$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft File: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft (raw, json) Hash identifier: 6kCHGXlb5Be2wPxIeUSXLdvnR0IC351mdmyh8L35hhQ= Subject key identifier: 6A:A0:7C:23:A2:C3:13:0A:99:53:C7:FC:39:AA:3E:7D:D0:1F:DF:24 Authority key identifier: CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 Certificate issuer: /CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Certificate serial: 79F5262C21EB69A5F8894BC3C4B47DC8329B7D23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 21:11:29 +0000 Manifest this update: Fri 19 Jun 2026 21:06:29 +0000 Manifest next update: Sat 20 Jun 2026 23:26:29 +0000 Files and hashes: 1: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl (hash: 2/OQ9+kmYo+jiF6R2ab7pB4gZDinldbkc4Zyi8yjrrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f5:26:2c:21:eb:69:a5:f8:89:4b:c3:c4:b4:7d:c8:32:9b:7d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Validity Not Before: Jun 19 21:06:29 2026 GMT Not After : Jun 20 23:26:29 2026 GMT Subject: CN=6AA07C23A2C3130A9953C7FC39AA3E7DD01FDF24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7e:96:c7:77:e7:81:1a:aa:cc:60:8e:91:55: 02:58:be:2e:ac:b6:9c:b0:24:77:40:06:b9:bd:f5: a8:06:26:8c:e4:1c:d2:af:06:f1:34:f7:66:e1:88: a8:d8:68:a8:c8:0b:80:0c:2e:93:15:23:9b:a1:7f: 4d:67:53:d1:de:2f:47:07:ce:26:38:95:48:b1:45: 0e:d5:4b:69:c3:98:92:fd:4f:15:61:a0:a3:df:73: fb:8c:07:b8:46:9a:b9:8d:8c:29:c7:e8:a1:84:af: cf:b8:30:98:6a:56:cf:83:f4:3a:63:94:16:a2:c2: c9:96:4e:e6:d9:c3:64:94:67:57:f3:21:fe:49:de: 13:79:99:da:6e:e9:75:2e:6b:67:2b:b3:10:8c:25: e8:b4:42:a1:7c:79:33:98:c6:e0:40:ca:29:2b:4b: 70:50:84:0e:ef:3e:7b:25:33:00:44:8b:83:5b:b1: 2e:36:b9:54:bf:01:65:ec:19:52:9c:7e:8a:d9:39: 2d:57:01:28:97:5e:be:13:62:68:60:81:9d:b7:1c: cf:7e:ed:57:6c:11:3a:4c:e6:89:69:83:7c:4f:7d: 94:87:69:a0:49:c7:a6:81:37:d6:59:fd:28:fe:74: 3a:f2:53:e3:72:28:2b:41:dc:36:a0:6e:1b:ef:ae: d0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A0:7C:23:A2:C3:13:0A:99:53:C7:FC:39:AA:3E:7D:D0:1F:DF:24 X509v3 Authority Key Identifier: keyid:CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:88:0c:f7:ad:fe:bf:1c:48:cc:48:5a:92:ca:43:e8:fe:65: de:62:ac:c8:52:d6:d8:5d:89:7f:c4:71:cc:ab:cf:58:18:1e: a7:36:a9:5b:98:10:8d:f9:67:6f:a9:7c:6c:94:d2:79:af:5c: bd:04:8e:35:54:8a:84:8a:9a:7b:9f:d0:bc:f0:d4:08:54:28: f7:24:86:15:2a:89:ca:31:6c:42:eb:57:d5:df:44:71:ee:c4: 0f:b5:7f:f3:6f:75:e1:e1:97:8d:a6:17:43:85:06:8b:13:f8: 6e:12:ba:2a:03:a5:db:0c:9b:33:f0:6b:cc:39:ea:24:e0:b9: 39:8d:5e:37:27:8e:17:26:23:32:98:1a:9f:2c:fb:09:83:c5: f5:2c:c1:0a:ba:e5:21:3c:b1:ae:9e:f8:8a:46:5a:79:02:16: 71:ed:93:74:a9:d9:33:f9:a4:af:3b:02:b0:c8:22:42:c9:d0: 25:9a:2a:b4:b5:86:6f:97:97:b7:4e:b2:3c:47:a0:8e:df:bd: 73:f7:3f:bb:e2:a4:8e:4f:5a:fd:9f:18:bb:d1:ed:00:34:85: ee:95:fd:69:57:55:50:5e:a5:1d:c1:2d:cc:bd:bc:2d:f6:ae: cb:41:a2:5b:98:4a:c8:b8:43:3a:0d:93:09:b9:44:44:02:de: ea:d5:f7:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefUmLCHraaX4iUvDxLR9yDKbfSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcw NTQ3RUY3ODAeFw0yNjA2MTkyMTA2MjlaFw0yNjA2MjAyMzI2MjlaMDMxMTAvBgNV BAMTKDZBQTA3QzIzQTJDMzEzMEE5OTUzQzdGQzM5QUEzRTdERDAxRkRGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDffpbHd+eBGqrMYI6RVQJYvi6s tpywJHdABrm99agGJozkHNKvBvE092bhiKjYaKjIC4AMLpMVI5uhf01nU9HeL0cH ziY4lUixRQ7VS2nDmJL9TxVhoKPfc/uMB7hGmrmNjCnH6KGEr8+4MJhqVs+D9Dpj lBaiwsmWTubZw2SUZ1fzIf5J3hN5mdpu6XUua2crsxCMJei0QqF8eTOYxuBAyikr S3BQhA7vPnslMwBEi4NbsS42uVS/AWXsGVKcforZOS1XASiXXr4TYmhggZ23HM9+ 7VdsETpM5olpg3xPfZSHaaBJx6aBN9ZZ/Sj+dDryU+NyKCtB3DagbhvvrtDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaqB8I6LDEwqZU8f8Oao+fdAf3yQwHwYDVR0j BBgwFoAUyvr7kD/mTuX84SzAe92fdwVH73gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVkNzc4NDAtNjA4ZS00NDlhLWIyMmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAz RkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcwNTQ3RUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZBRkI5MDNGRTY0RUU1RkNFMTJDQzA3QkREOUY3NzA1NDdF Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlG NzcwNTQ3RUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGIDPet/r8cSMxIWpLKQ+j+Zd5irMhS1thd iX/Eccyrz1gYHqc2qVuYEI35Z2+pfGyU0nmvXL0EjjVUioSKmnuf0Lzw1AhUKPck hhUqicoxbELrV9XfRHHuxA+1f/NvdeHhl42mF0OFBosT+G4SuioDpdsMmzPwa8w5 6iTguTmNXjcnjhcmIzKYGp8s+wmDxfUswQq65SE8sa6e+IpGWnkCFnHtk3Sp2TP5 pK87ArDIIkLJ0CWaKrS1hm+Xl7dOsjxHoI7fvXP3P7vipI5PWv2fGLvR7QA0he6V /WlXVVBepR3BLcy9vC32rstBoluYSsi4QzoNkwm5REQC3urV97c= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:22 2026 by rpki-client