$ rpki-client -vvf rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft File: CB8AF4DC288016428E892458A0C0010ECF1897B7.mft (raw, json) Hash identifier: 9WiEIancSc0OPO26IYw5FYlla2u8LUP8P35BrvMAhjc= Subject key identifier: 96:7E:52:E0:9E:2D:A5:4E:77:1E:2F:E6:9A:7C:E4:3A:10:09:A4:3B Authority key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Certificate issuer: /CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Certificate serial: 723F0E283F086E3038A86883D9D455ED874A9E9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:33:16 +0000 Manifest this update: Fri 19 Jun 2026 18:28:16 +0000 Manifest next update: Sat 20 Jun 2026 20:16:16 +0000 Files and hashes: 1: CB8AF4DC288016428E892458A0C0010ECF1897B7.crl (hash: 26LzEcCvnomZC3S2V35Jymj/5iQwScKg4hq1NDc6agM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3f:0e:28:3f:08:6e:30:38:a8:68:83:d9:d4:55:ed:87:4a:9e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Validity Not Before: Jun 19 18:28:16 2026 GMT Not After : Jun 20 20:16:16 2026 GMT Subject: CN=967E52E09E2DA54E771E2FE69A7CE43A1009A43B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:86:6d:a0:f1:97:95:e6:50:a2:e4:5a:2f:c1: 61:39:04:24:98:3e:80:aa:ef:c2:0b:3d:c0:23:13: 05:b4:77:29:f3:b8:92:31:c8:f9:20:70:5f:4f:9f: 13:70:3b:c7:ab:cb:3b:3f:cc:b1:8c:82:60:62:3b: 22:99:cf:aa:2d:a2:bd:9c:d6:68:21:1e:a5:bf:6a: b7:60:0c:7b:d8:ce:b9:9f:68:bd:1f:f2:51:7f:7e: 3a:34:8d:97:7d:25:a4:04:4a:a7:57:c9:57:44:bf: bd:5e:00:00:b4:cf:2d:93:92:df:cf:cb:52:d3:14: 44:b1:5f:45:9a:ed:69:d6:2e:ab:c1:13:88:f9:0e: 1e:5c:eb:d9:63:9c:4e:95:ae:22:96:f3:bd:80:88: 63:d8:ca:3a:64:3d:fc:d2:a0:9f:a9:2b:e0:6b:33: bb:b3:ed:8b:f5:8e:04:b5:c2:3b:ab:85:16:99:cc: d6:66:ce:de:87:e5:e3:75:81:36:f6:53:a4:87:75: a4:2a:b7:88:b8:14:af:2f:16:2d:a4:d2:36:b2:8d: 4a:72:d0:a3:d6:e9:f7:20:5f:b4:46:66:be:61:bf: 5c:b2:be:9d:7f:e5:66:c1:7b:2c:02:68:34:a5:06: 59:b1:0b:cc:a2:d7:83:40:ec:86:c9:42:23:90:64: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7E:52:E0:9E:2D:A5:4E:77:1E:2F:E6:9A:7C:E4:3A:10:09:A4:3B X509v3 Authority Key Identifier: keyid:CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:e6:f6:1e:dc:aa:c2:8e:2c:5d:85:a8:a7:63:c3:e7:90: 7e:a5:66:11:e5:cf:5f:06:ff:f2:b3:c3:c9:17:2f:d7:ba:42: 14:96:51:f2:5b:13:64:6b:fd:73:98:9f:44:62:26:d6:8e:87: 11:0d:9a:58:02:a1:2a:77:8a:dd:12:e2:68:68:12:ae:e6:ba: 21:db:3e:22:82:f9:4e:82:d6:e9:44:57:c7:93:b3:b2:d0:86: 03:9f:04:92:b0:b6:2b:5a:22:60:5c:f3:ec:fe:c5:e9:50:f5: a8:c0:eb:a4:7d:4f:7f:92:20:f6:a3:66:df:54:c3:cb:c0:1d: 37:f2:87:20:e2:e7:2e:1b:df:58:ff:7f:8b:be:86:38:b2:9a: 1d:3c:84:ea:97:08:21:0d:29:c2:29:0d:23:73:93:9b:0e:e8: a4:fb:da:3f:1a:41:7c:31:a9:9d:4e:19:a3:ff:5f:18:3f:39: ca:32:2f:e9:90:f9:93:24:1e:82:62:49:75:84:7a:a0:06:d4: cf:98:ea:51:e7:e4:0d:ca:df:b9:b3:20:8b:d9:fb:2b:80:bf: 98:64:a7:95:b8:63:b2:b0:00:3f:7a:97:0b:67:93:d4:e6:fe: be:de:56:62:7b:b6:b9:cf:ab:04:ff:e0:84:82:66:0b:5d:67: 65:af:97:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcj8OKD8IbjA4qGiD2dRV7YdKnpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAxMEVD RjE4OTdCNzAeFw0yNjA2MTkxODI4MTZaFw0yNjA2MjAyMDE2MTZaMDMxMTAvBgNV BAMTKDk2N0U1MkUwOUUyREE1NEU3NzFFMkZFNjlBN0NFNDNBMTAwOUE0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3hm2g8ZeV5lCi5FovwWE5BCSY PoCq78ILPcAjEwW0dynzuJIxyPkgcF9PnxNwO8eryzs/zLGMgmBiOyKZz6otor2c 1mghHqW/ardgDHvYzrmfaL0f8lF/fjo0jZd9JaQESqdXyVdEv71eAAC0zy2Tkt/P y1LTFESxX0Wa7WnWLqvBE4j5Dh5c69ljnE6VriKW872AiGPYyjpkPfzSoJ+pK+Br M7uz7Yv1jgS1wjurhRaZzNZmzt6H5eN1gTb2U6SHdaQqt4i4FK8vFi2k0jayjUpy 0KPW6fcgX7RGZr5hv1yyvp1/5WbBeywCaDSlBlmxC8yi14NA7IbJQiOQZICLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUln5S4J4tpU53Hi/mmnzkOhAJpDswHwYDVR0j BBgwFoAUy4r03CiAFkKOiSRYoMABDs8Yl7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0Njc2Y2QtZGUzOS00NjhhLWFkMjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMy ODgwMTY0MjhFODkyNDU4QTBDMDAxMEVDRjE4OTdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjhBRjREQzI4ODAxNjQyOEU4OTI0NThBMEMwMDEwRUNGMTg5 N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAx MEVDRjE4OTdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzu5vYe3KrCjixdhainY8PnkH6lZhHlz18G //Kzw8kXL9e6QhSWUfJbE2Rr/XOYn0RiJtaOhxENmlgCoSp3it0S4mhoEq7muiHb PiKC+U6C1ulEV8eTs7LQhgOfBJKwtitaImBc8+z+xelQ9ajA66R9T3+SIPajZt9U w8vAHTfyhyDi5y4b31j/f4u+hjiymh08hOqXCCENKcIpDSNzk5sO6KT72j8aQXwx qZ1OGaP/Xxg/OcoyL+mQ+ZMkHoJiSXWEeqAG1M+Y6lHn5A3K37mzIIvZ+yuAv5hk p5W4Y7KwAD96lwtnk9Tm/r7eVmJ7trnPqwT/4ISCZgtdZ2Wvl3g= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:14 2026 by rpki-client