$ rpki-client -vvf rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft File: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft (raw, json) Hash identifier: mLwzJz7Sh7oGexx27uj0tGcu9k7aJOTkyMAz9aRo5sg= Subject key identifier: 70:7F:F9:BF:42:B4:78:A7:4D:57:CE:D6:5F:72:3F:55:D7:40:3A:5D Authority key identifier: CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 Certificate issuer: /CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Certificate serial: 6F7B07302AC5D4CA76A2EA1C5AA11B544E0D8C97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 13:01:38 +0000 Manifest this update: Fri 19 Jun 2026 12:56:38 +0000 Manifest next update: Sat 20 Jun 2026 16:01:38 +0000 Files and hashes: 1: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl (hash: qpc5cxWZsyXOoIlW9+fCFH4q9pqUk8SmWEkjVkKuubk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7b:07:30:2a:c5:d4:ca:76:a2:ea:1c:5a:a1:1b:54:4e:0d:8c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Validity Not Before: Jun 19 12:56:38 2026 GMT Not After : Jun 20 16:01:38 2026 GMT Subject: CN=707FF9BF42B478A74D57CED65F723F55D7403A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:52:b0:62:ec:dc:1d:65:68:a7:31:f6:e4: 5b:7d:11:58:e2:8e:cc:2c:7e:20:34:6a:b9:67:d3: 25:c6:4f:9f:cd:1d:00:1e:dd:7b:26:e1:b9:d3:9a: 14:7a:dc:db:8a:ed:27:36:08:00:2a:a5:72:15:56: b6:c5:d4:4b:71:6e:ea:25:17:14:89:0d:a1:a3:e0: 50:41:d2:b2:75:55:10:ce:de:bd:6f:39:2e:bb:80: ea:76:6d:fa:2c:da:41:7f:c6:74:f3:f8:92:af:d8: 65:7a:e4:0e:70:bc:2b:32:2b:88:44:b8:99:97:f3: 9b:9f:ad:6c:ba:97:be:d7:5d:ca:7b:90:fb:a1:28: 24:e3:9a:7e:25:b7:74:db:e9:82:a2:72:3f:14:bc: 5f:45:e1:b9:7a:42:87:82:9d:d0:75:07:ab:91:3d: 26:c1:32:8c:08:a5:4f:6b:45:cb:b9:9d:5a:80:f7: 97:e4:40:8e:69:bd:45:e7:46:0c:0e:d3:85:8a:7f: d0:34:02:e0:05:dc:d7:cd:2a:13:2f:f1:20:79:fe: 30:52:cc:fe:bb:73:5a:26:6d:a6:ad:3e:ba:d4:59: 26:f0:a4:ae:93:ff:71:5f:57:93:64:6d:5b:91:f8: 9b:21:e3:10:32:f4:9a:f0:74:70:9c:91:29:5a:ce: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:F9:BF:42:B4:78:A7:4D:57:CE:D6:5F:72:3F:55:D7:40:3A:5D X509v3 Authority Key Identifier: keyid:CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:27:1b:78:34:2f:cc:c6:64:81:b5:fc:89:56:45:c4:54:59: 9f:5c:a2:61:a5:e3:e7:78:82:01:9d:0a:56:94:1b:84:7d:2a: 9e:98:fb:ef:72:21:2c:6e:2d:52:01:43:9d:cb:45:55:b0:11: 20:3e:2c:38:a3:d4:0b:bf:9c:37:e1:c7:a9:56:7b:68:cd:98: e2:2f:f6:63:5e:4e:06:a0:5a:4a:17:64:39:43:da:6d:da:59: 30:8a:0c:b6:e8:20:e7:97:38:40:d9:53:a9:54:ff:75:a3:d6: 73:fe:c2:6a:b1:68:49:c6:a5:eb:09:b7:0c:a6:6b:60:e7:ef: fe:70:1c:1d:83:cb:b5:67:33:b0:2a:61:12:98:9c:2a:2b:5d: cf:e8:93:43:06:9c:33:72:97:7f:58:33:32:51:5a:5c:f1:3b: 67:6a:25:0e:3c:e4:84:84:2b:1a:32:ff:d5:64:b2:ad:33:e6: a0:81:53:54:e4:57:38:c2:e2:e3:86:5c:59:a5:8b:29:54:08: 9c:f1:96:0d:4e:b1:a6:7b:22:53:1e:2c:1c:ee:0b:d3:e5:76: d7:57:09:fc:17:9b:74:28:83:a9:e7:a9:8c:de:e8:82:49:19: 80:15:00:51:0e:c9:51:6d:93:7e:20:99:6a:42:ff:b1:0b:a3: df:66:e1:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3sHMCrF1Mp2ouocWqEbVE4NjJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5 QjUxRjcwMjAeFw0yNjA2MTkxMjU2MzhaFw0yNjA2MjAxNjAxMzhaMDMxMTAvBgNV BAMTKDcwN0ZGOUJGNDJCNDc4QTc0RDU3Q0VENjVGNzIzRjU1RDc0MDNBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJH1KwYuzcHWVopzH25Ft9EVji jswsfiA0arln0yXGT5/NHQAe3Xsm4bnTmhR63NuK7Sc2CAAqpXIVVrbF1Etxbuol FxSJDaGj4FBB0rJ1VRDO3r1vOS67gOp2bfos2kF/xnTz+JKv2GV65A5wvCsyK4hE uJmX85ufrWy6l77XXcp7kPuhKCTjmn4lt3Tb6YKicj8UvF9F4bl6QoeCndB1B6uR PSbBMowIpU9rRcu5nVqA95fkQI5pvUXnRgwO04WKf9A0AuAF3NfNKhMv8SB5/jBS zP67c1ombaatPrrUWSbwpK6T/3FfV5NkbVuR+Jsh4xAy9JrwdHCckSlazsA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcH/5v0K0eKdNV87WX3I/VddAOl0wHwYDVR0j BBgwFoAUyrzznnUtDK2m4hTk/J1+f5tR9wIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY4ZGU5MWItNjM2Yi00ZGE0LWIxZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3 NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5QjUxRjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUJDRjM5RTc1MkQwQ0FEQTZFMjE0RTRGQzlEN0U3RjlCNTFG NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdF N0Y5QjUxRjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUnG3g0L8zGZIG1/IlWRcRUWZ9comGl4+d4 ggGdClaUG4R9Kp6Y++9yISxuLVIBQ53LRVWwESA+LDij1Au/nDfhx6lWe2jNmOIv 9mNeTgagWkoXZDlD2m3aWTCKDLboIOeXOEDZU6lU/3Wj1nP+wmqxaEnGpesJtwym a2Dn7/5wHB2Dy7VnM7AqYRKYnCorXc/ok0MGnDNyl39YMzJRWlzxO2dqJQ485ISE Kxoy/9Vksq0z5qCBU1TkVzjC4uOGXFmliylUCJzxlg1OsaZ7IlMeLBzuC9PldtdX CfwXm3Qog6nnqYze6IJJGYAVAFEOyVFtk34gmWpC/7ELo99m4UE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:20 2026 by rpki-client