$ rpki-client -vvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft File: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft (raw, json) Hash identifier: Agll6XVDXeQxudkhdfzfCRpx/Jtibheq4xNpqUHsLNQ= Subject key identifier: 17:2C:80:A8:DD:BB:40:37:26:AD:7B:EC:A6:59:AD:77:21:D9:23:5E Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A Certificate issuer: /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Certificate serial: 6E219884A02058FE5898FBD871BBEBE88F818A74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:37:00 +0000 Manifest this update: Wed 17 Jun 2026 07:32:00 +0000 Manifest next update: Thu 18 Jun 2026 07:52:00 +0000 Files and hashes: 1: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=) 2: CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl (hash: M6NoSlEhLYeKXwkr9tdtDJd4NaFP+iE9JK72bqIzOyI=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:21:98:84:a0:20:58:fe:58:98:fb:d8:71:bb:eb:e8:8f:81:8a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A Validity Not Before: Jun 17 07:32:00 2026 GMT Not After : Jun 18 07:52:00 2026 GMT Subject: CN=172C80A8DDBB403726AD7BECA659AD7721D9235E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:15:5a:d5:43:6c:22:2d:9d:48:b4:37:70: 96:b6:96:bb:1c:9e:e5:01:76:0e:54:bf:35:60:53: 2d:f2:c4:6a:4b:a4:f7:cf:76:6d:1f:74:63:12:80: 25:70:1f:23:64:ff:af:88:1b:3a:db:cc:9e:fb:21: 32:6e:12:cd:57:22:a6:a9:8f:63:34:e0:fa:dc:2f: 11:6e:c6:28:d7:05:b8:0c:21:6e:2d:b2:a7:34:ed: da:e4:f9:70:c3:f8:8a:44:0e:a6:32:b1:3c:06:02: 8c:3c:68:a0:c6:9b:bb:f4:8f:ca:2d:9f:96:d5:3e: 2f:d0:db:ce:ce:e8:10:e6:9c:1c:d9:f5:fd:4c:a7: bb:6d:b5:00:44:be:17:95:1a:5c:c2:9d:78:11:fb: ee:e9:f8:64:6d:8e:fc:21:42:ac:97:e0:76:47:e6: 34:d3:04:32:19:2c:dc:84:02:9b:ba:40:63:fe:95: 88:5f:2b:a2:a1:d0:66:62:45:62:c5:00:40:26:a5: 62:fd:16:06:9d:0f:c6:dc:72:25:23:45:9c:c9:9f: 5b:64:98:60:83:03:78:71:89:5f:4f:ee:a4:de:c9: fc:26:9c:52:85:c8:5e:34:7e:1d:d6:7c:45:8c:82: d5:4a:1d:a0:44:4b:ad:84:5c:7c:08:98:05:e4:6d: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2C:80:A8:DD:BB:40:37:26:AD:7B:EC:A6:59:AD:77:21:D9:23:5E X509v3 Authority Key Identifier: keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:54:16:1f:51:3e:06:86:02:45:3e:03:9a:67:1f:c5:bc:81: 5a:0f:8b:b0:19:55:52:ff:73:86:58:6b:13:32:c1:a5:fe:78: 24:4c:7a:12:28:6b:df:aa:7e:f7:59:95:26:38:1f:b0:b6:ce: 06:b8:98:27:d8:0d:ab:68:f0:bd:d5:ca:a0:bb:2d:90:30:7c: f8:40:cc:7a:9c:39:d8:d2:a9:9b:70:02:fc:68:3e:8d:a3:38: b1:2f:30:bb:b1:ff:32:fd:62:61:0d:a8:fd:1c:27:88:3c:ce: 80:6e:12:68:05:1e:2b:31:a0:08:fb:69:d4:64:83:f7:0f:61: 9d:9d:de:2c:06:14:b1:bc:7a:21:cf:6d:9a:fb:d8:e2:af:de: fa:3b:73:f2:27:54:08:8d:6a:d8:46:ec:75:5d:e5:eb:57:05: a7:ec:bb:51:26:51:89:d6:bd:46:10:d4:62:5e:a3:68:55:e2: c2:60:cc:d5:12:63:b4:9e:0a:8e:8c:fb:b7:60:ee:50:ca:c9: c3:de:94:8a:83:1f:3e:7c:79:4f:d9:c7:bd:d8:02:c0:7c:e2: c4:f8:67:f2:85:0d:3c:b0:c2:ed:06:8a:6e:5a:5b:12:ca:68: 60:28:8d:4a:42:61:1f:54:f0:53:0e:b9:9f:04:84:b7:43:7a: cf:6f:2a:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiGYhKAgWP5YmPvYcbvr6I+BinQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdE RDBEQ0Y0QTAeFw0yNjA2MTcwNzMyMDBaFw0yNjA2MTgwNzUyMDBaMDMxMTAvBgNV BAMTKDE3MkM4MEE4RERCQjQwMzcyNkFEN0JFQ0E2NTlBRDc3MjFEOTIzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3JhVa1UNsIi2dSLQ3cJa2lrsc nuUBdg5UvzVgUy3yxGpLpPfPdm0fdGMSgCVwHyNk/6+IGzrbzJ77ITJuEs1XIqap j2M04PrcLxFuxijXBbgMIW4tsqc07drk+XDD+IpEDqYysTwGAow8aKDGm7v0j8ot n5bVPi/Q287O6BDmnBzZ9f1Mp7tttQBEvheVGlzCnXgR++7p+GRtjvwhQqyX4HZH 5jTTBDIZLNyEApu6QGP+lYhfK6Kh0GZiRWLFAEAmpWL9FgadD8bcciUjRZzJn1tk mGCDA3hxiV9P7qTeyfwmnFKFyF40fh3WfEWMgtVKHaBES62EXHwImAXkbUh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFyyAqN27QDcmrXvsplmtdyHZI14wHwYDVR0j BBgwFoAUz4l5TromzgEm/LFyqNNUB90Nz0owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjYjcxODctN2E1Zi00ZTIzLWJlOTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVC QTI2Q0UwMTI2RkNCMTcyQThEMzU0MDdERDBEQ0Y0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRjg5Nzk0RUJBMjZDRTAxMjZGQ0IxNzJBOEQzNTQwN0REMERD RjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvQ0Y4OTc5NEVCQTI2Q0UwMTI2RkNCMTcyQThEMzU0 MDdERDBEQ0Y0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxUFh9RPgaGAkU+A5pnH8W8gVoPi7AZVVL/ c4ZYaxMywaX+eCRMehIoa9+qfvdZlSY4H7C2zga4mCfYDato8L3VyqC7LZAwfPhA zHqcOdjSqZtwAvxoPo2jOLEvMLux/zL9YmENqP0cJ4g8zoBuEmgFHisxoAj7adRk g/cPYZ2d3iwGFLG8eiHPbZr72OKv3vo7c/InVAiNathG7HVd5etXBafsu1EmUYnW vUYQ1GJeo2hV4sJgzNUSY7SeCo6M+7dg7lDKycPelIqDHz58eU/Zx73YAsB84sT4 Z/KFDTywwu0Gim5aWxLKaGAojUpCYR9U8FMOuZ8EhLdDes9vKs8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:53 2026 by rpki-client