$ rpki-client -vvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: VI595aglNzL/4pg7WdxIdJ1TTGiueWKIHha3BsJg6uU= Subject key identifier: 61:98:9C:B4:45:78:AE:B5:AF:B4:12:0F:BC:B1:7B:46:51:F3:33:31 Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 3512EEF797BA00D59EE45F10134E4D1D10124DC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 18:33:17 +0000 Manifest this update: Fri 19 Jun 2026 18:28:17 +0000 Manifest next update: Sat 20 Jun 2026 20:00:17 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) 2: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: 6GGdzk8ZYBSx3obNVVujuZzy1IreB66/lrU98yBa3sM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:12:ee:f7:97:ba:00:d5:9e:e4:5f:10:13:4e:4d:1d:10:12:4d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: Jun 19 18:28:17 2026 GMT Not After : Jun 20 20:00:17 2026 GMT Subject: CN=61989CB44578AEB5AFB4120FBCB17B4651F33331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:ef:23:5d:06:1d:17:a4:76:cc:27:8c:96: c4:aa:37:33:76:63:1d:4e:a8:ec:ba:24:17:5b:09: c4:dd:02:fb:0a:fd:9e:43:80:de:10:da:ac:40:4a: 06:4a:c6:cf:c1:44:6e:a2:b8:84:95:25:2d:6f:57: 43:5c:98:a3:16:5e:8d:98:cf:b9:8a:a6:8d:eb:44: 20:cc:06:bc:dc:45:e0:05:62:f4:60:f3:2e:1f:b7: f6:df:3b:0b:77:ce:4b:7f:03:a0:0b:fe:33:e1:cc: 7c:8e:ab:21:1c:b9:a5:48:78:87:a8:79:91:88:d9: 88:4f:02:b4:d7:0b:e5:7e:df:c1:3b:1c:12:d2:2d: 76:93:b4:51:c9:d5:c6:84:11:c1:29:c1:02:a7:1c: af:71:62:21:51:e0:20:4c:b4:5c:43:ef:8d:23:ac: e6:32:6f:b4:bc:b0:97:8c:c5:aa:cb:b2:45:66:f6: 93:1c:8a:9c:53:cf:e1:d4:3a:ee:6d:fa:9f:57:43: 58:15:79:6c:d9:fd:5a:76:aa:94:3a:8a:8c:b9:9b: f2:0d:ff:e0:55:3b:02:a5:7a:70:42:11:94:ee:93: b7:66:f6:60:6c:84:d7:36:56:27:71:45:44:01:7a: a0:a6:a8:9a:ce:6d:9b:41:97:37:5e:e1:d3:4c:e7: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:98:9C:B4:45:78:AE:B5:AF:B4:12:0F:BC:B1:7B:46:51:F3:33:31 X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b9:19:3f:f5:0c:8a:c9:c8:2c:c9:b2:25:a3:a8:bd:30:86: 4b:80:95:31:fa:c1:9e:fb:0b:a3:ab:aa:03:5a:e7:95:b3:06: cf:fe:9b:07:f4:e1:75:7c:69:67:d8:a4:ad:e4:0a:e0:e5:be: 4f:1b:dd:9e:c7:17:12:8d:00:64:17:ec:65:33:bb:eb:aa:86: 9a:86:54:48:ac:0a:7f:ec:65:0e:dd:36:33:0a:53:db:33:7c: 51:2c:f3:10:a2:df:87:71:f6:65:30:72:d9:62:6d:de:c9:bf: da:36:7b:9f:84:12:44:a4:43:b7:fa:12:ff:9a:ad:36:ef:0f: ec:92:7b:af:99:15:8c:92:ae:01:f5:e1:51:64:58:a9:b3:e6: 51:68:b3:0a:dc:6c:76:6f:9d:23:ef:5b:37:b3:26:ce:b4:6c: 0f:18:85:6c:c8:fe:8e:d4:4c:8c:64:dd:6e:fd:5f:a7:9d:40: a5:62:07:34:04:02:dc:4a:f2:8f:ee:a9:64:50:2e:cd:90:c2: 60:90:00:f0:6c:25:9d:34:42:1b:36:6e:32:05:9a:af:e6:e5: e9:33:c0:39:6d:d6:e5:59:8e:a3:16:30:cf:20:50:8a:c6:9c: 71:09:8d:13:03:3e:6f:e0:21:2e:6f:74:cd:bb:85:16:6e:b8: 75:42:6a:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRLu95e6ANWe5F8QE05NHRASTcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjA2MTkxODI4MTdaFw0yNjA2MjAyMDAwMTdaMDMxMTAvBgNV BAMTKDYxOTg5Q0I0NDU3OEFFQjVBRkI0MTIwRkJDQjE3QjQ2NTFGMzMzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31u8jXQYdF6R2zCeMlsSqNzN2 Yx1OqOy6JBdbCcTdAvsK/Z5DgN4Q2qxASgZKxs/BRG6iuISVJS1vV0NcmKMWXo2Y z7mKpo3rRCDMBrzcReAFYvRg8y4ft/bfOwt3zkt/A6AL/jPhzHyOqyEcuaVIeIeo eZGI2YhPArTXC+V+38E7HBLSLXaTtFHJ1caEEcEpwQKnHK9xYiFR4CBMtFxD740j rOYyb7S8sJeMxarLskVm9pMcipxTz+HUOu5t+p9XQ1gVeWzZ/Vp2qpQ6ioy5m/IN /+BVOwKlenBCEZTuk7dm9mBshNc2VidxRUQBeqCmqJrObZtBlzde4dNM57d9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZictEV4rrWvtBIPvLF7RlHzMzEwHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy5GT/1DIrJyCzJsiWjqL0whkuAlTH6wZ77 C6OrqgNa55WzBs/+mwf04XV8aWfYpK3kCuDlvk8b3Z7HFxKNAGQX7GUzu+uqhpqG VEisCn/sZQ7dNjMKU9szfFEs8xCi34dx9mUwctlibd7Jv9o2e5+EEkSkQ7f6Ev+a rTbvD+ySe6+ZFYySrgH14VFkWKmz5lFoswrcbHZvnSPvWzezJs60bA8YhWzI/o7U TIxk3W79X6edQKViBzQEAtxK8o/uqWRQLs2QwmCQAPBsJZ00Qhs2bjIFmq/m5ekz wDlt1uVZjqMWMM8gUIrGnHEJjRMDPm/gIS5vdM27hRZuuHVCasc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:03 2026 by rpki-client