$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: tWNtksxKwCCoH5BPRYxzDuNHb3F8JSHsUiiSnTqzCpA= Subject key identifier: E6:F6:CA:51:2E:71:13:FC:8A:33:A6:27:42:43:25:AA:CD:48:4C:F1 Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 1E93CC9DA1A7A18D247575CAD1AE7FEA4AC23921 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: CF Signing time: Sat 03 Oct 2026 19:19:19 +0000 Manifest this update: Sat 03 Oct 2026 19:14:19 +0000 Manifest next update: Sun 04 Oct 2026 23:00:19 +0000 Files and hashes: 1: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: Z6Zq9eygtx4d++PSt88JfSKjAax6YmQfq5kK7ieaaPU=) 2: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) 3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 23:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:93:cc:9d:a1:a7:a1:8d:24:75:75:ca:d1:ae:7f:ea:4a:c2:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: Oct 3 19:14:19 2026 GMT Not After : Oct 4 23:00:19 2026 GMT Subject: CN=E6F6CA512E7113FC8A33A627424325AACD484CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:ea:ab:65:44:3f:36:4a:e2:05:ba:a4:53: 2d:7b:57:c8:90:a4:b0:3d:10:74:95:77:8e:b9:8f: 80:d6:8f:d2:17:2e:7e:fa:de:fc:ac:89:51:75:37: 83:96:84:57:dd:d0:7e:93:3d:6c:c7:c1:85:e2:fc: 40:0c:ba:05:10:3f:8a:9c:3b:44:59:b0:14:a6:3e: 64:7e:5f:43:3e:6b:75:57:19:ad:4c:8b:ea:03:de: 0b:9e:63:8f:f7:1e:d4:2c:98:6f:5e:52:a7:1a:65: ff:15:13:55:8a:b5:47:72:53:11:f3:e6:c7:fb:55: 6e:46:1c:25:0f:d2:0a:fc:ba:81:5b:d6:3c:cb:37: 7c:fa:6a:bf:1d:00:4f:e4:23:72:c2:f2:e6:c1:94: 2a:36:3b:b1:af:19:c2:d5:7b:50:9c:17:8e:78:a9: c9:32:23:4c:4f:17:5b:8e:eb:13:6a:20:ba:b3:cb: 12:4c:61:8a:b6:8d:5b:59:0a:60:89:25:c6:94:d3: 43:0a:27:04:16:38:55:b8:0a:2d:f0:5d:c2:02:a8: 0a:f2:ac:0b:d6:39:81:99:a1:95:66:eb:5e:9b:58: 05:77:0c:d6:21:a6:3e:7a:4c:ed:cf:db:e0:98:fb: 4b:f6:e8:81:88:3f:91:ef:0f:db:bb:de:ba:c0:14: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F6:CA:51:2E:71:13:FC:8A:33:A6:27:42:43:25:AA:CD:48:4C:F1 X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:75:9f:cd:a7:d5:1a:7e:ea:91:1e:53:3d:7d:69:2c:db:f1: d6:4d:67:bf:62:f9:fb:4b:8e:95:47:72:0f:ad:73:14:4d:07: a3:67:5d:dd:28:72:df:d4:70:c5:99:eb:89:20:63:ac:be:6f: aa:8a:32:3f:36:4a:63:b0:04:b9:a1:ca:95:b6:81:f0:d5:f6: da:db:6c:ec:03:81:e7:36:c4:2e:81:24:bd:1a:29:0d:30:39: 8c:85:e0:df:25:ac:20:c4:f3:a1:95:43:59:a5:67:a6:b6:fc: bd:a2:ab:d2:9e:e9:e3:89:dd:4c:ad:4d:f7:0e:69:7b:32:cf: 25:93:b4:60:7c:86:5e:3e:26:0c:88:76:f7:41:9e:69:e4:86: 22:3d:e8:d9:27:05:e3:5c:f4:54:48:35:b5:5e:36:03:23:1a: 2c:a4:37:c4:56:51:90:d0:93:74:df:cf:44:9d:41:7d:c3:1b: 6c:a0:52:8b:1b:1b:38:83:53:ac:09:16:9a:59:9a:07:73:a8: dc:0d:61:7a:5e:f3:ca:e4:49:67:8f:99:69:38:55:82:66:af: db:89:83:0c:d2:cd:db:d2:51:65:15:aa:84:c9:5f:fc:09:2d: 3d:c9:b9:9b:f0:51:74:35:d3:72:3b:ca:cb:81:37:e1:4f:d9: 75:45:72:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpPMnaGnoY0kdXXK0a5/6krCOSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjEwMDMxOTE0MTlaFw0yNjEwMDQyMzAwMTlaMDMxMTAvBgNV BAMTKEU2RjZDQTUxMkU3MTEzRkM4QTMzQTYyNzQyNDMyNUFBQ0Q0ODRDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHuqrZUQ/NkriBbqkUy17V8iQ pLA9EHSVd465j4DWj9IXLn763vysiVF1N4OWhFfd0H6TPWzHwYXi/EAMugUQP4qc O0RZsBSmPmR+X0M+a3VXGa1Mi+oD3gueY4/3HtQsmG9eUqcaZf8VE1WKtUdyUxHz 5sf7VW5GHCUP0gr8uoFb1jzLN3z6ar8dAE/kI3LC8ubBlCo2O7GvGcLVe1CcF454 qckyI0xPF1uO6xNqILqzyxJMYYq2jVtZCmCJJcaU00MKJwQWOFW4Ci3wXcICqAry rAvWOYGZoZVm616bWAV3DNYhpj56TO3P2+CY+0v26IGIP5HvD9u73rrAFD4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vbKUS5xE/yKM6YnQkMlqs1ITPEwHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd1n82n1Rp+6pEeUz19aSzb8dZNZ79i+ftL jpVHcg+tcxRNB6NnXd0oct/UcMWZ64kgY6y+b6qKMj82SmOwBLmhypW2gfDV9trb bOwDgec2xC6BJL0aKQ0wOYyF4N8lrCDE86GVQ1mlZ6a2/L2iq9Ke6eOJ3UytTfcO aXsyzyWTtGB8hl4+JgyIdvdBnmnkhiI96NknBeNc9FRINbVeNgMjGiykN8RWUZDQ k3Tfz0SdQX3DG2ygUosbGziDU6wJFppZmgdzqNwNYXpe88rkSWePmWk4VYJmr9uJ gwzSzdvSUWUVqoTJX/wJLT3JuZvwUXQ103I7ysuBN+FP2XVFctw= -----END CERTIFICATE-----Generated at Sun Oct 4 07:35:25 2026 by rpki-client