$ rpki-client -vvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: mp3KDA6Fs608L6cfYDo2qH5dm71GkyQqHgRQsQ54eh4= Subject key identifier: AD:FC:02:ED:79:1D:C2:28:3A:6F:E4:4A:21:CC:52:7E:D3:EE:FB:D9 Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 2F1FAC79577CFEB5FC69D6CEDBC05E86C06E8FA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:22:27 +0000 Manifest this update: Tue 21 Jul 2026 05:17:27 +0000 Manifest next update: Wed 22 Jul 2026 06:00:27 +0000 Files and hashes: 1: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: dRZH1BMdnzufgjryW7KqvUHsmTSL/xP0fqOPiq2Ph10=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1f:ac:79:57:7c:fe:b5:fc:69:d6:ce:db:c0:5e:86:c0:6e:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Jul 21 05:17:27 2026 GMT Not After : Jul 22 06:00:27 2026 GMT Subject: CN=ADFC02ED791DC2283A6FE44A21CC527ED3EEFBD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:8d:29:78:7c:51:fa:60:6e:34:9b:0d:79: 17:35:e4:41:68:8b:93:84:d5:5e:9f:06:a7:dd:57: 0a:78:99:41:af:3e:35:9e:49:2c:49:90:cd:75:ae: 73:1d:5a:8a:ba:bc:53:48:01:f5:d9:e3:b8:16:5f: 4f:fe:5b:09:5f:17:e3:84:00:62:fa:30:e8:94:9a: 70:a7:13:76:d8:b6:5f:1f:87:cc:6f:4a:34:c0:4c: de:bc:49:1c:1d:d4:f0:e5:f2:22:91:f0:b9:23:a9: de:0e:df:bc:9d:a4:21:2a:b8:bd:bc:31:06:ce:1c: 05:d1:c1:c2:1d:e1:83:5d:12:e5:4e:1d:ef:f8:51: 5b:40:74:95:db:90:c9:d4:ac:1e:69:48:2b:96:bc: 16:59:56:ed:0b:a9:5b:70:bf:84:cd:dc:8f:46:b8: 34:ff:48:35:62:97:87:9e:5c:40:ec:12:3a:1e:ea: 74:f9:00:bf:8d:57:a8:d0:4a:d4:00:23:a7:ad:ec: c6:4f:24:cb:d5:f8:a3:35:12:4d:92:6b:82:88:12: 75:6e:63:f3:83:4c:18:0f:ca:87:ac:21:64:f2:f6: b0:2f:f9:22:f7:84:4e:6a:f2:68:24:9a:84:9e:71: d5:aa:e7:61:7f:f6:c5:f9:f8:ba:78:4a:d4:a8:5c: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FC:02:ED:79:1D:C2:28:3A:6F:E4:4A:21:CC:52:7E:D3:EE:FB:D9 X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cb:aa:45:2a:20:16:17:8c:8c:d1:ba:12:c2:59:30:59:96: 18:63:85:ff:de:fb:f9:c7:7b:e6:d8:89:f9:a6:50:0b:af:bb: db:a8:a3:20:6f:90:0f:ca:db:a6:4c:d3:6b:ee:02:09:fb:f5: b2:fe:25:1c:1f:1a:01:1f:ff:fe:fb:d4:71:d3:c1:81:76:02: 62:09:62:be:62:4b:c3:32:b5:33:64:97:0f:9c:72:14:bf:3a: 09:55:21:4e:38:d0:4c:bd:32:4e:4b:48:14:52:67:b0:06:53: 2c:e0:bc:25:c0:b5:c1:ba:d4:2b:d6:9e:85:dc:56:3b:85:28: 4a:47:b1:b0:18:ab:c0:ac:30:8e:1b:e1:75:a3:3c:8a:ca:a3: 71:a1:64:d2:bb:27:0c:7a:59:7e:72:25:92:5a:97:78:6b:c8: 17:8d:f6:65:d6:97:27:18:22:73:d5:34:f9:10:9e:b4:26:e9: a1:37:57:5d:d8:d5:c7:60:5a:93:bf:f1:fc:af:37:3c:d7:97: 17:1d:4b:0a:15:52:53:c6:65:b4:7f:4a:0f:a8:9f:e3:25:27: 87:3a:00:3a:52:97:65:51:2b:c1:fb:f6:e2:3f:4d:e3:6e:45: de:ec:23:18:76:64:53:94:27:c2:d7:51:44:08:ce:a9:86:fe: 40:87:ab:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULx+seVd8/rX8adbO28BehsBuj6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA3MjEwNTE3MjdaFw0yNjA3MjIwNjAwMjdaMDMxMTAvBgNV BAMTKEFERkMwMkVENzkxREMyMjgzQTZGRTQ0QTIxQ0M1MjdFRDNFRUZCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnY0peHxR+mBuNJsNeRc15EFo i5OE1V6fBqfdVwp4mUGvPjWeSSxJkM11rnMdWoq6vFNIAfXZ47gWX0/+WwlfF+OE AGL6MOiUmnCnE3bYtl8fh8xvSjTATN68SRwd1PDl8iKR8Lkjqd4O37ydpCEquL28 MQbOHAXRwcId4YNdEuVOHe/4UVtAdJXbkMnUrB5pSCuWvBZZVu0LqVtwv4TN3I9G uDT/SDVil4eeXEDsEjoe6nT5AL+NV6jQStQAI6et7MZPJMvV+KM1Ek2Sa4KIEnVu Y/ODTBgPyoesIWTy9rAv+SL3hE5q8mgkmoSecdWq52F/9sX5+Lp4StSoXHD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfwC7Xkdwig6b+RKIcxSftPu+9kwHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7LqkUqIBYXjIzRuhLCWTBZlhhjhf/e+/nH e+bYifmmUAuvu9uooyBvkA/K26ZM02vuAgn79bL+JRwfGgEf//771HHTwYF2AmIJ Yr5iS8MytTNklw+cchS/OglVIU440Ey9Mk5LSBRSZ7AGUyzgvCXAtcG61CvWnoXc VjuFKEpHsbAYq8CsMI4b4XWjPIrKo3GhZNK7Jwx6WX5yJZJal3hryBeN9mXWlycY InPVNPkQnrQm6aE3V13Y1cdgWpO/8fyvNzzXlxcdSwoVUlPGZbR/Sg+on+MlJ4c6 ADpSl2VRK8H79uI/TeNuRd7sIxh2ZFOUJ8LXUUQIzqmG/kCHqyg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:57:28 2026 by rpki-client