$ rpki-client -vvf rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft File: CB8AF4DC288016428E892458A0C0010ECF1897B7.mft (raw, json) Hash identifier: pDqMSXWlbJbTQ+WgmX/AUlu7x4HIS5AvlFEkD+7tfgc= Subject key identifier: 03:EF:B9:D4:64:EA:F1:E4:BE:78:2F:66:FC:6D:F6:61:2A:99:B5:FC Authority key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Certificate issuer: /CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Certificate serial: 0267CD3D5942126919BBB50C34AE1DB230ADA64E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft Manifest number: 0E Signing time: Tue 12 May 2026 15:09:47 +0000 Manifest this update: Tue 12 May 2026 15:04:47 +0000 Manifest next update: Wed 13 May 2026 15:25:47 +0000 Files and hashes: 1: CB8AF4DC288016428E892458A0C0010ECF1897B7.crl (hash: 80kRug8wCbaBJmQ2uQeEYbbCnb/CLFC0ZAkIkl16Y9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:67:cd:3d:59:42:12:69:19:bb:b5:0c:34:ae:1d:b2:30:ad:a6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Validity Not Before: May 12 15:04:47 2026 GMT Not After : May 13 15:25:47 2026 GMT Subject: CN=03EFB9D464EAF1E4BE782F66FC6DF6612A99B5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:6d:91:7e:9d:81:2c:60:c3:dc:6e:e3:9b: 73:94:08:87:8c:95:3c:69:b8:96:d9:a4:61:5a:5f: 68:53:fd:3c:ae:23:ad:62:b4:a1:ea:25:27:89:99: 8e:0a:6e:11:20:6b:50:54:f4:ad:45:0a:c9:19:8f: 79:c6:be:a2:8b:e6:f5:74:2a:b7:14:31:d8:50:b5: 3d:63:69:bd:89:0b:60:75:3a:ac:9d:04:28:f5:b6: de:8d:27:07:72:a3:64:e6:36:29:23:f6:40:d7:41: e5:c6:a4:f6:02:05:61:d8:14:d0:41:61:4a:b9:72: 2a:79:8e:5f:2e:27:4c:95:e1:ad:a1:af:60:4c:0a: 82:31:fe:b9:1d:91:a0:37:4d:6c:5a:7c:78:15:ec: 3c:0e:e5:02:53:f9:97:69:06:3e:0e:d1:41:b0:55: c5:65:81:d2:13:2e:5e:25:ba:a6:92:07:1a:b0:1f: bc:93:f1:9b:92:9d:1f:f7:a5:fa:eb:ef:8b:de:49: 8e:2b:96:cc:c5:f9:c5:4a:c7:97:d5:70:3d:e2:ae: 4e:66:10:96:40:05:cf:9a:72:e4:58:2b:4e:36:b2: 49:16:af:62:66:4b:92:fa:ba:37:fa:c9:92:5e:15: f0:ec:e5:16:82:6e:d1:c7:47:24:5b:65:92:cf:70: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EF:B9:D4:64:EA:F1:E4:BE:78:2F:66:FC:6D:F6:61:2A:99:B5:FC X509v3 Authority Key Identifier: keyid:CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a3:6b:1c:7f:b7:18:19:a9:b7:a7:9c:5c:61:ae:e3:dc:40: fb:11:df:f2:bd:4d:39:4b:cf:49:7b:d1:76:a8:78:49:a9:e1: 12:bb:25:ba:13:34:cd:ee:56:9d:36:40:a9:a1:29:5e:3d:2f: 69:30:f8:15:a3:ea:0d:03:71:78:fd:58:57:a1:5c:0e:33:e9: a4:e1:10:17:04:7b:f4:a4:09:b9:29:73:6d:be:67:bc:15:27: fc:c5:2c:1b:d9:8c:27:39:87:41:75:5a:c9:1c:7d:f4:00:1c: 2d:62:fd:22:71:d3:a1:2a:2d:3f:34:8a:38:db:d8:0b:5d:d9: 5b:9a:a9:4c:f5:74:bd:68:2e:cf:46:0c:50:ba:dc:90:22:52: d2:14:c9:60:4d:71:bc:bf:bf:f2:ff:5b:60:33:1d:40:4f:5b: 47:2d:17:50:3e:81:62:21:4d:fc:ef:0c:f3:62:45:ef:08:1d: 2f:49:0e:bf:e1:86:fc:ff:64:70:b4:57:34:1c:89:81:09:af: 78:5a:4e:7f:62:42:af:b8:97:b4:e3:7a:8b:64:4c:59:17:36: 83:a5:d3:3b:a0:27:9f:f1:68:5e:d0:a7:2d:14:6c:c7:f3:eb: 05:1d:bb:0a:8a:5f:23:a6:a1:61:84:b5:6e:0f:00:e4:c5:39: 84:68:18:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmfNPVlCEmkZu7UMNK4dsjCtpk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAxMEVD RjE4OTdCNzAeFw0yNjA1MTIxNTA0NDdaFw0yNjA1MTMxNTI1NDdaMDMxMTAvBgNV BAMTKDAzRUZCOUQ0NjRFQUYxRTRCRTc4MkY2NkZDNkRGNjYxMkE5OUI1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOG2Rfp2BLGDD3G7jm3OUCIeM lTxpuJbZpGFaX2hT/TyuI61itKHqJSeJmY4KbhEga1BU9K1FCskZj3nGvqKL5vV0 KrcUMdhQtT1jab2JC2B1OqydBCj1tt6NJwdyo2TmNikj9kDXQeXGpPYCBWHYFNBB YUq5cip5jl8uJ0yV4a2hr2BMCoIx/rkdkaA3TWxafHgV7DwO5QJT+ZdpBj4O0UGw VcVlgdITLl4luqaSBxqwH7yT8ZuSnR/3pfrr74veSY4rlszF+cVKx5fVcD3irk5m EJZABc+acuRYK042skkWr2JmS5L6ujf6yZJeFfDs5RaCbtHHRyRbZZLPcAwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA++51GTq8eS+eC9m/G32YSqZtfwwHwYDVR0j BBgwFoAUy4r03CiAFkKOiSRYoMABDs8Yl7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0Njc2Y2QtZGUzOS00NjhhLWFkMjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMy ODgwMTY0MjhFODkyNDU4QTBDMDAxMEVDRjE4OTdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjhBRjREQzI4ODAxNjQyOEU4OTI0NThBMEMwMDEwRUNGMTg5 N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAx MEVDRjE4OTdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMejaxx/txgZqbennFxhruPcQPsR3/K9TTlL z0l70XaoeEmp4RK7JboTNM3uVp02QKmhKV49L2kw+BWj6g0DcXj9WFehXA4z6aTh EBcEe/SkCbkpc22+Z7wVJ/zFLBvZjCc5h0F1WskcffQAHC1i/SJx06EqLT80ijjb 2Atd2VuaqUz1dL1oLs9GDFC63JAiUtIUyWBNcby/v/L/W2AzHUBPW0ctF1A+gWIh TfzvDPNiRe8IHS9JDr/hhvz/ZHC0VzQciYEJr3haTn9iQq+4l7TjeotkTFkXNoOl 0zugJ5/xaF7Qpy0UbMfz6wUduwqKXyOmoWGEtW4PAOTFOYRoGIg= -----END CERTIFICATE-----Generated at Wed May 13 01:36:57 2026 by rpki-client