$ rpki-client -vvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft File: CB1DBC8005A976151FCB40B190D2FB007257926D.mft (raw, json) Hash identifier: DmHdgssj9fAXFMv1ZVFWg7lNyoAPKP0pvOp62aLcbsk= Subject key identifier: 15:E8:E3:CD:DB:19:8C:78:D1:B6:60:26:A6:FE:2C:C8:67:0B:57:76 Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D Certificate issuer: /CN=CB1DBC8005A976151FCB40B190D2FB007257926D Certificate serial: 4D8CCEAA50AD04B0386F71BC453139932E52A49E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:15:27 +0000 Manifest this update: Tue 12 May 2026 22:10:27 +0000 Manifest next update: Thu 14 May 2026 00:32:27 +0000 Files and hashes: 1: CB1DBC8005A976151FCB40B190D2FB007257926D.crl (hash: LyvCXIkkGguSTLugKvuVM4bdXjhYCPBmv/E8mwrhVBI=) 2: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: pYHFYFUzoJNAsC6Cp8pDGU8Mnw4SxVjzZR48Pyb+I2A=) 3: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: ArRnNfQejR0sI5RjCbfv6zZubamliB/ioJJ0CyHpvz8=) 4: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: JtYJWwvzpXOf4hheAO+k8IOGayyc4dYyOp8DCvruUrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8c:ce:aa:50:ad:04:b0:38:6f:71:bc:45:31:39:93:2e:52:a4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D Validity Not Before: May 12 22:10:27 2026 GMT Not After : May 14 00:32:27 2026 GMT Subject: CN=15E8E3CDDB198C78D1B66026A6FE2CC8670B5776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:67:67:c5:cd:f3:ba:bf:36:4b:30:73:7d:fb: 79:d1:12:8a:44:e5:21:20:b9:e7:40:32:57:64:82: d4:0c:61:a4:ba:16:bc:75:8f:79:c4:cd:76:18:4e: 15:39:bc:f2:10:c3:7e:2a:1a:aa:e9:cf:dc:2c:68: 91:22:32:72:80:e9:3c:d1:ad:20:2c:af:33:db:85: c2:ae:28:c4:2d:94:4c:c8:b3:29:cd:64:5c:9a:8d: c6:51:6b:d8:a9:19:c8:30:87:bc:31:34:59:2a:a7: cc:2b:11:dc:20:a2:cb:63:05:6b:e4:a0:d2:da:40: 33:bb:2e:e4:de:38:ef:12:a7:65:f7:b9:1a:a8:87: 26:69:d9:9c:a1:6a:39:6d:e6:f9:fe:5c:7c:1c:ea: 89:64:15:0d:91:b8:44:69:26:73:c6:1d:24:04:17: 2b:9d:e5:9a:a0:b2:88:ef:e0:12:5a:fe:86:28:0d: fd:d5:05:24:2a:9c:11:c7:71:50:80:23:ef:b2:43: e3:44:29:8c:b7:57:28:c4:1e:a9:f3:10:f0:4e:73: 78:51:d5:0a:6b:19:57:1e:e2:6e:12:76:de:6a:8b: dd:f6:0e:41:92:1a:0f:15:dd:05:29:87:ad:7b:85: 26:87:e2:59:50:47:48:b9:c5:5e:9b:98:b9:d4:bf: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E8:E3:CD:DB:19:8C:78:D1:B6:60:26:A6:FE:2C:C8:67:0B:57:76 X509v3 Authority Key Identifier: keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:98:89:a6:1d:7c:7e:35:79:d0:1c:21:76:68:32:da:7f:74: 2e:d4:10:b2:e1:ad:e9:ab:3e:4f:90:0b:0c:9c:a0:03:67:cd: 43:fe:68:c3:db:23:a6:07:ca:1f:46:d5:63:5a:dc:1f:12:d2: 78:26:43:66:0f:66:5c:b2:89:eb:eb:20:bd:be:8b:fb:5d:bf: 98:10:1b:f1:47:25:c0:d9:ea:3a:f1:9b:29:d7:4d:cd:49:8d: d3:bc:f4:b3:6d:83:ee:1c:32:79:db:50:93:d6:17:74:e7:a8: 0c:3e:2c:71:dc:32:e7:a9:98:29:02:5b:2d:08:78:b9:22:1f: 7a:f1:92:07:0a:76:10:c1:60:18:98:7a:a4:91:03:59:06:08: e9:fd:cc:ca:42:5a:cc:17:3e:8a:43:e1:7f:d1:da:f5:ee:09: 5f:1d:ba:e5:ba:0b:e8:82:48:1d:84:5b:05:e3:66:11:3f:6b: bc:91:20:4a:22:dd:8f:43:f8:bf:12:3d:b3:92:8a:a7:a8:3f: 31:a8:b7:89:f4:68:cf:14:74:39:eb:8f:2b:1d:76:d1:17:ef: d3:88:19:a9:87:d6:ed:d8:5c:b2:31:ed:b0:3c:33:04:3d:da: 7e:b5:9b:3e:51:71:69:9c:e3:cf:e8:63:48:42:15:64:07:5b: 03:ad:36:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYzOqlCtBLA4b3G8RTE5ky5SpJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3 MjU3OTI2RDAeFw0yNjA1MTIyMjEwMjdaFw0yNjA1MTQwMDMyMjdaMDMxMTAvBgNV BAMTKDE1RThFM0NEREIxOThDNzhEMUI2NjAyNkE2RkUyQ0M4NjcwQjU3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZ2fFzfO6vzZLMHN9+3nREopE 5SEguedAMldkgtQMYaS6Frx1j3nEzXYYThU5vPIQw34qGqrpz9wsaJEiMnKA6TzR rSAsrzPbhcKuKMQtlEzIsynNZFyajcZRa9ipGcgwh7wxNFkqp8wrEdwgostjBWvk oNLaQDO7LuTeOO8Sp2X3uRqohyZp2Zyhajlt5vn+XHwc6olkFQ2RuERpJnPGHSQE Fyud5Zqgsojv4BJa/oYoDf3VBSQqnBHHcVCAI++yQ+NEKYy3VyjEHqnzEPBOc3hR 1QprGVce4m4Sdt5qi932DkGSGg8V3QUph617hSaH4llQR0i5xV6bmLnUv7lJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFejjzdsZjHjRtmAmpv4syGcLV3YwHwYDVR0j BBgwFoAUyx28gAWpdhUfy0CxkNL7AHJXkm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjYjVjOWItZjM4My00ZTgxLTgxMmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAw NUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3MjU3OTI2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjFEQkM4MDA1QTk3NjE1MUZDQjQwQjE5MEQyRkIwMDcyNTc5 MjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZC MDA3MjU3OTI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiYiaYdfH41edAcIXZoMtp/dC7UELLhremr Pk+QCwycoANnzUP+aMPbI6YHyh9G1WNa3B8S0ngmQ2YPZlyyievrIL2+i/tdv5gQ G/FHJcDZ6jrxmynXTc1JjdO89LNtg+4cMnnbUJPWF3TnqAw+LHHcMuepmCkCWy0I eLkiH3rxkgcKdhDBYBiYeqSRA1kGCOn9zMpCWswXPopD4X/R2vXuCV8duuW6C+iC SB2EWwXjZhE/a7yRIEoi3Y9D+L8SPbOSiqeoPzGot4n0aM8UdDnrjysddtEX79OI GamH1u3YXLIx7bA8MwQ92n61mz5RcWmc48/oY0hCFWQHWwOtNoY= -----END CERTIFICATE-----Generated at Wed May 13 04:09:28 2026 by rpki-client