$ rpki-client -vvf rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft File: CB8AF4DC288016428E892458A0C0010ECF1897B7.mft (raw, json) Hash identifier: MJMKoqixVe1rj0iD7KI8NMMyGSiLGCODjSQ0RqX9tcY= Subject key identifier: 6B:13:1B:4B:32:2D:43:7F:D9:A1:6B:58:B4:EE:7B:A2:D9:E0:55:3C Authority key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Certificate issuer: /CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Certificate serial: 08060AD0095C88359B529F2E53B2A1607BAB4656 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:09:50 +0000 Manifest this update: Tue 16 Jun 2026 21:04:50 +0000 Manifest next update: Wed 17 Jun 2026 23:37:50 +0000 Files and hashes: 1: CB8AF4DC288016428E892458A0C0010ECF1897B7.crl (hash: UvrIZVmjucrJqIeujgLlOkqNoJEx0un2wwqJL9OIeK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:06:0a:d0:09:5c:88:35:9b:52:9f:2e:53:b2:a1:60:7b:ab:46:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Validity Not Before: Jun 16 21:04:50 2026 GMT Not After : Jun 17 23:37:50 2026 GMT Subject: CN=6B131B4B322D437FD9A16B58B4EE7BA2D9E0553C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:9f:4d:2b:f8:fd:c2:88:c3:ea:6b:dc:b4: a5:38:7c:fa:79:a2:2d:85:c4:c6:af:4e:20:f6:2e: 52:3c:53:cf:c3:6c:28:20:22:2b:1c:2a:11:7d:5d: 57:4a:29:d7:96:2c:9f:ca:de:93:4d:7b:a2:66:7c: c4:2e:9f:8f:51:e8:c9:2d:a7:9a:2d:6b:25:b1:18: 52:32:96:f0:81:19:81:7a:c4:94:c8:4a:d8:37:21: 79:32:c7:64:01:fe:b5:38:2c:be:de:3d:ee:9c:ba: af:da:7f:da:81:07:30:79:04:f1:27:52:d8:0d:c6: ae:89:71:94:2a:97:e6:02:83:78:ca:c4:db:09:6d: 60:b6:b5:ac:0a:12:b3:42:78:b1:28:81:d9:2c:72: 6b:50:2d:5b:df:2f:dd:4b:e5:fe:b8:c8:69:78:0b: a4:23:e4:10:f6:a1:21:d6:f7:2b:26:fb:9f:74:ff: aa:13:4a:59:e3:c9:de:48:22:5c:b7:9f:8d:3d:88: 1c:50:99:4f:e0:24:e8:70:27:98:6b:dd:12:33:7d: af:f2:75:bc:dd:ab:74:68:a3:65:4c:8d:6c:dc:8f: be:19:ed:c9:79:9c:52:d7:54:9d:da:6a:cb:d5:6d: 91:7d:a5:44:6e:91:df:02:1e:a6:db:dc:12:5e:51: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:13:1B:4B:32:2D:43:7F:D9:A1:6B:58:B4:EE:7B:A2:D9:E0:55:3C X509v3 Authority Key Identifier: keyid:CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f9:a0:d1:0c:69:0b:30:1f:dd:ab:42:77:88:54:74:c0:ed: 58:2a:1c:04:5d:4e:01:51:ea:e3:d5:3e:ad:ed:f4:24:f0:8c: ff:64:4f:62:b2:51:63:4b:f8:4f:ad:da:de:ba:8c:94:a3:fd: 34:3d:26:c1:1a:8c:f9:c3:34:b2:d9:ad:9c:18:77:8a:0d:78: 62:c8:85:a8:54:b5:f1:52:1d:42:8a:1d:b2:df:16:4c:6a:7d: ee:bc:ec:54:73:ce:3a:82:83:90:41:d8:08:81:2e:f4:08:57: d0:e2:1e:d3:42:a0:ff:41:e4:43:2e:72:9e:a8:89:76:26:ac: 89:a3:ed:20:1b:74:eb:21:7b:6d:f5:8f:e3:e2:4f:b2:48:f3: 47:db:2c:28:08:8f:35:eb:2f:56:88:d3:32:ca:14:f9:0d:1a: 4b:b8:30:40:73:93:94:40:f5:18:ff:65:84:33:b8:48:8a:e8: e4:aa:42:e3:c2:83:c8:11:05:a9:9a:c2:58:cd:c9:62:91:20: 47:ad:ca:8b:94:b8:ec:88:1c:c5:03:05:9c:b0:b5:17:ab:ac: 95:59:e6:95:6f:3b:a1:90:d3:3e:50:b7:b5:ba:4c:34:17:e0: 58:e5:ac:e2:40:7a:ea:b1:71:89:bf:4e:f1:f2:97:55:50:36: 22:b7:1d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAYK0AlciDWbUp8uU7KhYHurRlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAxMEVD RjE4OTdCNzAeFw0yNjA2MTYyMTA0NTBaFw0yNjA2MTcyMzM3NTBaMDMxMTAvBgNV BAMTKDZCMTMxQjRCMzIyRDQzN0ZEOUExNkI1OEI0RUU3QkEyRDlFMDU1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tJ9NK/j9wojD6mvctKU4fPp5 oi2FxMavTiD2LlI8U8/DbCggIiscKhF9XVdKKdeWLJ/K3pNNe6JmfMQun49R6Mkt p5otayWxGFIylvCBGYF6xJTIStg3IXkyx2QB/rU4LL7ePe6cuq/af9qBBzB5BPEn UtgNxq6JcZQql+YCg3jKxNsJbWC2tawKErNCeLEogdkscmtQLVvfL91L5f64yGl4 C6Qj5BD2oSHW9ysm+590/6oTSlnjyd5IIly3n409iBxQmU/gJOhwJ5hr3RIzfa/y dbzdq3Roo2VMjWzcj74Z7cl5nFLXVJ3aasvVbZF9pURukd8CHqbb3BJeUWjdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaxMbSzItQ3/ZoWtYtO57otngVTwwHwYDVR0j BBgwFoAUy4r03CiAFkKOiSRYoMABDs8Yl7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0Njc2Y2QtZGUzOS00NjhhLWFkMjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMy ODgwMTY0MjhFODkyNDU4QTBDMDAxMEVDRjE4OTdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjhBRjREQzI4ODAxNjQyOEU4OTI0NThBMEMwMDEwRUNGMTg5 N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAx MEVDRjE4OTdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL35oNEMaQswH92rQneIVHTA7VgqHARdTgFR 6uPVPq3t9CTwjP9kT2KyUWNL+E+t2t66jJSj/TQ9JsEajPnDNLLZrZwYd4oNeGLI hahUtfFSHUKKHbLfFkxqfe687FRzzjqCg5BB2AiBLvQIV9DiHtNCoP9B5EMucp6o iXYmrImj7SAbdOshe231j+PiT7JI80fbLCgIjzXrL1aI0zLKFPkNGku4MEBzk5RA 9Rj/ZYQzuEiK6OSqQuPCg8gRBamawljNyWKRIEetyouUuOyIHMUDBZywtRerrJVZ 5pVvO6GQ0z5Qt7W6TDQX4FjlrOJAeuqxcYm/TvHyl1VQNiK3Hfc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:55 2026 by rpki-client