$ rpki-client -vvf rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft File: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft (raw, json) Hash identifier: SWzYKfU1JTyxEx82K11r5/bOjDLmkiEmbr9oyP+A+ZA= Subject key identifier: 63:F7:51:13:21:BA:98:41:06:9B:0B:69:C4:A5:42:12:52:AD:D3:51 Authority key identifier: CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 Certificate issuer: /CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Certificate serial: 52C5BBD3D7C4AF910F413CD22D27B630686B722C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:29:06 +0000 Manifest this update: Tue 12 May 2026 21:24:06 +0000 Manifest next update: Thu 14 May 2026 00:02:06 +0000 Files and hashes: 1: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl (hash: 2plNE7HLyns26+/b4s0u072TNUcxjt4MeseAe24t0Xg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c5:bb:d3:d7:c4:af:91:0f:41:3c:d2:2d:27:b6:30:68:6b:72:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Validity Not Before: May 12 21:24:06 2026 GMT Not After : May 14 00:02:06 2026 GMT Subject: CN=63F7511321BA9841069B0B69C4A5421252ADD351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e8:55:1a:2d:3a:78:e5:c8:46:dd:32:88:71: 67:b8:19:47:60:08:39:46:a7:ff:0b:14:7a:af:c7: fb:db:9d:eb:dc:96:52:9f:d2:20:85:59:2f:9c:7c: f0:70:94:33:f9:e0:8f:4e:d4:1b:be:21:44:b2:43: 2e:6c:7f:d1:9c:d0:a0:ac:04:19:32:86:e0:88:0d: e4:c0:c7:6e:cd:c9:d5:27:78:76:ff:ba:ba:6d:60: e4:39:75:50:e4:31:49:2a:21:32:bd:4f:08:fb:ad: 22:a4:aa:e0:87:fc:e9:b2:82:b3:76:c0:b8:6e:c7: 23:0a:5d:f8:90:3b:57:ad:79:b4:83:40:4f:dd:31: 2a:bd:61:8d:ce:ca:d0:ec:24:d7:a5:48:b4:b2:64: 7b:c0:25:ab:f9:be:ac:52:93:a4:a3:ff:69:cd:ae: 6a:22:61:03:4a:ac:fe:7d:be:e4:81:65:5b:e4:c1: fb:4d:80:01:b6:cd:08:2e:cb:5a:d5:8d:e2:c1:0a: 4c:90:f8:d7:35:f2:81:bd:a9:00:dd:17:f2:f6:88: ce:46:ff:9c:dd:e3:19:14:86:a8:d6:19:1f:ce:05: ab:4a:35:4e:07:00:a6:94:b9:36:b7:79:e6:71:ca: dc:4e:dc:18:76:80:96:74:6f:c2:d0:51:d8:b7:a0: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F7:51:13:21:BA:98:41:06:9B:0B:69:C4:A5:42:12:52:AD:D3:51 X509v3 Authority Key Identifier: keyid:CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:11:ca:84:ac:6b:9e:bf:f6:e0:43:c5:18:f4:5c:0a:d1:36: 60:3d:66:2e:b6:e9:35:5d:9d:9c:0e:a2:9b:4a:52:bc:5c:59: 98:4d:0f:9c:43:67:8a:15:af:74:f2:db:74:bb:fb:a3:53:ce: 26:70:77:5d:ca:8a:71:4a:fc:30:d1:95:da:39:c1:06:9f:8a: 66:fa:b7:1c:d1:d7:65:95:5d:c6:7d:30:aa:22:38:c6:f4:6e: 55:75:94:9f:47:f5:0e:c5:a8:70:cb:24:30:d8:a4:14:63:39: 39:17:6d:ad:14:6d:1e:22:f8:86:df:73:e2:6d:96:2e:31:19: 56:d6:c5:ab:0d:c8:de:f1:45:7e:e9:82:dc:e6:0a:8f:2d:7f: 6a:99:ad:a9:b3:d2:ac:cc:9e:a6:23:92:d8:82:e0:3e:d1:e0: 27:e2:3a:40:ed:60:f2:36:23:4e:8b:c5:33:cd:9d:9d:7e:40: 68:51:57:8f:d9:fd:23:33:a5:f9:c7:3d:a4:c1:8f:53:a7:eb: c7:1b:83:32:84:a6:8c:2d:d3:a0:b7:39:bf:54:35:aa:ef:d3: 12:6e:cd:60:b6:60:3d:97:18:fb:54:cf:f4:66:ea:ed:26:84: 30:3f:5f:89:f7:94:55:5a:62:57:db:b3:d0:f0:27:1a:b6:11: b6:df:aa:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsW709fEr5EPQTzSLSe2MGhrciwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5 QjUxRjcwMjAeFw0yNjA1MTIyMTI0MDZaFw0yNjA1MTQwMDAyMDZaMDMxMTAvBgNV BAMTKDYzRjc1MTEzMjFCQTk4NDEwNjlCMEI2OUM0QTU0MjEyNTJBREQzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz6FUaLTp45chG3TKIcWe4GUdg CDlGp/8LFHqvx/vbnevcllKf0iCFWS+cfPBwlDP54I9O1Bu+IUSyQy5sf9Gc0KCs BBkyhuCIDeTAx27NydUneHb/urptYOQ5dVDkMUkqITK9Twj7rSKkquCH/OmygrN2 wLhuxyMKXfiQO1etebSDQE/dMSq9YY3OytDsJNelSLSyZHvAJav5vqxSk6Sj/2nN rmoiYQNKrP59vuSBZVvkwftNgAG2zQguy1rVjeLBCkyQ+Nc18oG9qQDdF/L2iM5G /5zd4xkUhqjWGR/OBatKNU4HAKaUuTa3eeZxytxO3Bh2gJZ0b8LQUdi3oPMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/dREyG6mEEGmwtpxKVCElKt01EwHwYDVR0j BBgwFoAUyrzznnUtDK2m4hTk/J1+f5tR9wIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY4ZGU5MWItNjM2Yi00ZGE0LWIxZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3 NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5QjUxRjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUJDRjM5RTc1MkQwQ0FEQTZFMjE0RTRGQzlEN0U3RjlCNTFG NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdF N0Y5QjUxRjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoRyoSsa56/9uBDxRj0XArRNmA9Zi626TVd nZwOoptKUrxcWZhND5xDZ4oVr3Ty23S7+6NTziZwd13KinFK/DDRldo5wQafimb6 txzR12WVXcZ9MKoiOMb0blV1lJ9H9Q7FqHDLJDDYpBRjOTkXba0UbR4i+Ibfc+Jt li4xGVbWxasNyN7xRX7pgtzmCo8tf2qZramz0qzMnqYjktiC4D7R4CfiOkDtYPI2 I06LxTPNnZ1+QGhRV4/Z/SMzpfnHPaTBj1On68cbgzKEpowt06C3Ob9UNarv0xJu zWC2YD2XGPtUz/Rm6u0mhDA/X4n3lFVaYlfbs9DwJxq2EbbfqrE= -----END CERTIFICATE-----Generated at Wed May 13 00:34:11 2026 by rpki-client