$ rpki-client -vvf rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft File: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft (raw, json) Hash identifier: UfbNyzdWNF1Rat18gGv693UgNkNbWebAVFUdoP7CXJg= Subject key identifier: 6D:46:E7:34:47:4E:6B:FF:E2:99:19:AE:CA:2E:71:10:C4:0C:9E:7D Authority key identifier: CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 Certificate issuer: /CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Certificate serial: 7C863AB2B10374BF935BC27873DAEF90669F6356 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:15:24 +0000 Manifest this update: Wed 17 Jun 2026 06:10:24 +0000 Manifest next update: Thu 18 Jun 2026 08:39:24 +0000 Files and hashes: 1: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl (hash: frBXBQzY9PROzmMY/9s8khacDz2HdxPHQ83zQWEdrBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:86:3a:b2:b1:03:74:bf:93:5b:c2:78:73:da:ef:90:66:9f:63:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Validity Not Before: Jun 17 06:10:24 2026 GMT Not After : Jun 18 08:39:24 2026 GMT Subject: CN=6D46E734474E6BFFE29919AECA2E7110C40C9E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:1d:e4:34:fe:0f:8e:e9:2b:2d:29:60:d5: 59:63:74:b6:a5:13:de:74:1a:76:d5:1d:4d:f7:8c: cd:e4:3f:ca:d7:4e:85:52:c3:53:ba:82:d5:4b:24: c4:d4:0a:36:98:22:56:63:56:f3:f9:c6:82:d8:8f: 7f:3a:5c:e2:69:a5:cf:6f:88:c8:93:89:db:82:e8: eb:ca:cf:fb:e8:5c:c4:bb:b8:cb:57:62:99:22:20: a7:be:3c:c1:e7:70:f1:87:09:a9:3c:90:f5:95:75: 37:bf:09:9e:30:ff:e8:ed:1a:5e:25:75:83:4a:b2: a1:4d:0e:54:13:60:d9:82:34:25:02:86:ea:c7:e4: b0:1f:ff:4a:a0:b7:4c:b0:0c:03:9e:2a:b2:78:51: 31:da:3d:16:6c:22:9d:58:7c:2e:42:0c:c7:98:85: df:8c:81:26:43:f3:c7:f7:6b:d7:0a:26:c1:b6:31: aa:b1:83:f7:be:bd:19:4c:78:62:09:06:99:a4:c6: 3c:16:f5:8a:9a:87:b7:73:9e:ed:d4:a7:2d:60:9d: f8:c4:43:eb:f9:ea:42:a1:1b:14:1a:e9:4a:15:74: e2:e4:a1:c7:69:ae:b8:18:3f:cc:bf:40:79:87:4a: 47:ca:d9:87:94:e9:59:4b:8f:fa:19:d6:03:60:ec: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:46:E7:34:47:4E:6B:FF:E2:99:19:AE:CA:2E:71:10:C4:0C:9E:7D X509v3 Authority Key Identifier: keyid:CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6e:1a:7b:53:1f:68:b6:1d:1a:ed:f0:cb:00:30:fe:15:46: 73:50:0c:0b:e3:78:68:5c:71:44:06:38:7d:f6:73:5a:9d:c9: 4a:83:c2:25:02:b0:bb:de:0f:93:fc:6a:73:d2:3f:98:2c:2e: f5:20:4a:5f:14:8e:88:28:09:40:db:e6:57:96:77:fa:65:b4: ad:7a:b1:c6:1f:a1:c1:4f:6c:93:85:ea:f7:cf:8d:b8:e2:59: f2:b6:fa:60:4a:04:cc:85:06:7f:6d:09:c4:7b:0b:ce:36:9c: 7a:0b:8d:17:35:d2:af:52:22:8d:18:54:d7:19:73:ed:af:53: 5d:8e:e8:11:83:f1:6f:6c:e2:8e:dd:84:5a:be:0e:35:e9:2e: 58:ab:97:ce:f3:b8:b0:9f:9f:6e:29:d1:ad:12:a1:21:aa:5a: 3b:5a:f4:4b:02:4b:52:db:2c:f5:79:25:d5:57:5d:62:07:5d: 7b:91:eb:5c:73:2f:81:49:bf:96:90:c6:c9:d3:a8:a3:9d:0a: 2f:68:a4:b4:ab:93:3c:b8:c4:86:85:51:9a:13:8c:26:5d:17: 94:be:a1:ae:27:70:29:94:c2:0e:60:ea:34:a6:71:07:1b:89: 9c:fe:2f:19:6c:ce:21:db:f7:0c:d8:75:f0:31:14:4e:0c:c6: 2d:4f:c7:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIY6srEDdL+TW8J4c9rvkGafY1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5 QjUxRjcwMjAeFw0yNjA2MTcwNjEwMjRaFw0yNjA2MTgwODM5MjRaMDMxMTAvBgNV BAMTKDZENDZFNzM0NDc0RTZCRkZFMjk5MTlBRUNBMkU3MTEwQzQwQzlFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2h3kNP4PjukrLSlg1VljdLal E950GnbVHU33jM3kP8rXToVSw1O6gtVLJMTUCjaYIlZjVvP5xoLYj386XOJppc9v iMiTiduC6OvKz/voXMS7uMtXYpkiIKe+PMHncPGHCak8kPWVdTe/CZ4w/+jtGl4l dYNKsqFNDlQTYNmCNCUChurH5LAf/0qgt0ywDAOeKrJ4UTHaPRZsIp1YfC5CDMeY hd+MgSZD88f3a9cKJsG2Maqxg/e+vRlMeGIJBpmkxjwW9Yqah7dznu3Upy1gnfjE Q+v56kKhGxQa6UoVdOLkocdprrgYP8y/QHmHSkfK2YeU6VlLj/oZ1gNg7Gm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUbnNEdOa//imRmuyi5xEMQMnn0wHwYDVR0j BBgwFoAUyrzznnUtDK2m4hTk/J1+f5tR9wIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY4ZGU5MWItNjM2Yi00ZGE0LWIxZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3 NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5QjUxRjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUJDRjM5RTc1MkQwQ0FEQTZFMjE0RTRGQzlEN0U3RjlCNTFG NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdF N0Y5QjUxRjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5uGntTH2i2HRrt8MsAMP4VRnNQDAvjeGhc cUQGOH32c1qdyUqDwiUCsLveD5P8anPSP5gsLvUgSl8UjogoCUDb5leWd/pltK16 scYfocFPbJOF6vfPjbjiWfK2+mBKBMyFBn9tCcR7C842nHoLjRc10q9SIo0YVNcZ c+2vU12O6BGD8W9s4o7dhFq+DjXpLlirl87zuLCfn24p0a0SoSGqWjta9EsCS1Lb LPV5JdVXXWIHXXuR61xzL4FJv5aQxsnTqKOdCi9opLSrkzy4xIaFUZoTjCZdF5S+ oa4ncCmUwg5g6jSmcQcbiZz+LxlsziHb9wzYdfAxFE4Mxi1Px2c= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:47 2026 by rpki-client