$ rpki-client -vvvf rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft File: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft (raw, json) Hash identifier: riElrt/6OyDy0JQ4pHfYQ82AasrdMCvcDMFs1qnF6N0= Subject key identifier: 83:0A:05:34:C8:38:42:9F:C8:9F:0A:F3:21:94:3B:75:6A:9E:A0:95 Authority key identifier: CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 Certificate issuer: /CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Certificate serial: 402AA44A6424B9485C0CB726A1B561AEEE5AE421 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:39:22 +0000 Manifest this update: Wed 23 Sep 2026 10:34:22 +0000 Manifest next update: Thu 24 Sep 2026 14:36:22 +0000 Files and hashes: 1: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl (hash: /Zb50aBBzlIAAJkSSz+JsQl+6cASyx0/DbuxNV6Bm1g=) 2: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: MlsPGYjwxcTUokzk7qgJtZJ0zjAyD3pAbTHc5VBWDJ4=) 3: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: pbFqtdrF857Bo284a6tYg8zQs+U7i5koym7amsZuX/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2a:a4:4a:64:24:b9:48:5c:0c:b7:26:a1:b5:61:ae:ee:5a:e4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Validity Not Before: Sep 23 10:34:22 2026 GMT Not After : Sep 24 14:36:22 2026 GMT Subject: CN=830A0534C838429FC89F0AF321943B756A9EA095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:32:ba:01:5d:4a:ff:dd:1a:52:92:62:4e: 14:44:b9:59:66:f6:79:77:d4:57:4e:ff:5b:e0:2b: 2f:7b:47:bd:23:bf:a7:a3:0f:78:2a:c6:32:73:aa: 10:23:9c:8e:ef:10:b4:8b:32:b2:11:ea:d7:2a:5e: 86:9f:b7:9d:f5:e0:23:73:3a:b2:4a:9f:ef:f4:aa: ad:d8:90:f9:57:cd:87:61:da:9c:27:28:a8:ac:32: 26:9d:4d:93:7f:6f:ba:ff:82:be:d3:9f:c3:ba:02: fe:ae:2d:40:14:db:fe:8f:bc:21:8d:a9:dc:08:9b: dc:33:f2:3b:58:af:c4:db:eb:6c:ac:6e:3d:6e:fd: 91:26:8c:98:1a:38:f7:6a:e0:72:e4:26:f5:dd:f6: e7:ee:9b:f0:45:55:4f:8c:9d:07:86:81:67:38:12: 32:af:98:56:af:ea:63:99:92:67:43:a0:ac:dd:86: 12:06:db:d1:2a:c5:08:29:48:0e:15:7f:52:2d:cf: da:da:b0:f4:45:8c:dd:16:77:0f:80:36:0d:e7:7e: 0e:6e:bb:1e:e5:0c:42:6c:c2:4c:6d:87:d1:e1:9e: b4:c1:c7:cc:fc:61:a9:94:13:69:4a:de:b3:87:12: d5:20:e9:5c:bb:2a:bd:32:16:93:c4:2a:e4:30:76: 31:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:05:34:C8:38:42:9F:C8:9F:0A:F3:21:94:3B:75:6A:9E:A0:95 X509v3 Authority Key Identifier: keyid:CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a6:75:a8:a3:f8:19:02:32:b1:0b:0c:47:dd:f1:e4:31:d7: 04:88:0d:26:c6:cd:96:ee:62:65:a6:16:eb:77:67:be:7c:82: 6b:cf:b2:ca:a7:9c:56:2e:e0:c4:cb:9e:43:d6:24:5c:18:41: e7:40:fb:d2:5c:a7:e0:16:43:34:d3:92:01:c7:20:ce:cb:7d: e7:95:29:6b:f9:aa:6d:21:ff:aa:1b:5c:71:77:e1:3a:58:7d: 7d:56:94:0d:ed:2a:cc:28:c0:a3:4c:ac:79:ba:85:a6:cf:5b: fc:20:66:a8:96:ef:4b:70:55:3c:ba:af:b9:99:bb:8c:ff:96: 93:2a:0b:b9:5b:c8:a9:c0:86:1a:c0:ad:f8:c3:bc:70:ba:69: c6:e1:43:19:36:fd:c5:22:81:2c:e6:6c:9f:21:da:71:2e:34: c0:12:e7:78:d5:bb:3b:50:2b:ce:5f:ec:04:cf:56:1b:ff:45: 84:46:94:b8:01:f8:be:e8:56:50:90:d9:aa:8f:6f:64:2b:32: 67:26:c9:be:53:d4:59:7c:45:4e:c7:c9:9c:41:47:72:66:80: bd:2a:b2:b8:b8:7d:ba:83:85:32:21:4e:92:86:a8:cf:47:b6: 01:fc:24:e8:d8:02:a1:b4:d2:67:37:ca:a2:d0:a5:32:ca:9a: 1a:81:b8:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCqkSmQkuUhcDLcmobVhru5a5CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4 NjJDMTAzNDAeFw0yNjA5MjMxMDM0MjJaFw0yNjA5MjQxNDM2MjJaMDMxMTAvBgNV BAMTKDgzMEEwNTM0QzgzODQyOUZDODlGMEFGMzIxOTQzQjc1NkE5RUEwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkszK6AV1K/90aUpJiThREuVlm 9nl31FdO/1vgKy97R70jv6ejD3gqxjJzqhAjnI7vELSLMrIR6tcqXoaft5314CNz OrJKn+/0qq3YkPlXzYdh2pwnKKisMiadTZN/b7r/gr7Tn8O6Av6uLUAU2/6PvCGN qdwIm9wz8jtYr8Tb62ysbj1u/ZEmjJgaOPdq4HLkJvXd9ufum/BFVU+MnQeGgWc4 EjKvmFav6mOZkmdDoKzdhhIG29EqxQgpSA4Vf1Itz9rasPRFjN0Wdw+ANg3nfg5u ux7lDEJswkxth9HhnrTBx8z8YamUE2lK3rOHEtUg6Vy7Kr0yFpPEKuQwdjGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwoFNMg4Qp/InwrzIZQ7dWqeoJUwHwYDVR0j BBgwFoAUy6d7XfABs5sroN7K3bfT7YYsEDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODYyZDRkNzQtNjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURG MDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4NjJDMTAzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkE3N0I1REYwMDFCMzlCMkJBMERFQ0FEREI3RDNFRDg2MkMx MDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0Qz RUQ4NjJDMTAzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAemdaij+BkCMrELDEfd8eQx1wSIDSbGzZbu YmWmFut3Z758gmvPssqnnFYu4MTLnkPWJFwYQedA+9Jcp+AWQzTTkgHHIM7LfeeV KWv5qm0h/6obXHF34TpYfX1WlA3tKswowKNMrHm6habPW/wgZqiW70twVTy6r7mZ u4z/lpMqC7lbyKnAhhrArfjDvHC6acbhQxk2/cUigSzmbJ8h2nEuNMAS53jVuztQ K85f7ATPVhv/RYRGlLgB+L7oVlCQ2aqPb2QrMmcmyb5T1Fl8RU7HyZxBR3JmgL0q sri4fbqDhTIhTpKGqM9HtgH8JOjYAqG00mc3yqLQpTLKmhqBuGI= -----END CERTIFICATE-----Generated at Wed Sep 23 18:46:22 2026 by rpki-client