$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft File: CB8AF4DC288016428E892458A0C0010ECF1897B7.mft (raw, json) Hash identifier: 6+BSzc9g7Ep3ieL0RDVlmR1XyriW8JoWYmWLsGp9CTs= Subject key identifier: 69:67:72:8E:C6:1D:F2:0A:A2:B5:0C:DE:E3:B0:F8:36:47:06:CE:A2 Authority key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Certificate issuer: /CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Certificate serial: 0ECF3C70B25FDA5FD3E93931B2E6F9B31950731B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:29:07 +0000 Manifest this update: Thu 17 Sep 2026 08:24:07 +0000 Manifest next update: Fri 18 Sep 2026 09:44:07 +0000 Files and hashes: 1: CB8AF4DC288016428E892458A0C0010ECF1897B7.crl (hash: RwsS1Z221TVdVS8s8mOcT+Bofadug9EJCLh1WGcagkI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cf:3c:70:b2:5f:da:5f:d3:e9:39:31:b2:e6:f9:b3:19:50:73:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Validity Not Before: Sep 17 08:24:07 2026 GMT Not After : Sep 18 09:44:07 2026 GMT Subject: CN=6967728EC61DF20AA2B50CDEE3B0F8364706CEA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e0:63:a1:e5:03:c0:5a:53:bb:11:14:a5:ca: 5b:50:71:22:d6:ea:7b:4b:f3:a4:1d:3f:7e:e6:15: 3d:c2:17:0c:65:d5:be:7c:c3:fb:32:08:23:87:cf: 96:e8:83:71:11:56:44:61:c9:b7:67:b2:0a:8b:49: 43:a5:b4:90:cd:34:23:ce:1b:97:f0:6e:07:7d:06: b9:cd:e6:db:cf:a5:7a:21:1d:ab:3a:86:6b:ba:f0: 67:e2:20:64:0c:b4:c1:2d:e7:05:2b:90:9a:99:f2: a4:7c:80:54:90:3a:17:74:bd:16:99:9c:bb:86:09: 81:fe:21:cc:4d:24:3c:be:fe:46:97:c8:5b:9e:b3: 11:a4:27:42:32:f9:45:94:e7:40:ad:ae:bf:a6:d5: 99:1b:9d:d3:c7:d0:d8:9f:5f:69:11:60:f3:af:e2: 23:91:29:80:cb:b7:6e:50:e9:82:1f:3a:15:bc:13: dc:00:7f:e9:9f:1f:4f:82:03:c8:5b:d8:87:43:41: 2c:fa:c2:50:43:9a:cd:9e:e0:e2:25:a2:b2:c3:5a: 99:1b:2e:da:74:c0:02:ba:16:23:c3:0f:07:6a:d7: 52:2b:e2:87:b3:dc:a4:43:7f:9b:2e:d7:2c:6a:51: a6:85:b5:09:b4:f6:c9:53:52:f9:58:24:72:8a:c8: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:67:72:8E:C6:1D:F2:0A:A2:B5:0C:DE:E3:B0:F8:36:47:06:CE:A2 X509v3 Authority Key Identifier: keyid:CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:43:d5:1a:cf:80:dd:e9:c1:d0:e5:09:ca:24:c0:5a:f3:3b: 2c:1c:62:ce:3e:99:e3:fe:4f:45:7c:a2:5c:14:13:48:9a:71: b3:e0:17:59:a0:01:90:7c:54:42:4d:7b:89:5c:af:9e:ef:8d: ad:ea:b0:db:89:f3:31:39:80:2b:ea:89:e7:81:75:db:3a:d2: 64:f4:92:ed:66:2b:5e:03:6c:13:f6:f7:3a:21:dd:91:ef:cd: 44:82:4e:34:32:e3:14:95:d1:7b:b1:14:43:11:d0:84:a7:cd: 16:5b:f2:8e:94:62:5f:2e:05:1e:b4:a8:7c:3a:17:9f:c9:79: 30:4a:23:f3:47:84:e8:47:51:f6:74:9a:54:d8:a9:83:e9:4c: d7:9b:ab:ca:88:39:0b:aa:8b:02:c9:59:3a:00:ee:c0:ea:5e: 49:20:1c:59:c1:fe:c3:3b:9b:1b:92:30:1e:c9:85:6d:e5:08: 5b:29:7e:32:1c:fd:f3:4b:9b:63:25:95:10:1f:e9:9f:be:5b: 80:d8:3a:1d:c0:9c:12:20:a6:5c:a5:2d:70:f2:6f:e6:cf:aa: 05:32:4c:d1:a5:ad:da:19:a2:89:83:f6:d4:83:3e:bb:7f:af: 11:4a:60:6e:1a:f5:3f:01:a5:77:07:75:03:78:d0:17:19:92: d3:30:e9:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDs88cLJf2l/T6Tkxsub5sxlQcxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAxMEVD RjE4OTdCNzAeFw0yNjA5MTcwODI0MDdaFw0yNjA5MTgwOTQ0MDdaMDMxMTAvBgNV BAMTKDY5Njc3MjhFQzYxREYyMEFBMkI1MENERUUzQjBGODM2NDcwNkNFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx4GOh5QPAWlO7ERSlyltQcSLW 6ntL86QdP37mFT3CFwxl1b58w/syCCOHz5bog3ERVkRhybdnsgqLSUOltJDNNCPO G5fwbgd9BrnN5tvPpXohHas6hmu68GfiIGQMtMEt5wUrkJqZ8qR8gFSQOhd0vRaZ nLuGCYH+IcxNJDy+/kaXyFuesxGkJ0Iy+UWU50Ctrr+m1ZkbndPH0NifX2kRYPOv 4iORKYDLt25Q6YIfOhW8E9wAf+mfH0+CA8hb2IdDQSz6wlBDms2e4OIlorLDWpkb Ltp0wAK6FiPDDwdq11Ir4oez3KRDf5su1yxqUaaFtQm09slTUvlYJHKKyIRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWdyjsYd8gqitQze47D4NkcGzqIwHwYDVR0j BBgwFoAUy4r03CiAFkKOiSRYoMABDs8Yl7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0Njc2Y2QtZGUzOS00NjhhLWFkMjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMy ODgwMTY0MjhFODkyNDU4QTBDMDAxMEVDRjE4OTdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjhBRjREQzI4ODAxNjQyOEU4OTI0NThBMEMwMDEwRUNGMTg5 N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAx MEVDRjE4OTdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1D1RrPgN3pwdDlCcokwFrzOywcYs4+meP+ T0V8olwUE0iacbPgF1mgAZB8VEJNe4lcr57vja3qsNuJ8zE5gCvqieeBdds60mT0 ku1mK14DbBP29zoh3ZHvzUSCTjQy4xSV0XuxFEMR0ISnzRZb8o6UYl8uBR60qHw6 F5/JeTBKI/NHhOhHUfZ0mlTYqYPpTNebq8qIOQuqiwLJWToA7sDqXkkgHFnB/sM7 mxuSMB7JhW3lCFspfjIc/fNLm2MllRAf6Z++W4DYOh3AnBIgplylLXDyb+bPqgUy TNGlrdoZoomD9tSDPrt/rxFKYG4a9T8BpXcHdQN40BcZktMw6aY= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:58 2026 by rpki-client