$ rpki-client -vvf rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft File: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft (raw, json) Hash identifier: htRpuX4bgICk2pVwQdo1a4w4rO2Uv4U4ZmU5zt6hR30= Subject key identifier: E8:BF:C0:B9:91:2A:3C:89:CD:89:AA:7F:AF:FB:94:84:A7:B3:FC:16 Authority key identifier: CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 Certificate issuer: /CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Certificate serial: 2CFB56666EE13E860C03D20DF066C133F478202B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:47:40 +0000 Manifest this update: Thu 23 Jul 2026 22:42:40 +0000 Manifest next update: Fri 24 Jul 2026 23:04:40 +0000 Files and hashes: 1: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl (hash: zucVI2kFxibe0SDSjtr473Bz50qK4L6l76V6hT5e4/A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fb:56:66:6e:e1:3e:86:0c:03:d2:0d:f0:66:c1:33:f4:78:20:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Validity Not Before: Jul 23 22:42:40 2026 GMT Not After : Jul 24 23:04:40 2026 GMT Subject: CN=E8BFC0B9912A3C89CD89AA7FAFFB9484A7B3FC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:95:a3:c3:eb:71:b1:2d:38:79:e2:e2:0d: c9:d7:a8:91:a9:8d:53:d0:7b:2d:af:f1:9d:4d:02: 2e:1e:72:11:19:73:88:80:ea:7d:2a:28:c4:87:0d: db:a2:99:19:6d:5d:c6:53:16:c5:ee:71:84:9e:42: 03:c2:07:cd:ef:05:2b:21:1a:28:62:97:59:91:02: 84:f5:05:a4:21:9b:54:ce:c4:8e:92:86:84:d4:cc: e4:b1:c9:5f:ef:ea:98:9f:b7:43:35:8c:6c:12:77: 6b:f6:d2:49:4d:15:4f:c2:5a:df:f2:73:0c:9b:7d: 0a:68:15:95:59:54:b8:21:c7:f4:d6:44:b5:9b:95: 83:c0:5b:c5:17:76:9b:15:72:29:7a:33:2f:d3:4f: 01:90:82:1c:49:08:8b:75:e9:f9:ff:cf:d4:40:43: 36:8b:87:29:00:ac:78:c5:36:e9:f7:bb:97:fb:dc: 0c:d8:40:a9:4f:f3:ec:2e:b8:9b:86:7c:5b:00:fc: c8:3f:1f:d9:f8:77:5c:8b:56:09:f8:5c:89:8a:8c: 3f:c8:b1:92:17:97:2c:de:05:18:44:17:fd:e8:53: ce:a3:c0:c0:b7:f9:66:43:cc:77:79:11:18:b7:85: 42:da:6a:a5:c9:37:16:2b:0c:83:d5:78:98:19:ef: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BF:C0:B9:91:2A:3C:89:CD:89:AA:7F:AF:FB:94:84:A7:B3:FC:16 X509v3 Authority Key Identifier: keyid:CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b9:f4:24:11:97:9c:c7:3f:3a:34:4c:97:43:18:14:bb:1e: b7:57:54:1d:78:fd:15:e1:0a:1d:9b:f6:b3:db:a5:85:ab:06: 92:63:33:8e:63:66:1f:ea:cc:d0:f7:2a:7c:f8:cc:b5:fd:06: 74:61:da:89:fe:ef:d7:09:98:45:58:6a:c4:e2:5b:b0:db:01: 0d:af:9d:81:69:98:9f:49:77:e1:fa:ae:8e:c6:d0:d3:31:43: 10:de:7a:9f:bc:99:a5:43:bf:fb:80:a0:61:0c:9e:f4:65:2c: ba:f3:98:ad:82:49:7d:6e:9f:32:a7:90:b4:f1:05:54:93:ea: 58:d2:11:70:33:06:4b:fd:c0:18:eb:3f:70:29:ce:fb:4d:c2: 50:15:5e:a5:4b:28:39:19:88:72:97:2e:16:1b:76:5d:ad:83: 48:6f:0c:cf:56:e4:40:bf:07:aa:a5:c9:ee:95:79:d4:f2:4a: 11:68:7a:8e:18:06:8f:58:25:9f:e2:af:65:c0:6a:63:37:5a: 54:f9:b3:90:fc:32:6c:eb:c2:da:3c:3f:99:86:de:f1:2c:7a: 8c:0b:8a:9d:51:82:1d:44:d3:14:3d:62:85:1f:e4:31:ed:88: 93:59:78:6c:4f:4d:37:bd:0d:89:0f:5c:e4:7d:7e:1b:76:0c: 1c:64:4b:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPtWZm7hPoYMA9IN8GbBM/R4ICswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5 QjUxRjcwMjAeFw0yNjA3MjMyMjQyNDBaFw0yNjA3MjQyMzA0NDBaMDMxMTAvBgNV BAMTKEU4QkZDMEI5OTEyQTNDODlDRDg5QUE3RkFGRkI5NDg0QTdCM0ZDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWZWjw+txsS04eeLiDcnXqJGp jVPQey2v8Z1NAi4echEZc4iA6n0qKMSHDduimRltXcZTFsXucYSeQgPCB83vBSsh Gihil1mRAoT1BaQhm1TOxI6ShoTUzOSxyV/v6pift0M1jGwSd2v20klNFU/CWt/y cwybfQpoFZVZVLghx/TWRLWblYPAW8UXdpsVcil6My/TTwGQghxJCIt16fn/z9RA QzaLhykArHjFNun3u5f73AzYQKlP8+wuuJuGfFsA/Mg/H9n4d1yLVgn4XImKjD/I sZIXlyzeBRhEF/3oU86jwMC3+WZDzHd5ERi3hULaaqXJNxYrDIPVeJgZ709fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6L/AuZEqPInNiap/r/uUhKez/BYwHwYDVR0j BBgwFoAUyrzznnUtDK2m4hTk/J1+f5tR9wIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY4ZGU5MWItNjM2Yi00ZGE0LWIxZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3 NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5QjUxRjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUJDRjM5RTc1MkQwQ0FEQTZFMjE0RTRGQzlEN0U3RjlCNTFG NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdF N0Y5QjUxRjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK659CQRl5zHPzo0TJdDGBS7HrdXVB14/RXh Ch2b9rPbpYWrBpJjM45jZh/qzND3Knz4zLX9BnRh2on+79cJmEVYasTiW7DbAQ2v nYFpmJ9Jd+H6ro7G0NMxQxDeep+8maVDv/uAoGEMnvRlLLrzmK2CSX1unzKnkLTx BVST6ljSEXAzBkv9wBjrP3ApzvtNwlAVXqVLKDkZiHKXLhYbdl2tg0hvDM9W5EC/ B6qlye6VedTyShFoeo4YBo9YJZ/ir2XAamM3WlT5s5D8Mmzrwto8P5mG3vEseowL ip1Rgh1E0xQ9YoUf5DHtiJNZeGxPTTe9DYkPXOR9fht2DBxkS0A= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:12 2026 by rpki-client