$ rpki-client -vvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft File: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft (raw, json) Hash identifier: 9a/OASaJc0uD82CW5TyBM1aUQz8v/2Ue12A6Zrdw/0Y= Subject key identifier: F1:FC:77:F4:E7:4E:2F:D1:65:C5:BC:E7:D5:5F:E3:A4:FF:F0:A3:11 Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Certificate serial: 2E115974B6453A4C070331A5DA86F0D1F1AC9080 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:49:53 +0000 Manifest this update: Mon 20 Jul 2026 14:44:53 +0000 Manifest next update: Tue 21 Jul 2026 17:40:53 +0000 Files and hashes: 1: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl (hash: oe25VsqgykAIYjHvRMd/jrcYdMGYVk0GyCnEJNHjVqg=) 2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:11:59:74:b6:45:3a:4c:07:03:31:a5:da:86:f0:d1:f1:ac:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Validity Not Before: Jul 20 14:44:53 2026 GMT Not After : Jul 21 17:40:53 2026 GMT Subject: CN=F1FC77F4E74E2FD165C5BCE7D55FE3A4FFF0A311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:6e:2a:2e:15:bb:d3:e8:5f:ae:77:f1:b6: 06:22:7e:32:48:f8:10:7d:16:79:de:95:cf:23:46: af:77:3f:db:e2:90:dd:7c:b5:48:5c:c7:c4:88:8d: cb:4c:4f:48:0d:f3:b5:75:ae:ee:d0:57:fb:98:9d: 4c:7d:67:3b:e8:e0:b2:f5:ec:24:1f:73:20:45:9a: 01:88:e3:11:9e:f9:d0:7a:d2:5b:68:22:9e:4f:3c: 9c:37:d4:98:76:18:d1:63:03:f6:eb:8f:f4:f8:86: 27:3c:7d:ec:05:68:c8:f2:d1:46:60:33:e1:11:c1: 37:71:b2:fe:06:f8:59:86:ae:6c:e3:6b:ec:da:ff: 90:fe:2d:57:e4:c0:b0:63:75:4d:f5:12:8e:c6:6e: 79:10:41:34:f0:94:87:d0:69:4b:06:07:85:95:43: 02:e1:25:67:91:a6:b1:e7:09:ab:a9:7e:22:58:62: 5a:7c:72:b7:6f:57:d5:b8:fa:45:36:49:7b:14:da: 31:21:60:e5:eb:f9:47:56:c1:ee:51:e8:92:36:f7: ec:d6:4a:95:a4:b2:e1:87:7f:88:5e:db:fa:13:a6: 98:02:43:37:e1:b6:3b:58:fe:c7:d2:b5:02:1e:67: 6f:b2:bb:0a:ce:61:51:72:0d:0c:36:5c:39:8d:58: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FC:77:F4:E7:4E:2F:D1:65:C5:BC:E7:D5:5F:E3:A4:FF:F0:A3:11 X509v3 Authority Key Identifier: keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8d:53:78:47:eb:a4:64:9e:4a:c4:d0:fb:e8:ad:3a:c2:39: b3:d8:a5:fd:e6:f9:c0:04:81:6a:74:55:2d:3b:a9:44:e9:9d: 48:38:2d:42:d6:65:4e:92:99:97:46:49:ea:0f:7d:d5:f7:58: b1:c5:23:8c:ac:b8:13:fa:49:91:88:8d:e5:e9:65:a1:ec:0c: ae:83:aa:64:82:1a:61:fa:a2:14:20:bb:a5:0d:23:cb:4c:63: 42:f2:89:6e:ae:9f:43:7c:8b:1b:13:15:af:6b:1e:37:d3:1d: f3:47:2d:7b:c2:a8:98:a6:9c:55:3b:9d:47:6f:cc:88:3c:00: 28:46:34:b6:24:2f:32:79:72:ab:46:94:e6:aa:b9:11:5b:69: 03:73:b2:af:5e:c1:00:1a:47:3d:32:32:2f:02:85:da:d6:44: cd:d6:99:4a:3b:ba:49:f5:89:9f:08:54:58:40:8d:43:56:e0: d4:c3:c2:af:41:c6:5a:e2:2c:b6:65:0c:99:2f:af:73:1d:e8: b5:6f:6c:0b:c4:67:c7:79:16:e3:66:3f:3f:5b:d3:1b:fb:47: dd:49:ed:e6:b9:e7:2d:60:3e:b5:63:14:3f:70:34:93:1c:08: 93:5d:cb:11:08:05:6b:40:62:f6:cb:d3:59:ae:79:86:6f:94: de:80:9a:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhFZdLZFOkwHAzGl2obw0fGskIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC OUUzNkZFODAeFw0yNjA3MjAxNDQ0NTNaFw0yNjA3MjExNzQwNTNaMDMxMTAvBgNV BAMTKEYxRkM3N0Y0RTc0RTJGRDE2NUM1QkNFN0Q1NUZFM0E0RkZGMEEzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdKm4qLhW70+hfrnfxtgYifjJI +BB9Fnnelc8jRq93P9vikN18tUhcx8SIjctMT0gN87V1ru7QV/uYnUx9Zzvo4LL1 7CQfcyBFmgGI4xGe+dB60ltoIp5PPJw31Jh2GNFjA/brj/T4hic8fewFaMjy0UZg M+ERwTdxsv4G+FmGrmzja+za/5D+LVfkwLBjdU31Eo7GbnkQQTTwlIfQaUsGB4WV QwLhJWeRprHnCaupfiJYYlp8crdvV9W4+kU2SXsU2jEhYOXr+UdWwe5R6JI29+zW SpWksuGHf4he2/oTppgCQzfhtjtY/sfStQIeZ2+yuwrOYVFyDQw2XDmNWGdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8fx39OdOL9Flxbzn1V/jpP/woxEwHwYDVR0j BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2 NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2 RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBG OEFCOUUzNkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKNU3hH66RknkrE0PvorTrCObPYpf3m+cAE gWp0VS07qUTpnUg4LULWZU6SmZdGSeoPfdX3WLHFI4ysuBP6SZGIjeXpZaHsDK6D qmSCGmH6ohQgu6UNI8tMY0LyiW6un0N8ixsTFa9rHjfTHfNHLXvCqJimnFU7nUdv zIg8AChGNLYkLzJ5cqtGlOaquRFbaQNzsq9ewQAaRz0yMi8ChdrWRM3WmUo7ukn1 iZ8IVFhAjUNW4NTDwq9BxlriLLZlDJkvr3Md6LVvbAvEZ8d5FuNmPz9b0xv7R91J 7ea55y1gPrVjFD9wNJMcCJNdyxEIBWtAYvbL01mueYZvlN6Amm0= -----END CERTIFICATE-----Generated at Tue Jul 21 07:54:38 2026 by rpki-client