$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft File: CB1DBC8005A976151FCB40B190D2FB007257926D.mft (raw, json) Hash identifier: Jlks0zOUw88T9BPIDJ5RG3PLS/i480+FiT704w2wkPE= Subject key identifier: 1F:A8:DD:A5:25:C2:EB:AA:F1:42:1A:17:A1:E2:4E:B6:9F:C4:7E:42 Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D Certificate issuer: /CN=CB1DBC8005A976151FCB40B190D2FB007257926D Certificate serial: 3BF7655911B2B7D5A08A1E142F13C09C05202A2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 07:35:05 +0000 Manifest this update: Fri 25 Sep 2026 07:30:05 +0000 Manifest next update: Sat 26 Sep 2026 07:37:05 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: pYHFYFUzoJNAsC6Cp8pDGU8Mnw4SxVjzZR48Pyb+I2A=) 2: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: ArRnNfQejR0sI5RjCbfv6zZubamliB/ioJJ0CyHpvz8=) 3: CB1DBC8005A976151FCB40B190D2FB007257926D.crl (hash: jpW+u22BkVZMg/5v48fm4iKmdHwDaKMnqhQ+IRtRmBE=) 4: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: JtYJWwvzpXOf4hheAO+k8IOGayyc4dYyOp8DCvruUrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f7:65:59:11:b2:b7:d5:a0:8a:1e:14:2f:13:c0:9c:05:20:2a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D Validity Not Before: Sep 25 07:30:05 2026 GMT Not After : Sep 26 07:37:05 2026 GMT Subject: CN=1FA8DDA525C2EBAAF1421A17A1E24EB69FC47E42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:a1:f7:ee:b0:5e:bf:d2:0a:d9:9e:24:67: 84:90:5e:ee:8c:ea:f2:58:6b:23:52:e2:f9:40:d0: 3c:d8:ba:c2:d5:c1:79:7a:2a:6f:f2:61:39:09:33: e1:39:aa:ce:b9:a0:2c:87:85:37:43:4c:3b:ad:26: ce:da:7b:e3:71:04:5a:38:fb:25:ec:95:5c:b8:83: 37:4a:92:e5:a7:30:8e:50:98:30:31:f7:a0:98:fe: 3d:37:6d:b7:78:a3:90:57:a1:30:39:d8:1b:7b:bf: c8:e7:7c:ff:58:84:ff:0c:5d:00:06:8b:ba:9a:8d: c6:6e:e9:33:0c:fd:0f:0b:20:39:b8:ac:29:9a:a6: b1:4c:0a:01:2d:65:be:43:be:1e:ad:e7:23:5a:74: 42:f1:f3:4f:34:2e:dd:36:67:9f:69:11:b1:4d:e6: af:ad:79:a1:a0:97:41:14:4e:e9:e8:6d:74:93:4a: b4:a6:46:79:1f:31:86:00:e8:94:06:77:e9:af:5b: b3:e5:6c:69:33:0e:08:3e:27:ba:b5:7a:27:e3:d3: 5a:4f:34:90:e8:7f:c4:2a:3d:27:c7:fc:4b:aa:8a: 21:7d:db:6d:1f:8f:1e:c4:46:fd:a2:0f:d9:d4:cb: e1:10:3b:12:f3:1c:c8:b1:a3:5c:2d:c0:0f:e0:c7: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A8:DD:A5:25:C2:EB:AA:F1:42:1A:17:A1:E2:4E:B6:9F:C4:7E:42 X509v3 Authority Key Identifier: keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:51:c7:ee:6c:41:98:c5:ab:57:93:68:c0:b7:14:67:b8:7e: