$ rpki-client -vvvf rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft File: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft (raw, json) Hash identifier: zL9Tzft3178rIMTIRUMtirwP22yKX4LrKaBVjxMeoQE= Subject key identifier: 66:26:B7:3B:0A:EB:EC:C3:5E:66:FC:59:B1:36:C4:29:A0:88:F3:DF Authority key identifier: CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 Certificate issuer: /CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Certificate serial: 622B1F25276E0545A99E46CF89CD903DB0F18132 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 00:15:56 +0000 Manifest this update: Thu 24 Sep 2026 00:10:56 +0000 Manifest next update: Fri 25 Sep 2026 00:46:56 +0000 Files and hashes: 1: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl (hash: zoEOf1jDueZJFHhTLMW0at6evRXu124hBzsYCvWVzww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2b:1f:25:27:6e:05:45:a9:9e:46:cf:89:cd:90:3d:b0:f1:81:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Validity Not Before: Sep 24 00:10:56 2026 GMT Not After : Sep 25 00:46:56 2026 GMT Subject: CN=6626B73B0AEBECC35E66FC59B136C429A088F3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:db:66:6a:9a:c5:09:c7:29:87:6b:96:b5: 1f:9d:2b:e5:5f:be:70:2e:de:a7:30:50:0c:ca:7a: 04:ab:11:a2:73:5f:06:ff:d9:3b:af:3a:e7:bd:bb: a5:53:b5:d9:fa:ca:67:b5:a9:c4:4f:bf:ea:58:4c: 47:8f:6b:c8:0f:6e:1b:68:3a:b0:cf:f7:7b:ab:5a: b6:48:49:5b:88:df:8e:61:59:b0:0f:a1:6d:ea:19: ee:85:a3:29:29:f2:f3:05:e4:2c:42:76:e5:cd:d1: 8d:1d:96:b4:63:57:ea:34:81:a0:97:94:cf:11:34: d9:27:3b:f8:d8:3a:65:ab:8c:60:46:e0:e8:aa:70: 09:43:6a:db:d2:9f:8f:dd:a8:59:d3:a5:80:28:7c: 40:b9:cc:c8:b3:75:d0:8b:9f:4e:70:dc:78:c9:00: 67:d3:14:78:e8:cc:0f:c6:92:02:f2:cc:3e:97:45: 0c:21:3c:e6:3c:10:d9:ea:6d:2c:59:58:25:fc:b1: a8:c2:16:c6:f7:65:51:17:01:fe:4d:e2:41:99:65: 49:7e:73:a0:59:57:67:2a:62:5f:63:57:eb:fe:6c: a7:73:d1:29:fa:2c:2b:19:09:0b:48:a6:f7:3c:c9: 85:9d:30:13:5e:33:e9:6e:96:89:fb:95:a8:5d:ea: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:26:B7:3B:0A:EB:EC:C3:5E:66:FC:59:B1:36:C4:29:A0:88:F3:DF X509v3 Authority Key Identifier: keyid:CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:24:f8:3a:bf:87:0c:1c:f6:ce:64:79:10:0f:b0:54:a1:a8: f6:82:ef:cb:3d:84:0d:a1:bf:f2:4e:81:73:06:e4:a7:8c:39: df:ce:0f:f6:90:c6:d2:a8:21:9f:cd:3b:81:99:89:93:2e:59: fa:82:e5:8e:01:79:75:8e:42:a4:f7:7f:90:bb:ad:1e:b2:cc: 77:60:8e:85:dd:d8:83:0d:b9:28:97:6a:79:f1:1c:fd:0b:f0: 53:52:21:f8:2b:2d:31:c2:1b:af:53:47:b5:e3:b4:88:87:7a: 69:79:b5:bd:9b:61:49:49:b3:f5:3c:ee:d4:c1:0f:80:1e:9a: a1:2b:88:1e:3b:73:78:de:1e:4d:60:df:bd:f8:3f:f6:f4:98: aa:d4:e9:ec:a5:60:aa:02:d3:4d:78:93:39:1d:29:98:3d:e1: 66:e3:ee:47:6a:76:12:60:f2:8a:27:e1:81:b6:09:a4:6f:f9: f7:ac:d0:a4:79:da:e8:26:1e:99:9d:6b:6d:b8:17:46:ed:70: eb:44:31:8d:7e:63:4e:91:02:ce:24:6a:48:86:c0:7d:6c:66: 9e:b0:3a:05:51:c4:3c:8b:9a:e5:17:82:cf:2f:c7:ba:66:9e: 68:f1:29:75:98:d7:4e:a3:7a:cc:45:33:21:e5:8b:95:7c:5c: 67:1b:f1:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYisfJSduBUWpnkbPic2QPbDxgTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5 QjUxRjcwMjAeFw0yNjA5MjQwMDEwNTZaFw0yNjA5MjUwMDQ2NTZaMDMxMTAvBgNV BAMTKDY2MjZCNzNCMEFFQkVDQzM1RTY2RkM1OUIxMzZDNDI5QTA4OEYzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdbttmaprFCccph2uWtR+dK+Vf vnAu3qcwUAzKegSrEaJzXwb/2TuvOue9u6VTtdn6yme1qcRPv+pYTEePa8gPbhto OrDP93urWrZISVuI345hWbAPoW3qGe6Foykp8vMF5CxCduXN0Y0dlrRjV+o0gaCX lM8RNNknO/jYOmWrjGBG4OiqcAlDatvSn4/dqFnTpYAofEC5zMizddCLn05w3HjJ AGfTFHjozA/GkgLyzD6XRQwhPOY8ENnqbSxZWCX8sajCFsb3ZVEXAf5N4kGZZUl+ c6BZV2cqYl9jV+v+bKdz0Sn6LCsZCQtIpvc8yYWdMBNeM+lulon7lahd6tW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZia3Owrr7MNeZvxZsTbEKaCI898wHwYDVR0j BBgwFoAUyrzznnUtDK2m4hTk/J1+f5tR9wIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY4ZGU5MWItNjM2Yi00ZGE0LWIxZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3 NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5QjUxRjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUJDRjM5RTc1MkQwQ0FEQTZFMjE0RTRGQzlEN0U3RjlCNTFG NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdF N0Y5QjUxRjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFok+Dq/hwwc9s5keRAPsFShqPaC78s9hA2h v/JOgXMG5KeMOd/OD/aQxtKoIZ/NO4GZiZMuWfqC5Y4BeXWOQqT3f5C7rR6yzHdg joXd2IMNuSiXannxHP0L8FNSIfgrLTHCG69TR7XjtIiHeml5tb2bYUlJs/U87tTB D4AemqEriB47c3jeHk1g3734P/b0mKrU6eylYKoC0014kzkdKZg94Wbj7kdqdhJg 8oon4YG2CaRv+fes0KR52ugmHpmda224F0btcOtEMY1+Y06RAs4kakiGwH1sZp6w OgVRxDyLmuUXgs8vx7pmnmjxKXWY106jesxFMyHli5V8XGcb8YA= -----END CERTIFICATE-----Generated at Thu Sep 24 07:00:32 2026 by rpki-client