$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft File: CDE6C05A893420EB6585B4E0E27BB14D54043614.mft (raw, json) Hash identifier: lF2i7nggQ2Hy0dIxOsUVvAwAfGbbx0yfxINGQvvutoc= Subject key identifier: 65:DC:EE:FA:46:88:71:E5:A0:31:A6:F7:E8:15:CC:72:B2:43:06:87 Authority key identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 Certificate issuer: /CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Certificate serial: 025B763C683E1FAEF3284140D0112FE8879A1E65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 19:19:22 +0000 Manifest this update: Fri 19 Jun 2026 19:14:22 +0000 Manifest next update: Sat 20 Jun 2026 21:24:22 +0000 Files and hashes: 1: CDE6C05A893420EB6585B4E0E27BB14D54043614.crl (hash: Qlga1ho86akwo3N4qfIMDIDBB/MddBASbL6foKPtMdo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5b:76:3c:68:3e:1f:ae:f3:28:41:40:d0:11:2f:e8:87:9a:1e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Validity Not Before: Jun 19 19:14:22 2026 GMT Not After : Jun 20 21:24:22 2026 GMT Subject: CN=65DCEEFA468871E5A031A6F7E815CC72B2430687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:ec:fc:3e:03:27:da:38:30:9d:70:1d:a7: 29:bf:f7:30:e5:75:5e:9d:f1:b9:6e:17:6f:55:7c: 8b:43:02:b8:77:e6:8f:56:87:f3:42:2d:11:b2:da: b5:0b:a2:27:54:c9:b9:5c:00:34:21:0b:95:de:38: 8a:c1:26:22:3d:e5:45:77:c8:02:b8:5a:b0:bd:8b: 92:16:46:e6:d0:7c:e6:5c:af:5a:e0:77:53:fa:a2: 6b:79:17:c2:14:7c:0a:d3:96:93:fd:c8:a4:b7:a2: f2:d6:99:48:cd:a8:50:36:06:1f:5e:8b:c9:1c:6d: 97:1f:c9:24:db:95:fb:c9:63:01:4a:fd:6b:66:6a: 74:7f:68:e0:b5:50:35:e4:11:4e:7a:18:89:22:fc: 46:0e:c1:de:79:62:60:fc:dc:57:2c:87:91:55:13: 2e:a8:35:3c:5f:42:df:b2:9e:53:b4:7f:02:e8:18: b5:13:97:63:1a:9a:d0:c1:16:ea:e1:8c:a2:b5:05: 2f:7d:f1:b6:3f:25:4b:f5:c1:8c:af:c7:37:37:6a: 53:c5:fc:77:3c:6c:54:b5:a0:4c:e5:36:3d:f2:53: bd:da:e0:66:f5:dc:be:87:5f:e5:ad:c8:ee:2f:a8: a5:12:5b:b9:a5:77:e9:32:ee:76:b5:b9:e0:b1:14: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DC:EE:FA:46:88:71:E5:A0:31:A6:F7:E8:15:CC:72:B2:43:06:87 X509v3 Authority Key Identifier: keyid:CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fc:a3:54:9f:9d:ba:9c:58:94:5e:24:90:45:de:8b:9f:7b: 03:05:3c:47:65:bb:36:c6:6b:f6:31:85:21:b7:0b:16:fd:1d: 27:1b:ae:9f:5e:89:ec:89:e6:04:0d:53:b4:ac:c8:b0:84:34: 6b:7f:8a:89:62:75:34:d8:ac:c0:23:be:8a:ba:70:f8:23:f6: bf:ab:88:48:15:99:41:34:d0:57:77:e7:fa:5f:9e:87:b1:39: 49:02:2d:c1:63:9e:91:bf:ba:ed:b8:c6:ab:ab:cc:29:ec:00: 00:17:c5:82:a4:44:39:d7:a2:7a:7b:ce:76:4b:9d:35:5b:6c: 00:3b:82:d6:88:dc:5c:2f:82:70:99:02:3c:d2:3c:64:33:d4: 0c:21:ce:25:99:ef:19:c5:89:4e:b5:30:2d:7f:66:11:f1:69: 08:fc:dd:6e:59:df:75:1b:f7:14:58:39:05:8f:6d:38:49:e5: f6:36:12:4f:75:62:82:4f:b0:a7:b8:ba:5e:95:d3:71:af:c4: db:9e:1f:16:18:0c:f5:45:e8:9d:42:a9:93:9c:65:31:87:e1: 19:ff:04:cf:9c:c6:42:dc:a2:69:8e:a7:6c:53:35:ab:4d:0a: 65:3e:c2:87:f2:2a:c1:80:84:2c:13:df:c9:85:88:2c:b3:1c: 8e:6f:bf:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlt2PGg+H67zKEFA0BEv6IeaHmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1 NDA0MzYxNDAeFw0yNjA2MTkxOTE0MjJaFw0yNjA2MjAyMTI0MjJaMDMxMTAvBgNV BAMTKDY1RENFRUZBNDY4ODcxRTVBMDMxQTZGN0U4MTVDQzcyQjI0MzA2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrR+z8PgMn2jgwnXAdpym/9zDl dV6d8bluF29VfItDArh35o9Wh/NCLRGy2rULoidUyblcADQhC5XeOIrBJiI95UV3 yAK4WrC9i5IWRubQfOZcr1rgd1P6omt5F8IUfArTlpP9yKS3ovLWmUjNqFA2Bh9e i8kcbZcfySTblfvJYwFK/WtmanR/aOC1UDXkEU56GIki/EYOwd55YmD83Fcsh5FV Ey6oNTxfQt+ynlO0fwLoGLUTl2MamtDBFurhjKK1BS998bY/JUv1wYyvxzc3alPF /Hc8bFS1oEzlNj3yU73a4Gb13L6HX+WtyO4vqKUSW7mld+ky7na1ueCxFDYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZdzu+kaIceWgMab36BXMcrJDBocwHwYDVR0j BBgwFoAUzebAWok0IOtlhbTg4nuxTVQENhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiMjkyOGUtOWIzOS00YTkwLTk3ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4 OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1NDA0MzYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2QzA1QTg5MzQyMEVCNjU4NUI0RTBFMjdCQjE0RDU0MDQz NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIx NEQ1NDA0MzYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/8o1SfnbqcWJReJJBF3oufewMFPEdluzbG a/YxhSG3Cxb9HScbrp9eieyJ5gQNU7SsyLCENGt/iolidTTYrMAjvoq6cPgj9r+r iEgVmUE00Fd35/pfnoexOUkCLcFjnpG/uu24xqurzCnsAAAXxYKkRDnXonp7znZL nTVbbAA7gtaI3FwvgnCZAjzSPGQz1AwhziWZ7xnFiU61MC1/ZhHxaQj83W5Z33Ub 9xRYOQWPbThJ5fY2Ek91YoJPsKe4ul6V03GvxNueHxYYDPVF6J1CqZOcZTGH4Rn/ BM+cxkLcommOp2xTNatNCmU+wofyKsGAhCwT38mFiCyzHI5vv88= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:47 2026 by rpki-client