$ rpki-client -vvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: TarXWwFLmspLmZlE/rHfz7NqmwH9DvK+k/9cH6aGNCo= Subject key identifier: EF:27:9E:7E:2F:CD:49:2A:AA:92:80:BB:67:C9:38:35:71:DC:55:97 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 0B65DEF7117A83601F02FB791A9790A2FCDED749 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:20:13 +0000 Manifest this update: Wed 03 Jun 2026 00:15:13 +0000 Manifest next update: Thu 04 Jun 2026 01:30:13 +0000 Files and hashes: 1: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: wVdgdJynOCY0YAzF9Ay2n/D/+m6z2SRNodB20WxToK8=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) 3: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:65:de:f7:11:7a:83:60:1f:02:fb:79:1a:97:90:a2:fc:de:d7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Jun 3 00:15:13 2026 GMT Not After : Jun 4 01:30:13 2026 GMT Subject: CN=EF279E7E2FCD492AAA9280BB67C9383571DC5597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:ad:af:ac:48:a5:e3:2e:00:4d:88:ba:90: 36:94:b5:e4:a3:d7:e9:a7:20:5e:9d:14:d7:d8:73: 29:49:bd:8e:f5:76:c7:b2:75:9e:0a:d2:bc:27:7e: 72:48:7e:f5:b9:d8:ff:1f:d8:e8:f7:91:84:5f:d6: 8a:aa:16:32:53:b2:8b:90:b3:0f:e0:aa:c8:4d:f6: 38:ff:58:97:21:d5:81:a1:3b:bb:11:d3:db:a8:21: 2c:9a:43:93:8d:c2:99:ad:88:9f:c3:f1:29:d3:82: 79:72:e6:d7:c3:a3:eb:8f:4e:ef:01:18:1b:b3:7f: 9b:57:2b:af:be:7b:ac:42:e9:a7:bc:c0:1d:a8:c6: d8:a9:8c:97:e4:e8:8e:82:6d:60:23:c8:00:7d:47: 6b:3d:83:8c:cd:a8:73:61:a0:59:4f:61:7d:a4:1b: d2:d8:56:9d:b9:c9:a3:7b:90:e5:f9:1c:73:78:d6: 01:21:83:ee:bf:d8:10:64:bb:e9:4f:56:e7:0e:05: 8f:18:f4:a5:0f:92:6b:8c:8b:ef:a1:b1:84:46:3b: 54:06:ca:5a:75:e5:45:73:0d:66:03:99:f2:55:29: bd:a3:6b:20:3d:01:a9:65:a9:a2:65:48:76:09:38: 35:71:5d:2e:ae:1c:97:86:64:5f:1a:11:6b:dd:7d: 9d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:27:9E:7E:2F:CD:49:2A:AA:92:80:BB:67:C9:38:35:71:DC:55:97 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:de:16:b5:63:e2:8c:50:78:a3:b0:a5:a4:d9:83:3b:d2:b7: d3:14:b9:69:f3:07:7a:82:e3:aa:56:e5:8f:74:84:52:90:48: de:2e:d0:15:08:16:19:5f:bc:dd:d9:1d:7d:d2:2a:81:0c:f4: d9:ee:4e:63:a3:a8:6c:e8:05:75:37:64:01:64:31:f6:04:8d: 45:20:63:bf:6c:01:82:2f:58:2d:b5:5c:29:de:6f:86:b8:33: 8a:c0:ac:ca:a0:16:cd:47:20:92:42:91:bc:73:70:cb:13:cd: 72:dc:16:bb:fb:60:f5:b0:f4:3d:d3:31:1e:4e:1c:46:4a:f3: ff:28:e3:b9:2c:b3:8b:c9:12:06:1f:ec:23:5c:a3:9d:02:bf: c5:b1:23:b9:9f:fe:be:6a:c7:18:39:fa:06:4a:14:7d:22:7a: 66:68:04:01:08:8b:59:50:97:e7:5f:a8:56:96:45:dc:ac:5f: e7:85:86:c0:f1:af:4d:10:e2:d8:43:5c:ea:de:c3:af:75:91: 53:da:95:de:08:62:81:61:98:66:06:1f:76:81:3e:04:15:26: 95:d0:53:bf:53:ba:4f:d6:a0:e6:d4:bc:1a:c2:00:ee:e8:e7: 28:be:38:dd:f1:d0:b0:c3:bf:23:c5:49:0e:db:05:13:e8:fc: 4e:e4:99:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2Xe9xF6g2AfAvt5GpeQovze10kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA2MDMwMDE1MTNaFw0yNjA2MDQwMTMwMTNaMDMxMTAvBgNV BAMTKEVGMjc5RTdFMkZDRDQ5MkFBQTkyODBCQjY3QzkzODM1NzFEQzU1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLK2vrEil4y4ATYi6kDaUteSj 1+mnIF6dFNfYcylJvY71dseydZ4K0rwnfnJIfvW52P8f2Oj3kYRf1oqqFjJTsouQ sw/gqshN9jj/WJch1YGhO7sR09uoISyaQ5ONwpmtiJ/D8SnTgnly5tfDo+uPTu8B GBuzf5tXK6++e6xC6ae8wB2oxtipjJfk6I6CbWAjyAB9R2s9g4zNqHNhoFlPYX2k G9LYVp25yaN7kOX5HHN41gEhg+6/2BBku+lPVucOBY8Y9KUPkmuMi++hsYRGO1QG ylp15UVzDWYDmfJVKb2jayA9AallqaJlSHYJODVxXS6uHJeGZF8aEWvdfZ1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7yeefi/NSSqqkoC7Z8k4NXHcVZcwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDeFrVj4oxQeKOwpaTZgzvSt9MUuWnzB3qC 46pW5Y90hFKQSN4u0BUIFhlfvN3ZHX3SKoEM9NnuTmOjqGzoBXU3ZAFkMfYEjUUg Y79sAYIvWC21XCneb4a4M4rArMqgFs1HIJJCkbxzcMsTzXLcFrv7YPWw9D3TMR5O HEZK8/8o47kss4vJEgYf7CNco50Cv8WxI7mf/r5qxxg5+gZKFH0iemZoBAEIi1lQ l+dfqFaWRdysX+eFhsDxr00Q4thDXOrew691kVPald4IYoFhmGYGH3aBPgQVJpXQ U79Tuk/WoObUvBrCAO7o5yi+ON3x0LDDvyPFSQ7bBRPo/E7kmYE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:55 2026 by rpki-client