$ rpki-client -vvf rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft File: CF5CA5E302311CD0DB0FEA840E7450370C063135.mft (raw, json) Hash identifier: 5D4BemDkwVGR8bAWCG0PFF3S0Nd72zrEIdXH5Enpi+8= Subject key identifier: DE:4B:D9:B6:4C:D4:59:C2:76:6A:B2:2C:FC:DD:6D:88:13:2C:4E:91 Authority key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Certificate issuer: /CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Certificate serial: 0B7540D6D83DBF97A3A7822950E09599A638FB0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft Manifest number: 10 Signing time: Wed 13 May 2026 19:46:45 +0000 Manifest this update: Wed 13 May 2026 19:41:45 +0000 Manifest next update: Thu 14 May 2026 19:58:45 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: FJTfWibvDfJlxKwSdQvd1OlEmo/01QfGdYhuzrqBBYc=) 2: CF5CA5E302311CD0DB0FEA840E7450370C063135.crl (hash: IbLWkBTfd34pyDgk2Si1NvEPte8jXsQ80uyxJRyECkA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 19:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:75:40:d6:d8:3d:bf:97:a3:a7:82:29:50:e0:95:99:a6:38:fb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Validity Not Before: May 13 19:41:45 2026 GMT Not After : May 14 19:58:45 2026 GMT Subject: CN=DE4BD9B64CD459C2766AB22CFCDD6D88132C4E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:2b:5a:7f:6b:d0:29:c9:8e:8f:d4:5b:0d: 65:cd:da:ac:a8:af:ce:3d:94:9b:48:b6:da:aa:6e: 43:d1:14:6e:b1:09:55:b2:02:d8:c0:05:9f:29:30: 9f:73:b4:7a:aa:5d:67:d4:7c:2a:cd:d3:be:49:8d: 08:18:30:71:bd:c7:d8:b8:1e:2c:3a:3e:7c:bd:2f: c8:07:1f:07:65:c8:6b:f4:b4:f7:5c:ad:0e:ad:1a: 75:fd:28:b5:24:77:9f:26:64:52:ee:ca:6f:89:dd: b5:ab:a4:ab:24:fc:1e:1e:5c:e1:d7:a3:0a:c3:e9: 94:64:68:b4:3d:6f:b5:a8:2c:11:96:28:c6:69:98: 8d:66:ad:98:d3:f8:a6:77:09:7c:0b:3c:e4:0f:69: 39:ac:fd:35:16:80:58:a9:70:bd:7d:3e:1f:87:78: b9:4c:c3:6e:39:3e:87:ef:27:02:d1:c9:26:29:59: 32:0c:ca:f7:b3:ef:fe:ed:d1:08:13:21:77:74:9d: 72:96:53:e8:df:42:b6:68:6f:b9:93:fb:09:a1:99: 79:a9:ee:6f:90:01:a8:8f:fc:ad:1f:64:4e:04:fa: ac:48:0c:a9:ea:fe:30:14:5c:c1:7d:ab:24:a8:e6: cf:d9:cf:3d:1e:3c:dd:91:93:68:2d:4a:97:41:a9: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4B:D9:B6:4C:D4:59:C2:76:6A:B2:2C:FC:DD:6D:88:13:2C:4E:91 X509v3 Authority Key Identifier: keyid:CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0c:a6:92:e2:fd:f1:ab:73:22:7a:31:ad:9f:5f:6b:b5:90: 67:e8:00:bc:ce:e8:06:7c:70:75:0c:7f:f5:09:32:c6:4e:a8: 6c:d6:94:da:db:d8:d6:8f:8b:a6:9e:4b:e5:ac:d2:ec:2b:9b: 61:00:cb:ff:bd:ce:38:d9:93:a2:ed:d5:a1:aa:92:7c:4b:6c: 97:16:df:dc:03:7b:12:b3:cd:30:6e:bf:e2:54:92:f6:a1:92: eb:62:f0:18:98:68:f7:8b:44:8d:0f:e5:da:1e:78:ea:3e:f2: 97:e3:b0:80:b2:27:d1:41:19:dd:f5:82:69:e0:52:5f:00:97: 0b:c9:8c:22:0b:d3:d6:43:46:95:58:77:b7:3e:a5:0e:23:87: 91:03:61:c2:65:8c:3f:0a:49:1c:03:aa:95:0e:2e:5d:d8:32: 04:94:ed:74:a2:bb:07:dd:8c:61:f3:29:42:0d:bc:fd:36:11: 06:ea:78:20:c0:4c:1e:f6:e5:9f:69:3a:51:8c:83:0e:c2:da: 82:58:38:37:a1:8c:da:f4:32:3d:c1:8a:fb:66:df:a5:46:1e: f6:08:24:50:0f:12:09:88:a5:08:25:32:e0:1c:7c:00:85:25: d4:69:13:71:9b:e8:33:b9:aa:e8:38:66:f6:62:08:01:76:cf: 73:cb:a2:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3VA1tg9v5ejp4IpUOCVmaY4+wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUwMzcw QzA2MzEzNTAeFw0yNjA1MTMxOTQxNDVaFw0yNjA1MTQxOTU4NDVaMDMxMTAvBgNV BAMTKERFNEJEOUI2NENENDU5QzI3NjZBQjIyQ0ZDREQ2RDg4MTMyQzRFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenytaf2vQKcmOj9RbDWXN2qyo r849lJtIttqqbkPRFG6xCVWyAtjABZ8pMJ9ztHqqXWfUfCrN075JjQgYMHG9x9i4 Hiw6Pny9L8gHHwdlyGv0tPdcrQ6tGnX9KLUkd58mZFLuym+J3bWrpKsk/B4eXOHX owrD6ZRkaLQ9b7WoLBGWKMZpmI1mrZjT+KZ3CXwLPOQPaTms/TUWgFipcL19Ph+H eLlMw245PofvJwLRySYpWTIMyvez7/7t0QgTIXd0nXKWU+jfQrZob7mT+wmhmXmp 7m+QAaiP/K0fZE4E+qxIDKnq/jAUXMF9qySo5s/Zzz0ePN2Rk2gtSpdBqbM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3kvZtkzUWcJ2arIs/N1tiBMsTpEwHwYDVR0j BBgwFoAUz1yl4wIxHNDbD+qEDnRQNwwGMTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE3OTFiNzMtYmIwOC00YTgzLWExOTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMw MjMxMUNEMERCMEZFQTg0MEU3NDUwMzcwQzA2MzEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjVDQTVFMzAyMzExQ0QwREIwRkVBODQwRTc0NTAzNzBDMDYz MTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvQ0Y1Q0E1RTMwMjMxMUNEMERCMEZFQTg0MEU3NDUw MzcwQzA2MzEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0MppLi/fGrcyJ6Ma2fX2u1kGfoALzO6AZ8 cHUMf/UJMsZOqGzWlNrb2NaPi6aeS+Ws0uwrm2EAy/+9zjjZk6Lt1aGqknxLbJcW 39wDexKzzTBuv+JUkvahkuti8BiYaPeLRI0P5doeeOo+8pfjsICyJ9FBGd31gmng Ul8AlwvJjCIL09ZDRpVYd7c+pQ4jh5EDYcJljD8KSRwDqpUOLl3YMgSU7XSiuwfd jGHzKUINvP02EQbqeCDATB725Z9pOlGMgw7C2oJYODehjNr0Mj3Bivtm36VGHvYI JFAPEgmIpQglMuAcfACFJdRpE3Gb6DO5qug4ZvZiCAF2z3PLops= -----END CERTIFICATE-----Generated at Thu May 14 09:09:29 2026 by rpki-client