$ rpki-client -vvf rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft (raw, json) Hash identifier: 7Ydw4fryxzF/IiynFVL4RykAC/TQRWE7SC6Ri9UC4mA= Subject key identifier: AE:B2:27:66:2D:89:86:50:FC:D2:62:6C:11:82:77:58:8C:20:BD:E4 Authority key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Certificate issuer: /CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Certificate serial: 7EBBB5BB5F05E97484D60AE748AD0D5D72D62AAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 19:32:41 +0000 Manifest this update: Tue 16 Jun 2026 19:27:41 +0000 Manifest next update: Wed 17 Jun 2026 19:38:41 +0000 Files and hashes: 1: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl (hash: WHmJ9S+coNmIkrAwYORXipkwNsqfAclrAnpcMOur6lk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bb:b5:bb:5f:05:e9:74:84:d6:0a:e7:48:ad:0d:5d:72:d6:2a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Validity Not Before: Jun 16 19:27:41 2026 GMT Not After : Jun 17 19:38:41 2026 GMT Subject: CN=AEB227662D898650FCD2626C118277588C20BDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:cb:2e:4d:30:04:30:36:66:9b:0f:42:1d: a7:24:ba:b0:6b:9b:cf:13:2c:ea:f4:8f:e8:fd:74: ec:39:16:2c:06:8b:85:cb:27:5d:c9:ad:20:18:fe: ac:60:8b:79:a8:55:c7:c9:c7:5b:09:c1:44:b4:58: f7:7e:f2:e2:31:08:a6:a2:13:8c:8f:ff:21:96:80: 57:20:c4:92:37:d8:fb:0a:22:43:0d:03:c3:78:19: 64:41:cb:08:1c:88:a7:a8:2b:98:83:e1:a9:79:5f: 91:79:32:68:37:0a:72:f5:9d:87:af:14:76:39:86: e3:da:34:a3:57:f8:71:d8:af:eb:37:27:6e:d3:1b: f3:ce:83:96:4b:d1:2d:f9:d2:a9:e4:80:fa:34:37: 26:06:23:2b:c6:f7:17:93:2e:ce:34:a8:90:ce:47: c4:77:08:bd:39:d2:23:6d:a8:bf:0e:77:bc:67:97: e3:44:d7:44:84:15:3e:55:86:a3:72:c0:72:8e:db: f7:dc:36:16:4b:75:72:c3:12:fc:90:8a:ac:1c:ae: e6:17:99:60:82:23:66:8b:59:ff:21:3e:79:80:de: 1e:77:f3:37:6b:ae:2b:b5:ee:c3:55:13:f5:66:eb: 18:14:d2:82:c4:1e:fc:f2:9f:f3:57:32:a3:0a:37: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B2:27:66:2D:89:86:50:FC:D2:62:6C:11:82:77:58:8C:20:BD:E4 X509v3 Authority Key Identifier: keyid:CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1d:5a:9c:95:f1:ad:21:bd:82:d6:8d:4c:ad:10:9d:f7:2c: c4:76:9e:18:4c:c3:55:3a:33:b5:b7:b4:44:8c:75:11:1d:86: 73:34:6c:44:b9:93:54:96:2d:e2:b7:b3:a7:0f:a9:6c:57:26: 30:09:06:e6:aa:fc:fb:7f:c2:48:22:2a:0b:9a:98:25:f4:33: 9b:d8:b3:3b:18:f4:8f:db:e2:22:b8:82:45:61:fa:68:49:d2: 21:95:b3:a3:f0:fb:43:ad:78:a1:f5:01:c6:5d:d2:e7:d4:62: f6:1a:6c:6b:23:d8:d8:70:77:57:16:30:99:6d:b2:19:c9:27: 32:f1:5d:ae:8f:31:3d:fd:77:95:7c:b7:d5:ed:12:cf:db:51: 04:76:aa:84:53:fc:b6:4c:ba:57:8d:5a:0c:06:0b:13:53:07: 84:97:4d:38:a3:c4:d3:f2:d7:b3:67:35:a5:c9:3e:1b:8d:51: de:4c:96:38:ba:7c:c0:12:26:d0:89:36:29:f1:da:65:69:57: 79:4e:87:83:8d:aa:bd:ef:94:7a:30:02:e4:c7:98:77:0d:d3: 01:89:25:a7:80:e3:ed:a8:e8:af:cf:e2:d9:41:07:ce:74:2b: 59:0c:2f:7f:55:32:2c:2f:86:cf:ad:7b:95:8e:e7:f4:fd:90: da:a6:8d:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfru1u18F6XSE1grnSK0NXXLWKq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNG QURDQkFBMDAeFw0yNjA2MTYxOTI3NDFaFw0yNjA2MTcxOTM4NDFaMDMxMTAvBgNV BAMTKEFFQjIyNzY2MkQ4OTg2NTBGQ0QyNjI2QzExODI3NzU4OEMyMEJERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbcsuTTAEMDZmmw9CHackurBr m88TLOr0j+j9dOw5FiwGi4XLJ13JrSAY/qxgi3moVcfJx1sJwUS0WPd+8uIxCKai E4yP/yGWgFcgxJI32PsKIkMNA8N4GWRBywgciKeoK5iD4al5X5F5Mmg3CnL1nYev FHY5huPaNKNX+HHYr+s3J27TG/POg5ZL0S350qnkgPo0NyYGIyvG9xeTLs40qJDO R8R3CL050iNtqL8Od7xnl+NE10SEFT5VhqNywHKO2/fcNhZLdXLDEvyQiqwcruYX mWCCI2aLWf8hPnmA3h538zdrriu17sNVE/Vm6xgU0oLEHvzyn/NXMqMKN2iRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrrInZi2JhlD80mJsEYJ3WIwgveQwHwYDVR0j BBgwFoAUz5DTI0sm5kPeKeeLKj0Dc/rcuqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzc2M2U3MWEtOWM4NS00MTc2LThmYTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0 QjI2RTY0M0RFMjlFNzhCMkEzRDAzNzNGQURDQkFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjkwRDMyMzRCMjZFNjQzREUyOUU3OEIyQTNEMDM3M0ZBRENC QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQ0Y5MEQzMjM0QjI2RTY0M0RFMjlFNzhCMkEzRDAz NzNGQURDQkFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIdWpyV8a0hvYLWjUytEJ33LMR2nhhMw1U6 M7W3tESMdREdhnM0bES5k1SWLeK3s6cPqWxXJjAJBuaq/Pt/wkgiKguamCX0M5vY szsY9I/b4iK4gkVh+mhJ0iGVs6Pw+0OteKH1AcZd0ufUYvYabGsj2Nhwd1cWMJlt shnJJzLxXa6PMT39d5V8t9XtEs/bUQR2qoRT/LZMuleNWgwGCxNTB4SXTTijxNPy 17NnNaXJPhuNUd5Mlji6fMASJtCJNinx2mVpV3lOh4ONqr3vlHowAuTHmHcN0wGJ JaeA4+2o6K/P4tlBB850K1kML39VMiwvhs+te5WO5/T9kNqmjZs= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:17 2026 by rpki-client