$ rpki-client -vvf rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft File: CF204D748DAD2D1A024DE66D85E425F06F541748.mft (raw, json) Hash identifier: +TVeWDTrnhioJ4DfrBss/7YfA/ownSZ4HzqB+WDr4dQ= Subject key identifier: 5B:90:94:F8:EC:2A:82:78:77:46:A0:63:02:5B:A0:DF:93:2D:39:3E Authority key identifier: CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 Certificate issuer: /CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Certificate serial: 7BAA8DE2CB4015B1AEDC6C70BB0EA3694DCAC38D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:58:41 +0000 Manifest this update: Fri 19 Jun 2026 22:53:41 +0000 Manifest next update: Sat 20 Jun 2026 23:53:41 +0000 Files and hashes: 1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: bx46ncSYTvRKNt6l7eIGw4KadKwqVqeIYnxDZEiogWY=) 2: CF204D748DAD2D1A024DE66D85E425F06F541748.crl (hash: YaKVgtx6N5R4nXKy+KgNgH6+AW5c2FcvQhnPPZ6f8CY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:aa:8d:e2:cb:40:15:b1:ae:dc:6c:70:bb:0e:a3:69:4d:ca:c3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF204D748DAD2D1A024DE66D85E425F06F541748 Validity Not Before: Jun 19 22:53:41 2026 GMT Not After : Jun 20 23:53:41 2026 GMT Subject: CN=5B9094F8EC2A82787746A063025BA0DF932D393E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:ad:9c:08:26:32:e3:b3:7b:78:9f:0c:c7: f8:c4:bd:99:9d:21:b6:eb:26:e3:bd:6d:a4:df:97: d5:1a:a8:08:99:8c:60:6d:ee:52:72:53:5c:3b:26: b7:51:1d:b3:7f:66:0c:b1:e9:19:09:6f:57:da:7c: 67:c7:d1:99:ea:72:61:0f:f6:33:b9:57:54:32:43: 1b:aa:07:93:aa:a6:3e:ec:ee:4f:c3:5f:4c:68:ce: fb:0e:38:75:5e:5f:5b:39:0f:ef:04:fe:54:5f:01: 7d:fb:84:4b:e8:91:a2:6b:d8:f0:3e:e5:ee:94:95: a6:a4:94:20:8a:65:2e:f0:8a:78:de:77:db:89:70: 5d:ad:10:df:10:57:94:95:03:5d:c3:20:9b:14:09: 31:1e:2f:b8:1d:88:87:a3:da:35:58:19:99:4f:f3: 1a:e1:e8:c8:3c:2e:ad:44:28:7c:0c:cc:87:41:fb: 67:5d:bd:cd:e0:98:8a:8b:09:05:b8:84:94:57:c2: 96:81:bb:fd:c2:dd:23:9d:c1:51:15:6b:cb:b6:0f: 20:66:46:c2:60:5e:5d:c5:a2:42:8f:86:16:f7:9a: 97:8a:96:9b:f6:92:8a:1c:ab:66:06:36:17:23:50: e3:3f:94:fd:15:70:12:c4:2a:f3:4c:16:b4:10:e5: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:90:94:F8:EC:2A:82:78:77:46:A0:63:02:5B:A0:DF:93:2D:39:3E X509v3 Authority Key Identifier: keyid:CF:20:4D:74:8D:AD:2D:1A:02:4D:E6:6D:85:E4:25:F0:6F:54:17:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF204D748DAD2D1A024DE66D85E425F06F541748.