$ rpki-client -vvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft File: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft (raw, json) Hash identifier: TkNr1HYx+RbG8CxIth2by7tRreHvby0hcnR/zn0C3C4= Subject key identifier: 21:14:25:43:A5:F8:50:8F:CB:95:4C:FF:C8:89:B9:1B:A3:AE:CF:EC Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 Certificate issuer: /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Certificate serial: 6022103247452C4092C90D15B54B8F275F246DDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 01:42:57 +0000 Manifest this update: Tue 21 Jul 2026 01:37:57 +0000 Manifest next update: Wed 22 Jul 2026 04:31:57 +0000 Files and hashes: 1: CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl (hash: tFGmlHVu1W95hcM8e5vCyDBdlyJ3h9/Paghs5wxoTtw=) 2: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: hnbLn0WCQW7tjxDDomIPOhXC1r7ltYUmnmJCJUDX+Hs=) 3: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: 9zWseK0VGBFjDjSukC7sEdd2KVTBNcjvlH0F1oisM48=) 4: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: h+jOCf2n8qXpyofV0yrwta8TGMspkZPZ+KTwYTU4B7c=) 5: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: eBoaZqyr6WlSbN/AJF6RgzCQyG+1zBmzaFfb/7fN5dY=) 6: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: CIu+a1x1Ob4TtttYENYOSXpa0Xw1+bkYfz/RVtE/6mo=) 7: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: LF0MrR9BI6ohPR99FqHdVyHSCGgsD/4Honm25vFKTtU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:22:10:32:47:45:2c:40:92:c9:0d:15:b5:4b:8f:27:5f:24:6d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6 Validity Not Before: Jul 21 01:37:57 2026 GMT Not After : Jul 22 04:31:57 2026 GMT Subject: CN=21142543A5F8508FCB954CFFC889B91BA3AECFEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:c4:50:31:dc:c4:45:81:ba:ee:04:a2:97: 11:27:19:2d:c2:d8:88:a0:55:db:ea:72:ad:36:23: 3c:cb:74:5f:13:74:fb:c9:3f:54:68:af:e9:27:5f: 6a:81:12:dd:a3:a4:bd:95:a0:a2:53:8f:54:99:1d: 99:12:aa:96:9f:83:6c:e9:ed:be:2a:22:4e:bb:fe: bc:58:23:f6:40:4e:2e:7b:9c:90:4b:c6:83:7c:3a: b7:f7:06:83:4a:f5:51:6b:27:44:2d:2b:50:13:bf: c1:6f:98:95:e1:3c:fe:b5:da:d5:d9:99:d6:ee:df: cf:c4:aa:1d:28:74:73:d5:53:d6:7c:1c:ae:13:fc: 6b:11:a7:2b:71:72:1b:af:1c:95:82:5c:ec:25:08: d9:88:48:52:27:bf:3d:dc:44:44:39:9a:91:fa:ed: 57:58:df:05:09:29:9f:e0:8c:35:c8:ba:0b:0c:72: f9:cc:74:92:ae:61:8e:9a:1e:31:dd:0a:74:bb:6c: 1b:68:5f:08:b5:92:f6:fc:c5:b9:b8:46:23:9d:14: 5a:0d:ad:9f:6a:94:a4:96:ac:81:12:98:e4:a2:ff: e4:fd:e9:09:d3:ee:30:03:c5:7c:a6:8c:4e:31:d0: 63:5a:01:1f:19:21:9e:46:e6:1b:65:6b:fa:a4:36: