$ rpki-client -vvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: CVlaKFTgKrJThEum66amgtGnt4lLrSumowpfqplJh/Y= Subject key identifier: E1:87:22:7D:EF:B1:ED:C0:85:A9:E9:F8:BA:A9:DC:C8:9A:EA:57:FA Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 5CEBD89E8BFCABFE5C39126DC39E05B332D4851B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 17:01:14 +0000 Manifest this update: Fri 19 Jun 2026 16:56:14 +0000 Manifest next update: Sat 20 Jun 2026 19:59:14 +0000 Files and hashes: 1: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: ylVSkS57y6Rhy0Aj0q5nbeaHJ/4A1/soKju0nF5g3yw=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) 3: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:eb:d8:9e:8b:fc:ab:fe:5c:39:12:6d:c3:9e:05:b3:32:d4:85:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Jun 19 16:56:14 2026 GMT Not After : Jun 20 19:59:14 2026 GMT Subject: CN=E187227DEFB1EDC085A9E9F8BAA9DCC89AEA57FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:41:5a:6c:29:14:83:c1:64:fe:f0:e5:0a: 40:40:a0:2e:89:60:c0:a0:8b:22:39:73:78:b8:dc: 5b:8c:ba:14:c4:e6:92:fd:e4:ef:87:16:f6:8a:2b: 4f:d6:4a:03:78:aa:0d:e1:58:d6:0f:ee:8d:45:bd: 74:07:be:f2:ce:62:98:9e:19:48:1c:29:76:ba:56: 51:e7:65:9f:ea:65:da:ee:c6:38:de:4b:7b:1a:7b: 9f:6f:a7:0e:68:64:fa:95:ef:a6:53:81:63:b4:92: cb:b2:ad:bc:0d:ff:45:9d:c7:0e:c7:20:6b:f9:21: e7:e9:1f:dd:51:60:8e:9c:c9:a1:cd:ff:aa:9b:23: eb:fd:d0:b7:bc:e9:f3:3e:0d:4c:2c:28:6d:83:34: 5b:cf:f2:31:ae:bb:61:ed:ae:4b:83:23:cc:35:4c: 15:0a:0b:be:88:01:27:29:29:a6:d6:00:82:47:1b: 69:da:bf:37:20:da:e7:d8:30:3a:39:12:56:76:11: 44:a2:f7:37:77:53:b0:0b:42:d1:ce:22:ed:0e:e2: 05:58:f5:a2:b4:7d:3c:54:19:7a:4b:25:e8:00:40: 20:16:7e:a0:1a:45:21:83:a6:33:2b:08:e4:1d:a3: a1:55:b3:ef:cc:7d:36:43:f4:be:83:b2:07:0b:82: b9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:22:7D:EF:B1:ED:C0:85:A9:E9:F8:BA:A9:DC:C8:9A:EA:57:FA X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d5:a2:03:90:62:7b:ab:11:d7:85:31:87:b1:48:49:11:27: 87:b0:67:d7:70:15:b4:d0:ab:27:97:be:d5:56:62:94:86:57: 05:49:e6:0d:26:d3:ff:e7:52:b3:d2:1c:eb:d3:4d:da:7b:26: 53:1b:8a:5f:60:b2:f8:ea:ca:f2:97:3a:0b:c9:5a:4c:5d:e3: d0:11:3a:d7:40:5e:e4:5a:72:da:b6:8b:34:d6:74:82:fa:2e: 85:3d:9c:43:7c:e8:2c:ed:4b:9e:f7:20:b9:da:69:b9:db:a6: 15:8d:c5:ce:8f:8c:a5:aa:4b:51:e1:22:ba:8a:84:6d:f8:c2: 4a:1a:8b:bd:a9:e3:e1:1e:c9:4f:dd:cc:3b:4f:9a:db:4c:a0: 32:18:3a:7c:59:82:a3:60:e5:54:bf:2a:2a:8d:e3:4b:f2:b1: 40:fd:02:40:cd:9c:a3:da:33:53:be:32:dd:2d:7a:2f:dc:8f: 50:d2:d6:30:75:27:8a:a8:24:7d:06:4d:9c:45:c9:f8:5c:cb: 80:b1:69:bb:d6:a2:db:4f:b8:ce:83:31:1e:51:fb:d0:2a:ca: 0f:ee:96:ce:a8:0b:7b:14:bf:49:49:6c:82:9c:2d:a3:fa:c6: 01:9c:18:96:ad:00:50:e5:37:3b:2c:ca:45:6b:96:75:41:bf: 64:c1:c9:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOvYnov8q/5cORJtw54FszLUhRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjA2MTkxNjU2MTRaFw0yNjA2MjAxOTU5MTRaMDMxMTAvBgNV BAMTKEUxODcyMjdERUZCMUVEQzA4NUE5RTlGOEJBQTlEQ0M4OUFFQTU3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VkFabCkUg8Fk/vDlCkBAoC6J YMCgiyI5c3i43FuMuhTE5pL95O+HFvaKK0/WSgN4qg3hWNYP7o1FvXQHvvLOYpie GUgcKXa6VlHnZZ/qZdruxjjeS3sae59vpw5oZPqV76ZTgWO0ksuyrbwN/0Wdxw7H IGv5IefpH91RYI6cyaHN/6qbI+v90Le86fM+DUwsKG2DNFvP8jGuu2HtrkuDI8w1 TBUKC76IAScpKabWAIJHG2navzcg2ufYMDo5ElZ2EUSi9zd3U7ALQtHOIu0O4gVY 9aK0fTxUGXpLJegAQCAWfqAaRSGDpjMrCOQdo6FVs+/MfTZD9L6DsgcLgrm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Ycife+x7cCFqen4uqncyJrqV/owHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLVogOQYnurEdeFMYexSEkRJ4ewZ9dwFbTQ qyeXvtVWYpSGVwVJ5g0m0//nUrPSHOvTTdp7JlMbil9gsvjqyvKXOgvJWkxd49AR OtdAXuRactq2izTWdIL6LoU9nEN86CztS573ILnaabnbphWNxc6PjKWqS1HhIrqK hG34wkoai72p4+EeyU/dzDtPmttMoDIYOnxZgqNg5VS/KiqN40vysUD9AkDNnKPa M1O+Mt0tei/cj1DS1jB1J4qoJH0GTZxFyfhcy4CxabvWottPuM6DMR5R+9Aqyg/u ls6oC3sUv0lJbIKcLaP6xgGcGJatAFDlNzssykVrlnVBv2TBydo= -----END CERTIFICATE-----Generated at Sat Jun 20 08:46:32 2026 by rpki-client