$ rpki-client -vvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: 6gwyJR1LmYD4DRjPT7ljW3jiDXs1hJhOFypOBe6PH8U= Subject key identifier: F6:03:D7:31:3C:99:6A:8C:BC:4B:DC:B1:4F:09:8B:1C:64:6B:C1:4F Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 5D7EA58EFDC2F195F7B1C06A8BDA28E2AA5A86B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 08:39:24 +0000 Manifest this update: Sat 13 Jun 2026 08:34:24 +0000 Manifest next update: Sun 14 Jun 2026 09:51:24 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: hW/EACQtErPd6gu8XNZ5H6J4h/6nHmkuUj0fIyN1YQg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7e:a5:8e:fd:c2:f1:95:f7:b1:c0:6a:8b:da:28:e2:aa:5a:86:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: Jun 13 08:34:24 2026 GMT Not After : Jun 14 09:51:24 2026 GMT Subject: CN=F603D7313C996A8CBC4BDCB14F098B1C646BC14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:83:8e:34:81:01:d0:53:46:b6:98:b5:32: b1:72:1c:69:c6:6b:38:14:b7:31:86:75:38:66:6f: 29:96:9d:cf:e4:f5:9d:ee:30:ef:3d:d6:c2:01:92: 9d:89:0b:da:8f:25:f3:e3:be:f5:23:60:ea:85:ba: 6f:71:4c:93:6b:ac:41:4a:67:b8:89:02:07:9d:f9: ff:69:e6:1e:40:0a:86:10:e5:97:8a:f0:a0:7a:df: b3:e0:1a:f0:77:77:a8:6b:61:9b:1a:1b:50:52:ce: 97:7d:6e:aa:60:dc:90:d3:4c:d5:37:fe:88:10:5d: b4:6a:b9:80:97:a7:05:33:7a:74:ec:be:97:82:63: 77:3f:7d:09:b2:c0:84:1d:75:20:8a:16:8f:49:ce: 84:88:c3:28:d5:41:33:5e:b9:26:59:fb:a0:77:71: 5b:b5:47:72:36:64:c6:b6:45:63:c4:0a:b8:70:f1: 48:6a:b4:78:e1:45:95:12:5a:38:f7:03:31:5c:52: 69:bd:06:8f:dc:27:56:e3:84:a6:95:cd:a8:b4:2b: ee:48:e7:cc:06:6c:7b:8b:85:2b:cb:d1:f9:7a:fa: 7f:79:66:a1:26:25:22:d0:83:71:f8:86:a6:64:8c: 79:3f:de:97:cf:c8:9a:84:87:2e:fc:60:5a:81:fc: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:03:D7:31:3C:99:6A:8C:BC:4B:DC:B1:4F:09:8B:1C:64:6B:C1:4F X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:98:6a:9b:43:94:93:02:2b:70:25:ee:db:36:e9:53:fd:9e: f2:67:50:49:8a:71:16:0a:6e:a9:33:0b:5f:74:4c:08:b7:49: 59:ee:f6:52:1c:be:27:fd:e2:36:2b:47:99:a4:0c:17:a5:1d: 33:e7:7b:16:7c:b0:5b:62:0b:2b:fa:b1:9f:d2:56:20:92:ee: 78:3b:ba:b5:41:7b:4b:19:a7:e9:e7:04:a7:84:bd:96:f7:9e: 6b:ea:8b:8c:81:d6:26:4e:58:44:a1:6d:f6:07:8f:38:58:80: dc:e7:6c:33:1d:fd:a9:f0:95:24:d4:08:9d:6e:5d:0f:22:fa: f7:b6:11:4a:cf:a6:bf:d6:56:ce:5b:e1:a0:16:55:85:0d:1e: fd:06:92:1d:db:8d:86:6f:2f:a5:63:62:8b:f9:59:8b:3b:38: 2b:60:d9:70:fb:60:50:ff:55:a9:e1:9c:fd:9f:11:59:6a:19: 50:d5:3b:2d:58:7a:fd:0b:43:91:18:09:a5:94:94:1e:ce:0c: 5a:62:01:58:46:05:a7:90:d3:1d:dd:69:68:25:16:a9:f1:3a: b0:4f:8f:90:f3:89:8b:92:6d:97:7f:cd:17:ab:0d:23:53:49: 91:78:96:43:5c:8f:da:72:6b:73:46:fe:7a:ee:5c:38:1e:aa: c4:ae:41:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXX6ljv3C8ZX3scBqi9oo4qpahrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjA2MTMwODM0MjRaFw0yNjA2MTQwOTUxMjRaMDMxMTAvBgNV BAMTKEY2MDNENzMxM0M5OTZBOENCQzRCRENCMTRGMDk4QjFDNjQ2QkMxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWoOONIEB0FNGtpi1MrFyHGnG azgUtzGGdThmbymWnc/k9Z3uMO891sIBkp2JC9qPJfPjvvUjYOqFum9xTJNrrEFK Z7iJAged+f9p5h5ACoYQ5ZeK8KB637PgGvB3d6hrYZsaG1BSzpd9bqpg3JDTTNU3 /ogQXbRquYCXpwUzenTsvpeCY3c/fQmywIQddSCKFo9JzoSIwyjVQTNeuSZZ+6B3 cVu1R3I2ZMa2RWPECrhw8UhqtHjhRZUSWjj3AzFcUmm9Bo/cJ1bjhKaVzai0K+5I 58wGbHuLhSvL0fl6+n95ZqEmJSLQg3H4hqZkjHk/3pfPyJqEhy78YFqB/EcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gPXMTyZaoy8S9yxTwmLHGRrwU8wHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiYaptDlJMCK3Al7ts26VP9nvJnUEmKcRYK bqkzC190TAi3SVnu9lIcvif94jYrR5mkDBelHTPnexZ8sFtiCyv6sZ/SViCS7ng7 urVBe0sZp+nnBKeEvZb3nmvqi4yB1iZOWEShbfYHjzhYgNznbDMd/anwlSTUCJ1u XQ8i+ve2EUrPpr/WVs5b4aAWVYUNHv0Gkh3bjYZvL6VjYov5WYs7OCtg2XD7YFD/ VanhnP2fEVlqGVDVOy1Yev0LQ5EYCaWUlB7ODFpiAVhGBaeQ0x3daWglFqnxOrBP j5DziYuSbZd/zRerDSNTSZF4lkNcj9pya3NG/nruXDgeqsSuQVE= -----END CERTIFICATE-----Generated at Sat Jun 13 16:52:03 2026 by rpki-client