$ rpki-client -vvf rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft File: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft (raw, json) Hash identifier: FIAQPaPmCnJ5OhXGHpHztO9srmFep8Nr5fqrZEXXTgo= Subject key identifier: 3F:D2:CC:37:6A:D4:77:7F:2E:B8:A4:BD:A2:4E:57:36:E1:FC:79:D3 Authority key identifier: CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 Certificate issuer: /CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Certificate serial: 4670B5A028C3DA2BAEE02307EEA7D7D3D9B111C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:22:18 +0000 Manifest this update: Tue 12 May 2026 23:17:18 +0000 Manifest next update: Wed 13 May 2026 23:44:18 +0000 Files and hashes: 1: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: shzN9V44H6sJbyc7XtBZ0Ia8BJHs5w38s6/XgarDDV4=) 2: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: kp5yEvA04MPtCYbrno7JgwGY6J9dneDRmDS5pzuyNcQ=) 3: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl (hash: 6SCGPenXaLcBU1Re87R+lW4oUi2Atd08T2b6+dGass4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:70:b5:a0:28:c3:da:2b:ae:e0:23:07:ee:a7:d7:d3:d9:b1:11:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Validity Not Before: May 12 23:17:18 2026 GMT Not After : May 13 23:44:18 2026 GMT Subject: CN=3FD2CC376AD4777F2EB8A4BDA24E5736E1FC79D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:79:9c:a2:d4:e4:0e:cf:19:33:5c:6a:8e: ed:af:17:41:02:6e:bc:3a:92:61:91:20:5a:de:8b: ce:e4:72:4f:15:31:ae:40:fa:b2:ad:5b:1a:b7:db: af:dd:51:32:72:d8:6e:6b:80:22:29:66:8d:4d:6a: 1b:46:d4:c1:ed:d4:42:a2:01:eb:d4:ef:57:6d:8d: f8:60:6c:21:fb:ac:c6:28:62:ca:16:f9:d6:f6:16: a7:4f:0a:33:32:24:2f:66:80:4d:44:d6:b1:bc:4d: 1b:d8:cd:0d:c9:5b:4e:3f:82:20:42:72:d9:0a:96: 83:61:57:56:5e:f2:44:3a:9d:23:e0:e3:e2:a2:92: 67:a0:59:37:12:f1:43:4f:8b:c7:2b:38:0a:5c:79: 8b:67:cf:4c:fb:65:f3:87:82:89:be:f0:44:e4:f3: 56:71:6b:fe:2f:93:41:27:9f:c2:14:90:ee:08:6b: 67:8d:1e:d1:a1:91:e8:d5:7a:b8:92:3e:df:31:73: 21:87:20:1b:b7:29:80:d9:70:d4:7d:1b:ec:af:2b: 7c:bc:bc:99:cb:02:90:4f:4f:a7:b1:c7:af:19:c8: 68:db:19:96:b6:9b:28:10:91:bc:14:53:94:8e:45: 6a:1c:bd:87:f0:41:33:db:96:b7:9d:61:64:00:a2: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D2:CC:37:6A:D4:77:7F:2E:B8:A4:BD:A2:4E:57:36:E1:FC:79:D3 X509v3 Authority Key Identifier: keyid:CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a3:e2:9a:11:f0:6d:21:5d:e0:41:3f:63:ee:8f:cd:9c:28: dd:82:90:ce:ee:ba:42:74:e8:35:73:11:7a:7c:4e:7f:15:15: 84:59:d0:9f:d1:04:cd:c4:ca:75:8d:8c:e7:ae:db:e4:8c:13: 52:80:85:93:56:d0:20:f6:95:9b:e3:bd:87:d7:57:9d:70:a4: af:c4:dd:21:5e:0c:84:9b:44:df:99:fb:c1:cf:34:85:a2:dd: 53:21:a1:52:8b:95:5d:b7:6a:2a:c8:35:48:11:21:19:d3:27: 62:12:cc:0f:3c:02:cc:80:03:3b:c7:11:e3:c7:6f:c9:a9:81: 4f:36:16:1a:0e:f2:89:73:79:f5:55:e0:91:3f:e0:d5:ae:04: e4:32:78:f7:f1:68:10:e6:69:3d:97:d0:5b:c0:64:58:cb:57: 3c:c2:58:eb:7f:60:a6:2b:99:c9:b0:04:69:99:66:4b:a2:3f: 97:07:0f:51:9b:4c:02:49:88:ab:dd:1d:a1:49:ed:84:61:31: 87:cf:ce:9b:13:b9:be:c9:9e:5c:af:a9:13:57:f5:ce:e9:44: fc:a2:a6:f1:2c:26:9f:e9:bf:e1:e2:2e:4d:3a:d6:87:0c:99: 7a:58:9e:37:51:03:79:15:4d:94:73:cf:fc:51:e6:32:03:de: 67:e2:53:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnC1oCjD2iuu4CMH7qfX09mxEcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1 RTJCQ0Q4MTAeFw0yNjA1MTIyMzE3MThaFw0yNjA1MTMyMzQ0MThaMDMxMTAvBgNV BAMTKDNGRDJDQzM3NkFENDc3N0YyRUI4QTRCREEyNEU1NzM2RTFGQzc5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsXmcotTkDs8ZM1xqju2vF0EC brw6kmGRIFrei87kck8VMa5A+rKtWxq326/dUTJy2G5rgCIpZo1NahtG1MHt1EKi AevU71dtjfhgbCH7rMYoYsoW+db2FqdPCjMyJC9mgE1E1rG8TRvYzQ3JW04/giBC ctkKloNhV1Ze8kQ6nSPg4+KikmegWTcS8UNPi8crOApceYtnz0z7ZfOHgom+8ETk 81Zxa/4vk0Enn8IUkO4Ia2eNHtGhkejVeriSPt8xcyGHIBu3KYDZcNR9G+yvK3y8 vJnLApBPT6exx68ZyGjbGZa2mygQkbwUU5SORWocvYfwQTPblredYWQAogbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP9LMN2rUd38uuKS9ok5XNuH8edMwHwYDVR0j BBgwFoAUy7neQn5xJrNiTm/48KwdrF4rzYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzZWJhYmItOTk5Zi00ZjNlLTg0YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3 RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1RTJCQ0Q4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkI5REU0MjdFNzEyNkIzNjI0RTZGRjhGMEFDMURBQzVFMkJD RDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFE QUM1RTJCQ0Q4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAij4poR8G0hXeBBP2Puj82cKN2CkM7uukJ0 6DVzEXp8Tn8VFYRZ0J/RBM3EynWNjOeu2+SME1KAhZNW0CD2lZvjvYfXV51wpK/E 3SFeDISbRN+Z+8HPNIWi3VMhoVKLlV23airINUgRIRnTJ2ISzA88AsyAAzvHEePH b8mpgU82FhoO8olzefVV4JE/4NWuBOQyePfxaBDmaT2X0FvAZFjLVzzCWOt/YKYr mcmwBGmZZkuiP5cHD1GbTAJJiKvdHaFJ7YRhMYfPzpsTub7JnlyvqRNX9c7pRPyi pvEsJp/pv+HiLk061ocMmXpYnjdRA3kVTZRzz/xR5jID3mfiU+4= -----END CERTIFICATE-----Generated at Wed May 13 07:14:19 2026 by rpki-client