17:5B:8A:87:08:49:B2:C6:5D:1D:03:AD:BC:BF:51 Authority key identifier: CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 Certificate issuer: /CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Certificate serial: 39CA3778F7FE23813E2C68DFD8C55DEBDB7E193F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft Manifest number: 0D Signing time: Tue 12 May 2026 11:32:11 +0000 Manifest this update: Tue 12 May 2026 11:27:11 +0000 Manifest next update: Wed 13 May 2026 12:07:11 +0000 Files and hashes: 1: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl (hash: wsP0zru/ZgV1EpYKcoy0g6m7VNCWULJci0+4/DUQw5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ca:37:78:f7:fe:23:81:3e:2c:68:df:d8:c5:5d:eb:db:7e:19:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Validity Not Before: May 12 11:27:11 2026 GMT Not After : May 13 12:07:11 2026 GMT Subject: CN=6B8BE77AEF175B8A870849B2C65D1D03ADBCBF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:cb:72:62:0b:fd:86:75:85:5a:fc:fa:d5: 56:fa:30:d1:4a:b3:48:45:3d:8f:90:44:76:29:01: 42:03:1d:d0:79:0d:0c:cc:7c:0e:ca:6a:9d:35:a4: f2:35:f8:bf:ab:0d:79:9d:23:4f:8d:28:1b:5b:40: 6e:cf:f9:dc:ba:3a:72:45:44:13:0b:69:27:cd:68: 31:65:92:05:ec:f8:4f:91:5d:f1:11:2f:5f:56:0b: 3b:28:80:84:c0:fb:d0:29:1c:50:b4:84:65:96:e0: 59:60:b2:d1:78:88:7d:53:f6:7d:9b:60:29:8d:dc: 8d:81:da:c4:74:7f:e0:2b:9b:d1:85:f4:eb:b0:f9: 70:56:0c:67:77:2b:99:16:85:7c:e4:37:b3:c1:87: 75:cb:09:ce:ff:f9:2c:50:1b:82:9d:55:66:5d:d9: 6b:87:9d:ff:f7:74:d8:a3:49:22:93:2b:83:9b:01: dd:fa:bc:31:40:c2:c0:41:62:54:4c:0a:c7:fb:e2: 9b:5d:ea:be:29:d6:12:0c:3c:61:8c:df:21:11:ec: 28:e4:07:cb:fc:b5:3c:fe:bb:9e:1b:c4:4f:63:1e: 39:20:a6:70:99:e5:4d:58:5f:bb:6f:7c:f2:ee:2b: b2:2a:ef:90:a8:9d:ca:19:e2:0c:25:50:12:96:7d: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8B:E7:7A:EF:17:5B:8A:87:08:49:B2:C6:5D:1D:03:AD:BC:BF:51 X509v3 Authority Key Identifier: keyid:CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d1:55:3a:0a:4c:ba:3b:d2:d7:ab:bd:fd:c9:17:a3:26:9f: 8e:e5:5a:c2:76:c9:21:4f:7f:75:0a:b0:9a:22:60:24:03:6a: 1a:73:47:f8:75:de:9a:96:24:b9:f0:a7:58:f8:7d:6b:13:76: 08:60:be:d1:81:83:dc:69:96:10:b7:f1:ca:f5:de:48:39:18: f9:92:98:98:2b:3e:48:06:df:28:87:5a:64:b8:fa:49:a1:09: 81:1e:bd:67:7d:5f:0f:2f:6e:1a:a5:26:4e:c5:d9:f2:8d:b1: ff:85:bc:ce:d5:df:02:50:1b:89:69:d3:e3:ea:e8:92:e2:7e: 86:3f:cf:98:ce:a4:10:30:6d:f4:54:71:3d:80:7a:66:d1:af: d1:0c:1d:58:51:4a:b4:5d:41:d3:27:98:ba:21:f7:b1:00:a5: e9:26:85:e7:ad:69:0c:da:0a:e7:f6:e6:1c:82:56:87:6a:71: 84:47:28:91:ed:27:f8:35:9a:f5:fb:17:18:56:9f:16:b6:fb: d0:d9:84:71:1e:19:b7:8c:c0:b2:03:9c:4b:df:be:37:7f:f3: ca:d3:8c:bb:41:00:50:77:bf:2b:de:5f:e2:35:64:e6:74:68: 99:66:07:29:f5:2e:7a:fe:db:b5:d1:dd:16:b4:80:b5:be:a7: d9:0b:d3:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOco3ePf+I4E+LGjf2MVd69t+GT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcw NTQ3RUY3ODAeFw0yNjA1MTIxMTI3MTFaFw0yNjA1MTMxMjA3MTFaMDMxMTAvBgNV BAMTKDZCOEJFNzdBRUYxNzVCOEE4NzA4NDlCMkM2NUQxRDAzQURCQ0JGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZctyYgv9hnWFWvz61Vb6MNFK s0hFPY+QRHYpAUIDHdB5DQzMfA7Kap01pPI1+L+rDXmdI0+NKBtbQG7P+dy6OnJF RBMLaSfNaDFlkgXs+E+RXfERL19WCzsogITA+9ApHFC0hGWW4FlgstF4iH1T9n2b YCmN3I2B2sR0f+Arm9GF9Ouw+XBWDGd3K5kWhXzkN7PBh3XLCc7/+SxQG4KdVWZd 2WuHnf/3dNijSSKTK4ObAd36vDFAwsBBYlRMCsf74ptd6r4p1hIMPGGM3yER7Cjk B8v8tTz+u54bxE9jHjkgpnCZ5U1YX7tvfPLuK7Iq75ConcoZ4gwlUBKWfTAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa4vneu8XW4qHCEmyxl0dA628v1EwHwYDVR0j BBgwFoAUyvr7kD/mTuX84SzAe92fdwVH73gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVkNzc4NDAtNjA4ZS00NDlhLWIyMmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAz RkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcwNTQ3RUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZBRkI5MDNGRTY0RUU1RkNFMTJDQzA3QkREOUY3NzA1NDdF Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlG NzcwNTQ3RUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzRVToKTLo70tervf3JF6Mmn47lWsJ2ySFP f3UKsJoiYCQDahpzR/h13pqWJLnwp1j4fWsTdghgvtGBg9xplhC38cr13kg5GPmS mJgrPkgG3yiHWmS4+kmhCYEevWd9Xw8vbhqlJk7F2fKNsf+FvM7V3wJQG4lp0+Pq 6JLifoY/z5jOpBAwbfRUcT2AembRr9EMHVhRSrRdQdMnmLoh97EApekmheetaQza Cuf25hyCVodqcYRHKJHtJ/g1mvX7FxhWnxa2+9DZhHEeGbeMwLIDnEvfvjd/88rT jLtBAFB3vyveX+I1ZOZ0aJlmByn1Lnr+27XR3Ra0gLW+p9kL05U= -----END CERTIFICATE-----Generated at Wed May 13 02:37:00 2026 by rpki-client