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/CF204D748DAD2D1A024DE66D85E425F06F541748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0c:1f:0e:af:14:2a:ee:8e:36:8b:39:53:81:30:c0:7c:05: ba:bb:ba:e9:42:ac:fa:99:95:80:ce:95:dc:5c:66:1f:9f:d3: e9:29:37:ef:ea:a0:9f:ed:76:46:5d:77:da:47:6a:62:15:44: c8:00:21:fe:d0:07:34:38:f7:96:2d:52:21:77:e5:cd:79:46: 40:80:6e:bb:12:cd:dc:38:7d:2d:d2:e2:fe:c8:fe:5d:b1:3d: 65:2a:71:0e:e7:21:16:c9:4e:c5:8b:cb:40:b7:6a:58:83:c1: fd:c4:22:9a:f8:b8:17:95:a4:60:38:20:d7:20:0f:c2:ef:b3: e4:5b:43:80:f9:e6:f0:dd:65:e4:ad:21:66:22:77:4a:fe:59: 23:bd:bc:4b:6d:c1:13:d5:e8:62:90:8b:6d:69:03:00:8e:24: bc:ba:c1:07:1c:dd:5d:83:00:bb:66:fb:bc:e8:36:b6:bd:27: 99:c6:d0:50:7d:10:25:46:2a:f9:26:10:eb:1a:ea:ba:ae:d0: e5:4b:7c:d4:60:d9:0f:6b:d3:62:c5:dd:31:c9:ec:b2:c8:93: 96:ee:bf:37:83:c9:21:3c:72:03:44:d6:34:a5:4f:34:19:a1: 84:dc:ec:e3:9b:9c:43:c7:2e:e1:02:fe:79:d4:2d:57:93:aa: af:bf:2b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6qN4stAFbGu3Gxwuw6jaU3Kw40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1RjA2 RjU0MTc0ODAeFw0yNjA2MTkyMjUzNDFaFw0yNjA2MjAyMzUzNDFaMDMxMTAvBgNV BAMTKDVCOTA5NEY4RUMyQTgyNzg3NzQ2QTA2MzAyNUJBMERGOTMyRDM5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO562cCCYy47N7eJ8Mx/jEvZmd IbbrJuO9baTfl9UaqAiZjGBt7lJyU1w7JrdRHbN/Zgyx6RkJb1fafGfH0ZnqcmEP 9jO5V1QyQxuqB5Oqpj7s7k/DX0xozvsOOHVeX1s5D+8E/lRfAX37hEvokaJr2PA+ 5e6UlaaklCCKZS7winjed9uJcF2tEN8QV5SVA13DIJsUCTEeL7gdiIej2jVYGZlP 8xrh6Mg8Lq1EKHwMzIdB+2ddvc3gmIqLCQW4hJRXwpaBu/3C3SOdwVEVa8u2DyBm RsJgXl3FokKPhhb3mpeKlpv2koocq2YGNhcjUOM/lP0VcBLEKvNMFrQQ5cHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5CU+Owqgnh3RqBjAlug35MtOT4wHwYDVR0j BBgwFoAUzyBNdI2tLRoCTeZtheQl8G9UF0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJmNTk4NmItYzc2NC00Y2Q3LWI0MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4 REFEMkQxQTAyNERFNjZEODVFNDI1RjA2RjU0MTc0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjIwNEQ3NDhEQUQyRDFBMDI0REU2NkQ4NUU0MjVGMDZGNTQx NzQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvQ0YyMDRENzQ4REFEMkQxQTAyNERFNjZEODVFNDI1 RjA2RjU0MTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQMHw6vFCrujjaLOVOBMMB8Bbq7uulCrPqZ lYDOldxcZh+f0+kpN+/qoJ/tdkZdd9pHamIVRMgAIf7QBzQ495YtUiF35c15RkCA brsSzdw4fS3S4v7I/l2xPWUqcQ7nIRbJTsWLy0C3aliDwf3EIpr4uBeVpGA4INcg D8Lvs+RbQ4D55vDdZeStIWYid0r+WSO9vEttwRPV6GKQi21pAwCOJLy6wQcc3V2D ALtm+7zoNra9J5nG0FB9ECVGKvkmEOsa6rqu0OVLfNRg2Q9r02LF3THJ7LLIk5bu vzeDySE8cgNE1jSlTzQZoYTc7OObnEPHLuEC/nnULVeTqq+/KxU= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:52 2026 by rpki-client