$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft File: CDE6C05A893420EB6585B4E0E27BB14D54043614.mft (raw, json) Hash identifier: ms7AFOJyOjkPfl62F+8Ezrvs4alt55f0fbjp9xaOjhQ= Subject key identifier: 43:DB:53:96:02:7B:FB:CE:08:9C:23:1A:C2:C0:3E:2B:8A:B0:70:C5 Authority key identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 Certificate issuer: /CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Certificate serial: 4A37357D3EB6D2E107485ACB49F5BF705BCCBC56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:16:30 +0000 Manifest this update: Wed 16 Sep 2026 22:11:30 +0000 Manifest next update: Fri 18 Sep 2026 00:59:30 +0000 Files and hashes: 1: CDE6C05A893420EB6585B4E0E27BB14D54043614.crl (hash: Mb7MSO0GRZUfSEW7lKqLQXqzdpc8kAHj4HRO/HSZfRU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:37:35:7d:3e:b6:d2:e1:07:48:5a:cb:49:f5:bf:70:5b:cc:bc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Validity Not Before: Sep 16 22:11:30 2026 GMT Not After : Sep 18 00:59:30 2026 GMT Subject: CN=43DB5396027BFBCE089C231AC2C03E2B8AB070C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:f3:e2:e5:d9:3b:c4:5d:53:81:5f:ba:3b: 69:f0:30:6e:b7:f8:5e:d0:e6:be:08:79:a5:b3:f5: 68:ad:ad:54:81:1b:b4:35:98:4d:e0:64:a0:80:2f: 9f:9e:53:1b:3b:dc:0d:5e:50:c6:c6:98:64:60:32: 8a:bb:1e:cc:1f:6e:43:59:e7:0b:71:da:63:1b:4e: b4:b2:72:7d:46:7f:52:95:56:6b:16:20:e4:62:7e: 59:bf:8b:47:cd:30:e8:f9:0c:fd:d9:54:37:23:8b: 5f:fb:52:96:89:f9:85:0a:30:a7:e2:ed:f4:c9:a2: f8:87:3f:4e:5d:df:24:6f:28:2d:52:6e:fa:3a:86: 4e:e1:a2:f5:53:29:69:ab:03:52:d3:c8:0a:07:cd: 57:2f:b6:37:4e:93:51:a8:39:ca:eb:d1:ec:90:3d: 42:40:c6:ee:d3:19:bd:f3:24:2f:6b:23:8d:84:2f: d3:3d:e9:cc:82:3f:71:61:e9:e5:81:99:7e:9e:6a: ae:d0:f2:58:b6:33:3e:17:6b:4c:cd:b3:34:6c:70: f4:8e:15:7e:9f:f6:03:a3:93:dc:43:3d:32:5c:c4: 7e:22:b8:ac:00:8f:24:6b:6f:d4:d6:b9:d7:96:88: 70:43:67:cb:9f:4e:42:f4:97:6f:1f:d0:fc:e5:ec: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:53:96:02:7B:FB:CE:08:9C:23:1A:C2:C0:3E:2B:8A:B0:70:C5 X509v3 Authority Key Identifier: keyid:CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:85:38:86:5d:59:14:37:82:ac:36:1d:aa:24:bb:fd:99:23: 2c:b5:0a:a1:7e:3f:b9:9e:90:56:e3:c9:57:b4:34:4e:4f:df: b8:84:8a:ca:35:b8:04:d1:ff:e1:29:56:74:9a:a9:98:66:cc: ef:4f:e3:6b:20:0d:f0:9e:f1:66:aa:e1:cf:0b:0e:ad:7d:8b: f7:15:82:7d:8e:c7:db:85:09:ca:10:1a:03:e9:61:58:6f:14: dc:cc:7b:04:e3:4d:80:af:a3:57:b4:e9:4d:d2:7b:8a:ad:74: af:08:da:ea:db:86:56:f2:75:11:bd:05:e0:23:3b:9e:b9:1a: 64:8e:a1:ef:34:36:91:68:da:d5:fa:64:81:9a:e2:7d:53:1f: 01:5a:f0:da:fa:bf:74:51:37:cc:da:92:86:6c:50:2e:63:9d: 01:f6:e1:2e:64:0c:c2:41:fa:f9:b8:91:ae:d9:ce:62:b4:f2: e2:02:58:94:c9:34:4c:ed:66:87:b6:69:e4:39:25:a9:07:95: 1e:7a:22:09:98:4a:10:52:92:49:71:88:83:71:1f:76:dd:36: 79:bb:9e:3b:e5:e5:63:1f:ff:e4:65:99:fb:01:eb:67:cc:c2: f1:01:e5:72:e6:c3:f4:f9:f4:a6:64:88:5b:ef:17:89:89:09: 4a:ec:cb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjc1fT620uEHSFrLSfW/cFvMvFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1 NDA0MzYxNDAeFw0yNjA5MTYyMjExMzBaFw0yNjA5MTgwMDU5MzBaMDMxMTAvBgNV BAMTKDQzREI1Mzk2MDI3QkZCQ0UwODlDMjMxQUMyQzAzRTJCOEFCMDcwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsc/Pi5dk7xF1TgV+6O2nwMG63 +F7Q5r4IeaWz9WitrVSBG7Q1mE3gZKCAL5+eUxs73A1eUMbGmGRgMoq7HswfbkNZ 5wtx2mMbTrSycn1Gf1KVVmsWIORiflm/i0fNMOj5DP3ZVDcji1/7UpaJ+YUKMKfi 7fTJoviHP05d3yRvKC1Sbvo6hk7hovVTKWmrA1LTyAoHzVcvtjdOk1GoOcrr0eyQ PUJAxu7TGb3zJC9rI42EL9M96cyCP3Fh6eWBmX6eaq7Q8li2Mz4Xa0zNszRscPSO FX6f9gOjk9xDPTJcxH4iuKwAjyRrb9TWudeWiHBDZ8ufTkL0l28f0Pzl7PTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9tTlgJ7+84InCMawsA+K4qwcMUwHwYDVR0j BBgwFoAUzebAWok0IOtlhbTg4nuxTVQENhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiMjkyOGUtOWIzOS00YTkwLTk3ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4 OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1NDA0MzYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2QzA1QTg5MzQyMEVCNjU4NUI0RTBFMjdCQjE0RDU0MDQz NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIx NEQ1NDA0MzYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKFOIZdWRQ3gqw2Haoku/2ZIyy1CqF+P7me kFbjyVe0NE5P37iEiso1uATR/+EpVnSaqZhmzO9P42sgDfCe8Waq4c8LDq19i/cV gn2Ox9uFCcoQGgPpYVhvFNzMewTjTYCvo1e06U3Se4qtdK8I2urbhlbydRG9BeAj O565GmSOoe80NpFo2tX6ZIGa4n1THwFa8Nr6v3RRN8zakoZsUC5jnQH24S5kDMJB +vm4ka7ZzmK08uICWJTJNEztZoe2aeQ5JakHlR56IgmYShBSkklxiINxH3bdNnm7 njvl5WMf/+RlmfsB62fMwvEB5XLmw/T59KZkiFvvF4mJCUrsy0I= -----END CERTIFICATE-----Generated at Thu Sep 17 14:09:26 2026 by rpki-client