$ rpki-client -vvf rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft (raw, json) Hash identifier: HISfFQEUjAQSrWqFvFtweLjYuOXO9+yk0Lf6yGcjXAY= Subject key identifier: CA:22:A0:70:54:E4:62:2C:80:40:B7:DC:94:CD:76:FB:0E:A1:35:10 Authority key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Certificate issuer: /CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Certificate serial: 4B3651A19031DAFC45E4980331BB1147696342EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 02:29:07 +0000 Manifest this update: Wed 29 Jul 2026 02:24:07 +0000 Manifest next update: Thu 30 Jul 2026 06:22:07 +0000 Files and hashes: 1: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl (hash: GXtwyrhA3cVyafmhiNjGAmEMdoTUZC8vLbKQkmhx+Jg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:36:51:a1:90:31:da:fc:45:e4:98:03:31:bb:11:47:69:63:42:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Validity Not Before: Jul 29 02:24:07 2026 GMT Not After : Jul 30 06:22:07 2026 GMT Subject: CN=CA22A07054E4622C8040B7DC94CD76FB0EA13510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:24:b1:58:a8:21:42:29:61:03:5d:f9:8b: 86:a1:d1:27:71:0a:8e:db:86:76:60:7a:77:25:a7: 58:d6:8c:fa:62:2b:8e:1a:73:1d:e9:94:c0:ac:28: cf:32:93:d4:d4:d6:71:8d:ff:51:32:99:84:d3:cb: d8:44:1c:1c:45:9b:7a:c1:c3:cb:31:1a:ea:58:ae: fa:61:16:08:be:cd:ca:b8:85:02:4f:7b:f0:ed:ee: 29:23:b9:1f:6b:e8:bc:eb:59:69:b7:1d:71:c7:b7: c4:54:d0:7f:b9:1c:75:03:7f:6a:bf:a6:0f:e0:ec: a5:2c:f5:e1:64:a8:48:b3:94:2d:5a:07:d2:a3:09: 8d:99:c9:6b:41:c7:af:59:f3:26:6b:1c:8a:06:d2: 54:32:07:14:1b:5b:0e:cb:80:95:26:48:5e:17:f7: 83:70:bb:39:19:ff:bf:2b:71:b0:c0:8e:e1:24:d1: bb:52:a0:f7:e0:38:8a:14:9d:87:7e:27:41:71:a7: 30:e7:70:24:a5:8b:bf:fe:8e:25:c0:3a:58:35:35: 02:8d:31:62:d3:6e:80:72:55:f6:af:9b:77:f7:49: e3:27:39:54:a5:80:f4:4e:40:7c:a0:a0:65:3b:1f: 7d:8d:4b:f2:8a:e6:c6:d7:63:3d:27:db:a4:32:b8: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:A0:70:54:E4:62:2C:80:40:B7:DC:94:CD:76:FB:0E:A1:35:10 X509v3 Authority Key Identifier: keyid:CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:27:49:ae:bd:9c:b3:8d:a3:c9:8f:56:29:b9:34:30:c4:92: e5:b6:cb:18:43:43:a0:bb:35:0f:49:bf:96:5b:1a:e8:c6:aa: 68:e3:b5:9c:04:80:31:93:02:0d:01:ff:c2:ea:de:a3:e6:a2: d9:d9:55:66:dd:f7:16:72:98:29:a9:2b:ac:9a:4e:d4:57:70: 20:87:37:e5:31:45:ed:18:33:41:db:7b:4f:14:9b:99:1d:ab: 25:ad:b8:ac:54:70:ca:1e:7a:4b:11:50:7e:70:20:07:b8:8f: a0:96:8a:50:32:ee:7a:6b:f3:c2:d4:af:46:21:14:22:2c:b3: 85:42:a4:ef:d2:49:79:f1:45:70:12:14:76:a6:a8:36:74:ab: cf:32:04:49:d7:a2:c6:75:0d:30:a6:26:8a:90:2a:30:bf:b2: 42:f5:f2:5e:f8:9d:89:f3:b6:83:4a:7b:35:6d:3c:65:cf:cf: b2:ee:ce:a6:0f:bb:ee:05:c1:0c:a1:44:bb:00:8f:c6:0f:69: 69:30:7e:41:66:bb:26:77:84:d7:07:1d:cf:34:7c:22:1a:e8: 11:0e:5a:80:0e:cd:9c:27:9b:23:94:97:59:aa:31:55:17:ab: 35:3e:2c:68:5c:52:34:96:b1:0f:2a:6e:ef:ad:92:25:af:b4: b1:af:b5:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzZRoZAx2vxF5JgDMbsRR2ljQu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5 Rjk4QzVFMTAeFw0yNjA3MjkwMjI0MDdaFw0yNjA3MzAwNjIyMDdaMDMxMTAvBgNV BAMTKENBMjJBMDcwNTRFNDYyMkM4MDQwQjdEQzk0Q0Q3NkZCMEVBMTM1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1iSxWKghQilhA135i4ah0Sdx Co7bhnZgenclp1jWjPpiK44acx3plMCsKM8yk9TU1nGN/1EymYTTy9hEHBxFm3rB w8sxGupYrvphFgi+zcq4hQJPe/Dt7ikjuR9r6LzrWWm3HXHHt8RU0H+5HHUDf2q/ pg/g7KUs9eFkqEizlC1aB9KjCY2ZyWtBx69Z8yZrHIoG0lQyBxQbWw7LgJUmSF4X 94NwuzkZ/78rcbDAjuEk0btSoPfgOIoUnYd+J0FxpzDncCSli7/+jiXAOlg1NQKN MWLTboByVfavm3f3SeMnOVSlgPROQHygoGU7H32NS/KK5sbXYz0n26QyuFpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyiKgcFTkYiyAQLfclM12+w6hNRAwHwYDVR0j BBgwFoAUz/pRcn/BE2pNkV3hbopVKZ+YxeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTMzOGJkYWQtZDJkZC00ZjA3LWFlODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3 RkMxMTM2QTREOTE1REUxNkU4QTU1Mjk5Rjk4QzVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRkZBNTE3MjdGQzExMzZBNEQ5MTVERTE2RThBNTUyOTlGOThD NUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvQ0ZGQTUxNzI3RkMxMTM2QTREOTE1REUxNkU4QTU1 Mjk5Rjk4QzVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4nSa69nLONo8mPVim5NDDEkuW2yxhDQ6C7 NQ9Jv5ZbGujGqmjjtZwEgDGTAg0B/8Lq3qPmotnZVWbd9xZymCmpK6yaTtRXcCCH N+UxRe0YM0Hbe08Um5kdqyWtuKxUcMoeeksRUH5wIAe4j6CWilAy7npr88LUr0Yh FCIss4VCpO/SSXnxRXASFHamqDZ0q88yBEnXosZ1DTCmJoqQKjC/skL18l74nYnz toNKezVtPGXPz7LuzqYPu+4FwQyhRLsAj8YPaWkwfkFmuyZ3hNcHHc80fCIa6BEO WoAOzZwnmyOUl1mqMVUXqzU+LGhcUjSWsQ8qbu+tkiWvtLGvtU0= -----END CERTIFICATE-----Generated at Wed Jul 29 07:13:06 2026 by rpki-client