$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: OsYkMWxjpPSkbA+U15xinEDIdSMt9PdzagwF42zgcsw= Subject key identifier: BC:7E:88:84:CF:04:5A:E9:B5:E8:72:5D:9B:41:42:CB:07:0D:7D:DD Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 44DFF49B4049C90724E8C27F664BD7B9CC0B3D0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 0202 Signing time: Wed 25 Mar 2026 19:25:03 +0000 Manifest this update: Wed 25 Mar 2026 19:20:03 +0000 Manifest next update: Sat 28 Mar 2026 21:28:03 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=) 2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=) 3: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: eVnVRKlI1WHHK1XFQ9WQEYcH0NRMOsCgFEEiBPRtD64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:df:f4:9b:40:49:c9:07:24:e8:c2:7f:66:4b:d7:b9:cc:0b:3d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Mar 25 19:20:03 2026 GMT Not After : Mar 28 21:28:03 2026 GMT Subject: CN=BC7E8884CF045AE9B5E8725D9B4142CB070D7DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:79:03:04:ca:b5:16:3d:74:d8:e2:bd:11: 9a:d4:8f:d4:55:85:14:20:76:59:4f:03:4e:f6:26: bf:09:dd:d3:75:da:8d:08:7d:36:98:81:e2:38:7d: 79:f1:04:c7:71:98:ff:2f:10:c5:1d:1c:d1:01:6e: 20:34:13:bf:69:fe:51:67:77:00:ed:d9:cb:e4:96: 81:bc:53:b4:e1:80:0c:e3:6c:ad:fb:3f:2c:31:40: 03:a0:f8:89:f5:b6:c4:ff:b5:1e:5b:6f:6d:da:17: 76:fb:a9:86:89:dc:44:2d:57:08:4e:b2:6f:01:85: fe:7b:20:9b:2e:86:42:18:5b:3b:98:01:db:ce:49: 1c:6d:b0:0f:92:b4:61:62:3b:64:83:86:77:0f:39: 04:b4:ac:80:80:9c:30:87:81:5a:fc:1f:bc:8f:3e: 11:68:fa:ee:2f:b2:63:11:84:9f:1b:33:33:ba:6b: b3:09:4e:d4:28:42:9b:39:36:8a:bd:52:bd:8d:01: 5c:db:65:32:c2:78:b3:d4:2f:7a:33:9f:12:9e:28: f1:3f:27:48:ce:09:26:7f:90:06:5b:3f:44:7f:66: 30:c8:a9:86:a7:f4:9d:e1:e0:b2:b6:d9:a4:c4:48: 44:3f:9e:ff:59:17:d7:83:7d:09:04:b6:ed:50:2e: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7E:88:84:CF:04:5A:E9:B5:E8:72:5D:9B:41:42:CB:07:0D:7D:DD X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:bb:f4:e7:93:65:e7:b7:78:60:7f:70:cf:d7:e8:a6:f8: b2:f5:64:63:ab:31:c8:cd:4c:51:ef:ca:f2:0d:15:0d:21:9b: f4:eb:fc:fc:3b:b5:a6:ca:f5:b7:a0:b7:b8:5f:c5:54:38:08: ee:55:72:ed:b5:75:a7:c5:31:f5:04:9e:fa:02:6e:e6:cf:ae: dd:5b:85:31:3d:70:6a:cf:c4:16:cb:71:39:a9:6d:fc:49:66: b5:58:eb:75:37:d3:45:bc:54:e3:8e:e8:02:c9:12:ee:60:1b: 53:bf:b4:44:20:b2:27:8e:da:44:5d:85:9d:2a:c6:3b:2f:89: a2:25:b4:a8:ce:d1:e9:85:75:54:2e:b2:f6:7f:84:a5:2e:0a: b9:4c:71:ae:75:b3:83:8e:8f:83:6e:59:5b:e5:9d:3e:7d:e0: a0:81:83:17:01:3d:75:12:d1:2c:2e:b5:c0:88:5f:91:43:ce: fe:4d:18:f4:ed:e0:e3:92:f1:fd:75:18:6c:98:d7:37:d2:10: 3a:bb:da:d6:3b:9d:06:f3:21:ea:77:1a:48:61:91:b9:62:a2: 58:d9:38:cc:79:35:9a:3c:ae:e2:19:1b:2d:37:24:c5:e5:d3: ce:bb:f8:71:57:0a:36:22:69:70:ae:6d:68:a8:fd:3f:59:fa: 0a:62:6a:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURN/0m0BJyQck6MJ/ZkvXucwLPQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNjAzMjUxOTIwMDNaFw0yNjAzMjgyMTI4MDNaMDMxMTAvBgNV BAMTKEJDN0U4ODg0Q0YwNDVBRTlCNUU4NzI1RDlCNDE0MkNCMDcwRDdEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKXkDBMq1Fj102OK9EZrUj9RV hRQgdllPA072Jr8J3dN12o0IfTaYgeI4fXnxBMdxmP8vEMUdHNEBbiA0E79p/lFn dwDt2cvkloG8U7ThgAzjbK37PywxQAOg+In1tsT/tR5bb23aF3b7qYaJ3EQtVwhO sm8Bhf57IJsuhkIYWzuYAdvOSRxtsA+StGFiO2SDhncPOQS0rICAnDCHgVr8H7yP PhFo+u4vsmMRhJ8bMzO6a7MJTtQoQps5Noq9Ur2NAVzbZTLCeLPUL3oznxKeKPE/ J0jOCSZ/kAZbP0R/ZjDIqYan9J3h4LK22aTESEQ/nv9ZF9eDfQkEtu1QLo5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvH6IhM8EWum16HJdm0FCywcNfd0wHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoou/Tnk2Xnt3hgf3DP1+im+LL1ZGOrMcjN TFHvyvINFQ0hm/Tr/Pw7tabK9begt7hfxVQ4CO5Vcu21dafFMfUEnvoCbubPrt1b hTE9cGrPxBbLcTmpbfxJZrVY63U300W8VOOO6ALJEu5gG1O/tEQgsieO2kRdhZ0q xjsviaIltKjO0emFdVQusvZ/hKUuCrlMca51s4OOj4NuWVvlnT594KCBgxcBPXUS 0SwutcCIX5FDzv5NGPTt4OOS8f11GGyY1zfSEDq72tY7nQbzIep3GkhhkblioljZ OMx5NZo8ruIZGy03JMXl0867+HFXCjYiaXCubWio/T9Z+gpiag0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:31 2026 by rpki-client