$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft File: CDE6C05A893420EB6585B4E0E27BB14D54043614.mft (raw, json) Hash identifier: AcmRSkhv7riU3b38DIBJROthbPSFBj8d0RHPvn0f8Vc= Subject key identifier: B2:B3:8C:6D:F0:D0:72:0A:2F:25:1C:A9:8E:3C:2A:81:8D:17:F5:43 Authority key identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 Certificate issuer: /CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Certificate serial: 1DDB48C8DBF900908F7A06C31E6F836DF48CB9B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 18:26:54 +0000 Manifest this update: Sat 13 Jun 2026 18:21:54 +0000 Manifest next update: Sun 14 Jun 2026 20:10:54 +0000 Files and hashes: 1: CDE6C05A893420EB6585B4E0E27BB14D54043614.crl (hash: jS3isoat1WWMTt5o23kMxyQN11/o3Mqx+2yQvcxeJzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:db:48:c8:db:f9:00:90:8f:7a:06:c3:1e:6f:83:6d:f4:8c:b9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Validity Not Before: Jun 13 18:21:54 2026 GMT Not After : Jun 14 20:10:54 2026 GMT Subject: CN=B2B38C6DF0D0720A2F251CA98E3C2A818D17F543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:2d:f0:4a:39:b7:80:b8:fe:a0:53:ab:d0: 51:b4:5d:1a:78:d7:e1:aa:67:df:f3:2b:a7:97:a3: 89:e0:0e:25:c7:86:15:61:9c:ea:8d:c8:6a:ab:e7: 79:72:08:45:68:e9:b1:8c:57:d5:75:bd:5f:bc:fb: cd:78:df:17:af:6e:fb:da:da:1c:32:b8:67:43:d1: d3:b6:65:13:77:6c:5d:02:25:d7:cd:e7:37:08:d0: 93:5f:64:88:a1:4e:79:2e:3e:16:ba:12:96:d2:18: f5:97:e9:87:37:b5:a1:06:36:b2:ed:c9:2d:97:25: 30:b0:d6:e0:cf:d8:16:3a:c2:6a:28:e3:1e:70:28: 85:39:89:4f:5d:7a:4d:81:ec:22:bb:d0:c1:2b:e0: ec:cf:b6:97:18:c6:26:4b:3c:6d:64:85:12:9f:b8: 06:17:a2:a5:0b:cc:b2:0a:b5:30:c9:c3:11:5c:7d: 9a:e6:8b:fa:bd:38:5a:c5:73:43:d7:7b:e0:51:0f: bf:5a:2e:0d:72:54:29:85:b4:e6:19:fc:8f:9d:9a: 91:10:07:11:0f:4a:ad:33:e3:50:fd:29:08:1c:56: 65:1d:57:98:35:7f:1e:a4:19:35:28:03:1a:41:8d: 14:63:cb:14:2d:80:ca:79:c2:af:32:c1:e7:6f:0f: 69:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B3:8C:6D:F0:D0:72:0A:2F:25:1C:A9:8E:3C:2A:81:8D:17:F5:43 X509v3 Authority Key Identifier: keyid:CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:68:ac:8a:14:01:41:a4:a1:1a:ec:a9:19:54:2e:73:d7:ec: 91:14:e8:cf:bc:e1:e0:a2:96:47:3d:70:49:1e:0f:d0:ab:1e: d2:a0:77:58:59:a1:53:36:11:6b:53:cf:ff:64:f6:fb:f5:36: 63:3d:b4:90:82:2c:d3:47:27:38:64:47:26:ab:82:58:a8:d0: 82:65:eb:27:85:8c:33:dd:b6:aa:94:33:29:db:fd:81:67:db: 64:a4:9b:14:d7:96:dc:d5:16:f7:16:af:ee:e4:5e:e2:72:b8: 05:8e:d8:d1:07:ea:3d:a0:45:92:0e:f6:83:f8:48:e4:18:b3: 9c:e1:84:fc:68:e1:2b:47:32:55:b1:5b:0e:04:f4:ed:9c:0a: 81:fc:85:d3:8a:a5:84:13:02:bf:97:b2:fa:76:a6:c4:d8:c0: 50:f3:b2:ea:39:eb:bc:ca:b4:48:e3:f3:c6:83:1e:db:e6:40: 7d:ad:0d:cd:bb:c8:d6:50:5d:38:3f:2c:ba:c6:ae:63:bd:47: a5:88:9a:31:2c:84:a9:51:86:3b:95:f8:ec:aa:13:2e:d1:73: 93:f5:e7:e0:68:7d:29:87:ca:20:20:b1:e0:6e:e0:29:56:82: 7e:f8:8f:65:37:57:66:c6:55:23:b4:e2:d6:8c:ab:3c:ea:0e: 33:ee:59:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdtIyNv5AJCPegbDHm+DbfSMubcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1 NDA0MzYxNDAeFw0yNjA2MTMxODIxNTRaFw0yNjA2MTQyMDEwNTRaMDMxMTAvBgNV BAMTKEIyQjM4QzZERjBEMDcyMEEyRjI1MUNBOThFM0MyQTgxOEQxN0Y1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJy3wSjm3gLj+oFOr0FG0XRp4 1+GqZ9/zK6eXo4ngDiXHhhVhnOqNyGqr53lyCEVo6bGMV9V1vV+8+8143xevbvva 2hwyuGdD0dO2ZRN3bF0CJdfN5zcI0JNfZIihTnkuPha6EpbSGPWX6Yc3taEGNrLt yS2XJTCw1uDP2BY6wmoo4x5wKIU5iU9dek2B7CK70MEr4OzPtpcYxiZLPG1khRKf uAYXoqULzLIKtTDJwxFcfZrmi/q9OFrFc0PXe+BRD79aLg1yVCmFtOYZ/I+dmpEQ BxEPSq0z41D9KQgcVmUdV5g1fx6kGTUoAxpBjRRjyxQtgMp5wq8ywedvD2k1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsrOMbfDQcgovJRypjjwqgY0X9UMwHwYDVR0j BBgwFoAUzebAWok0IOtlhbTg4nuxTVQENhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiMjkyOGUtOWIzOS00YTkwLTk3ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4 OTM0MjBFQjY1ODVCNEUwRTI3QkIxNEQ1NDA0MzYxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREU2QzA1QTg5MzQyMEVCNjU4NUI0RTBFMjdCQjE0RDU0MDQz NjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvQ0RFNkMwNUE4OTM0MjBFQjY1ODVCNEUwRTI3QkIx NEQ1NDA0MzYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBorIoUAUGkoRrsqRlULnPX7JEU6M+84eCi lkc9cEkeD9CrHtKgd1hZoVM2EWtTz/9k9vv1NmM9tJCCLNNHJzhkRyarglio0IJl 6yeFjDPdtqqUMynb/YFn22SkmxTXltzVFvcWr+7kXuJyuAWO2NEH6j2gRZIO9oP4 SOQYs5zhhPxo4StHMlWxWw4E9O2cCoH8hdOKpYQTAr+Xsvp2psTYwFDzsuo567zK tEjj88aDHtvmQH2tDc27yNZQXTg/LLrGrmO9R6WImjEshKlRhjuV+OyqEy7Rc5P1 5+BofSmHyiAgseBu4ClWgn74j2U3V2bGVSO04taMqzzqDjPuWbQ= -----END CERTIFICATE-----Generated at Sat Jun 13 23:03:03 2026 by rpki-client