$ rpki-client -vvf rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft File: CB8AF4DC288016428E892458A0C0010ECF1897B7.mft (raw, json) Hash identifier: OvWVlASuRUdqbVRPUuVG+7bDoeTh/e4zc4fAfnHlx48= Subject key identifier: B7:CD:6B:E8:3E:D0:DC:19:F8:18:DF:7B:06:F3:65:CD:33:B2:EC:19 Authority key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Certificate issuer: /CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Certificate serial: 0E11BC23C9B0D91EF6DDE580AA94F8B89CDFC086 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:14:41 +0000 Manifest this update: Fri 24 Jul 2026 04:09:41 +0000 Manifest next update: Sat 25 Jul 2026 07:40:41 +0000 Files and hashes: 1: CB8AF4DC288016428E892458A0C0010ECF1897B7.crl (hash: 5GhIgiq9EIIBVV+HRzjCphQbG9qrbwDRLkjHKyNtttg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:11:bc:23:c9:b0:d9:1e:f6:dd:e5:80:aa:94:f8:b8:9c:df:c0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Validity Not Before: Jul 24 04:09:41 2026 GMT Not After : Jul 25 07:40:41 2026 GMT Subject: CN=B7CD6BE83ED0DC19F818DF7B06F365CD33B2EC19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:0a:b3:93:07:d6:3e:c3:09:72:b4:76:73: a8:6a:11:94:1e:72:92:e0:a6:fa:5e:57:12:67:9d: 7e:7d:7e:de:a3:ca:84:b3:2c:f4:74:94:f6:82:82: 5a:53:5b:bb:5c:81:a9:dd:2d:4c:db:3c:b8:08:f1: 3e:44:cd:a0:a2:9f:bf:d6:c0:44:a1:d4:c2:b0:17: d4:01:98:99:3d:e9:64:96:18:f9:55:cd:ef:76:fa: 0f:02:46:66:b0:51:9b:4a:23:e8:36:c5:e4:df:bc: c5:d8:18:03:7d:c9:74:90:bc:68:4f:45:db:42:42: 1c:d8:40:5a:dc:96:03:89:ab:16:af:cd:5f:87:f3: df:8f:ba:73:d9:44:51:79:0b:99:af:dd:6c:98:5f: ee:05:d2:ed:4f:2b:42:60:e5:d3:57:22:94:82:2a: 7e:41:02:08:58:42:ec:7d:6f:c8:06:b3:3e:21:34: 9d:73:14:de:e6:91:e0:a4:66:65:78:e3:b4:54:32: 9e:ea:36:d9:97:06:d7:8e:d1:28:29:e8:6c:f4:1f: 18:b4:73:e4:ce:d0:f7:6c:50:36:40:8f:f1:ad:22: 22:31:c7:5d:c6:df:5a:61:a0:3a:ff:60:99:9e:9d: 3a:9f:0a:35:ff:71:15:5c:42:6b:07:df:dc:a1:81: af:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CD:6B:E8:3E:D0:DC:19:F8:18:DF:7B:06:F3:65:CD:33:B2:EC:19 X509v3 Authority Key Identifier: keyid:CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:65:0b:e1:13:df:4d:1b:10:91:0f:c6:c3:e5:89:7f:42:89: 4f:85:e3:3d:1c:68:68:12:74:00:1d:ff:6f:15:79:cf:63:5a: 76:6c:4b:13:84:d3:f6:55:d9:30:74:0b:f4:89:f5:27:85:92: a6:56:56:af:4b:0a:46:3a:f6:cf:77:a0:1a:59:83:4f:cd:7e: f1:4d:bc:df:eb:c5:e6:00:1e:1b:2f:9f:5a:cf:47:fe:47:98: 4d:10:8f:c1:42:90:89:46:c7:94:99:24:f8:8a:36:3b:fc:dd: ca:ce:87:0e:ed:a3:b4:6b:99:be:b6:78:c5:3a:d8:85:d5:53: 43:22:a5:2c:e8:f4:ae:59:86:fe:88:c0:36:0d:58:8b:dd:1e: e6:e9:0c:ae:9f:6a:a3:c0:1a:60:8a:0d:a0:94:96:4b:f4:f3: 53:c3:93:56:a1:45:dd:40:8b:74:54:1b:6e:a8:95:30:25:ca: 98:73:80:29:b9:fb:4d:36:c8:ba:c3:a9:05:3f:cd:eb:10:b5: 78:df:56:67:3c:d5:bd:60:3e:db:5d:0a:96:2d:3a:a4:cd:83: e0:73:ed:f1:09:b7:cc:a2:12:66:a6:7e:fc:50:99:55:2f:66: c7:a6:33:26:3a:40:bb:15:31:0f:e6:4e:8d:0a:3b:c6:13:08: 57:72:cd:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhG8I8mw2R723eWAqpT4uJzfwIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAxMEVD RjE4OTdCNzAeFw0yNjA3MjQwNDA5NDFaFw0yNjA3MjUwNzQwNDFaMDMxMTAvBgNV BAMTKEI3Q0Q2QkU4M0VEMERDMTlGODE4REY3QjA2RjM2NUNEMzNCMkVDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PQqzkwfWPsMJcrR2c6hqEZQe cpLgpvpeVxJnnX59ft6jyoSzLPR0lPaCglpTW7tcgandLUzbPLgI8T5EzaCin7/W wESh1MKwF9QBmJk96WSWGPlVze92+g8CRmawUZtKI+g2xeTfvMXYGAN9yXSQvGhP RdtCQhzYQFrclgOJqxavzV+H89+PunPZRFF5C5mv3WyYX+4F0u1PK0Jg5dNXIpSC Kn5BAghYQux9b8gGsz4hNJ1zFN7mkeCkZmV447RUMp7qNtmXBteO0Sgp6Gz0Hxi0 c+TO0PdsUDZAj/GtIiIxx13G31phoDr/YJmenTqfCjX/cRVcQmsH39yhga9rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt81r6D7Q3Bn4GN97BvNlzTOy7BkwHwYDVR0j BBgwFoAUy4r03CiAFkKOiSRYoMABDs8Yl7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0Njc2Y2QtZGUzOS00NjhhLWFkMjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMy ODgwMTY0MjhFODkyNDU4QTBDMDAxMEVDRjE4OTdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjhBRjREQzI4ODAxNjQyOEU4OTI0NThBMEMwMDEwRUNGMTg5 N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAx MEVDRjE4OTdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJlC+ET300bEJEPxsPliX9CiU+F4z0caGgS dAAd/28Vec9jWnZsSxOE0/ZV2TB0C/SJ9SeFkqZWVq9LCkY69s93oBpZg0/NfvFN vN/rxeYAHhsvn1rPR/5HmE0Qj8FCkIlGx5SZJPiKNjv83crOhw7to7Rrmb62eMU6 2IXVU0MipSzo9K5Zhv6IwDYNWIvdHubpDK6faqPAGmCKDaCUlkv081PDk1ahRd1A i3RUG26olTAlyphzgCm5+002yLrDqQU/zesQtXjfVmc81b1gPttdCpYtOqTNg+Bz 7fEJt8yiEmamfvxQmVUvZsemMyY6QLsVMQ/mTo0KO8YTCFdyzdU= -----END CERTIFICATE-----Generated at Fri Jul 24 08:54:33 2026 by rpki-client