$ rpki-client -vvf rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft File: CFAB76BA352A38D20728AC2158C798F4B46EB514.mft (raw, json) Hash identifier: uFl9DvAZXToCmtGjj7GFf3T09hi1hHTIZLvRfLKW2Yo= Subject key identifier: 0C:73:82:F7:16:88:47:EA:17:17:33:C9:A7:78:27:89:AE:EB:03:3A Authority key identifier: CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 Certificate issuer: /CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Certificate serial: 2AED043DDB08013924E2D2B67A008D6C121A201F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 13:38:15 +0000 Manifest this update: Tue 28 Jul 2026 13:33:15 +0000 Manifest next update: Wed 29 Jul 2026 13:40:15 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: Zi1JkNnukyu3fNkoRJBRJ20pTF29kglTiRqMT61/Kuc=) 2: CFAB76BA352A38D20728AC2158C798F4B46EB514.crl (hash: 8OWd15EtaskVJTx1J22Bo0VoHr96zz1XHeL5uTBmIPM=) 3: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: JWRAbVAjtrWhFFtCysEBNwNfbA2iEIXgMLaHDiFbSiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ed:04:3d:db:08:01:39:24:e2:d2:b6:7a:00:8d:6c:12:1a:20:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFAB76BA352A38D20728AC2158C798F4B46EB514 Validity Not Before: Jul 28 13:33:15 2026 GMT Not After : Jul 29 13:40:15 2026 GMT Subject: CN=0C7382F7168847EA171733C9A7782789AEEB033A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:95:12:13:ae:4a:84:fa:8e:11:d7:33:17: 2d:b4:de:4f:21:2a:7b:93:8e:23:c7:0c:e1:00:e2: f4:be:82:e1:1f:de:52:ce:94:c8:28:75:94:68:d9: d7:78:65:bc:e0:f6:b4:56:a5:f3:18:ee:98:41:e4: 80:92:08:d6:48:7d:85:ee:96:c6:ef:32:cf:f4:c1: 80:bb:e0:3b:53:5d:b6:00:7e:ab:72:12:49:58:78: a7:2d:7a:02:cb:85:ec:fa:a5:80:bd:bc:a0:f9:94: ba:50:32:d1:1e:f5:e3:63:d9:ee:8e:ad:e8:a9:2b: c9:4e:f6:71:2c:61:0b:9e:9b:2a:4a:1a:f3:5a:09: 9b:06:99:b4:b1:1a:fb:f9:7c:c2:ea:e4:34:f0:5b: 34:d1:55:75:55:f9:4e:bd:49:34:1b:7b:61:a3:d7: b0:fa:ab:18:77:7d:82:e2:1b:b9:66:7d:22:7c:0e: a2:b7:5f:f8:01:14:2d:1b:d8:22:a3:f4:5d:5b:e8: 3f:37:42:76:dc:22:aa:8e:b5:54:99:7d:cb:12:dc: 17:2b:fe:fb:22:dd:a2:b6:80:53:af:a6:8e:ab:89: ce:a5:cd:51:0a:78:39:9f:8e:c3:7f:4d:68:35:23: 6d:ac:6d:91:a6:01:b8:65:dc:57:5e:39:21:90:52: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:82:F7:16:88:47:EA:17:17:33:C9:A7:78:27:89:AE:EB:03:3A X509v3 Authority Key Identifier: keyid:CF:AB:76:BA:35:2A:38:D2:07:28:AC:21:58:C7:98:F4:B4:6E:B5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFAB76BA352A38D20728AC2158C798F4B46EB514.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/CFAB76BA352A38D20728AC2158C798F4B46EB514.