$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft File: CDE6C05A893420EB6585B4E0E27BB14D54043614.mft (raw, json) Hash identifier: BZHvnS9AZww2KmA/6qctRknxq1tTFBvGvC8itt7RrTs= Subject key identifier: 1B:EB:1C:2D:9B:70:7F:8D:1F:B8:CC:B2:E6:D7:7C:73:B8:D3:15:4A Authority key identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 Certificate issuer: /CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Certificate serial: 469887B716F2D059A8EC7D6243099748945F4B1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft Manifest number: D6 Signing time: Fri 09 Oct 2026 11:31:02 +0000 Manifest this update: Fri 09 Oct 2026 11:26:02 +0000 Manifest next update: Sat 10 Oct 2026 13:35:02 +0000 Files and hashes: 1: CDE6C05A893420EB6585B4E0E27BB14D54043614.crl (hash: ZFY5tUfVJ7Ga+YzoLkyOaAOCyRPP7ZOzLzfBl40Wf0E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:98:87:b7:16:f2:d0:59:a8:ec:7d:62:43:09:97:48:94:5f:4b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Validity Not Before: Oct 9 11:26:02 2026 GMT Not After : Oct 10 13:35:02 2026 GMT Subject: CN=1BEB1C2D9B707F8D1FB8CCB2E6D77C73B8D3154A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:96:4f:5c:e1:9f:73:33:41:1b:aa:68:52: cb:16:48:70:6b:fb:3e:c1:85:cc:76:99:86:92:1f: 23:04:44:a8:d4:e1:b0:df:12:7e:ee:71:cd:dd:9c: 0d:b8:ea:17:9c:c9:f9:6b:a4:df:6f:0f:da:9a:a6: f4:6c:8d:32:6d:5e:77:46:d8:8f:6d:f9:33:2a:77: 10:37:5b:f8:b8:20:47:72:8c:d4:cb:83:55:96:0b: 83:42:f6:02:4e:4a:fd:3c:99:80:2b:8c:ea:75:e1: 07:7a:9f:19:81:81:1c:f1:4b:77:9e:34:d2:50:17: 94:ce:2b:9b:aa:3e:75:5c:02:eb:c7:c1:7f:20:b4: 56:1e:47:e9:0d:ba:57:43:b5:b5:8b:89:b5:dd:b8: c8:b6:b5:4a:4d:e0:d3:dc:94:ce:fc:b4:76:2f:25: f9:3b:08:49:6d:04:c5:e5:22:d9:3f:63:05:ad:b4: 16:1e:0c:02:29:65:2f:d0:bd:11:8b:7b:f3:43:a1: 95:2d:9e:38:1f:94:b5:54:7d:bf:67:6b:f3:ee:0b: 2f:85:6d:fa:4f:8b:e9:87:7e:4e:b0:07:90:1f:53: e1:3f:3f:5f:52:87:da:d4:ab:3d:d7:31:f0:b3:f4: a3:84:f6:4a:6e:10:e2:5c:90:07:b8:01:ec:b4:85: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EB:1C:2D:9B:70:7F:8D:1F:B8:CC:B2:E6:D7:7C:73:B8:D3:15:4A X509v3 Authority Key Identifier: keyid:CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:6a:d7:41:0e:c9:11:ce:ed:ca:ed:f9:d5:76:22:05:d4:b7: 07:7e:bd:4a:3a:77:c1:5e:99:90:c3:30:9f:76:c2:f5:5d:ac: 1f:b4:f7:5c:e1:b8:f4:8a:12:f9:d6:54:7b:cc:37:d9:12:5a: 17:e4:8e:87:9a:d5:4a:fd:e7:66:0f:8c:6e:fa:6f:90:9e:7a: cf:3d:65:f8:bf:12:ea:f7:c9:f4:0d:64:d9:13:c2:e9:30:6b: 9f:50:7f:bf:2e:b3:fc:57:6d:55:b2:bf:8f:20:f6:1f:db:6d: a3:b0:df:6f:9f:b0:ba:37:81:19:e6:fa:c1:87:84:ac:52:17: f2:c8:ea:c8:16:c6:9e:e9:70:ce:26:c9:5f:a2:da:8f:e5:46: 8b:97:37:f9:1f:9f:86:c4:f1:96:e3:99:d0:92:69:a0:f3:20: 0a:73:bd:df:22:dd:8d:af:79:b6:86:ba:e3:d3:f0:47:d6:c1: 8a:79:21:7b:44:e1:f3:78:90:f2:90:ae:a0:29:88:90:f4:09: fd:4d:f1:e2:55:2c:e3:6e:5b:df:c9:d2:b1:39:88:17:38:f5: 95:8f:b2:89:b3:15:c7:ec:c7:d9:73:47:a8:e9:ba:85:27:5d: 79:2a:58:87:a2:cf:f5:01:9b:b2:f6:31:8c:b3:c5:cc:56:01: 90:22:a3:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpiHtxby0Fmo7H1iQwmXSJRfSx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1 NDA0MzYxNDAeFw0yNjEwMDkxMTI2MDJaFw0yNjEwMTAxMzM1MDJaMDMxMTAvBgNV BAMTKDFCRUIxQzJEOUI3MDdGOEQxRkI4Q0NCMkU2RDc3QzczQjhEMzE1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjpZPXOGfczNBG6poUssWSHBr +z7Bhcx2mYaSHyMERKjU4bDfEn7ucc3dnA246hecyflrpN9vD9qapvRsjTJtXndG 2I9t+TMqdxA3W/i4IEdyjNTLg1WWC4NC9gJOSv08mYArjOp14Qd6nxmBgRzxS3ee NNJQF5TOK5uqPnVcAuvHwX8gtFYeR+kNuldDtbWLibXduMi2tUpN4NPclM78tHYv Jfk7CEltBMXlItk/YwWttBYeDAIpZS/QvRGLe/NDoZUtnjgflLVUfb9na/PuCy+F bfpPi+mHfk6wB5AfU+E/P19Sh9rUqz3XMfCz9KOE9kpuEOJckAe4Aey0hVOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG+scLZtwf40fuMyy5td8c7jTFUowHwYDVR0j BBgwFoAUzebAWok0IOtlhbTg4nuxTVQENhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiMjkyOGUtOWIzOS00YTkwLTk3ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4 OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1NDA0MzYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2QzA1QTg5MzQyMEVCNjU4NUI0RTBFMjdCQjE0RDU0MDQz NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIx NEQ1NDA0MzYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpq10EOyRHO7crt+dV2IgXUtwd+vUo6d8Fe mZDDMJ92wvVdrB+091zhuPSKEvnWVHvMN9kSWhfkjoea1Ur952YPjG76b5Cees89 Zfi/Eur3yfQNZNkTwukwa59Qf78us/xXbVWyv48g9h/bbaOw32+fsLo3gRnm+sGH hKxSF/LI6sgWxp7pcM4myV+i2o/lRouXN/kfn4bE8ZbjmdCSaaDzIApzvd8i3Y2v ebaGuuPT8EfWwYp5IXtE4fN4kPKQrqApiJD0Cf1N8eJVLONuW9/J0rE5iBc49ZWP somzFcfsx9lzR6jpuoUnXXkqWIeiz/UBm7L2MYyzxcxWAZAioxQ= -----END CERTIFICATE-----Generated at Fri Oct 9 21:01:24 2026 by rpki-client