$ rpki-client -vvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: fezIffdXwvamA314EH8jR1EGMvF7jGgpzTU9685EhAM= Subject key identifier: 77:AC:50:33:BA:8B:C1:B1:2E:D1:81:22:BF:81:7F:B6:69:65:D0:F2 Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 1FFC174A409633D3AA129A6A160A3091853A737F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 06:02:07 +0000 Manifest this update: Sat 20 Jun 2026 05:57:07 +0000 Manifest next update: Sun 21 Jun 2026 09:33:07 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: T2GOh0Z1LEQSkZTjiuKgn7r5CqetUfV3I8AgrT7tL9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 08:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fc:17:4a:40:96:33:d3:aa:12:9a:6a:16:0a:30:91:85:3a:73:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: Jun 20 05:57:07 2026 GMT Not After : Jun 21 09:33:07 2026 GMT Subject: CN=77AC5033BA8BC1B12ED18122BF817FB66965D0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:ba:a4:fa:1c:a2:5f:08:96:49:68:79:e6: 85:18:cc:8a:33:d8:90:27:54:9d:4c:2f:c0:bd:07: 43:48:cf:49:26:d9:09:c8:ff:48:83:22:69:13:a8: 9b:6f:05:a5:a7:5f:f3:dd:75:c2:39:10:71:95:e0: 3d:56:18:18:a4:13:cc:61:62:25:6a:e4:ce:dc:e4: af:ab:2f:61:5f:46:0d:44:25:55:07:4d:56:76:f4: 4f:5d:0c:a0:5e:44:4b:03:55:d0:81:f9:25:60:a8: a2:5a:a3:0a:1d:ef:5e:d1:56:0b:d6:03:38:f7:0c: 51:da:d9:a4:49:01:d6:83:37:db:3e:3d:fc:2e:05: 7b:7b:78:0a:ed:58:ed:bb:97:ca:d0:9f:e5:27:9c: 2f:37:80:65:f5:3d:c7:2e:a9:0f:1e:a7:3b:ed:d7: 06:2c:a0:a2:89:75:ba:f0:c7:ff:3e:d0:2a:fe:a6: 15:6b:57:f9:73:4e:b3:7f:e3:88:49:4f:fe:63:03: 3e:40:ab:28:c9:01:6a:83:77:9a:7f:c4:c0:7a:51: 67:25:4c:04:9b:ee:1f:6a:45:2d:55:04:42:09:e3: 3a:3c:20:ad:ce:21:df:57:2c:ab:8f:a4:a6:4b:71: e4:7f:d7:bf:32:d9:2f:15:b9:d7:4e:0a:4b:cf:1b: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AC:50:33:BA:8B:C1:B1:2E:D1:81:22:BF:81:7F:B6:69:65:D0:F2 X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0d:c7:d2:a1:eb:53:10:d0:5c:c5:22:49:fe:75:8e:65:3b: 91:7d:05:d4:e3:f1:76:b6:93:ed:51:25:66:32:8b:8d:75:f4: f0:be:bb:00:a3:68:6f:8b:c9:2e:b0:05:76:06:6d:38:1a:b7: 27:f0:a0:fd:3c:06:93:fe:09:03:2a:c6:38:48:6f:95:76:3d: 99:3b:80:dd:77:ff:70:c5:bb:72:c5:fd:23:93:29:35:49:da: c4:1e:d1:65:f7:5e:02:40:c2:58:e0:8d:85:af:3d:61:3a:3b: 35:70:da:0e:be:ff:57:36:0e:ac:8f:51:32:7f:63:ab:89:3e: 33:ed:75:7f:35:48:2b:22:f7:17:3a:86:5b:8b:5f:25:b7:4d: 51:c9:27:e0:2b:25:15:9d:42:6b:5f:a3:8f:0d:76:f8:cb:37: 6e:82:c4:f6:9e:6d:e5:34:53:32:64:56:b5:f6:b5:fb:49:9c: 8f:f5:d3:78:d5:ea:30:ed:37:04:cb:4d:cb:55:be:36:2c:b1: be:29:9c:2b:e7:5b:c4:d7:61:b1:21:2a:47:af:00:bd:f2:a0: 1b:6f:34:8c:e4:4a:0f:0e:da:9a:8f:7a:2c:47:ce:4a:03:cb: 97:e5:e0:f5:62:27:1a:fc:d2:83:7f:6b:3b:e7:6b:48:55:c1: fe:a0:3e:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/wXSkCWM9OqEppqFgowkYU6c38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjA2MjAwNTU3MDdaFw0yNjA2MjEwOTMzMDdaMDMxMTAvBgNV BAMTKDc3QUM1MDMzQkE4QkMxQjEyRUQxODEyMkJGODE3RkI2Njk2NUQwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUbqk+hyiXwiWSWh55oUYzIoz 2JAnVJ1ML8C9B0NIz0km2QnI/0iDImkTqJtvBaWnX/PddcI5EHGV4D1WGBikE8xh YiVq5M7c5K+rL2FfRg1EJVUHTVZ29E9dDKBeREsDVdCB+SVgqKJaowod717RVgvW Azj3DFHa2aRJAdaDN9s+PfwuBXt7eArtWO27l8rQn+UnnC83gGX1PccuqQ8epzvt 1wYsoKKJdbrwx/8+0Cr+phVrV/lzTrN/44hJT/5jAz5AqyjJAWqDd5p/xMB6UWcl TASb7h9qRS1VBEIJ4zo8IK3OId9XLKuPpKZLceR/178y2S8VuddOCkvPGw6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd6xQM7qLwbEu0YEiv4F/tmll0PIwHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMNx9Kh61MQ0FzFIkn+dY5lO5F9BdTj8Xa2 k+1RJWYyi4119PC+uwCjaG+LyS6wBXYGbTgatyfwoP08BpP+CQMqxjhIb5V2PZk7 gN13/3DFu3LF/SOTKTVJ2sQe0WX3XgJAwljgjYWvPWE6OzVw2g6+/1c2DqyPUTJ/ Y6uJPjPtdX81SCsi9xc6hluLXyW3TVHJJ+ArJRWdQmtfo48NdvjLN26CxPaebeU0 UzJkVrX2tftJnI/103jV6jDtNwTLTctVvjYssb4pnCvnW8TXYbEhKkevAL3yoBtv NIzkSg8O2pqPeixHzkoDy5fl4PViJxr80oN/azvna0hVwf6gPsA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:11:19 2026 by rpki-client