b2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:25:43:A5:F8:50:8F:CB:95:4C:FF:C8:89:B9:1B:A3:AE:CF:EC X509v3 Authority Key Identifier: keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:75:ed:e7:d7:87:d2:40:95:cd:10:fb:6f:0a:f1:de:1c:09: 9b:30:48:58:17:22:28:a1:cc:24:c7:42:09:1d:94:14:92:52: 24:ea:57:4d:5b:0d:d3:e5:3b:64:b1:44:00:86:00:58:0c:f2: b7:df:0e:3e:b3:b9:e3:0f:0a:5e:4f:19:de:ff:2b:74:06:cd: 6d:96:61:8e:f9:37:a2:82:45:7f:d9:d6:ed:d6:f9:1c:92:a2: 32:ed:aa:f2:4f:eb:53:bd:e5:a2:eb:de:dd:88:eb:15:29:7d: c5:e5:14:bd:7c:a7:be:1e:33:43:4a:cd:f2:d7:ab:b3:36:cf: b3:05:57:cc:b6:3b:aa:15:ed:58:88:bf:04:73:e2:54:fc:1f: 88:04:24:05:09:11:f1:a9:7a:8b:6d:95:8a:3c:e0:22:1d:f4: d1:cc:65:ea:1f:38:93:98:98:79:10:19:75:64:87:a7:ba:fb: 16:e9:85:78:a1:25:93:0c:29:5f:da:13:5c:4c:43:73:bd:45: 91:0d:80:0b:37:d5:ad:55:7d:b5:c2:08:91:29:7c:78:45:8a: 56:7b:dd:e8:d7:71:86:b5:e4:93:92:4e:e3:85:bd:8c:f9:64: 89:a1:83:20:62:86:77:1c:42:5f:15:e9:aa:d4:bd:28:2e:d0: 55:a6:6f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCIQMkdFLECSyQ0VtUuPJ18kbdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENC Q0MwNkJFNjAeFw0yNjA3MjEwMTM3NTdaFw0yNjA3MjIwNDMxNTdaMDMxMTAvBgNV BAMTKDIxMTQyNTQzQTVGODUwOEZDQjk1NENGRkM4ODlCOTFCQTNBRUNGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmMRQMdzERYG67gSilxEnGS3C 2IigVdvqcq02IzzLdF8TdPvJP1Ror+knX2qBEt2jpL2VoKJTj1SZHZkSqpafg2zp 7b4qIk67/rxYI/ZATi57nJBLxoN8Orf3BoNK9VFrJ0QtK1ATv8FvmJXhPP612tXZ mdbu38/Eqh0odHPVU9Z8HK4T/GsRpytxchuvHJWCXOwlCNmISFInvz3cREQ5mpH6 7VdY3wUJKZ/gjDXIugsMcvnMdJKuYY6aHjHdCnS7bBtoXwi1kvb8xbm4RiOdFFoN rZ9qlKSWrIESmOSi/+T96QnT7jADxXymjE4x0GNaAR8ZIZ5G5htla/qkNrLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIRQlQ6X4UI/LlUz/yIm5G6Ouz+wwHwYDVR0j BBgwFoAUz2d9xKDp9S5FjX94bBEATLzAa+YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5OWMxYWYtZDljNy00ZmZkLWJhMDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRB MEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENCQ0MwNkJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjY3N0RDNEEwRTlGNTJFNDU4RDdGNzg2QzExMDA0Q0JDQzA2 QkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAw NENCQ0MwNkJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFF17efXh9JAlc0Q+28K8d4cCZswSFgXIiih zCTHQgkdlBSSUiTqV01bDdPlO2SxRACGAFgM8rffDj6zueMPCl5PGd7/K3QGzW2W YY75N6KCRX/Z1u3W+RySojLtqvJP61O95aLr3t2I6xUpfcXlFL18p74eM0NKzfLX q7M2z7MFV8y2O6oV7ViIvwRz4lT8H4gEJAUJEfGpeottlYo84CId9NHMZeofOJOY mHkQGXVkh6e6+xbphXihJZMMKV/aE1xMQ3O9RZENgAs31a1VfbXCCJEpfHhFilZ7 3ejXcYa15JOSTuOFvYz5ZImhgyBihnccQl8V6arUvSgu0FWmb+4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:19 2026 by rpki-client