$ rpki-client -vvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft (raw, json) Hash identifier: B2sLU8NKYERzaTDG5b9NlOm+rHgukak1gU630i2gcAA= Subject key identifier: 8F:C9:53:D7:63:90:CB:FF:D6:C0:EC:FD:1D:AD:DE:B8:A8:8F:FC:6A Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 704EB18FDD6BA0513105AA45CBE297EE81E2DDCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:25:41 +0000 Manifest this update: Wed 17 Jun 2026 06:20:41 +0000 Manifest next update: Thu 18 Jun 2026 08:12:41 +0000 Files and hashes: 1: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg=) 2: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl (hash: TJERwHfZvRyOzXj6WFOVa5D7iHrxIE847cyhtIjYdW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4e:b1:8f:dd:6b:a0:51:31:05:aa:45:cb:e2:97:ee:81:e2:dd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: Jun 17 06:20:41 2026 GMT Not After : Jun 18 08:12:41 2026 GMT Subject: CN=8FC953D76390CBFFD6C0ECFD1DADDEB8A88FFC6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:be:ec:f3:9d:e2:43:46:98:17:ef:97:7f: 1a:05:b7:77:fb:d8:bc:f1:f1:bc:f9:71:3e:6c:18: 81:99:87:cc:a3:39:3a:cd:b3:c5:f6:4c:c8:dc:69: ac:c3:d0:9c:66:42:3f:a9:c7:ee:40:a9:5a:1b:59: 84:a8:96:77:86:44:65:13:ec:1d:ea:a7:11:14:da: 24:35:92:75:25:1f:2c:0a:58:88:07:92:16:0e:b0: 16:ae:83:d1:4d:3b:9d:57:1f:6e:07:1b:57:45:e2: aa:ae:29:af:d5:cd:ed:67:34:b3:58:60:3a:17:c4: 3f:00:00:c5:38:a7:91:19:5f:4f:b3:01:a8:50:d3: c8:0e:f2:70:6e:e0:02:0f:89:79:ce:7b:29:f6:6e: e6:c6:0e:16:8a:f1:e9:1f:7d:33:54:d4:af:43:5c: 72:b6:31:d8:94:b4:0c:ff:58:42:df:47:df:48:ae: e8:d0:9e:53:37:22:0b:c7:b2:72:75:18:0a:f2:ad: 2f:f3:8a:55:f8:1c:f2:0a:1b:0e:40:d7:e7:76:fb: 88:a5:04:69:b7:72:f2:e9:83:2d:83:1a:67:3b:33: d5:63:bf:05:7f:de:aa:af:3a:b3:03:ed:ab:72:1d: ac:15:f9:56:85:75:29:3f:8b:ec:42:4f:f5:5d:ca: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C9:53:D7:63:90:CB:FF:D6:C0:EC:FD:1D:AD:DE:B8:A8:8F:FC:6A X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:be:db:42:72:9a:8f:dd:76:d5:c1:a0:f5:74:4b:fd:eb:02: 22:db:66:59:54:6d:49:37:f4:4e:bf:45:8f:f0:82:60:11:62: 1c:98:05:ae:77:63:d0:df:c7:60:93:cd:b7:bd:38:92:fe:47: 45:14:f4:a0:06:aa:91:3b:06:ae:01:e5:2d:c5:2f:48:93:7c: bd:88:5e:24:d8:58:3a:f8:37:ff:a7:29:1e:cc:05:1f:3f:90: f7:2b:fd:c8:9a:52:96:c0:f8:bc:bb:e1:c5:d3:02:0f:4a:44: fa:0f:10:7f:e8:c9:d9:66:61:bc:ad:b5:32:8c:d0:8a:69:16: 5d:36:a0:b5:ea:54:e5:d2:bc:2d:71:d0:68:ef:77:d9:14:d0: 7c:6b:bc:41:e1:46:9c:b5:67:dd:83:c9:fc:b2:9d:4e:d5:9b: 18:d8:55:f4:e8:d1:d3:da:7f:d2:f0:3b:17:06:e0:10:ee:04: 5d:0e:a9:82:b7:f6:92:26:ba:ab:69:37:9d:70:d4:f5:d6:eb: b0:f6:0d:eb:8f:28:6c:9e:26:f7:ba:56:ce:15:b3:fe:c3:eb: 85:a3:99:e2:33:7f:64:db:38:f7:a4:d9:a7:da:f8:9d:9d:16: 4e:3d:cb:ef:24:b5:5d:c7:ab:1d:8d:51:87:3a:f2:81:ef:21: aa:36:09:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcE6xj91roFExBapFy+KX7oHi3c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjA2MTcwNjIwNDFaFw0yNjA2MTgwODEyNDFaMDMxMTAvBgNV BAMTKDhGQzk1M0Q3NjM5MENCRkZENkMwRUNGRDFEQURERUI4QTg4RkZDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChE77s853iQ0aYF++XfxoFt3f7 2Lzx8bz5cT5sGIGZh8yjOTrNs8X2TMjcaazD0JxmQj+px+5AqVobWYSolneGRGUT 7B3qpxEU2iQ1knUlHywKWIgHkhYOsBaug9FNO51XH24HG1dF4qquKa/Vze1nNLNY YDoXxD8AAMU4p5EZX0+zAahQ08gO8nBu4AIPiXnOeyn2bubGDhaK8ekffTNU1K9D XHK2MdiUtAz/WELfR99IrujQnlM3IgvHsnJ1GAryrS/zilX4HPIKGw5A1+d2+4il BGm3cvLpgy2DGmc7M9VjvwV/3qqvOrMD7atyHawV+VaFdSk/i+xCT/VdylSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8lT12OQy//WwOz9Ha3euKiP/GowHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNG QTNEOEEyNUJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGG+20Jymo/ddtXBoPV0S/3rAiLbZllUbUk3 9E6/RY/wgmARYhyYBa53Y9Dfx2CTzbe9OJL+R0UU9KAGqpE7Bq4B5S3FL0iTfL2I XiTYWDr4N/+nKR7MBR8/kPcr/ciaUpbA+Ly74cXTAg9KRPoPEH/oydlmYbyttTKM 0IppFl02oLXqVOXSvC1x0Gjvd9kU0HxrvEHhRpy1Z92DyfyynU7VmxjYVfTo0dPa f9LwOxcG4BDuBF0OqYK39pImuqtpN51w1PXW67D2DeuPKGyeJve6Vs4Vs/7D64Wj meIzf2TbOPek2afa+J2dFk49y+8ktV3Hqx2NUYc68oHvIao2CSA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:07 2026 by rpki-client