$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft File: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft (raw, json) Hash identifier: 30JhH6+33+yRz6WXP8YPeifS4YF+bctBMukrhMAgicc= Subject key identifier: B0:C1:80:21:F4:43:95:79:17:A5:64:87:FB:AC:08:53:4C:6E:99:97 Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D Certificate issuer: /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Certificate serial: 53DECBB7685F3050D910A8BBDA9EEDCB50ADCB03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:23:35 +0000 Manifest this update: Tue 12 May 2026 07:18:35 +0000 Manifest next update: Wed 13 May 2026 09:41:35 +0000 Files and hashes: 1: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl (hash: IpupNsFjpE/a3qqvPgsvzHgKWWGCwx5vBhPhKbfcWXE=) 2: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: x+d57o1s3Lbg7LZYcyJzqZr5jsNBMksxksKUmCvZjfA=) 3: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:de:cb:b7:68:5f:30:50:d9:10:a8:bb:da:9e:ed:cb:50:ad:cb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Validity Not Before: May 12 07:18:35 2026 GMT Not After : May 13 09:41:35 2026 GMT Subject: CN=B0C18021F443957917A56487FBAC08534C6E9997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:46:dc:74:b3:f3:18:b2:f9:73:55:1d:ed: b8:89:96:01:1f:c2:c5:43:4e:07:ca:fb:c1:41:5f: 3c:b7:76:cd:55:12:ec:99:ba:a8:78:1d:7d:4a:e1: fb:2f:06:6f:f5:55:5b:2c:b8:0d:d0:59:c9:4c:30: 5f:0e:79:41:02:a1:8a:40:9b:af:d5:2c:07:cd:1a: ff:a7:9f:38:15:0d:fb:0b:8c:dc:e7:3c:2a:2f:52: 8c:88:8b:bb:48:02:3d:3f:50:c6:d9:7a:d7:77:d2: 48:b8:5d:f3:f5:02:0c:87:8d:89:b9:8d:09:2a:69: 8b:4b:bc:4b:21:80:0c:cc:b6:38:6b:e1:47:69:c4: d0:48:f0:e1:3d:16:90:ba:c5:64:ea:b5:b4:3b:94: 3f:70:f0:99:bc:08:07:f6:32:76:8c:ac:aa:4d:9b: ef:34:de:f3:9d:68:32:1e:2c:41:be:b9:8a:3b:9e: bd:d8:ba:a2:3e:0d:14:d0:d3:1c:22:69:83:df:92: f5:94:81:1e:89:69:98:fa:3a:9b:8b:50:69:90:be: 91:91:21:cd:63:9f:c4:23:f6:89:af:be:e3:55:14: 87:fd:77:5d:d0:02:77:7d:2c:f5:9d:11:5a:6f:d6: 68:f0:39:10:e9:f6:83:5b:c2:88:28:40:5f:5a:38: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C1:80:21:F4:43:95:79:17:A5:64:87:FB:AC:08:53:4C:6E:99:97 X509v3 Authority Key Identifier: keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:02:2e:74:e6:7f:22:b2:65:8a:f8:ae:20:e2:48:08:a5:4c: 2c:e3:09:3f:70:29:47:48:b4:e9:e5:c6:a6:bc:e8:0a:c0:60: 8e:d4:d4:cd:e4:59:0a:3d:80:c0:be:6e:bc:42:8d:e0:75:46: e8:00:d7:5f:28:ce:bd:2e:a1:44:46:05:48:29:39:c3:95:ba: cf:86:9c:59:63:3b:15:1b:d7:ad:eb:73:28:f3:9f:de:67:d8: 54:26:9e:f5:58:81:55:51:f4:65:62:fb:bf:31:db:51:2e:5b: 65:5a:4d:f3:e2:b2:6e:a6:03:62:46:19:81:df:36:05:85:43: 1f:15:d7:7e:69:12:94:88:3b:3f:9d:99:92:ab:3b:fb:cd:f0: 74:0c:04:fb:dd:73:8d:0d:76:30:63:e7:d1:45:c4:2c:b0:d2: ce:e9:89:ed:00:ff:a4:6e:bd:fd:ba:6b:a7:2d:b3:5e:0e:a7: 14:6c:f2:26:4e:83:45:70:b7:ee:90:b0:33:81:8d:88:d5:a1: ba:c7:9b:27:d8:29:22:39:87:76:02:03:2c:f5:36:9e:ff:a4: 5d:0d:26:5b:27:30:7b:80:65:eb:b9:eb:07:2b:c9:43:d6:5f: 68:cf:81:91:46:f0:06:37:c4:26:28:de:54:da:00:87:f5:31: 5e:8b:65:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU97Lt2hfMFDZEKi72p7ty1CtywMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3 NzM4NzM1RDAeFw0yNjA1MTIwNzE4MzVaFw0yNjA1MTMwOTQxMzVaMDMxMTAvBgNV BAMTKEIwQzE4MDIxRjQ0Mzk1NzkxN0E1NjQ4N0ZCQUMwODUzNEM2RTk5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoa0bcdLPzGLL5c1Ud7biJlgEf wsVDTgfK+8FBXzy3ds1VEuyZuqh4HX1K4fsvBm/1VVssuA3QWclMMF8OeUECoYpA m6/VLAfNGv+nnzgVDfsLjNznPCovUoyIi7tIAj0/UMbZetd30ki4XfP1AgyHjYm5 jQkqaYtLvEshgAzMtjhr4UdpxNBI8OE9FpC6xWTqtbQ7lD9w8Jm8CAf2MnaMrKpN m+803vOdaDIeLEG+uYo7nr3YuqI+DRTQ0xwiaYPfkvWUgR6JaZj6OpuLUGmQvpGR Ic1jn8Qj9omvvuNVFIf9d13QAnd9LPWdEVpv1mjwORDp9oNbwogoQF9aOIqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsMGAIfRDlXkXpWSH+6wIU0xumZcwHwYDVR0j BBgwFoAUyzuKeHM3KMixr6SO78bh93c4c10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyMDQxZjEtNGNlNi00OWI0LTgzYTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3 MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3NzM4NzM1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjNCOEE3ODczMzcyOEM4QjFBRkE0OEVFRkM2RTFGNzc3Mzg3 MzVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUx Rjc3NzM4NzM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEECLnTmfyKyZYr4riDiSAilTCzjCT9wKUdI tOnlxqa86ArAYI7U1M3kWQo9gMC+brxCjeB1RugA118ozr0uoURGBUgpOcOVus+G nFljOxUb163rcyjzn95n2FQmnvVYgVVR9GVi+78x21EuW2VaTfPism6mA2JGGYHf NgWFQx8V135pEpSIOz+dmZKrO/vN8HQMBPvdc40NdjBj59FFxCyw0s7pie0A/6Ru vf26a6cts14OpxRs8iZOg0Vwt+6QsDOBjYjVobrHmyfYKSI5h3YCAyz1Np7/pF0N JlsnMHuAZeu56wcryUPWX2jPgZFG8AY3xCYo3lTaAIf1MV6LZdU= -----END CERTIFICATE-----Generated at Wed May 13 02:37:48 2026 by rpki-client