$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft File: CDE6C05A893420EB6585B4E0E27BB14D54043614.mft (raw, json) Hash identifier: iwEd/aQJkzbe7A80T3VuSjUZdKj+QPs7zy2tzbdCQKE= Subject key identifier: E2:4E:AD:B0:59:35:D1:6D:24:CE:32:5C:12:4E:27:48:AD:F8:CF:2D Authority key identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 Certificate issuer: /CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Certificate serial: 7597C0AEAD393BBAF055FA97D25D3D1E025264E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:23:30 +0000 Manifest this update: Fri 24 Jul 2026 07:18:30 +0000 Manifest next update: Sat 25 Jul 2026 10:12:30 +0000 Files and hashes: 1: CDE6C05A893420EB6585B4E0E27BB14D54043614.crl (hash: EIs+Q2e4JPRHPj6LhRlV/8vebALnEWoCkxG2h6LGTo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:97:c0:ae:ad:39:3b:ba:f0:55:fa:97:d2:5d:3d:1e:02:52:64:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Validity Not Before: Jul 24 07:18:30 2026 GMT Not After : Jul 25 10:12:30 2026 GMT Subject: CN=E24EADB05935D16D24CE325C124E2748ADF8CF2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:38:e6:af:93:73:11:91:00:32:ae:4c:c2:bc: eb:66:d3:d9:83:11:04:dd:a0:83:4e:e9:56:af:b9: 16:2d:77:09:df:42:3c:a4:c8:4c:b9:48:fe:1f:e5: 6a:a9:f8:55:b7:97:f8:66:69:0e:fe:5e:44:a1:1e: f4:17:62:57:84:49:1d:96:f5:2e:c7:8e:4b:75:12: da:25:74:b6:78:6b:66:7e:3f:28:72:b2:5c:7a:02: 8d:58:9c:62:e0:31:94:4d:29:a8:30:39:63:c9:04: fa:62:3a:2e:6d:29:e2:92:4d:1c:98:73:a1:96:dd: 0c:0e:1b:0b:7d:ee:55:e1:9f:ff:12:35:ea:cf:40: 48:d0:ee:d3:8d:7f:20:5e:7a:f2:9a:9c:5f:36:cd: 50:27:ae:fa:77:52:cc:a4:2d:d3:fe:e2:39:16:cc: db:0d:28:3e:47:06:55:2e:7f:45:a2:91:ee:ec:31: 5d:82:03:6f:56:3b:44:64:e8:f0:ea:12:0e:95:5d: bd:82:a7:a6:b4:8d:dd:06:f6:a1:1d:0d:99:15:37: 44:e3:33:b0:d0:bf:3c:a5:b6:dd:9b:99:86:a0:d0: f9:15:e2:78:24:e2:ff:9c:55:84:25:39:d5:ad:90: f9:1f:df:31:c7:b8:ef:88:5e:ad:4b:f0:b2:55:74: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4E:AD:B0:59:35:D1:6D:24:CE:32:5C:12:4E:27:48:AD:F8:CF:2D X509v3 Authority Key Identifier: keyid:CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d4:46:fb:e6:3f:5e:ac:d6:32:66:57:12:ef:96:dd:b4:4c: e5:d8:dd:87:df:5f:b5:a9:03:4c:60:84:19:0d:a1:4c:5f:16: b6:e9:4b:93:10:6b:02:eb:a0:da:bf:2d:92:66:fe:05:6f:25: 3e:de:7c:e1:5b:4b:f3:64:c7:83:07:9e:32:7b:bc:20:e3:ec: 29:a6:3a:59:8c:0a:30:d3:7d:96:12:87:77:3a:9f:78:de:13: f0:72:f1:dc:90:28:c2:a4:46:39:4c:d6:c5:5f:25:b4:03:93: 49:f5:8a:5b:65:a4:30:64:f2:ff:16:4c:2d:4e:a5:d4:fb:2e: c9:49:33:a3:f8:32:82:06:89:04:2f:e9:84:0c:99:12:ed:50: 5d:f4:47:68:0e:13:83:38:39:1b:4e:7c:35:fc:73:8d:2d:ab: ff:b0:ce:b9:2b:5e:05:46:66:dd:0d:6e:17:4f:db:c7:01:b5: a0:dc:8c:f6:1c:ce:3e:6e:e9:08:ff:c0:4a:19:78:55:c6:c2: 43:24:93:28:6c:d7:c5:42:32:4f:f9:13:10:f1:e1:26:80:0d: 2e:e3:89:68:d7:07:73:31:cb:8f:58:72:62:d1:16:87:5e:00: 6c:3f:70:4f:e3:94:22:ff:f6:87:2c:90:6a:7f:0d:e7:ea:09: 6c:ec:c3:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZfArq05O7rwVfqX0l09HgJSZOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1 NDA0MzYxNDAeFw0yNjA3MjQwNzE4MzBaFw0yNjA3MjUxMDEyMzBaMDMxMTAvBgNV BAMTKEUyNEVBREIwNTkzNUQxNkQyNENFMzI1QzEyNEUyNzQ4QURGOENGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3OOavk3MRkQAyrkzCvOtm09mD EQTdoINO6VavuRYtdwnfQjykyEy5SP4f5Wqp+FW3l/hmaQ7+XkShHvQXYleESR2W 9S7Hjkt1EtoldLZ4a2Z+Pyhyslx6Ao1YnGLgMZRNKagwOWPJBPpiOi5tKeKSTRyY c6GW3QwOGwt97lXhn/8SNerPQEjQ7tONfyBeevKanF82zVAnrvp3UsykLdP+4jkW zNsNKD5HBlUuf0Wike7sMV2CA29WO0Rk6PDqEg6VXb2Cp6a0jd0G9qEdDZkVN0Tj M7DQvzyltt2bmYag0PkV4ngk4v+cVYQlOdWtkPkf3zHHuO+IXq1L8LJVdA3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4k6tsFk10W0kzjJcEk4nSK34zy0wHwYDVR0j BBgwFoAUzebAWok0IOtlhbTg4nuxTVQENhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiMjkyOGUtOWIzOS00YTkwLTk3ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4 OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1NDA0MzYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2QzA1QTg5MzQyMEVCNjU4NUI0RTBFMjdCQjE0RDU0MDQz NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIx NEQ1NDA0MzYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbURvvmP16s1jJmVxLvlt20TOXY3YffX7Wp A0xghBkNoUxfFrbpS5MQawLroNq/LZJm/gVvJT7efOFbS/Nkx4MHnjJ7vCDj7Cmm OlmMCjDTfZYSh3c6n3jeE/By8dyQKMKkRjlM1sVfJbQDk0n1iltlpDBk8v8WTC1O pdT7LslJM6P4MoIGiQQv6YQMmRLtUF30R2gOE4M4ORtOfDX8c40tq/+wzrkrXgVG Zt0NbhdP28cBtaDcjPYczj5u6Qj/wEoZeFXGwkMkkyhs18VCMk/5ExDx4SaADS7j iWjXB3Mxy49YcmLRFodeAGw/cE/jlCL/9ocskGp/DefqCWzsw60= -----END CERTIFICATE-----Generated at Fri Jul 24 13:01:35 2026 by rpki-client