$ rpki-client -vvf rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft File: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft (raw, json) Hash identifier: yR43NDTDeytu2+FkoSyOeCUTHRLBST2Oyqj4oUwPFtI= Subject key identifier: 71:2B:91:3B:D9:8F:84:06:B0:34:14:DD:E7:DA:F9:E8:97:E7:EC:00 Authority key identifier: CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 Certificate issuer: /CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Certificate serial: 0CB8FAF4BCF149BEE7D0B8BD4CF516DAE73F7B1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:11:09 +0000 Manifest this update: Thu 23 Jul 2026 13:06:09 +0000 Manifest next update: Fri 24 Jul 2026 15:43:09 +0000 Files and hashes: 1: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl (hash: F8TUS+6kOZBctadZ3OmUXO6wFjhJyueg2kse6Q4dwwI=) 2: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: kp5yEvA04MPtCYbrno7JgwGY6J9dneDRmDS5pzuyNcQ=) 3: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: shzN9V44H6sJbyc7XtBZ0Ia8BJHs5w38s6/XgarDDV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b8:fa:f4:bc:f1:49:be:e7:d0:b8:bd:4c:f5:16:da:e7:3f:7b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Validity Not Before: Jul 23 13:06:09 2026 GMT Not After : Jul 24 15:43:09 2026 GMT Subject: CN=712B913BD98F8406B03414DDE7DAF9E897E7EC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:0a:06:57:ca:24:2f:a8:9e:36:e4:54:06: 5e:35:84:dd:46:b3:f2:b9:69:ab:8f:d7:8f:7e:6f: f6:95:0a:c2:79:53:a1:f8:91:3f:b3:74:b1:ae:7f: 82:a2:e3:20:c6:cb:bf:7c:a9:a7:56:a8:b2:f4:b0: 5b:50:5b:02:0f:89:87:ad:2c:88:76:28:12:12:6b: ad:3c:96:25:00:ba:48:d9:90:5f:41:40:32:84:b6: 2d:4e:90:c9:89:2c:92:93:0f:70:6f:0c:e9:d3:f5: c1:2d:1f:89:05:38:d2:58:7e:a6:85:37:ce:47:92: 25:e4:05:20:88:53:4d:98:63:08:81:50:d2:fd:4b: 4e:2c:9e:6a:94:da:f8:87:6b:9a:26:7e:35:2c:07: 19:3f:a0:f1:5c:a0:64:fd:24:57:58:46:e4:8f:21: 78:e4:67:de:34:e5:5f:0b:a6:85:ce:b1:cf:99:c4: 3c:93:6c:6b:14:3a:d8:0e:e5:de:b2:ca:7a:90:86: 9d:83:b4:ef:21:ac:29:cd:f7:52:75:34:52:cc:8f: 96:94:0f:45:28:b6:e4:8a:19:08:82:79:c1:c0:cf: cc:b6:4c:df:82:2d:c1:42:a9:25:fe:63:4a:74:f8: 3a:be:6f:70:0f:1f:35:32:17:e6:93:99:ec:c3:e2: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:91:3B:D9:8F:84:06:B0:34:14:DD:E7:DA:F9:E8:97:E7:EC:00 X509v3 Authority Key Identifier: keyid:CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e2:80:be:0b:43:94:cd:30:1e:f9:58:3e:7f:01:d1:e7:ed: e4:4b:3e:6f:7d:93:df:cc:4d:2b:e5:60:07:d4:5b:d8:d1:3b: 5f:3f:02:e2:b4:74:d3:9c:35:57:4d:13:24:0f:8d:c0:93:b1: 7b:5e:0c:46:88:6a:aa:00:ec:3a:55:4c:7d:27:e5:db:e3:82: d1:e3:e6:fe:06:0e:6c:1c:0f:42:6a:46:a2:cb:c1:14:2c:86: 20:43:e1:16:60:ce:c5:e3:a2:f1:d7:fc:0b:d4:ec:47:20:d1: 9e:04:37:88:33:5b:9a:18:c1:8d:ed:45:5d:6e:9a:b0:a1:31: 8d:5e:61:21:94:05:2b:dd:40:56:4f:d0:87:38:fd:29:1d:f1: 49:70:e9:b3:c6:ca:c0:0b:22:16:26:df:ac:ca:e6:8c:52:50: d9:d9:24:eb:ab:78:e8:b7:7a:84:3c:9e:8b:81:78:6e:70:a3: e3:dd:23:4e:47:b0:ee:2d:2e:01:01:84:14:23:3b:d8:33:81: 3f:c7:36:68:99:1b:74:bf:cf:ba:cc:30:bf:a5:f5:1c:fc:bb: 10:f8:dd:34:e8:a0:fc:81:a5:e2:46:b5:d8:8a:5e:e5:de:d0: 6f:80:81:97:16:a4:05:9c:e2:ad:af:5b:e7:fd:7f:2b:90:2c: 33:f7:65:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLj69LzxSb7n0Li9TPUW2uc/ex8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1 RTJCQ0Q4MTAeFw0yNjA3MjMxMzA2MDlaFw0yNjA3MjQxNTQzMDlaMDMxMTAvBgNV BAMTKDcxMkI5MTNCRDk4Rjg0MDZCMDM0MTREREU3REFGOUU4OTdFN0VDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iAoGV8okL6ieNuRUBl41hN1G s/K5aauP149+b/aVCsJ5U6H4kT+zdLGuf4Ki4yDGy798qadWqLL0sFtQWwIPiYet LIh2KBISa608liUAukjZkF9BQDKEti1OkMmJLJKTD3BvDOnT9cEtH4kFONJYfqaF N85HkiXkBSCIU02YYwiBUNL9S04snmqU2viHa5omfjUsBxk/oPFcoGT9JFdYRuSP IXjkZ9405V8LpoXOsc+ZxDyTbGsUOtgO5d6yynqQhp2DtO8hrCnN91J1NFLMj5aU D0UotuSKGQiCecHAz8y2TN+CLcFCqSX+Y0p0+Dq+b3APHzUyF+aTmezD4utVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSuRO9mPhAawNBTd59r56Jfn7AAwHwYDVR0j BBgwFoAUy7neQn5xJrNiTm/48KwdrF4rzYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzZWJhYmItOTk5Zi00ZjNlLTg0YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3 RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1RTJCQ0Q4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkI5REU0MjdFNzEyNkIzNjI0RTZGRjhGMEFDMURBQzVFMkJD RDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFE QUM1RTJCQ0Q4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7igL4LQ5TNMB75WD5/AdHn7eRLPm99k9/M TSvlYAfUW9jRO18/AuK0dNOcNVdNEyQPjcCTsXteDEaIaqoA7DpVTH0n5dvjgtHj 5v4GDmwcD0JqRqLLwRQshiBD4RZgzsXjovHX/AvU7Ecg0Z4EN4gzW5oYwY3tRV1u mrChMY1eYSGUBSvdQFZP0Ic4/Skd8Ulw6bPGysALIhYm36zK5oxSUNnZJOureOi3 eoQ8nouBeG5wo+PdI05HsO4tLgEBhBQjO9gzgT/HNmiZG3S/z7rMML+l9Rz8uxD4 3TTooPyBpeJGtdiKXuXe0G+AgZcWpAWc4q2vW+f9fyuQLDP3ZbY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:04:36 2026 by rpki-client