$ rpki-client -vvf rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft File: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft (raw, json) Hash identifier: eveTNjzhbjXfw2cKGxBtJ0oXL978jzw6EeTnoTCdMy8= Subject key identifier: BA:67:33:04:96:9C:19:45:75:B8:01:82:3B:42:FD:CB:F4:11:E8:BC Authority key identifier: CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 Certificate issuer: /CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Certificate serial: 35AA11A2E6DB3F1E5AD67C62B5D9778D02F220D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 07:06:29 +0000 Manifest this update: Wed 17 Jun 2026 07:01:29 +0000 Manifest next update: Thu 18 Jun 2026 09:17:29 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: nXHdSA+c5zf00SmFOpLQqjFcwfm5eVHw9Cph5IqIoGg=) 2: CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl (hash: 3rjyswqc62YVR137GZXEO50Pptt3yd6u8lDci0e7z/g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:aa:11:a2:e6:db:3f:1e:5a:d6:7c:62:b5:d9:77:8d:02:f2:20:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE270B664EB6494B67927A1489C0F8AB9E36FE8 Validity Not Before: Jun 17 07:01:29 2026 GMT Not After : Jun 18 09:17:29 2026 GMT Subject: CN=BA673304969C194575B801823B42FDCBF411E8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:c5:9d:49:61:1d:84:c8:78:c0:47:2f:d7: 34:3d:37:ee:c6:f3:0a:7f:2f:f3:c3:59:07:11:74: 68:74:ef:a2:a2:51:62:dd:d9:5e:5b:4c:4e:74:c6: aa:50:62:eb:e7:db:9e:3f:23:59:e1:37:f0:23:b7: 73:b7:3f:04:7c:0e:26:00:a7:f6:a7:4a:1c:f4:e4: c1:5b:60:52:03:56:bd:2a:b3:e8:8d:18:a9:4a:67: d4:24:e9:18:ef:92:06:e8:95:9a:99:e2:f5:7c:5a: 3d:49:a1:07:ff:db:64:f8:d6:38:76:6b:aa:07:66: 17:f2:05:cb:f3:d1:25:28:91:76:9b:f6:e2:6b:b9: 70:f9:62:71:3d:c4:dc:bf:10:9f:ca:a1:bc:94:83: de:00:77:1f:64:15:7c:07:80:15:a9:ce:d6:38:e0: 43:d3:01:a9:11:86:ed:2d:55:23:53:46:e4:62:90: 7f:17:35:29:9e:15:4c:37:86:de:55:f6:72:a4:75: 67:4e:9b:29:b9:d4:97:1e:87:ae:71:ae:f6:74:25: d6:d7:9b:bf:a0:72:55:51:8e:7c:54:77:88:9a:f2: f5:72:4a:de:49:0f:d5:a9:81:15:b4:b5:15:93:f4: ee:40:29:51:e0:83:e8:27:42:84:08:0c:c2:c3:e2: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:33:04:96:9C:19:45:75:B8:01:82:3B:42:FD:CB:F4:11:E8:BC X509v3 Authority Key Identifier: keyid:CF:E2:70:B6:64:EB:64:94:B6:79:27:A1:48:9C:0F:8A:B9:E3:6F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/CFE270B664EB6494B67927A1489C0F8AB9E36FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:a5:7b:bc:19:91:35:de:7c:35:4e:cf:34:c8:64:0a:00:45: a7:be:15:2f:63:12:cc:16:79:23:3d:68:d2:f0:a4:22:56:85: df:37:2b:de:52:4c:45:5e:5e:b1:04:f9:ff:f4:71:86:5b:af: 27:3d:96:0b:54:9f:1e:1b:45:ce:6f:00:91:46:66:fb:f0:10: 7e:76:c2:18:65:4b:78:4f:36:f8:6d:26:d9:ca:07:c0:ac:61: 59:eb:21:2a:b6:f0:7b:fb:40:08:7a:56:83:a6:7d:7e:e3:ad: 1c:39:6c:9f:cf:34:51:ea:06:b1:6a:48:78:22:38:a7:42:4f: 72:21:68:ac:3f:9c:bd:25:8f:17:79:6b:00:6b:4d:f1:91:fe: e8:a8:b7:b4:59:a4:3c:e6:89:93:a5:6d:4c:3b:22:ee:2d:e5: 6c:7c:49:93:21:46:5b:c6:8f:50:2b:90:c1:89:10:b3:26:b8: 95:e5:fd:82:35:b7:39:c7:91:48:a9:c5:6e:fa:79:ad:09:94: c8:a2:c2:c1:51:42:d1:23:f1:c0:c5:0b:3c:b1:ca:ee:9f:83: a3:51:72:3f:24:22:11:6a:b9:e5:0a:dc:6a:94:7f:99:d4:1e: 11:a2:83:66:40:1a:4a:7a:65:d2:1d:b0:d4:e2:a3:51:0f:27: 3d:62:81:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaoRoubbPx5a1nxitdl3jQLyINAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFC OUUzNkZFODAeFw0yNjA2MTcwNzAxMjlaFw0yNjA2MTgwOTE3MjlaMDMxMTAvBgNV BAMTKEJBNjczMzA0OTY5QzE5NDU3NUI4MDE4MjNCNDJGRENCRjQxMUU4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+8WdSWEdhMh4wEcv1zQ9N+7G 8wp/L/PDWQcRdGh076KiUWLd2V5bTE50xqpQYuvn254/I1nhN/Ajt3O3PwR8DiYA p/anShz05MFbYFIDVr0qs+iNGKlKZ9Qk6RjvkgbolZqZ4vV8Wj1JoQf/22T41jh2 a6oHZhfyBcvz0SUokXab9uJruXD5YnE9xNy/EJ/KobyUg94Adx9kFXwHgBWpztY4 4EPTAakRhu0tVSNTRuRikH8XNSmeFUw3ht5V9nKkdWdOmym51Jceh65xrvZ0JdbX m7+gclVRjnxUd4ia8vVySt5JD9WpgRW0tRWT9O5AKVHgg+gnQoQIDMLD4lLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUumczBJacGUV1uAGCO0L9y/QR6LwwHwYDVR0j BBgwFoAUz+JwtmTrZJS2eSehSJwPirnjb+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JhZjM2NWUtMDVkZS00YzM5LWJmOTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2 NEVCNjQ5NEI2NzkyN0ExNDg5QzBGOEFCOUUzNkZFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkUyNzBCNjY0RUI2NDk0QjY3OTI3QTE0ODlDMEY4QUI5RTM2 RkU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvQ0ZFMjcwQjY2NEVCNjQ5NEI2NzkyN0ExNDg5QzBG OEFCOUUzNkZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+le7wZkTXefDVOzzTIZAoARae+FS9jEswW eSM9aNLwpCJWhd83K95STEVeXrEE+f/0cYZbryc9lgtUnx4bRc5vAJFGZvvwEH52 whhlS3hPNvhtJtnKB8CsYVnrISq28Hv7QAh6VoOmfX7jrRw5bJ/PNFHqBrFqSHgi OKdCT3IhaKw/nL0ljxd5awBrTfGR/uiot7RZpDzmiZOlbUw7Iu4t5Wx8SZMhRlvG j1ArkMGJELMmuJXl/YI1tznHkUipxW76ea0JlMiiwsFRQtEj8cDFCzyxyu6fg6NR cj8kIhFqueUK3GqUf5nUHhGig2ZAGkp6ZdIdsNTio1EPJz1igXc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:31 2026 by rpki-client