$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: fk8rK0N/CshBh0KoegPLcfxt2xXYNYX2d6Dp4kqtvOk= Subject key identifier: E2:40:E1:08:86:92:57:1D:3B:1F:95:66:72:F9:80:A1:46:03:3D:D1 Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 590E1595C36BEACFA6E9074415E8C44DF803A05D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:11 +0000 Manifest this update: Tue 12 May 2026 20:48:11 +0000 Manifest next update: Thu 14 May 2026 00:18:11 +0000 Files and hashes: 1: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) 2: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) 3: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: Pb64omcYxWHRG3oMw9PMPJvJJ+ZsuQKlZVJKuy0l0N0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0e:15:95:c3:6b:ea:cf:a6:e9:07:44:15:e8:c4:4d:f8:03:a0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: May 12 20:48:11 2026 GMT Not After : May 14 00:18:11 2026 GMT Subject: CN=E240E1088692571D3B1F956672F980A146033DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:ef:fb:d4:f2:34:03:26:fb:7b:b7:e4:65: cf:15:9b:3d:e9:27:77:42:d5:ba:38:c6:d9:0e:22: cc:ba:85:1c:dc:9a:c3:c2:7c:58:3a:aa:78:4c:bc: 38:72:7f:64:61:03:12:6c:ed:55:fd:f6:dd:c2:59: da:2a:da:4c:fd:3b:b7:01:6b:67:ba:35:e5:e9:20: 80:4b:cc:ec:b4:31:d7:c5:67:1f:2b:b2:a6:9c:3d: 18:f0:76:4d:5d:be:18:0b:09:3b:86:9c:ba:1a:ca: 2d:8e:3b:7a:b8:32:7b:14:cf:25:68:98:85:35:e2: 44:3b:d3:17:4a:0f:d6:0b:8c:09:f0:ea:1d:e7:d0: 35:25:21:57:b2:c0:f7:f1:12:c5:ef:04:7c:94:18: 27:cd:9b:c8:79:62:e4:b3:4c:00:f6:d6:5e:88:b7: 8d:10:38:28:43:da:96:be:9d:9f:5a:20:81:1d:7d: 20:4a:d0:a1:48:e6:c9:33:68:0d:1d:87:6c:b6:78: 37:7a:a3:ef:75:09:d2:6f:04:fc:c8:64:d5:8e:80: 6b:6a:e0:c1:9c:c3:9b:3e:d0:2a:20:ea:c0:89:dc: 49:1d:3f:db:25:0c:8b:83:bd:24:fb:2c:49:8f:f3: c1:67:9e:85:dd:5f:7b:03:07:cd:54:74:84:c5:d7: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:40:E1:08:86:92:57:1D:3B:1F:95:66:72:F9:80:A1:46:03:3D:D1 X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:15:8b:a8:17:92:3c:f6:27:9b:e5:5b:aa:0d:b5:cb:ea:f8: 7b:f7:e3:a4:ee:6f:1c:bf:1e:93:d5:e9:46:b6:11:e5:9c:1e: 89:8a:0c:47:55:8d:8d:5c:39:f8:ba:0d:c5:b6:2d:56:e5:97: d8:16:59:f8:aa:d6:77:18:82:36:03:43:4c:5d:f7:7c:8e:03: a9:f9:12:f7:d5:b2:4d:ea:ef:6e:03:3d:94:1e:d7:d5:76:55: 8f:32:20:8c:76:a3:70:b3:42:ad:0e:5f:6e:5b:76:3e:53:a3: b7:fa:99:37:d6:dd:af:dc:a6:eb:20:a9:57:84:39:aa:7f:e5: 69:1d:c9:a3:d5:9c:0d:b6:d6:c6:f0:ec:2b:12:3e:df:b9:e6: 5d:fc:61:2a:7b:5b:04:50:c4:37:50:ec:7f:38:a8:81:b0:a0: a6:3e:b7:b7:48:6f:3c:41:cd:06:c7:3b:af:19:f3:d7:27:7c: 34:47:d0:17:9e:27:c2:e7:f1:6c:d1:4c:eb:56:fb:3d:f7:e2: 59:08:3d:3b:01:82:00:9d:5d:7d:a5:e5:da:76:50:32:f0:25: a1:00:12:04:90:0c:6e:0a:b3:81:f3:c8:ca:b7:01:fc:d2:3a: ed:16:5c:64:b2:07:7a:dd:64:19:dc:ce:0c:fb:8e:24:93:01: c2:9e:43:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQ4VlcNr6s+m6QdEFejETfgDoF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjA1MTIyMDQ4MTFaFw0yNjA1MTQwMDE4MTFaMDMxMTAvBgNV BAMTKEUyNDBFMTA4ODY5MjU3MUQzQjFGOTU2NjcyRjk4MEExNDYwMzNERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Vu/71PI0Ayb7e7fkZc8Vmz3p J3dC1bo4xtkOIsy6hRzcmsPCfFg6qnhMvDhyf2RhAxJs7VX99t3CWdoq2kz9O7cB a2e6NeXpIIBLzOy0MdfFZx8rsqacPRjwdk1dvhgLCTuGnLoayi2OO3q4MnsUzyVo mIU14kQ70xdKD9YLjAnw6h3n0DUlIVeywPfxEsXvBHyUGCfNm8h5YuSzTAD21l6I t40QOChD2pa+nZ9aIIEdfSBK0KFI5skzaA0dh2y2eDd6o+91CdJvBPzIZNWOgGtq 4MGcw5s+0Cog6sCJ3EkdP9slDIuDvST7LEmP88FnnoXdX3sDB81UdITF19N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kDhCIaSVx07H5VmcvmAoUYDPdEwHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEVi6gXkjz2J5vlW6oNtcvq+Hv346Tubxy/ HpPV6Ua2EeWcHomKDEdVjY1cOfi6DcW2LVbll9gWWfiq1ncYgjYDQ0xd93yOA6n5 EvfVsk3q724DPZQe19V2VY8yIIx2o3CzQq0OX25bdj5To7f6mTfW3a/cpusgqVeE Oap/5WkdyaPVnA221sbw7CsSPt+55l38YSp7WwRQxDdQ7H84qIGwoKY+t7dIbzxB zQbHO68Z89cnfDRH0BeeJ8Ln8WzRTOtW+z334lkIPTsBggCdXX2l5dp2UDLwJaEA EgSQDG4Ks4HzyMq3AfzSOu0WXGSyB3rdZBnczgz7jiSTAcKeQ60= -----END CERTIFICATE-----Generated at Wed May 13 12:01:53 2026 by rpki-client