$ rpki-client -vvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft (raw, json) Hash identifier: S7GYVcMXsE/5Rb0Y60NzViB9CjhkVEKwztYCf6h9jeg= Subject key identifier: 03:28:50:5E:9C:36:A9:46:3F:9C:A0:4B:D5:A4:8F:00:E8:82:54:D9 Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Certificate issuer: /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Certificate serial: 5868CD694E5F429E4B7FCDDFA6F34BCE74804856 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:48:12 +0000 Manifest this update: Tue 16 Jun 2026 19:43:12 +0000 Manifest next update: Wed 17 Jun 2026 22:57:12 +0000 Files and hashes: 1: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl (hash: tFAdD/0xWmt36Q0VFe9z2fSAGyYrPKY6eiuGWfSmRmo=) 2: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:68:cd:69:4e:5f:42:9e:4b:7f:cd:df:a6:f3:4b:ce:74:80:48:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Validity Not Before: Jun 16 19:43:12 2026 GMT Not After : Jun 17 22:57:12 2026 GMT Subject: CN=0328505E9C36A9463F9CA04BD5A48F00E88254D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:9b:98:21:dd:da:f0:a9:02:4f:d8:bf:87: 8b:db:d7:25:d0:12:54:b6:bd:77:fa:52:81:ab:91: 95:ca:e3:79:19:c0:47:dc:e1:0d:19:e2:87:34:63: 79:e5:75:94:89:b7:03:8b:cb:59:c4:31:45:cc:59: dc:47:4a:17:2b:81:67:3a:f1:b7:69:a5:f9:d3:8f: 58:23:53:25:cc:85:40:61:70:b2:18:af:47:6f:c6: 26:a1:46:13:40:19:88:96:3f:83:08:23:ee:4a:24: 49:4c:1b:42:e0:7a:3d:29:64:85:4c:78:67:11:6f: 3b:ad:a3:14:2e:76:b8:6d:4f:4f:7f:61:f8:4a:b5: 1b:5c:b0:47:0a:63:f1:a0:43:27:bb:e6:05:bd:5f: ab:b5:a6:5f:d0:e5:46:0a:9a:32:b2:e5:2e:34:6b: f3:3b:c7:ad:45:ce:a0:48:19:ab:ab:fb:3d:d6:e7: e0:35:ee:bf:80:93:c8:ec:fd:ff:b5:53:53:51:54: d4:8e:16:5d:86:db:dd:d7:20:70:f4:a4:51:81:4c: 6f:17:f6:85:6a:37:59:66:90:0d:38:5c:b3:de:91: 91:7a:21:df:cd:a4:e2:89:2a:de:8c:8f:40:0b:c0: c4:79:4b:95:08:e8:2e:08:2b:71:cd:15:0e:07:36: 6b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:28:50:5E:9C:36:A9:46:3F:9C:A0:4B:D5:A4:8F:00:E8:82:54:D9 X509v3 Authority Key Identifier: keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5d:4a:7c:ec:4a:00:6d:43:47:50:b4:3a:cc:9b:c1:9b:09: fa:b8:3b:84:d9:ee:0f:39:fe:f0:e4:71:da:36:09:7a:23:c6: 63:7b:41:12:e7:cd:b3:51:9d:49:dc:62:97:58:2e:57:f7:8d: a5:9a:4b:6c:97:62:3e:7d:57:91:1a:c9:4f:35:1e:61:3e:49: 57:0c:a5:4f:26:05:ee:bb:6a:ab:58:cc:df:3d:00:50:9a:ce: 26:0d:e0:7e:e8:1e:f8:b6:b0:1b:d6:7e:0d:49:ee:4a:61:37: 13:bf:83:b9:ae:65:c1:7d:f0:30:d8:85:1c:d3:b2:99:00:62: 5a:44:16:8d:9e:ab:32:9f:3b:f9:46:5a:45:b2:a0:0f:17:f1: 55:94:87:65:57:dd:b1:99:b0:c6:b0:99:8c:c2:e5:a9:ac:2a: b9:d6:a7:49:32:a5:31:b2:b8:03:5f:11:f7:51:67:5c:5a:a9: 98:89:89:9a:46:f4:82:8e:23:d0:07:7b:9e:e0:a0:f9:41:ab: 9b:62:b4:63:95:86:70:59:c3:ec:52:ae:22:de:14:44:b0:2e: 52:72:9c:d3:24:4e:66:ff:66:f6:d8:b3:da:91:46:12:3c:c5: 35:7a:9f:46:f5:3b:25:02:1e:84:2b:45:68:b2:95:b3:ae:99: c5:9e:5e:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGjNaU5fQp5Lf83fpvNLznSASFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQw QjYyQzVCNDAeFw0yNjA2MTYxOTQzMTJaFw0yNjA2MTcyMjU3MTJaMDMxMTAvBgNV BAMTKDAzMjg1MDVFOUMzNkE5NDYzRjlDQTA0QkQ1QTQ4RjAwRTg4MjU0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzZuYId3a8KkCT9i/h4vb1yXQ ElS2vXf6UoGrkZXK43kZwEfc4Q0Z4oc0Y3nldZSJtwOLy1nEMUXMWdxHShcrgWc6 8bdppfnTj1gjUyXMhUBhcLIYr0dvxiahRhNAGYiWP4MII+5KJElMG0Lgej0pZIVM eGcRbzutoxQudrhtT09/YfhKtRtcsEcKY/GgQye75gW9X6u1pl/Q5UYKmjKy5S40 a/M7x61FzqBIGaur+z3W5+A17r+Ak8js/f+1U1NRVNSOFl2G293XIHD0pFGBTG8X 9oVqN1lmkA04XLPekZF6Id/NpOKJKt6Mj0ALwMR5S5UI6C4IK3HNFQ4HNmtDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAyhQXpw2qUY/nKBL1aSPAOiCVNkwHwYDVR0j BBgwFoAUz7wYFnlYaNOtVKmnYP8wXQtixbQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRmMjgyMzUtMGJhOC00ZTE0LThiODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3 OTU4NjhEM0FENTRBOUE3NjBGRjMwNUQwQjYyQzVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkJDMTgxNjc5NTg2OEQzQUQ1NEE5QTc2MEZGMzA1RDBCNjJD NUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvQ0ZCQzE4MTY3OTU4NjhEM0FENTRBOUE3NjBGRjMw NUQwQjYyQzVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxdSnzsSgBtQ0dQtDrMm8GbCfq4O4TZ7g85 /vDkcdo2CXojxmN7QRLnzbNRnUncYpdYLlf3jaWaS2yXYj59V5EayU81HmE+SVcM pU8mBe67aqtYzN89AFCaziYN4H7oHvi2sBvWfg1J7kphNxO/g7muZcF98DDYhRzT spkAYlpEFo2eqzKfO/lGWkWyoA8X8VWUh2VX3bGZsMawmYzC5amsKrnWp0kypTGy uANfEfdRZ1xaqZiJiZpG9IKOI9AHe57goPlBq5titGOVhnBZw+xSriLeFESwLlJy nNMkTmb/ZvbYs9qRRhI8xTV6n0b1OyUCHoQrRWiylbOumcWeXo4= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:13 2026 by rpki-client