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:99:1d:1f:73:62:66:c5:13:e0:6d:8d:ba:0f:f1:61:c6:ff: 8d:57:d2:89:39:8b:68:e0:75:bd:65:57:fa:6f:8b:fb:57:b7: 80:bd:9f:33:3a:24:84:17:0f:f8:3b:68:96:76:c6:82:64:8b: cb:ae:3c:eb:16:41:a4:03:3d:98:f9:fb:52:0f:88:4b:54:e7: d9:db:4a:38:6b:40:a0:67:16:dc:69:8b:ee:61:e3:8c:1d:96: 9d:a9:82:2c:57:51:d8:74:b0:70:2d:97:7c:aa:1b:32:8e:41: a0:05:ba:56:d1:c5:3b:99:e9:6b:8e:ba:6b:b6:8e:59:d3:ad: 96:f1:fd:0d:74:eb:c0:3f:0d:38:36:1c:ba:00:01:ff:21:41: e7:89:71:49:03:3e:86:96:2b:df:8f:8d:bc:c3:18:50:91:5a: 13:8d:dc:b2:e2:03:6c:07:c4:a0:49:58:8a:1d:26:75:00:52: 10:23:97:8b:6a:fb:83:43:d4:6e:45:28:c5:c6:04:6d:43:56: 55:c0:06:75:e4:64:92:1e:a7:6a:8d:e1:83:19:29:43:81:8e: 7b:a3:29:88:65:63:34:cd:eb:3a:2c:dc:8f:6b:f7:c1:5c:e6: 83:8b:de:de:c9:f9:ea:e4:23:83:3a:9e:44:e3:de:08:da:23: 5f:46:53:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKu0EPdsIATkk4tK2egCNbBIaIB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4RjRC NDZFQjUxNDAeFw0yNjA3MjgxMzMzMTVaFw0yNjA3MjkxMzQwMTVaMDMxMTAvBgNV BAMTKDBDNzM4MkY3MTY4ODQ3RUExNzE3MzNDOUE3NzgyNzg5QUVFQjAzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2pUSE65KhPqOEdczFy203k8h KnuTjiPHDOEA4vS+guEf3lLOlMgodZRo2dd4Zbzg9rRWpfMY7phB5ICSCNZIfYXu lsbvMs/0wYC74DtTXbYAfqtyEklYeKctegLLhez6pYC9vKD5lLpQMtEe9eNj2e6O reipK8lO9nEsYQuemypKGvNaCZsGmbSxGvv5fMLq5DTwWzTRVXVV+U69STQbe2Gj 17D6qxh3fYLiG7lmfSJ8DqK3X/gBFC0b2CKj9F1b6D83QnbcIqqOtVSZfcsS3Bcr /vsi3aK2gFOvpo6ric6lzVEKeDmfjsN/TWg1I22sbZGmAbhl3FdeOSGQUloNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHOC9xaIR+oXFzPJp3gnia7rAzowHwYDVR0j BBgwFoAUz6t2ujUqONIHKKwhWMeY9LRutRQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1NDI4MzktMjg1OC00OWYwLWFjZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEz NTJBMzhEMjA3MjhBQzIxNThDNzk4RjRCNDZFQjUxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkFCNzZCQTM1MkEzOEQyMDcyOEFDMjE1OEM3OThGNEI0NkVC NTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvQ0ZBQjc2QkEzNTJBMzhEMjA3MjhBQzIxNThDNzk4 RjRCNDZFQjUxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKZHR9zYmbFE+BtjboP8WHG/41X0ok5i2jg db1lV/pvi/tXt4C9nzM6JIQXD/g7aJZ2xoJki8uuPOsWQaQDPZj5+1IPiEtU59nb SjhrQKBnFtxpi+5h44wdlp2pgixXUdh0sHAtl3yqGzKOQaAFulbRxTuZ6WuOumu2 jlnTrZbx/Q1068A/DTg2HLoAAf8hQeeJcUkDPoaWK9+PjbzDGFCRWhON3LLiA2wH xKBJWIodJnUAUhAjl4tq+4ND1G5FKMXGBG1DVlXABnXkZJIep2qN4YMZKUOBjnuj KYhlYzTN6zos3I9r98Fc5oOL3t7J+erkI4M6nkTj3gjaI19GU8c= -----END CERTIFICATE-----Generated at Tue Jul 28 21:09:55 2026 by rpki-client