$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: oPSoRf5mDohrH/BmUfTaEn1DJZGiDCdqAmCtOaWxQJc= Subject key identifier: 0D:74:66:4E:F1:01:85:0E:BB:E8:BA:77:39:F8:0D:BC:52:64:14:5E Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 6BAD47706412362569CA5D66E5F1025322E24515 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 21:11:44 +0000 Manifest this update: Fri 25 Sep 2026 21:06:44 +0000 Manifest next update: Sun 27 Sep 2026 01:00:44 +0000 Files and hashes: 1: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: Nfbo9ypeicWudkzWBnYeEh2Be4JzbiRcedtkrtMq9KA=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) 3: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ad:47:70:64:12:36:25:69:ca:5d:66:e5:f1:02:53:22:e2:45:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: Sep 25 21:06:44 2026 GMT Not After : Sep 27 01:00:44 2026 GMT Subject: CN=0D74664EF101850EBBE8BA7739F80DBC5264145E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:49:dd:2a:2c:79:b4:56:d5:81:13:13:b5: c7:d7:ed:83:9e:54:65:9c:aa:d9:1e:f8:ab:c7:f3: 2d:0b:66:93:23:53:62:a9:63:8b:63:31:22:ed:01: 57:a8:1a:3d:f8:6b:ac:21:2c:08:15:cc:d0:de:35: 82:c0:60:35:22:00:cf:50:0e:3b:34:eb:ba:1e:8d: 2f:75:54:06:41:bb:75:e4:82:b5:b7:d1:c1:c4:b6: 71:aa:d3:12:42:aa:71:7f:2a:57:b5:37:6e:99:4d: b5:16:b3:d5:eb:f2:c8:74:d9:54:cc:79:89:28:63: 40:28:e0:83:3d:30:f4:2e:48:8c:52:60:f8:eb:50: 45:54:d7:73:c3:bd:38:2e:37:a5:1e:53:92:f6:e8: 2f:6f:58:b3:a1:6d:a7:53:57:43:8b:2f:9d:9f:d7: f8:7d:b7:84:be:56:1f:df:cd:5a:f7:ae:e8:be:f3: 9b:a8:3b:3a:bd:c5:2b:60:f5:44:f2:d7:fb:18:53: ce:34:8b:65:bf:07:0d:c9:a6:86:4e:60:0c:e5:28: a7:7c:47:ca:77:d3:61:84:27:e1:a0:b3:93:7b:af: 48:70:e1:e2:95:f6:0f:19:ca:ac:32:0a:3e:78:b9: a1:07:32:4d:c6:cc:d8:b5:07:56:35:13:59:07:88: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:74:66:4E:F1:01:85:0E:BB:E8:BA:77:39:F8:0D:BC:52:64:14:5E X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c4:76:af:0b:1c:b8:f0:4d:fa:82:56:4c:39:94:78:22:35: 15:c2:1b:6b:eb:1e:be:fd:3d:31:d6:ad:63:5b:dc:55:50:6e: 06:2e:ab:f7:01:68:8a:d0:07:98:c3:60:12:a2:0e:32:2d:1d: 3d:64:04:42:4d:a5:a1:6c:a2:b7:2d:36:4a:5d:41:20:84:4b: 69:8d:85:eb:d3:4f:44:db:4e:ed:ec:a5:2a:34:d8:07:ad:bd: a1:97:28:13:a3:a6:fe:5d:90:75:36:b3:b9:b4:58:b2:c2:6d: 4b:62:d3:93:fc:18:ad:db:1b:60:22:4b:3b:ab:4a:58:53:d8: 94:40:21:2e:4a:2d:b9:39:0f:10:98:3b:dc:8f:62:f4:3d:0d: 36:26:d7:f2:7b:94:74:e7:a5:4e:2c:51:b0:4b:55:57:11:89: c3:e5:a9:a0:17:dd:70:90:73:c2:3c:a1:23:d9:3b:d9:9a:55: 90:58:0a:7c:c9:b7:0d:bf:a2:ce:36:d9:39:30:ca:16:91:c5: 8d:bd:f5:50:61:34:04:d8:21:df:61:d3:bf:51:c2:49:7e:16: d7:b9:f5:01:9f:46:a3:2b:23:7c:a4:f7:e3:e0:fc:c8:c0:79: 8a:dc:5c:a6:b8:63:3a:3c:1f:d1:62:3f:06:32:b9:24:17:73: 7c:71:d5:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa61HcGQSNiVpyl1m5fECUyLiRRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA5MjUyMTA2NDRaFw0yNjA5MjcwMTAwNDRaMDMxMTAvBgNV BAMTKDBENzQ2NjRFRjEwMTg1MEVCQkU4QkE3NzM5RjgwREJDNTI2NDE0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrUndKix5tFbVgRMTtcfX7YOe VGWcqtke+KvH8y0LZpMjU2KpY4tjMSLtAVeoGj34a6whLAgVzNDeNYLAYDUiAM9Q Djs067oejS91VAZBu3XkgrW30cHEtnGq0xJCqnF/Kle1N26ZTbUWs9Xr8sh02VTM eYkoY0Ao4IM9MPQuSIxSYPjrUEVU13PDvTguN6UeU5L26C9vWLOhbadTV0OLL52f 1/h9t4S+Vh/fzVr3rui+85uoOzq9xStg9UTy1/sYU840i2W/Bw3JpoZOYAzlKKd8 R8p302GEJ+Ggs5N7r0hw4eKV9g8ZyqwyCj54uaEHMk3GzNi1B1Y1E1kHiL/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXRmTvEBhQ676Lp3OfgNvFJkFF4wHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3Edq8LHLjwTfqCVkw5lHgiNRXCG2vrHr79 PTHWrWNb3FVQbgYuq/cBaIrQB5jDYBKiDjItHT1kBEJNpaFsorctNkpdQSCES2mN hevTT0TbTu3spSo02AetvaGXKBOjpv5dkHU2s7m0WLLCbUti05P8GK3bG2AiSzur SlhT2JRAIS5KLbk5DxCYO9yPYvQ9DTYm1/J7lHTnpU4sUbBLVVcRicPlqaAX3XCQ c8I8oSPZO9maVZBYCnzJtw2/os422TkwyhaRxY299VBhNATYId9h079Rwkl+Fte5 9QGfRqMrI3yk9+Pg/MjAeYrcXKa4Yzo8H9FiPwYyuSQXc3xx1QI= -----END CERTIFICATE-----Generated at Sat Sep 26 18:32:50 2026 by rpki-client