$ rpki-client -vvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json) Hash identifier: Cu9j+O5GIb4+666haxXT3D/EwzZsVAxR4BjDaUfFsHM= Subject key identifier: 5E:19:FD:8C:AC:56:C6:D2:AE:D8:C9:8D:78:DC:3E:B8:DE:3A:38:B3 Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Certificate serial: 374D2B255432351E1B2DA440A097E83F7B5BA228 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft Manifest number: 4F Signing time: Mon 29 Jun 2026 21:17:08 +0000 Manifest this update: Mon 29 Jun 2026 21:12:08 +0000 Manifest next update: Wed 01 Jul 2026 00:25:08 +0000 Files and hashes: 1: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: owZgPLTv5qs/tWJzq/uKH46+TOtfvh4DZxLbnGExGQY=) 2: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 00:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4d:2b:25:54:32:35:1e:1b:2d:a4:40:a0:97:e8:3f:7b:5b:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Validity Not Before: Jun 29 21:12:08 2026 GMT Not After : Jul 1 00:25:08 2026 GMT Subject: CN=5E19FD8CAC56C6D2AED8C98D78DC3EB8DE3A38B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:b2:23:83:61:78:3e:5f:6c:81:b3:e1:8f: 7b:02:af:66:55:8e:d1:b2:5c:40:5c:de:db:07:43: d4:8e:6c:c8:dc:e9:31:15:58:4e:9c:d5:fc:a1:c5: 7e:8e:8e:7a:67:63:ee:c8:7e:58:62:1a:8d:62:1c: 31:b7:01:41:69:d8:41:ad:1e:31:e6:6d:2c:3f:5b: 1d:83:ac:f9:1d:0b:73:ba:c4:f5:65:fc:48:c8:21: 2c:80:be:ed:9a:20:a9:7a:f6:a7:f3:f9:b8:0e:e9: 31:ab:77:a1:34:69:82:5f:8a:85:20:c6:9c:03:64: 2d:cd:ff:8c:2b:03:c7:e2:24:93:01:01:10:1f:5c: 7e:b5:96:9e:5b:76:4c:a1:68:83:95:e5:9c:f7:d8: 9b:73:d6:a2:9c:60:d7:0f:c3:69:0c:0a:de:43:22: 03:0a:5d:7f:0a:fb:3f:fe:93:96:07:27:36:d4:ad: f7:76:10:0c:72:40:aa:0f:4b:5e:96:83:87:73:96: 7f:45:e9:21:6c:02:27:4a:3b:ee:c1:82:a0:51:01: 1a:c9:c1:42:7e:8e:c7:e3:77:51:17:f9:06:d6:7d: a6:15:ca:f5:9e:5c:b5:cf:b4:0c:77:f0:cc:52:70: 7f:1b:2d:7e:73:fc:0e:7f:9e:44:22:12:b7:f7:87: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:19:FD:8C:AC:56:C6:D2:AE:D8:C9:8D:78:DC:3E:B8:DE:3A:38:B3 X509v3 Authority Key Identifier: keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5e:d9:6d:3f:32:06:88:18:ee:2a:b3:d4:46:05:a1:aa:e5: 3c:29:8e:0a:82:26:6b:4a:02:20:24:9e:70:2f:10:6b:01:14: d2:f8:4b:23:8c:aa:8b:cd:04:e1:be:dd:af:90:31:f9:8a:3c: 16:08:4d:07:26:c6:f4:d6:4b:ef:f3:ea:32:89:1c:ad:65:dd: ba:7c:8e:7b:e6:56:0e:2a:ec:85:11:a6:8b:64:81:01:64:e1: a3:85:67:f3:ab:58:cb:ba:3b:3e:c1:62:ef:bd:df:5c:3a:06: d3:a7:ed:95:f4:a5:e0:38:41:c2:0e:31:1a:14:b6:08:1d:f9: 37:03:42:b8:6c:f7:5a:5e:ce:87:08:0d:dc:e6:be:c1:34:6d: 81:d0:13:31:4d:40:20:05:97:eb:63:e8:36:dc:a7:c2:c3:27: ef:42:ed:7e:15:ef:92:34:4d:fc:96:ef:8f:2b:0e:5a:3d:79: 0f:0a:24:2e:5d:30:69:36:ee:e6:99:73:d9:5f:59:e8:d1:93: b6:12:5f:33:37:37:f4:ae:25:c5:37:46:f9:ac:25:99:b7:81: fa:68:57:a7:23:ee:63:c6:17:95:67:89:6c:1b:33:ac:b2:f5: 8e:bd:09:70:ea:b6:c2:21:cd:fe:ff:5c:6a:49:19:9a:09:90: 58:88:3b:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN00rJVQyNR4bLaRAoJfoP3tboigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUwMzcw QzA2MzEzNTAeFw0yNjA2MjkyMTEyMDhaFw0yNjA3MDEwMDI1MDhaMDMxMTAvBgNV BAMTKDVFMTlGRDhDQUM1NkM2RDJBRUQ4Qzk4RDc4REMzRUI4REUzQTM4QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzLIjg2F4Pl9sgbPhj3sCr2ZV jtGyXEBc3tsHQ9SObMjc6TEVWE6c1fyhxX6OjnpnY+7IflhiGo1iHDG3AUFp2EGt HjHmbSw/Wx2DrPkdC3O6xPVl/EjIISyAvu2aIKl69qfz+bgO6TGrd6E0aYJfioUg xpwDZC3N/4wrA8fiJJMBARAfXH61lp5bdkyhaIOV5Zz32Jtz1qKcYNcPw2kMCt5D IgMKXX8K+z/+k5YHJzbUrfd2EAxyQKoPS16Wg4dzln9F6SFsAidKO+7BgqBRARrJ wUJ+jsfjd1EX+QbWfaYVyvWeXLXPtAx38MxScH8bLX5z/A5/nkQiErf3h869AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXhn9jKxWxtKu2MmNeNw+uN46OLMwHwYDVR0j BBgwFoAUz1yl4wIxHNDbD+qEDnRQNwwGMTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3OTFiNzMtYmIwOC00YTgzLWExOTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMw MjMxMUNEMERCMEZFQTg0MEU3NDUwMzcwQzA2MzEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjVDQTVFMzAyMzExQ0QwREIwRkVBODQwRTc0NTAzNzBDMDYz MTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUw MzcwQzA2MzEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJe2W0/MgaIGO4qs9RGBaGq5TwpjgqCJmtK AiAknnAvEGsBFNL4SyOMqovNBOG+3a+QMfmKPBYITQcmxvTWS+/z6jKJHK1l3bp8 jnvmVg4q7IURpotkgQFk4aOFZ/OrWMu6Oz7BYu+931w6BtOn7ZX0peA4QcIOMRoU tggd+TcDQrhs91pezocIDdzmvsE0bYHQEzFNQCAFl+tj6Dbcp8LDJ+9C7X4V75I0 TfyW748rDlo9eQ8KJC5dMGk27uaZc9lfWejRk7YSXzM3N/SuJcU3RvmsJZm3gfpo V6cj7mPGF5VniWwbM6yy9Y69CXDqtsIhzf7/XGpJGZoJkFiIO2E= -----END CERTIFICATE-----Generated at Tue Jun 30 14:18:58 2026 by rpki-client