$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft File: CB8AF4DC288016428E892458A0C0010ECF1897B7.mft (raw, json) Hash identifier: vZAJKfT3Fu6I53xFeFIy8l8XHQLUDvNAThANk5HeRPA= Subject key identifier: 52:78:81:3E:D0:5C:05:F2:A1:D2:E8:F6:44:1F:5A:91:EE:C0:11:4F Authority key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Certificate issuer: /CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Certificate serial: 6AEB134541CB38E5245A4B9DD18EFEF3B1273883 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:49:16 +0000 Manifest this update: Wed 23 Sep 2026 22:44:16 +0000 Manifest next update: Fri 25 Sep 2026 02:37:16 +0000 Files and hashes: 1: CB8AF4DC288016428E892458A0C0010ECF1897B7.crl (hash: 8Bmp8FpaccWlCsZKk+BPVq1IZuEynZj0EbHjq01Y6W8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:eb:13:45:41:cb:38:e5:24:5a:4b:9d:d1:8e:fe:f3:b1:27:38:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Validity Not Before: Sep 23 22:44:16 2026 GMT Not After : Sep 25 02:37:16 2026 GMT Subject: CN=5278813ED05C05F2A1D2E8F6441F5A91EEC0114F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:58:dc:1d:87:a6:6c:b7:f7:31:01:a3:9f: 8a:a2:9b:27:c3:35:7a:75:31:3b:b5:c0:07:af:e5: b9:b8:77:8f:35:d5:e0:91:43:42:a6:74:f1:95:2f: 19:34:2c:a3:d1:5b:e7:97:24:e7:6b:6c:1e:4c:46: 6c:65:8f:38:92:b3:56:fe:5f:7b:f7:5a:ed:21:0a: 23:0e:3c:cd:a2:1d:d4:4c:00:f5:08:59:9f:4b:c5: 32:52:48:5a:5b:8b:75:14:2c:bc:1b:b5:d6:3c:7c: f1:85:5d:69:26:21:fb:d1:39:9d:23:8b:6e:69:9e: f9:8f:a3:e3:1f:54:24:da:03:5e:42:9e:b2:9b:27: 07:d1:48:1e:38:84:f1:1d:d3:3e:68:2b:7c:bb:44: 02:ac:d6:42:47:b4:4e:17:ee:17:0a:f3:6f:3e:16: 24:53:22:64:1d:2e:39:4d:92:f6:82:96:a3:87:f1: b7:51:5c:13:80:8d:b5:45:46:cb:0a:57:ca:a8:f5: 7a:b7:d7:56:f0:23:4a:f0:12:00:fa:1c:74:42:5a: 0d:57:75:e9:58:65:31:a0:dd:f5:f9:d4:20:f2:df: 22:e9:74:21:92:50:a3:c1:61:aa:b4:24:3e:bf:5c: ff:4e:54:8f:2f:07:80:7c:f7:59:90:54:f3:0f:25: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:78:81:3E:D0:5C:05:F2:A1:D2:E8:F6:44:1F:5A:91:EE:C0:11:4F X509v3 Authority Key Identifier: keyid:CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6d:af:9f:fa:dd:18:b0:f7:36:fe:ea:e1:d8:d3:c1:35:fc: 05:2a:e2:98:12:66:93:55:f6:56:a7:41:58:0c:66:93:53:6f: d8:53:bc:d7:5d:d3:1f:05:6a:e0:d7:27:04:29:c6:bc:06:2f: 8a:27:c3:a3:44:b7:a9:f1:9c:cc:0c:1f:53:90:88:6d:61:74: 66:16:28:c6:b7:d3:f0:61:77:8b:b4:dc:ff:37:f5:91:9b:75: f8:18:fe:10:9f:fc:2f:4f:b3:cd:98:37:7b:3b:89:60:be:7a: d4:66:5f:ca:25:ab:ad:cf:0c:8d:36:e6:6d:6b:f2:27:00:af: 3d:05:69:5c:8d:51:59:f4:69:6f:0b:b4:86:94:33:79:a3:1a: 5b:1e:d8:88:44:0f:a1:69:97:90:c7:88:08:25:82:80:01:f1: 9d:b2:19:db:1d:81:79:ac:af:00:a5:c2:04:3a:44:c4:46:50: 72:5c:1b:1e:f1:bc:b6:ae:76:2c:70:05:5e:29:a0:bf:62:ed: 1f:c2:11:15:42:c7:f1:d1:35:d2:31:0f:a8:f4:e3:60:ff:87: e5:16:eb:4a:30:d7:59:9f:52:ef:14:2b:7f:13:07:c3:6a:bc: e5:15:a7:78:20:cd:86:f4:f4:79:d9:0b:ab:9e:cb:5c:51:5e: 4b:91:a5:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUausTRUHLOOUkWkud0Y7+87EnOIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAxMEVD RjE4OTdCNzAeFw0yNjA5MjMyMjQ0MTZaFw0yNjA5MjUwMjM3MTZaMDMxMTAvBgNV BAMTKDUyNzg4MTNFRDA1QzA1RjJBMUQyRThGNjQ0MUY1QTkxRUVDMDExNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZQFjcHYembLf3MQGjn4qimyfD NXp1MTu1wAev5bm4d4811eCRQ0KmdPGVLxk0LKPRW+eXJOdrbB5MRmxljziSs1b+ X3v3Wu0hCiMOPM2iHdRMAPUIWZ9LxTJSSFpbi3UULLwbtdY8fPGFXWkmIfvROZ0j i25pnvmPo+MfVCTaA15CnrKbJwfRSB44hPEd0z5oK3y7RAKs1kJHtE4X7hcK828+ FiRTImQdLjlNkvaClqOH8bdRXBOAjbVFRssKV8qo9Xq311bwI0rwEgD6HHRCWg1X delYZTGg3fX51CDy3yLpdCGSUKPBYaq0JD6/XP9OVI8vB4B891mQVPMPJY5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUniBPtBcBfKh0uj2RB9ake7AEU8wHwYDVR0j BBgwFoAUy4r03CiAFkKOiSRYoMABDs8Yl7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0Njc2Y2QtZGUzOS00NjhhLWFkMjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMy ODgwMTY0MjhFODkyNDU4QTBDMDAxMEVDRjE4OTdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjhBRjREQzI4ODAxNjQyOEU4OTI0NThBMEMwMDEwRUNGMTg5 N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAx MEVDRjE4OTdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhtr5/63Riw9zb+6uHY08E1/AUq4pgSZpNV 9lanQVgMZpNTb9hTvNdd0x8FauDXJwQpxrwGL4onw6NEt6nxnMwMH1OQiG1hdGYW KMa30/Bhd4u03P839ZGbdfgY/hCf/C9Ps82YN3s7iWC+etRmX8olq63PDI025m1r 8icArz0FaVyNUVn0aW8LtIaUM3mjGlse2IhED6Fpl5DHiAglgoAB8Z2yGdsdgXms rwClwgQ6RMRGUHJcGx7xvLaudixwBV4poL9i7R/CERVCx/HRNdIxD6j042D/h+UW 60ow11mfUu8UK38TB8NqvOUVp3ggzYb09HnZC6uey1xRXkuRpWI= -----END CERTIFICATE-----Generated at Thu Sep 24 04:06:01 2026 by rpki-client