$ rpki-client -vvvf rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft File: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft (raw, json) Hash identifier: ddsCfHOvKG5czrD24sUysFfBxsx5iCzBfuQUZU/XiHk= Subject key identifier: 71:D1:04:9B:2A:B4:EA:F1:55:9A:E0:FA:2A:39:A5:F4:FF:CA:AC:28 Authority key identifier: CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 Certificate issuer: /CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Certificate serial: 733B0AA58DA6920E97B5E3092D22DC84FE66B6A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 16:39:39 +0000 Manifest this update: Wed 16 Sep 2026 16:34:39 +0000 Manifest next update: Thu 17 Sep 2026 20:25:39 +0000 Files and hashes: 1: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl (hash: Fhb+EQwcO0XT1WfJBVRg18jn2xm9M3Z5mxOdiiiQs5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3b:0a:a5:8d:a6:92:0e:97:b5:e3:09:2d:22:dc:84:fe:66:b6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Validity Not Before: Sep 16 16:34:39 2026 GMT Not After : Sep 17 20:25:39 2026 GMT Subject: CN=71D1049B2AB4EAF1559AE0FA2A39A5F4FFCAAC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:ac:d1:ef:b3:53:1f:40:ae:94:ef:85:ce: 73:79:d1:30:ae:0b:e5:aa:e4:cf:92:f4:0e:1c:b1: 4e:9b:16:ba:48:7d:b6:58:d6:37:01:7b:04:d0:44: 04:aa:06:a3:86:15:95:ff:b5:e4:4b:8d:43:e6:b9: 69:4e:94:06:41:ea:e0:a0:2b:1b:f9:6b:80:9a:6d: 00:5f:5a:93:55:a1:06:17:d2:5c:00:c8:c1:39:d1: 8e:1b:a1:ec:ab:29:1a:8c:a7:7f:40:7d:28:d0:83: e3:d6:8d:cd:40:ed:c0:66:83:16:8b:9c:52:1f:b6: 5d:fe:99:2a:b6:ba:c0:c1:93:77:e2:40:bf:01:3f: 90:c9:ac:3d:52:ea:6b:a9:43:e6:d0:3c:f7:cb:5f: bf:d6:42:a6:09:61:0d:39:df:cd:ea:f3:17:c6:df: 5d:28:c2:40:66:81:26:06:29:d5:f2:60:fe:99:ca: d8:4d:21:6a:0d:64:7d:5f:30:52:5f:86:20:f0:8e: d9:e8:05:90:a1:4a:55:0a:96:44:28:9e:cf:ad:b4: 48:5e:87:79:0f:ac:2e:75:a5:f7:d0:99:4c:47:5b: 75:6d:44:58:4b:77:a4:7e:3d:93:69:df:15:70:ee: 7d:de:51:49:08:16:ae:d6:f5:3b:0a:3b:7a:e6:e2: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:04:9B:2A:B4:EA:F1:55:9A:E0:FA:2A:39:A5:F4:FF:CA:AC:28 X509v3 Authority Key Identifier: keyid:CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:17:1b:be:b7:11:e6:1d:07:91:83:03:e6:b1:46:92:de:c1: 09:05:d6:a8:40:e3:88:49:e0:6f:e2:2b:57:f9:65:07:aa:cb: 38:96:dc:c9:b1:c0:e6:95:53:0e:73:5d:26:5a:4d:70:b8:35: 2e:f1:eb:38:6e:d6:6d:10:4e:b6:4a:16:15:08:9d:bd:a5:11: 1d:1f:0b:cb:c9:aa:88:da:61:3b:5d:25:c8:f8:57:80:ec:7f: 2e:5b:48:ee:a3:21:04:f1:e0:e3:82:04:a5:ab:df:52:5c:88: d3:33:98:b8:0b:14:86:30:d0:21:97:a4:c4:ff:43:38:f4:ea: 8c:0d:e3:a5:d1:c2:a8:b4:bb:05:75:b7:4e:d0:13:7c:6b:71: 03:97:05:d6:86:e2:84:ba:b9:b2:8b:72:5e:dc:cc:40:8a:23: 49:1f:af:4f:5c:6f:83:96:c0:36:a4:16:56:97:c3:c5:c7:5b: bd:2e:88:7f:bb:64:ea:4c:69:32:31:e4:dc:2a:47:36:e0:64: 96:69:4e:a6:57:67:3b:71:70:20:cb:c2:02:ab:fa:0d:8b:f9: 59:71:b6:33:3d:9f:0b:6b:4b:4e:50:eb:70:d3:cf:eb:f0:f4: ea:ab:2b:d8:3a:ec:0d:aa:c4:ba:81:ed:0e:20:fc:67:a8:dc: 58:84:14:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczsKpY2mkg6XteMJLSLchP5mtqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5 QjUxRjcwMjAeFw0yNjA5MTYxNjM0MzlaFw0yNjA5MTcyMDI1MzlaMDMxMTAvBgNV BAMTKDcxRDEwNDlCMkFCNEVBRjE1NTlBRTBGQTJBMzlBNUY0RkZDQUFDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxazR77NTH0CulO+FznN50TCu C+Wq5M+S9A4csU6bFrpIfbZY1jcBewTQRASqBqOGFZX/teRLjUPmuWlOlAZB6uCg Kxv5a4CabQBfWpNVoQYX0lwAyME50Y4boeyrKRqMp39AfSjQg+PWjc1A7cBmgxaL nFIftl3+mSq2usDBk3fiQL8BP5DJrD1S6mupQ+bQPPfLX7/WQqYJYQ05383q8xfG 310owkBmgSYGKdXyYP6ZythNIWoNZH1fMFJfhiDwjtnoBZChSlUKlkQons+ttEhe h3kPrC51pffQmUxHW3VtRFhLd6R+PZNp3xVw7n3eUUkIFq7W9TsKO3rm4kubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdEEmyq06vFVmuD6Kjml9P/KrCgwHwYDVR0j BBgwFoAUyrzznnUtDK2m4hTk/J1+f5tR9wIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY4ZGU5MWItNjM2Yi00ZGE0LWIxZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3 NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5QjUxRjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUJDRjM5RTc1MkQwQ0FEQTZFMjE0RTRGQzlEN0U3RjlCNTFG NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdF N0Y5QjUxRjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQXG763EeYdB5GDA+axRpLewQkF1qhA44hJ 4G/iK1f5ZQeqyziW3MmxwOaVUw5zXSZaTXC4NS7x6zhu1m0QTrZKFhUInb2lER0f C8vJqojaYTtdJcj4V4Dsfy5bSO6jIQTx4OOCBKWr31JciNMzmLgLFIYw0CGXpMT/ Qzj06owN46XRwqi0uwV1t07QE3xrcQOXBdaG4oS6ubKLcl7czECKI0kfr09cb4OW wDakFlaXw8XHW70uiH+7ZOpMaTIx5NwqRzbgZJZpTqZXZztxcCDLwgKr+g2L+Vlx tjM9nwtrS05Q63DTz+vw9OqrK9g67A2qxLqB7Q4g/Geo3FiEFHw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:15 2026 by rpki-client