$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft (raw, json) Hash identifier: LgUedgmBE8pQrFdZ5IZNXLIuFKH12/CGDU/E0arSwhk= Subject key identifier: B5:F2:46:1B:71:FB:42:34:28:94:BF:0A:E4:1F:11:95:B7:D4:72:80 Authority key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Certificate issuer: /CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Certificate serial: 0CCD0BBA38495B960A1550F5236C11B9BCA081F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft Manifest number: EB Signing time: Sat 24 Oct 2026 03:08:00 +0000 Manifest this update: Sat 24 Oct 2026 03:03:00 +0000 Manifest next update: Sun 25 Oct 2026 06:30:00 +0000 Files and hashes: 1: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl (hash: N4pOPTZf8hnA9qMA39Aw7fKa4FJlq7Em3DZ7QB7nXes=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: Z37bpImhHNs5LLivIYF8tbbP1TZLCfEz4nG3CbpQ6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 06:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cd:0b:ba:38:49:5b:96:0a:15:50:f5:23:6c:11:b9:bc:a0:81:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Validity Not Before: Oct 24 03:03:00 2026 GMT Not After : Oct 25 06:30:00 2026 GMT Subject: CN=B5F2461B71FB42342894BF0AE41F1195B7D47280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:63:1f:dc:eb:b6:3c:c0:fd:b0:dd:f0:d4: 80:c8:d7:06:82:49:96:f3:7c:7e:4f:df:7d:a0:18: 09:09:01:e9:65:95:b5:0b:f6:31:c6:a5:d8:12:78: 32:ef:83:fe:d3:ac:bc:01:f6:a6:9f:de:a3:27:3a: 8a:2d:50:a8:96:77:02:0f:c1:e5:88:f5:a3:ec:0e: 31:f2:10:db:98:bf:18:0d:eb:65:b0:a3:07:13:d5: c7:7e:53:80:d5:5a:8d:ba:ad:b9:6b:f4:d2:ad:b9: 69:33:46:56:13:79:d5:ab:c7:e7:ff:21:a6:87:10: a1:62:1f:9a:bb:c2:fc:82:32:6a:55:2e:2c:f6:d9: c4:f9:9a:aa:14:ae:2d:75:9d:00:cd:53:0e:ca:99: 24:57:11:85:12:e5:1c:57:09:4a:b4:c5:ef:9e:8d: ef:dd:e3:30:eb:48:50:38:a4:81:1b:3b:c2:a5:14: 1b:a2:9b:a6:0f:6b:5e:54:c0:54:12:25:b6:3d:54: 0c:1b:da:9c:e1:c9:a6:44:ff:1e:4c:16:61:6a:26: 0d:da:5f:29:9c:50:f3:66:13:c7:78:df:c1:fd:d0: 53:6c:bb:bb:c7:f7:85:d4:81:32:ae:4d:33:8b:7e: d5:ea:1f:2e:8b:3d:36:40:fd:ef:1f:9f:ef:81:57: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F2:46:1B:71:FB:42:34:28:94:BF:0A:E4:1F:11:95:B7:D4:72:80 X509v3 Authority Key Identifier: keyid:CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:78:81:57:2f:60:d2:5f:d1:35:f8:b9:ba:18:06:68:9d:24: cc:07:1b:7d:3a:22:49:e8:d7:67:dc:2e:11:53:bc:d9:7c:5a: e6:43:ae:ac:43:a3:56:e7:09:0f:b3:23:88:f8:52:ce:27:67: 09:ba:04:d9:f5:28:d5:9e:56:f9:dc:e8:d0:17:e0:98:7c:b1: 70:c5:77:c7:4d:72:30:f5:f3:f9:ab:e0:af:60:56:b8:31:b5: 6e:2b:81:5d:a4:34:04:56:44:6f:a6:8a:81:36:28:9b:e6:4b: c4:7f:d6:61:46:7b:dd:07:bb:0b:7b:df:54:48:5d:69:d6:ed: 10:f3:e9:23:b5:e1:6d:0b:ad:31:62:28:18:86:39:da:be:fc: ce:6c:12:ff:ad:31:da:61:c9:32:92:4f:e5:f2:8f:96:01:4c: 85:9d:29:19:9b:d3:92:65:6e:f6:e2:1f:ea:fe:9f:ff:de:bc: cd:e2:d6:02:36:8f:67:63:c6:c7:09:a2:d5:5a:4d:8d:b1:0c: 7c:e3:5f:0f:0c:44:c5:3d:a1:2a:7a:38:aa:06:df:92:50:e4: d8:58:b1:b9:d9:7e:1f:14:d2:0a:d5:2f:47:14:ce:86:f6:7a: 1e:ef:23:a4:da:f6:20:71:bc:20:7d:c1:c5:94:09:61:78:f7: 05:5a:6a:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDM0LujhJW5YKFVD1I2wRubyggfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3 NUZDQzEwRDAeFw0yNjEwMjQwMzAzMDBaFw0yNjEwMjUwNjMwMDBaMDMxMTAvBgNV BAMTKEI1RjI0NjFCNzFGQjQyMzQyODk0QkYwQUU0MUYxMTk1QjdENDcyODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbU2Mf3Ou2PMD9sN3w1IDI1waC SZbzfH5P332gGAkJAelllbUL9jHGpdgSeDLvg/7TrLwB9qaf3qMnOootUKiWdwIP weWI9aPsDjHyENuYvxgN62WwowcT1cd+U4DVWo26rblr9NKtuWkzRlYTedWrx+f/ IaaHEKFiH5q7wvyCMmpVLiz22cT5mqoUri11nQDNUw7KmSRXEYUS5RxXCUq0xe+e je/d4zDrSFA4pIEbO8KlFBuim6YPa15UwFQSJbY9VAwb2pzhyaZE/x5MFmFqJg3a XymcUPNmE8d438H90FNsu7vH94XUgTKuTTOLftXqHy6LPTZA/e8fn++BV0P1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfJGG3H7QjQolL8K5B8RlbfUcoAwHwYDVR0j BBgwFoAUzWrtsCn6MgnVunBGt7j1JHX8wQ0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmI0YzcwYTEtNTAzNi00NTBiLWI5MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAy OUZBMzIwOUQ1QkE3MDQ2QjdCOEY1MjQ3NUZDQzEwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDZBRURCMDI5RkEzMjA5RDVCQTcwNDZCN0I4RjUyNDc1RkND MTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3MDQ2QjdCOEY1 MjQ3NUZDQzEwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMd4gVcvYNJf0TX4uboYBmidJMwHG306Ikno 12fcLhFTvNl8WuZDrqxDo1bnCQ+zI4j4Us4nZwm6BNn1KNWeVvnc6NAX4Jh8sXDF d8dNcjD18/mr4K9gVrgxtW4rgV2kNARWRG+mioE2KJvmS8R/1mFGe90Huwt731RI XWnW7RDz6SO14W0LrTFiKBiGOdq+/M5sEv+tMdphyTKST+Xyj5YBTIWdKRmb05Jl bvbiH+r+n//evM3i1gI2j2djxscJotVaTY2xDHzjXw8MRMU9oSp6OKoG35JQ5NhY sbnZfh8U0grVL0cUzob2eh7vI6Ta9iBxvCB9wcWUCWF49wVaaqI= -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:03 2026 by rpki-client