$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft File: CDE6C05A893420EB6585B4E0E27BB14D54043614.mft (raw, json) Hash identifier: C0ke1HgHfKQd/VRjNjCba5dR23rkn4v2C4w/KoC/R8c= Subject key identifier: C6:B8:74:E3:FD:E1:D4:C3:19:E5:EE:4B:FC:91:D6:6D:18:01:12:31 Authority key identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 Certificate issuer: /CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Certificate serial: 09BA37202BB8A681B23B521557BA4AB8C1FBF8BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft Manifest number: 0F Signing time: Wed 13 May 2026 06:19:14 +0000 Manifest this update: Wed 13 May 2026 06:14:14 +0000 Manifest next update: Thu 14 May 2026 07:16:14 +0000 Files and hashes: 1: CDE6C05A893420EB6585B4E0E27BB14D54043614.crl (hash: k9DvjY3yQjeOu7O/LadN+x7IzsRdHlAJCpVDmfKa71M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ba:37:20:2b:b8:a6:81:b2:3b:52:15:57:ba:4a:b8:c1:fb:f8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Validity Not Before: May 13 06:14:14 2026 GMT Not After : May 14 07:16:14 2026 GMT Subject: CN=C6B874E3FDE1D4C319E5EE4BFC91D66D18011231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:71:08:32:2f:0b:8f:5c:50:da:e9:53:08: 03:fd:ea:7a:dd:7e:a8:54:b7:55:ec:42:33:d2:ac: c2:97:b4:c2:f1:12:bb:27:7f:92:d5:7f:21:40:33: 57:51:1c:5a:df:ef:e5:9c:0c:59:e6:82:61:c7:ca: 45:90:b7:9a:f1:06:26:64:d7:5c:82:01:7d:c3:f4: c2:aa:c3:e7:fc:03:d8:fa:77:9c:14:da:56:dc:dc: fa:2d:7a:68:5d:38:4a:76:27:51:34:59:08:a1:74: a4:e6:68:d5:f2:c3:d7:d6:3e:e3:8f:3e:5e:58:ac: 90:a5:58:b6:4d:1d:42:f4:ec:13:30:0f:85:4d:26: 7c:fd:86:bc:58:88:90:77:f6:54:f8:32:81:c5:ff: e8:5a:76:fd:fb:37:77:ac:19:f3:99:9c:1a:65:9a: e0:64:67:16:76:fa:55:1b:43:7c:92:49:0d:ce:07: b1:12:5e:0f:10:bf:df:48:9e:1e:a7:4c:10:b0:a7: fe:47:97:4d:28:2f:96:8a:92:1d:7f:5b:51:75:8e: b7:c5:d9:bb:ea:76:14:48:e3:26:ad:43:77:24:0b: 02:54:c1:46:30:43:fd:ad:b8:b9:78:8f:25:49:cf: 78:d8:0e:87:6a:d3:f0:cf:68:a7:c7:18:56:55:98: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B8:74:E3:FD:E1:D4:C3:19:E5:EE:4B:FC:91:D6:6D:18:01:12:31 X509v3 Authority Key Identifier: keyid:CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2c:e5:69:df:92:9f:6d:12:b5:f4:07:15:63:68:34:b6:a9: ef:07:02:29:7f:e4:7f:2b:ad:bd:49:97:96:76:7a:ba:70:e7: 5e:ea:39:12:ea:c0:fd:17:29:fc:47:31:3d:86:0c:6d:5c:30: 09:c8:39:57:cf:e1:17:10:6c:64:ef:37:28:b0:56:a3:36:3c: 0d:6a:0d:83:d5:2a:82:b2:30:c1:cd:0d:c9:57:06:ca:18:71: f5:51:0c:31:60:16:65:7a:bc:60:f6:91:c5:ee:d6:a9:2e:78: 0b:67:fe:0e:5e:07:36:dd:10:05:72:4e:8a:07:16:bb:16:9d: c3:6a:cf:3a:b0:89:00:cc:de:50:61:c8:e0:9c:9e:95:04:08: 0e:1e:89:20:84:a1:10:12:2d:17:c3:5c:c3:dd:50:16:2d:ff: d5:f3:b0:5f:44:75:f1:da:d5:bc:33:1b:6f:f3:11:3f:1e:ea: 0e:19:91:47:47:bd:63:7c:fd:3b:ee:35:b9:27:39:bd:60:cc: 5f:c1:b6:ed:a0:d9:07:48:ab:1c:56:59:b2:08:e2:9e:d8:a6: 8f:3a:9b:88:2e:b7:62:66:c8:5d:fd:48:18:8a:88:a5:18:40: 24:18:25:ea:05:76:ba:b0:09:a3:65:69:71:6d:c1:13:6e:41: 19:46:81:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbo3ICu4poGyO1IVV7pKuMH7+L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1 NDA0MzYxNDAeFw0yNjA1MTMwNjE0MTRaFw0yNjA1MTQwNzE2MTRaMDMxMTAvBgNV BAMTKEM2Qjg3NEUzRkRFMUQ0QzMxOUU1RUU0QkZDOTFENjZEMTgwMTEyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOnEIMi8Lj1xQ2ulTCAP96nrd fqhUt1XsQjPSrMKXtMLxErsnf5LVfyFAM1dRHFrf7+WcDFnmgmHHykWQt5rxBiZk 11yCAX3D9MKqw+f8A9j6d5wU2lbc3PotemhdOEp2J1E0WQihdKTmaNXyw9fWPuOP Pl5YrJClWLZNHUL07BMwD4VNJnz9hrxYiJB39lT4MoHF/+hadv37N3esGfOZnBpl muBkZxZ2+lUbQ3ySSQ3OB7ESXg8Qv99Inh6nTBCwp/5Hl00oL5aKkh1/W1F1jrfF 2bvqdhRI4yatQ3ckCwJUwUYwQ/2tuLl4jyVJz3jYDodq0/DPaKfHGFZVmJebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxrh04/3h1MMZ5e5L/JHWbRgBEjEwHwYDVR0j BBgwFoAUzebAWok0IOtlhbTg4nuxTVQENhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiMjkyOGUtOWIzOS00YTkwLTk3ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4 OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1NDA0MzYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2QzA1QTg5MzQyMEVCNjU4NUI0RTBFMjdCQjE0RDU0MDQz NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIx NEQ1NDA0MzYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYs5Wnfkp9tErX0BxVjaDS2qe8HAil/5H8r rb1Jl5Z2erpw517qORLqwP0XKfxHMT2GDG1cMAnIOVfP4RcQbGTvNyiwVqM2PA1q DYPVKoKyMMHNDclXBsoYcfVRDDFgFmV6vGD2kcXu1qkueAtn/g5eBzbdEAVyTooH FrsWncNqzzqwiQDM3lBhyOCcnpUECA4eiSCEoRASLRfDXMPdUBYt/9XzsF9EdfHa 1bwzG2/zET8e6g4ZkUdHvWN8/TvuNbknOb1gzF/Btu2g2QdIqxxWWbII4p7Ypo86 m4gut2JmyF39SBiKiKUYQCQYJeoFdrqwCaNlaXFtwRNuQRlGgZA= -----END CERTIFICATE-----Generated at Wed May 13 12:17:49 2026 by rpki-client