$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft File: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft (raw, json) Hash identifier: vG5kH3bE/aWC36mwgnL5blJhqV6DmdVJWncjs2DCfVw= Subject key identifier: 81:40:35:66:71:13:98:1A:15:C0:99:0D:A1:2C:0E:CC:26:43:7B:F7 Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D Certificate issuer: /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Certificate serial: 3578E10650F322DC7B8EE7E8F4832FA7001ABFD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 22:58:58 +0000 Manifest this update: Thu 24 Sep 2026 22:53:58 +0000 Manifest next update: Sat 26 Sep 2026 02:55:58 +0000 Files and hashes: 1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: x+d57o1s3Lbg7LZYcyJzqZr5jsNBMksxksKUmCvZjfA=) 2: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl (hash: HmgGspY6icFMAWCJ50WNFirEKxW8Jzkoia++rqYjgXg=) 3: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:78:e1:06:50:f3:22:dc:7b:8e:e7:e8:f4:83:2f:a7:00:1a:bf:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Validity Not Before: Sep 24 22:53:58 2026 GMT Not After : Sep 26 02:55:58 2026 GMT Subject: CN=814035667113981A15C0990DA12C0ECC26437BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:43:d1:84:86:d3:6a:d9:fd:b8:78:d7:ba: 51:2a:7c:77:2d:bb:ee:d5:d6:69:65:63:66:c2:1b: b6:49:26:c6:0c:ff:25:11:80:89:90:42:d8:de:e0: 49:1f:32:98:b2:3b:11:bd:7f:76:b2:32:e2:68:c9: 8c:60:88:0a:b5:41:9b:16:a2:b9:10:80:35:f4:b8: 43:a7:90:f8:61:46:b8:59:59:5d:f7:a7:44:3d:1b: df:15:96:dd:97:f2:db:74:aa:21:66:d8:6c:2c:d0: 72:a2:2d:8d:1f:75:7e:77:4a:3d:f6:72:8d:4f:cc: 5f:f1:bf:19:e0:ca:7f:41:44:52:97:a4:30:9b:9a: e6:b2:2d:f4:50:31:ae:79:23:2e:5b:ea:dc:88:26: e6:da:3b:24:06:9f:15:33:f4:ef:c2:1e:29:58:8e: d4:88:1a:db:21:f2:01:cb:6c:e0:d7:fc:4e:0f:69: cb:83:7d:b3:c7:58:e9:5b:7f:21:51:9e:fa:a5:63: 08:f5:f2:cd:be:13:26:9e:18:10:50:24:60:b3:75: e4:af:b2:03:f6:7e:1c:0f:ed:df:3c:8e:18:78:15: 0b:fa:d5:a3:ee:f0:46:15:8c:6c:b2:3f:99:2e:cc: 8b:51:82:ce:75:41:d1:bc:f9:c5:c3:a6:2c:f2:98: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:40:35:66:71:13:98:1A:15:C0:99:0D:A1:2C:0E:CC:26:43:7B:F7 X509v3 Authority Key Identifier: keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:42:ab:75:c4:76:4b:0c:87:f2:76:14:b6:8a:62:50:77:33: 26:a3:79:07:c6:48:3f:ba:bc:ba:99:14:44:1c:e7:89:25:40: c6:a3:92:4c:97:16:68:00:03:c4:4a:8e:69:3b:b7:9f:9f:cc: c4:16:7b:dc:37:dd:b9:d2:61:58:70:27:d4:e2:39:50:d3:e6: 4e:a4:42:7b:b3:0f:e1:e6:14:8c:d2:3e:d2:b0:11:5d:f7:fd: d3:36:0f:22:0a:4c:a5:92:e1:18:ce:91:cc:1b:5c:63:55:3b: aa:bf:0f:8b:35:ef:4a:d5:69:2c:03:81:f6:9f:b6:59:8a:a9: 62:91:54:f5:85:b1:7f:89:2d:6a:d1:54:18:a1:4c:73:6c:2c: 5a:b5:af:06:11:7c:7e:91:7d:d2:3e:ff:45:d9:83:ac:bb:b0: 54:3e:2c:ff:7c:b1:21:33:86:ba:a8:72:39:b2:19:89:90:2e: 32:5e:45:bc:1b:ab:d5:f7:7f:94:cb:e9:5e:f0:e6:fc:e8:1b: 9d:c1:25:49:fb:6b:38:21:ef:b7:bf:ae:2e:e1:22:56:ea:db: af:b8:85:7b:b3:00:5a:cd:cb:9c:63:d6:b3:9f:28:f9:d2:fa: 8e:fb:6e:20:88:dc:aa:d9:c2:8d:e4:17:ac:69:ab:8a:25:93: db:00:84:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXjhBlDzItx7jufo9IMvpwAav9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3 NzM4NzM1RDAeFw0yNjA5MjQyMjUzNThaFw0yNjA5MjYwMjU1NThaMDMxMTAvBgNV BAMTKDgxNDAzNTY2NzExMzk4MUExNUMwOTkwREExMkMwRUNDMjY0MzdCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdUPRhIbTatn9uHjXulEqfHct u+7V1mllY2bCG7ZJJsYM/yURgImQQtje4EkfMpiyOxG9f3ayMuJoyYxgiAq1QZsW orkQgDX0uEOnkPhhRrhZWV33p0Q9G98Vlt2X8tt0qiFm2Gws0HKiLY0fdX53Sj32 co1PzF/xvxngyn9BRFKXpDCbmuayLfRQMa55Iy5b6tyIJubaOyQGnxUz9O/CHilY jtSIGtsh8gHLbODX/E4PacuDfbPHWOlbfyFRnvqlYwj18s2+EyaeGBBQJGCzdeSv sgP2fhwP7d88jhh4FQv61aPu8EYVjGyyP5kuzItRgs51QdG8+cXDpizymPwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUA1ZnETmBoVwJkNoSwOzCZDe/cwHwYDVR0j BBgwFoAUyzuKeHM3KMixr6SO78bh93c4c10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyMDQxZjEtNGNlNi00OWI0LTgzYTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3 MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3NzM4NzM1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjNCOEE3ODczMzcyOEM4QjFBRkE0OEVFRkM2RTFGNzc3Mzg3 MzVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUx Rjc3NzM4NzM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxCq3XEdksMh/J2FLaKYlB3MyajeQfGSD+6 vLqZFEQc54klQMajkkyXFmgAA8RKjmk7t5+fzMQWe9w33bnSYVhwJ9TiOVDT5k6k QnuzD+HmFIzSPtKwEV33/dM2DyIKTKWS4RjOkcwbXGNVO6q/D4s170rVaSwDgfaf tlmKqWKRVPWFsX+JLWrRVBihTHNsLFq1rwYRfH6RfdI+/0XZg6y7sFQ+LP98sSEz hrqocjmyGYmQLjJeRbwbq9X3f5TL6V7w5vzoG53BJUn7azgh77e/ri7hIlbq26+4 hXuzAFrNy5xj1rOfKPnS+o77biCI3KrZwo3kF6xpq4olk9sAhME= -----END CERTIFICATE-----Generated at Fri Sep 25 20:37:29 2026 by rpki-client