bb:0c:f8:04:36:29:e1:2e:61:81:0f:04:c3:f4:fe:d9:cf:a2: 1a:07:20:c7:12:52:5c:eb:cc:30:64:55:ff:4a:29:e5:c8:01: f4:2c:ca:ec:0d:41:cb:47:16:4d:92:58:28:c8:58:61:2f:5f: bd:a8:a9:49:29:13:f0:01:e9:c2:f3:45:7d:ab:7c:9a:be:e7: c0:b0:6a:04:5f:5c:80:a6:b1:a3:f8:e4:39:05:96:b1:c4:36: 31:c2:1d:bd:c5:9b:47:2c:19:20:8f:1a:63:10:6f:2a:fe:dd: 93:11:7f:1d:a5:6f:45:36:49:0d:f1:53:3c:89:8f:4a:82:4c: dd:47:74:2b:7e:f6:63:96:18:5a:26:8e:43:b5:84:2e:36:eb: e2:9b:a4:6d:1e:48:f1:0d:91:8b:f4:18:bb:a9:0f:a6:4e:8d: e9:83:28:d7:85:6a:6b:44:a5:8e:d4:f8:46:26:25:4c:22:25: 04:d9:46:c0:2e:3d:d2:23:42:45:33:c4:49:79:66:32:6c:25: c5:74:58:27:ef:49:ba:1f:10:e4:31:3a:9a:8d:9b:64:9c:ce: 10:ff:09:7a:56:d1:38:6b:b6:9f:d9:29:63:ef:8d:c8:0c:6a: e5:e1:cf:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/dlWRGyt9Wgih4ULxPAnAUgKiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3 MjU3OTI2RDAeFw0yNjA5MjUwNzMwMDVaFw0yNjA5MjYwNzM3MDVaMDMxMTAvBgNV BAMTKDFGQThEREE1MjVDMkVCQUFGMTQyMUExN0ExRTI0RUI2OUZDNDdFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoaH37rBev9IK2Z4kZ4SQXu6M 6vJYayNS4vlA0DzYusLVwXl6Km/yYTkJM+E5qs65oCyHhTdDTDutJs7ae+NxBFo4 +yXslVy4gzdKkuWnMI5QmDAx96CY/j03bbd4o5BXoTA52Bt7v8jnfP9YhP8MXQAG i7qajcZu6TMM/Q8LIDm4rCmaprFMCgEtZb5Dvh6t5yNadELx8080Lt02Z59pEbFN 5q+teaGgl0EUTunobXSTSrSmRnkfMYYA6JQGd+mvW7PlbGkzDgg+J7q1eifj01pP NJDof8QqPSfH/EuqiiF9220fjx7ERv2iD9nUy+EQOxLzHMixo1wtwA/gx7DvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH6jdpSXC66rxQhoXoeJOtp/EfkIwHwYDVR0j BBgwFoAUyx28gAWpdhUfy0CxkNL7AHJXkm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjYjVjOWItZjM4My00ZTgxLTgxMmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAw NUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3MjU3OTI2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjFEQkM4MDA1QTk3NjE1MUZDQjQwQjE5MEQyRkIwMDcyNTc5 MjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZC MDA3MjU3OTI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRRx+5sQZjFq1eTaMC3FGe4frsM+AQ2KeEu YYEPBMP0/tnPohoHIMcSUlzrzDBkVf9KKeXIAfQsyuwNQctHFk2SWCjIWGEvX72o qUkpE/AB6cLzRX2rfJq+58CwagRfXICmsaP45DkFlrHENjHCHb3Fm0csGSCPGmMQ byr+3ZMRfx2lb0U2SQ3xUzyJj0qCTN1HdCt+9mOWGFomjkO1hC426+KbpG0eSPEN kYv0GLupD6ZOjemDKNeFamtEpY7U+EYmJUwiJQTZRsAuPdIjQkUzxEl5ZjJsJcV0 WCfvSbofEOQxOpqNm2SczhD/CXpW0Thrtp/ZKWPvjcgMauXhz1w= -----END CERTIFICATE-----Generated at Fri Sep 25 23:37:31 2026 by rpki-client