$ rpki-client -vvvf rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft File: CB8AF4DC288016428E892458A0C0010ECF1897B7.mft (raw, json) Hash identifier: 8j2ZDlq7sxlMVPgCRz4eHzPENQaGuYSzDHLT41u5eAg= Subject key identifier: 69:88:36:87:FA:29:B8:FB:9D:8B:BC:72:BD:4D:01:75:8E:06:B1:15 Authority key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Certificate issuer: /CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Certificate serial: 42482D66B72D54FB58BD5CDA9A3AC755656DCB2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:23:27 +0000 Manifest this update: Sun 20 Sep 2026 21:18:27 +0000 Manifest next update: Mon 21 Sep 2026 22:49:27 +0000 Files and hashes: 1: CB8AF4DC288016428E892458A0C0010ECF1897B7.crl (hash: cjYXXv2CNxytto/uc4p4HbmbGw0/OyTZN1/HCP/cHMA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:48:2d:66:b7:2d:54:fb:58:bd:5c:da:9a:3a:c7:55:65:6d:cb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Validity Not Before: Sep 20 21:18:27 2026 GMT Not After : Sep 21 22:49:27 2026 GMT Subject: CN=69883687FA29B8FB9D8BBC72BD4D01758E06B115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:ad:e9:ab:bd:ae:69:57:d9:00:1f:bf:c4: 34:72:b6:a4:e0:84:a5:60:c3:39:83:e5:22:bb:0f: 03:b0:07:91:ed:00:cc:b5:24:59:91:c3:d3:ac:d4: dc:43:b1:bd:56:0d:59:8a:29:16:d2:9a:52:38:1e: ca:c9:63:fd:e7:da:fe:d4:ff:8e:d7:64:28:b4:7b: 99:89:dd:40:09:20:b6:49:ff:74:41:df:58:00:d6: 2a:d4:f5:04:d9:26:ed:4d:59:7b:77:37:5d:61:1a: a3:8b:64:85:72:5a:c7:b5:dc:0f:d6:5c:6f:71:83: 78:2e:3e:4f:6b:db:37:a0:f4:d4:b8:08:66:a0:03: ca:89:66:e3:b9:b2:1c:50:0d:c5:05:fb:ce:4d:41: 70:23:87:cd:b8:b2:08:18:4a:bc:4f:0a:22:9e:2f: cd:4f:9c:11:3b:9d:7a:75:ee:ce:cc:89:a6:5c:d5: 6a:f7:79:cd:b6:f2:cb:8f:b3:ba:29:e7:91:b3:3a: db:15:4a:88:4a:f6:88:6f:20:88:6a:33:61:a4:55: c2:03:b9:d1:4c:7f:96:6f:4a:b4:43:9a:03:3a:e6: 63:c0:46:51:9c:53:04:ad:e6:80:ce:91:d3:fa:57: 85:ba:24:d9:42:0a:45:93:0b:54:33:5f:26:7a:7a: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:88:36:87:FA:29:B8:FB:9D:8B:BC:72:BD:4D:01:75:8E:06:B1:15 X509v3 Authority Key Identifier: keyid:CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:76:08:b5:da:d3:95:b9:4b:38:d3:3d:9d:ae:b5:fa:b9:35: a4:f9:d1:9c:62:15:2a:01:6b:51:4f:9b:9e:21:f9:67:8f:17: bc:69:f5:0a:33:d2:8d:0e:59:c7:ea:cd:23:8d:ba:c1:7a:27: 7b:b6:82:3c:7d:56:65:c6:d3:02:9e:77:0c:e5:07:e0:5b:70: 9b:32:5a:83:a5:40:dd:2e:4d:df:71:9e:b1:19:0b:89:b0:e8: a4:09:07:0a:bd:de:ac:31:2e:cd:99:26:bb:c0:50:fa:01:23: f8:0e:84:df:e4:6b:b9:3b:9a:cc:f2:ec:e2:c5:80:e9:db:bd: 2e:47:19:f8:96:69:86:14:86:e2:0d:fc:57:fd:e1:d0:94:82: f1:38:94:c1:04:bd:02:93:ee:c5:fb:45:64:7d:10:44:37:d6: 8e:16:09:71:57:2c:c6:02:f4:23:1c:6b:12:32:a5:45:28:9a: 74:34:62:49:66:b6:a4:f3:b7:b1:af:a8:9d:6a:8e:b7:81:30: 27:72:fc:6b:ff:19:c8:53:64:46:be:11:5d:e2:9b:2c:e0:f1: 71:f2:7c:fd:cf:8c:30:44:62:b9:38:6a:46:17:b6:65:db:08: 3d:db:2f:b9:12:5a:59:41:63:40:06:41:c8:62:5d:70:d5:ec: c9:cc:34:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkgtZrctVPtYvVzamjrHVWVtyy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAxMEVD RjE4OTdCNzAeFw0yNjA5MjAyMTE4MjdaFw0yNjA5MjEyMjQ5MjdaMDMxMTAvBgNV BAMTKDY5ODgzNjg3RkEyOUI4RkI5RDhCQkM3MkJENEQwMTc1OEUwNkIxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSdK3pq72uaVfZAB+/xDRytqTg hKVgwzmD5SK7DwOwB5HtAMy1JFmRw9Os1NxDsb1WDVmKKRbSmlI4HsrJY/3n2v7U /47XZCi0e5mJ3UAJILZJ/3RB31gA1irU9QTZJu1NWXt3N11hGqOLZIVyWse13A/W XG9xg3guPk9r2zeg9NS4CGagA8qJZuO5shxQDcUF+85NQXAjh824sggYSrxPCiKe L81PnBE7nXp17s7MiaZc1Wr3ec228suPs7op55GzOtsVSohK9ohvIIhqM2GkVcID udFMf5ZvSrRDmgM65mPARlGcUwSt5oDOkdP6V4W6JNlCCkWTC1QzXyZ6eq8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYg2h/opuPudi7xyvU0BdY4GsRUwHwYDVR0j BBgwFoAUy4r03CiAFkKOiSRYoMABDs8Yl7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE0Njc2Y2QtZGUzOS00NjhhLWFkMjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMy ODgwMTY0MjhFODkyNDU4QTBDMDAxMEVDRjE4OTdCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjhBRjREQzI4ODAxNjQyOEU4OTI0NThBMEMwMDEwRUNGMTg5 N0I3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvQ0I4QUY0REMyODgwMTY0MjhFODkyNDU4QTBDMDAx MEVDRjE4OTdCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGl2CLXa05W5SzjTPZ2utfq5NaT50ZxiFSoB a1FPm54h+WePF7xp9Qoz0o0OWcfqzSONusF6J3u2gjx9VmXG0wKedwzlB+BbcJsy WoOlQN0uTd9xnrEZC4mw6KQJBwq93qwxLs2ZJrvAUPoBI/gOhN/ka7k7mszy7OLF gOnbvS5HGfiWaYYUhuIN/Ff94dCUgvE4lMEEvQKT7sX7RWR9EEQ31o4WCXFXLMYC 9CMcaxIypUUomnQ0YklmtqTzt7GvqJ1qjreBMCdy/Gv/GchTZEa+EV3imyzg8XHy fP3PjDBEYrk4akYXtmXbCD3bL7kSWllBY0AGQchiXXDV7MnMNF8= -----END CERTIFICATE-----Generated at Mon Sep 21 09:20:18 2026 by rpki-client