$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft File: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft (raw, json) Hash identifier: iDy/5lG4j3yoFGwlvUwMUYNzeFvOgyKj1Dfqp9yhWVM= Subject key identifier: 45:AF:E3:F1:4F:3B:72:49:95:B3:FA:8A:14:CB:C5:DD:21:43:4A:99 Authority key identifier: CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 Certificate issuer: /CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Certificate serial: 3E008A3F9CB5CC777049CDC93CF38FF48B9E6AE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 21:35:19 +0000 Manifest this update: Tue 16 Jun 2026 21:30:19 +0000 Manifest next update: Wed 17 Jun 2026 22:06:19 +0000 Files and hashes: 1: CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl (hash: Ksg6997gdPZ7HfsAUkTVIJyhDaGvKqt//tnvddKFE9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:00:8a:3f:9c:b5:cc:77:70:49:cd:c9:3c:f3:8f:f4:8b:9e:6a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78 Validity Not Before: Jun 16 21:30:19 2026 GMT Not After : Jun 17 22:06:19 2026 GMT Subject: CN=45AFE3F14F3B724995B3FA8A14CBC5DD21434A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:80:de:20:6f:ea:4e:77:fa:7b:fb:59:3c:c6: d5:bd:65:f2:db:0e:ab:fe:c8:27:ca:f0:98:f4:56: 7e:b1:37:b8:2f:45:2a:45:96:dd:3c:64:e4:67:75: 7f:2c:69:6d:60:46:9f:b9:50:ab:73:6d:82:a9:c4: 16:99:40:92:af:bc:3e:57:3d:af:21:4b:d5:ef:66: a9:ab:bd:c9:5e:f6:ff:f0:3f:1d:4c:bf:f2:2b:13: a5:3e:07:7c:af:91:5a:11:14:08:3f:10:27:84:7b: 67:33:bb:6a:97:72:13:d6:fa:f5:03:a7:39:47:02: c5:4b:8e:5f:0c:e0:6a:e6:5d:40:dd:f8:66:95:35: fd:82:b6:2e:0f:74:76:a6:cb:15:a5:92:22:2c:f9: e9:2a:54:a5:ec:51:37:93:fe:9e:13:8b:99:d1:ac: 38:aa:e5:95:c0:1c:d8:50:8e:dc:16:12:2b:2e:a5: 08:2a:d2:de:fb:cd:3f:91:6d:1c:8f:32:fa:f0:a4: 8c:d0:54:01:3a:e0:53:02:e0:f3:f9:66:d4:8e:b2: 4d:43:75:8e:20:8d:ee:98:90:96:52:e6:14:27:ec: 4b:7e:cf:27:4c:55:07:8a:24:6f:44:8b:b1:6a:f6: 2c:5b:ab:eb:82:ed:d5:df:5d:ad:a5:c5:be:d3:a3: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AF:E3:F1:4F:3B:72:49:95:B3:FA:8A:14:CB:C5:DD:21:43:4A:99 X509v3 Authority Key Identifier: keyid:CA:FA:FB:90:3F:E6:4E:E5:FC:E1:2C:C0:7B:DD:9F:77:05:47:EF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/CAFAFB903FE64EE5FCE12CC07BDD9F770547EF78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:72:9d:17:91:4c:d7:d1:9c:eb:1e:df:c2:87:18:25:c2:45: a9:a4:f8:59:cc:e0:11:90:95:7f:8f:22:22:4d:ee:74:63:ed: 57:35:ae:25:57:52:ae:f5:21:19:6c:90:69:86:41:33:f4:99: 2f:e4:23:43:13:28:8c:e7:f8:90:97:d2:64:3d:bd:b0:59:ea: 7f:1d:84:4e:80:d3:88:af:6c:89:8c:08:1e:11:d4:c1:b0:6e: a0:12:3b:25:82:00:50:87:4a:69:24:07:39:2d:fe:2a:cb:2a: 61:dd:57:b7:33:42:c7:a7:ea:16:41:a5:6d:dd:e3:f6:4c:96: f5:1b:7a:57:43:23:a0:4d:fc:f3:49:f0:b9:e1:51:87:48:cc: 23:af:a6:80:ed:ec:2f:fa:be:93:28:b9:76:89:4a:a3:37:00: 49:bb:0f:10:f0:47:de:50:fd:d0:8f:24:17:c2:d6:31:96:4d: 82:91:9e:ee:17:36:a3:a7:c9:41:04:e7:4a:17:de:66:31:fe: 5e:77:ab:63:99:4e:62:d4:8c:51:14:c9:78:c1:97:24:e8:2a: d4:38:0e:82:a3:bf:04:ac:26:f3:c9:d9:2b:f4:d8:e6:d6:2f: fd:a7:a5:22:5f:9e:0b:ec:e7:50:ee:13:aa:e1:16:5a:8b:72: 85:8f:c6:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgCKP5y1zHdwSc3JPPOP9IueaucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcw NTQ3RUY3ODAeFw0yNjA2MTYyMTMwMTlaFw0yNjA2MTcyMjA2MTlaMDMxMTAvBgNV BAMTKDQ1QUZFM0YxNEYzQjcyNDk5NUIzRkE4QTE0Q0JDNUREMjE0MzRBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDogN4gb+pOd/p7+1k8xtW9ZfLb Dqv+yCfK8Jj0Vn6xN7gvRSpFlt08ZORndX8saW1gRp+5UKtzbYKpxBaZQJKvvD5X Pa8hS9XvZqmrvcle9v/wPx1Mv/IrE6U+B3yvkVoRFAg/ECeEe2czu2qXchPW+vUD pzlHAsVLjl8M4GrmXUDd+GaVNf2Cti4PdHamyxWlkiIs+ekqVKXsUTeT/p4Ti5nR rDiq5ZXAHNhQjtwWEisupQgq0t77zT+RbRyPMvrwpIzQVAE64FMC4PP5ZtSOsk1D dY4gje6YkJZS5hQn7Et+zydMVQeKJG9Ei7Fq9ixbq+uC7dXfXa2lxb7To9QPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURa/j8U87ckmVs/qKFMvF3SFDSpkwHwYDVR0j BBgwFoAUyvr7kD/mTuX84SzAe92fdwVH73gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVkNzc4NDAtNjA4ZS00NDlhLWIyMmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAz RkU2NEVFNUZDRTEyQ0MwN0JERDlGNzcwNTQ3RUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZBRkI5MDNGRTY0RUU1RkNFMTJDQzA3QkREOUY3NzA1NDdF Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQ0FGQUZCOTAzRkU2NEVFNUZDRTEyQ0MwN0JERDlG NzcwNTQ3RUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlynReRTNfRnOse38KHGCXCRamk+FnM4BGQ lX+PIiJN7nRj7Vc1riVXUq71IRlskGmGQTP0mS/kI0MTKIzn+JCX0mQ9vbBZ6n8d hE6A04ivbImMCB4R1MGwbqASOyWCAFCHSmkkBzkt/irLKmHdV7czQsen6hZBpW3d 4/ZMlvUbeldDI6BN/PNJ8LnhUYdIzCOvpoDt7C/6vpMouXaJSqM3AEm7DxDwR95Q /dCPJBfC1jGWTYKRnu4XNqOnyUEE50oX3mYx/l53q2OZTmLUjFEUyXjBlyToKtQ4 DoKjvwSsJvPJ2Sv02ObWL/2npSJfngvs51DuE6rhFlqLcoWPxjI= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:14 2026 by rpki-client