$ rpki-client -vvf rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft (raw, json) Hash identifier: +Wq5Fm9b0VgxatukSG5AlDRZ7bFxzJaVRQ8pYKDCtlc= Subject key identifier: 24:BC:2A:0B:79:C2:77:56:33:29:F6:5F:C1:62:44:9C:8E:DE:A0:A4 Authority key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Certificate issuer: /CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Certificate serial: 08C5D43421157550A87B3E9963E06341B4BAEDDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 16:56:06 +0000 Manifest this update: Fri 19 Jun 2026 16:51:06 +0000 Manifest next update: Sat 20 Jun 2026 19:13:06 +0000 Files and hashes: 1: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl (hash: IW72iA7vKM49y6EF4nMWqTEvSrhqN9hbmd9fXfSMgxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c5:d4:34:21:15:75:50:a8:7b:3e:99:63:e0:63:41:b4:ba:ed:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Validity Not Before: Jun 19 16:51:06 2026 GMT Not After : Jun 20 19:13:06 2026 GMT Subject: CN=24BC2A0B79C277563329F65FC162449C8EDEA0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:56:e8:cc:9e:5f:19:d5:32:2a:e5:7d:bd: ae:10:f9:54:1a:87:24:63:5f:fa:51:23:04:d2:76: 5a:da:b8:e5:3d:5e:23:f0:ed:82:da:b5:eb:5b:a7: b0:38:a3:cb:fe:98:a4:60:c6:0f:b6:fc:20:aa:31: 52:13:a0:75:45:ff:53:1e:6a:44:fc:90:16:e8:c9: 8e:e6:f3:ae:99:4c:e7:64:76:9d:27:16:8d:d9:5e: 23:a8:62:2e:0c:2b:c6:e5:1d:2c:9b:88:bf:95:b2: bc:6b:f0:05:f2:25:04:1d:34:8b:0b:dc:89:99:81: 8f:93:70:f9:17:0d:11:ee:7f:72:c7:7e:48:6b:6b: 22:99:d9:27:c1:bb:9d:04:69:e6:a9:65:33:5d:b1: ba:d2:cc:a3:f3:8f:06:0e:6b:e6:26:49:97:55:29: f4:ba:3e:59:06:5a:4f:97:bc:46:c6:b1:8f:e6:cf: 1c:9a:76:89:58:86:ce:14:c7:8a:5c:c2:b0:de:46: 73:ac:b9:af:08:b0:0c:ea:86:16:0d:ea:59:4c:7b: 7e:9c:d5:4c:33:10:2e:53:79:04:09:f5:d3:ad:63: 1d:27:89:b5:f5:b6:73:6e:29:25:bb:ed:40:09:a7: e1:61:58:81:54:cd:e5:6c:9a:0b:8a:20:df:69:7b: 32:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BC:2A:0B:79:C2:77:56:33:29:F6:5F:C1:62:44:9C:8E:DE:A0:A4 X509v3 Authority Key Identifier: keyid:CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b9:b6:11:d2:f4:52:b7:72:59:2f:08:93:cc:78:2d:bb:a4: c8:24:8c:f8:14:cd:80:94:e1:16:f7:47:e6:6d:d3:27:af:27: 8f:1f:db:39:2c:d5:e4:f8:84:3f:e5:e7:cc:d2:74:ae:33:cf: a7:c6:1e:12:5c:f0:6b:4e:51:d4:ca:8b:eb:0c:33:f5:b4:79: 40:19:16:a1:4e:82:9a:d6:b0:50:eb:77:c2:ac:55:52:c8:ec: e1:93:21:9d:0c:91:63:18:08:58:29:79:7e:c1:42:2e:e7:08: de:e6:b1:83:24:6f:34:b3:15:86:e5:d1:a3:3f:eb:a6:46:00: 27:a8:41:38:9b:e4:c6:80:72:79:db:4f:59:20:f9:60:ae:e8: 3f:7c:9b:53:fc:27:25:22:ca:7b:f0:07:77:65:0a:84:41:e5: d8:3a:23:b4:25:96:ae:6d:ed:50:66:70:8e:fd:1b:26:3d:fc: c6:ef:96:95:6e:2b:85:db:06:38:72:0c:a2:cc:94:fe:9d:3a: 26:77:96:e9:8c:e2:31:29:75:8a:e4:c8:ef:a1:08:e1:d6:3f: a5:96:6d:b0:dc:7b:55:56:31:ec:eb:56:f5:11:9d:19:39:9f: 78:d7:e5:fd:11:e4:0f:6f:fa:b4:27:6f:0f:39:be:84:37:b3: 8d:c3:2a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMXUNCEVdVCoez6ZY+BjQbS67d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNG QURDQkFBMDAeFw0yNjA2MTkxNjUxMDZaFw0yNjA2MjAxOTEzMDZaMDMxMTAvBgNV BAMTKDI0QkMyQTBCNzlDMjc3NTYzMzI5RjY1RkMxNjI0NDlDOEVERUEwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc6lbozJ5fGdUyKuV9va4Q+VQa hyRjX/pRIwTSdlrauOU9XiPw7YLatetbp7A4o8v+mKRgxg+2/CCqMVIToHVF/1Me akT8kBboyY7m866ZTOdkdp0nFo3ZXiOoYi4MK8blHSybiL+Vsrxr8AXyJQQdNIsL 3ImZgY+TcPkXDRHuf3LHfkhrayKZ2SfBu50EaeapZTNdsbrSzKPzjwYOa+YmSZdV KfS6PlkGWk+XvEbGsY/mzxyadolYhs4Ux4pcwrDeRnOsua8IsAzqhhYN6llMe36c 1UwzEC5TeQQJ9dOtYx0nibX1tnNuKSW77UAJp+FhWIFUzeVsmguKIN9pezL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJLwqC3nCd1YzKfZfwWJEnI7eoKQwHwYDVR0j BBgwFoAUz5DTI0sm5kPeKeeLKj0Dc/rcuqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2M2U3MWEtOWM4NS00MTc2LThmYTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0 QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNGQURDQkFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjkwRDMyMzRCMjZFNjQzREUyOUU3OEIyQTNEMDM3M0ZBRENC QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAz NzNGQURDQkFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH65thHS9FK3clkvCJPMeC27pMgkjPgUzYCU 4Rb3R+Zt0yevJ48f2zks1eT4hD/l58zSdK4zz6fGHhJc8GtOUdTKi+sMM/W0eUAZ FqFOgprWsFDrd8KsVVLI7OGTIZ0MkWMYCFgpeX7BQi7nCN7msYMkbzSzFYbl0aM/ 66ZGACeoQTib5MaAcnnbT1kg+WCu6D98m1P8JyUiynvwB3dlCoRB5dg6I7Qllq5t 7VBmcI79GyY9/MbvlpVuK4XbBjhyDKLMlP6dOiZ3lumM4jEpdYrkyO+hCOHWP6WW bbDce1VWMezrVvURnRk5n3jX5f0R5A9v+rQnbw85voQ3s43DKpk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:04 2026 by rpki-client