$ rpki-client -vvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: /raWzp+vVtY5SPL/4HFf4qpWSmzzPAob58F94pk5Wn4= Subject key identifier: 9B:2D:99:EF:73:38:98:73:23:8D:1C:F8:D2:F4:31:11:DE:49:5B:12 Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 730D521B249486D0DBE2838FE5E3F5C99778B710 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: 39 Signing time: Fri 12 Jun 2026 23:03:13 +0000 Manifest this update: Fri 12 Jun 2026 22:58:13 +0000 Manifest next update: Sun 14 Jun 2026 01:49:13 +0000 Files and hashes: 1: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: 7NK/FjL+zmOnPBc/ZcRLnS65qRHagoFKf9/1AY0Hlpw=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) 3: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 01:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0d:52:1b:24:94:86:d0:db:e2:83:8f:e5:e3:f5:c9:97:78:b7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Jun 12 22:58:13 2026 GMT Not After : Jun 14 01:49:13 2026 GMT Subject: CN=9B2D99EF73389873238D1CF8D2F43111DE495B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:49:72:07:d8:a9:d2:f4:bb:d6:3e:c2:0f: 55:61:36:6e:d4:6e:cf:b0:0d:56:c3:b5:5f:fe:9e: a8:d5:05:9b:09:ca:86:e9:eb:c5:98:37:2b:14:33: ad:b1:78:55:a4:0d:21:96:6b:db:83:69:9f:82:0a: a5:4f:5b:33:9b:1f:3d:9f:1a:01:73:1c:3f:88:1f: 7c:8a:70:8c:a9:21:b1:8f:dc:63:49:0d:67:ea:95: df:69:fe:c5:b3:57:c9:b5:5e:d8:4b:c5:2f:9c:7a: 00:c9:fb:a0:52:8a:64:41:1b:1d:19:7b:93:12:9d: 76:24:92:cf:3f:13:5b:3c:2a:e4:9b:39:a0:ca:e4: b8:ac:19:bf:65:a1:7c:82:6d:9f:86:99:0f:24:e4: fb:37:41:4e:36:75:7b:0a:8c:d6:8a:fb:c6:a4:89: e4:6b:21:a9:42:ae:94:b4:27:4c:8d:49:30:76:d1: 84:e9:c2:15:85:78:b2:c1:c2:0c:dd:06:96:7d:10: 6d:f1:6e:de:80:6e:10:88:1d:13:fb:b1:3b:fc:fa: 4f:14:8c:29:4d:e6:c7:a4:7a:35:4e:a0:b1:ee:5e: a9:ea:32:a8:54:82:2c:90:bf:fd:8b:02:2d:ad:c9: fc:3f:4e:e3:b5:70:9b:21:c3:6f:6e:db:65:75:c1: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2D:99:EF:73:38:98:73:23:8D:1C:F8:D2:F4:31:11:DE:49:5B:12 X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:67:c5:84:9f:a9:37:86:a0:c5:22:8c:e6:7c:0c:fd:6e:e3: d2:b7:0b:43:1a:26:06:1e:de:db:43:50:c2:1a:3e:e3:3c:b9: 08:7d:2b:26:a5:bc:8b:83:2f:1a:3c:2b:46:1c:be:4c:ef:e1: f9:c4:56:03:d3:d8:61:d0:3b:b4:08:57:26:6a:3b:4f:a7:9c: fb:44:1c:8c:cb:ac:07:13:81:77:be:ca:e1:eb:03:5c:aa:df: 01:2c:d1:b5:46:45:70:46:dd:9d:52:53:73:b5:27:88:a3:70: 97:c0:9b:20:e2:19:90:09:20:09:bf:7f:44:0b:e9:66:12:2f: d3:0e:0c:0b:09:db:b4:38:c9:39:3f:11:46:72:c1:9c:e5:ce: 45:1e:b4:57:3e:8d:f1:cd:15:ba:9c:ca:c0:da:cc:5a:45:67: 78:3d:e3:28:1d:16:75:b4:1c:f5:24:f6:4e:5a:ac:4e:91:1a: 72:fa:8c:a1:92:19:96:7e:36:b2:21:29:52:32:95:54:84:f0: b0:1c:0e:a6:29:1e:0b:2b:c4:d3:13:89:f5:08:35:a4:89:ed: 90:33:9f:cf:fa:41:8b:6c:5f:83:2a:7c:4b:2c:dd:b4:73:d3: 3f:2d:f0:fb:df:de:a9:5a:a6:1f:9d:98:74:9e:47:5b:b5:c7: a4:49:b8:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcw1SGySUhtDb4oOP5eP1yZd4txAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjA2MTIyMjU4MTNaFw0yNjA2MTQwMTQ5MTNaMDMxMTAvBgNV BAMTKDlCMkQ5OUVGNzMzODk4NzMyMzhEMUNGOEQyRjQzMTExREU0OTVCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8klyB9ip0vS71j7CD1VhNm7U bs+wDVbDtV/+nqjVBZsJyobp68WYNysUM62xeFWkDSGWa9uDaZ+CCqVPWzObHz2f GgFzHD+IH3yKcIypIbGP3GNJDWfqld9p/sWzV8m1XthLxS+cegDJ+6BSimRBGx0Z e5MSnXYkks8/E1s8KuSbOaDK5LisGb9loXyCbZ+GmQ8k5Ps3QU42dXsKjNaK+8ak ieRrIalCrpS0J0yNSTB20YTpwhWFeLLBwgzdBpZ9EG3xbt6AbhCIHRP7sTv8+k8U jClN5sekejVOoLHuXqnqMqhUgiyQv/2LAi2tyfw/TuO1cJshw29u22V1weerAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmy2Z73M4mHMjjRz40vQxEd5JWxIwHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxnxYSfqTeGoMUijOZ8DP1u49K3C0MaJgYe 3ttDUMIaPuM8uQh9KyalvIuDLxo8K0Ycvkzv4fnEVgPT2GHQO7QIVyZqO0+nnPtE HIzLrAcTgXe+yuHrA1yq3wEs0bVGRXBG3Z1SU3O1J4ijcJfAmyDiGZAJIAm/f0QL 6WYSL9MODAsJ27Q4yTk/EUZywZzlzkUetFc+jfHNFbqcysDazFpFZ3g94ygdFnW0 HPUk9k5arE6RGnL6jKGSGZZ+NrIhKVIylVSE8LAcDqYpHgsrxNMTifUINaSJ7ZAz n8/6QYtsX4MqfEss3bRz0z8t8Pvf3qlaph+dmHSeR1u1x6RJuNA= -----END CERTIFICATE-----Generated at Sat Jun 13 17:39:07 2026 by rpki-client