$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: CGVPqS8SDE6TrCAN7uO26nalJ5WiHIF3HcwQEYyAFtQ= Subject key identifier: DA:85:B0:E3:36:B2:41:28:FE:EE:9A:BC:C0:BE:71:35:9A:D5:B5:A6 Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 785864907AF50124A7B8DC2B2E9A2F91789353F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:38:49 +0000 Manifest this update: Fri 24 Jul 2026 03:33:49 +0000 Manifest next update: Sat 25 Jul 2026 04:12:49 +0000 Files and hashes: 1: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: sfdSOOU0Wfve+USeUFbPntsY42QRi039vc6B9yADUfI=) 2: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) 3: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:58:64:90:7a:f5:01:24:a7:b8:dc:2b:2e:9a:2f:91:78:93:53:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: Jul 24 03:33:49 2026 GMT Not After : Jul 25 04:12:49 2026 GMT Subject: CN=DA85B0E336B24128FEEE9ABCC0BE71359AD5B5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:ed:18:79:a5:6e:97:e5:c6:a6:d9:63:be: 47:60:ca:10:00:26:d3:47:72:15:23:aa:50:69:8d: 87:2e:14:ba:5c:00:ea:33:aa:56:d4:dd:31:a0:76: 7f:72:24:c1:3f:4a:96:d4:b7:92:95:ce:d1:5f:69: 75:88:a3:53:ec:37:a0:cf:4e:83:0c:b5:d0:da:db: c9:ff:6a:de:7d:70:c6:ef:d7:d0:a9:ad:0c:10:31: 46:8f:92:e8:90:0c:09:aa:18:b7:73:6c:0b:e4:f4: 48:74:d3:87:b0:fa:f2:9d:ab:f4:d8:30:ce:0f:c2: 5a:84:cc:1e:51:b0:02:28:0f:e3:e0:37:37:46:96: 92:2f:b8:1c:d3:7d:5f:47:0d:ee:37:f7:0e:10:32: c7:68:ab:6c:ef:58:eb:54:e3:5c:4e:c0:46:a7:6a: 8e:ba:2e:2e:29:3c:82:49:e5:f7:48:2c:93:ad:c1: 60:7c:94:a9:43:2a:50:a5:a0:fe:0d:c4:e3:92:be: 84:44:81:8f:c3:4b:b8:e1:e1:cf:28:99:2a:84:28: 9b:f7:4d:cb:79:8c:ad:a4:03:29:7b:fe:06:1f:5d: ec:3e:cd:de:2f:97:57:6f:95:64:ee:bf:e3:50:d8: e1:be:6c:44:1a:8c:42:27:6f:6c:b2:4c:95:ed:7e: 52:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:B0:E3:36:B2:41:28:FE:EE:9A:BC:C0:BE:71:35:9A:D5:B5:A6 X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:de:26:44:39:77:e9:28:26:4a:d2:c4:de:b3:30:5b:18:9a: 9a:7b:da:59:83:13:e7:a5:33:61:08:f6:18:5c:16:c8:b9:8e: 64:f7:f4:72:85:7e:c7:20:59:dc:1a:a0:d9:ca:77:c7:aa:80: 0f:1d:65:28:0f:68:76:ea:cc:31:36:c2:04:e3:ff:8a:51:2a: b1:8c:17:22:d3:99:e3:1e:0d:36:98:08:54:01:f3:3c:ee:6c: 6a:20:78:90:70:0d:12:01:49:d1:82:96:7d:af:cd:6e:15:71: 0d:1a:b6:1f:9a:4e:42:db:98:8d:ed:cb:eb:39:7e:83:14:6a: 84:e6:8a:1f:5a:42:05:ee:d3:90:f6:ee:a4:40:0b:ac:1a:62: 1a:b6:9b:01:cb:4a:b8:15:25:b6:81:06:2f:44:23:be:5c:be: b7:6c:f9:dd:70:83:ec:c7:19:6b:df:46:09:b6:06:33:41:08: 9a:83:19:69:20:38:ed:a0:b6:d4:0a:eb:1a:a3:19:82:bc:fc: 54:87:ca:b1:5f:50:34:2a:59:3d:80:98:ca:32:6a:74:c2:3a: c6:7f:ea:69:7f:34:51:8f:57:c6:6b:d1:4f:bf:1a:f9:67:64: 4e:c2:bf:1a:58:f8:53:c7:87:12:9c:48:67:34:cc:b7:11:e0: 49:ae:11:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFhkkHr1ASSnuNwrLpovkXiTU/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjA3MjQwMzMzNDlaFw0yNjA3MjUwNDEyNDlaMDMxMTAvBgNV BAMTKERBODVCMEUzMzZCMjQxMjhGRUVFOUFCQ0MwQkU3MTM1OUFENUI1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCequ0YeaVul+XGptljvkdgyhAA JtNHchUjqlBpjYcuFLpcAOozqlbU3TGgdn9yJME/SpbUt5KVztFfaXWIo1PsN6DP ToMMtdDa28n/at59cMbv19CprQwQMUaPkuiQDAmqGLdzbAvk9Eh004ew+vKdq/TY MM4PwlqEzB5RsAIoD+PgNzdGlpIvuBzTfV9HDe439w4QMsdoq2zvWOtU41xOwEan ao66Li4pPIJJ5fdILJOtwWB8lKlDKlCloP4NxOOSvoREgY/DS7jh4c8omSqEKJv3 Tct5jK2kAyl7/gYfXew+zd4vl1dvlWTuv+NQ2OG+bEQajEInb2yyTJXtflIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oWw4zayQSj+7pq8wL5xNZrVtaYwHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADeJkQ5d+koJkrSxN6zMFsYmpp72lmDE+el M2EI9hhcFsi5jmT39HKFfscgWdwaoNnKd8eqgA8dZSgPaHbqzDE2wgTj/4pRKrGM FyLTmeMeDTaYCFQB8zzubGogeJBwDRIBSdGCln2vzW4VcQ0ath+aTkLbmI3ty+s5 foMUaoTmih9aQgXu05D27qRAC6waYhq2mwHLSrgVJbaBBi9EI75cvrds+d1wg+zH GWvfRgm2BjNBCJqDGWkgOO2gttQK6xqjGYK8/FSHyrFfUDQqWT2AmMoyanTCOsZ/ 6ml/NFGPV8Zr0U+/GvlnZE7CvxpY+FPHhxKcSGc0zLcR4EmuEYA= -----END CERTIFICATE-----Generated at Fri Jul 24 14:25:47 2026 by rpki-client