$ rpki-client -vvvf rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft File: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft (raw, json) Hash identifier: B4cSQl/eN5L0umaU6lMi+ThDAJ6JbH1Fa/RZbPVe+j4= Subject key identifier: CA:B2:63:57:57:30:94:6F:E4:E0:7A:5B:4F:C6:BA:8C:DC:ED:50:3E Authority key identifier: CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 Certificate issuer: /CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Certificate serial: 059FE61C8C8A5F6A7E6525669E79E786274DE0B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft Manifest number: BC Signing time: Mon 21 Sep 2026 03:30:51 +0000 Manifest this update: Mon 21 Sep 2026 03:25:51 +0000 Manifest next update: Tue 22 Sep 2026 05:36:51 +0000 Files and hashes: 1: CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl (hash: HkiM1MsiOw8IZ8ovW8D/aPpsqWfnYJm/aJiTW8RYpCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9f:e6:1c:8c:8a:5f:6a:7e:65:25:66:9e:79:e7:86:27:4d:e0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702 Validity Not Before: Sep 21 03:25:51 2026 GMT Not After : Sep 22 05:36:51 2026 GMT Subject: CN=CAB263575730946FE4E07A5B4FC6BA8CDCED503E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:ff:57:95:0a:11:1b:76:2e:86:41:5b:0a: 08:14:b3:08:50:b6:d3:09:a3:21:47:a0:b4:84:60: bd:4f:02:cc:1c:97:40:96:b4:65:4b:c2:2a:d0:29: 79:53:27:9f:a3:f9:0b:31:3a:1d:95:66:26:68:9a: 28:69:a5:3a:38:d2:90:41:89:88:f8:9e:bf:cb:51: 1e:bd:34:e0:8e:b8:68:8d:9a:70:f9:94:20:8f:a0: 11:13:6f:a2:90:55:e7:97:99:0b:42:e9:65:5d:63: 2a:ee:11:cb:2a:2d:d1:b0:2e:6e:a4:dc:11:87:3b: c8:ee:af:28:36:6d:12:08:b6:ef:57:8e:d3:5a:a9: 51:df:99:dc:53:18:59:61:2e:58:2f:ea:0e:7f:52: 6e:33:c4:2c:16:60:90:2c:8a:e8:f9:54:50:35:b0: de:03:d9:15:61:75:90:a5:4e:63:5b:73:06:2c:bd: db:4e:de:4f:e6:2c:36:ff:66:91:4c:c8:01:7e:6a: 95:c5:68:2f:47:12:ce:98:e6:4a:08:28:a5:21:d3: aa:bd:35:1e:98:9d:df:f5:d7:be:cf:e0:b8:02:13: 35:08:a7:ee:c1:ae:5a:24:e8:9e:43:0b:7a:c5:0d: 37:9e:0a:74:12:a3:60:00:be:d5:d0:e1:84:70:5d: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:63:57:57:30:94:6F:E4:E0:7A:5B:4F:C6:BA:8C:DC:ED:50:3E X509v3 Authority Key Identifier: keyid:CA:BC:F3:9E:75:2D:0C:AD:A6:E2:14:E4:FC:9D:7E:7F:9B:51:F7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/CABCF39E752D0CADA6E214E4FC9D7E7F9B51F702.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f9:48:f7:24:51:71:aa:67:47:96:9f:88:59:7e:9f:e0:f7: b0:cf:6d:7b:3d:1f:9f:69:e2:f9:c4:29:d2:09:bb:31:7b:33: 0b:0f:de:37:6d:1f:54:ab:d4:68:ed:1e:8f:d3:62:2c:48:93: e6:27:bf:e1:b0:29:c0:c6:0b:02:5e:eb:84:38:24:aa:c2:50: a0:6d:1e:41:1b:54:e4:de:6d:29:f1:05:30:ac:85:38:3f:96: f5:ba:ae:9d:98:78:62:86:7a:72:bb:64:6b:1c:c4:04:1a:a4: 9f:4d:70:77:f8:cc:f8:0e:26:b5:70:c4:3c:2c:1e:44:e8:46: 01:a2:4b:d7:e5:3d:d8:e8:3e:d6:56:97:6e:b3:fa:f9:ce:e4: d9:97:07:a0:d6:8b:ac:7c:32:50:fa:f6:09:42:95:af:6a:cc: 51:bb:c1:6b:3c:a0:1e:9d:18:b8:b8:4e:83:a4:7e:33:b7:0d: 52:c6:9c:c9:36:9b:5b:59:45:99:53:18:5f:ba:9d:49:85:d8: 8f:27:31:ee:78:2a:4f:d4:d7:c2:85:c2:29:4d:cb:47:e8:d4: 0a:dc:4b:0c:c4:b0:53:7a:d9:d2:ae:3e:89:67:68:11:03:15: ee:ed:4f:b3:57:28:9b:27:ef:3f:85:68:eb:b0:60:5c:37:d2: ff:7e:98:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZ/mHIyKX2p+ZSVmnnnnhidN4LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5 QjUxRjcwMjAeFw0yNjA5MjEwMzI1NTFaFw0yNjA5MjIwNTM2NTFaMDMxMTAvBgNV BAMTKENBQjI2MzU3NTczMDk0NkZFNEUwN0E1QjRGQzZCQThDRENFRDUwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHv9XlQoRG3YuhkFbCggUswhQ ttMJoyFHoLSEYL1PAswcl0CWtGVLwirQKXlTJ5+j+QsxOh2VZiZomihppTo40pBB iYj4nr/LUR69NOCOuGiNmnD5lCCPoBETb6KQVeeXmQtC6WVdYyruEcsqLdGwLm6k 3BGHO8juryg2bRIItu9XjtNaqVHfmdxTGFlhLlgv6g5/Um4zxCwWYJAsiuj5VFA1 sN4D2RVhdZClTmNbcwYsvdtO3k/mLDb/ZpFMyAF+apXFaC9HEs6Y5koIKKUh06q9 NR6Ynd/1177P4LgCEzUIp+7Brlok6J5DC3rFDTeeCnQSo2AAvtXQ4YRwXbc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyrJjV1cwlG/k4HpbT8a6jNztUD4wHwYDVR0j BBgwFoAUyrzznnUtDK2m4hTk/J1+f5tR9wIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY4ZGU5MWItNjM2Yi00ZGE0LWIxZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3 NTJEMENBREE2RTIxNEU0RkM5RDdFN0Y5QjUxRjcwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUJDRjM5RTc1MkQwQ0FEQTZFMjE0RTRGQzlEN0U3RjlCNTFG NzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvQ0FCQ0YzOUU3NTJEMENBREE2RTIxNEU0RkM5RDdF N0Y5QjUxRjcwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF75SPckUXGqZ0eWn4hZfp/g97DPbXs9H59p 4vnEKdIJuzF7MwsP3jdtH1Sr1GjtHo/TYixIk+Ynv+GwKcDGCwJe64Q4JKrCUKBt HkEbVOTebSnxBTCshTg/lvW6rp2YeGKGenK7ZGscxAQapJ9NcHf4zPgOJrVwxDws HkToRgGiS9flPdjoPtZWl26z+vnO5NmXB6DWi6x8MlD69glCla9qzFG7wWs8oB6d GLi4ToOkfjO3DVLGnMk2m1tZRZlTGF+6nUmF2I8nMe54Kk/U18KFwilNy0fo1Arc SwzEsFN62dKuPolnaBEDFe7tT7NXKJsn7z+FaOuwYFw30v9+mO4= -----END CERTIFICATE-----Generated at Mon Sep 21 16:23:16 2026 by rpki-client