$ rpki-client -vvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: 7Oet9gQ3aAt8y8gPPyxawMLwN4NfibRXO/ktTr2l5Uw= Subject key identifier: 9C:CA:AF:57:4B:49:8B:3C:9A:56:32:2A:34:04:E4:2E:82:15:99:6D Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 196C60D54FAFE2404402A219F64214E1F4B6DA2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:29:14 +0000 Manifest this update: Tue 12 May 2026 14:24:14 +0000 Manifest next update: Wed 13 May 2026 16:51:14 +0000 Files and hashes: 1: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: BkYj1Iy/SIr1X9AEC9uoqEmWyTsSiExyqGwgQK5UxG4=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) 3: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6c:60:d5:4f:af:e2:40:44:02:a2:19:f6:42:14:e1:f4:b6:da:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: May 12 14:24:14 2026 GMT Not After : May 13 16:51:14 2026 GMT Subject: CN=9CCAAF574B498B3C9A56322A3404E42E8215996D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:1e:9a:fb:bb:57:2a:09:be:b5:de:ba:30: 50:dc:29:55:c6:16:09:77:5f:2c:41:3f:60:e3:cd: a1:1c:b7:e4:b7:b1:43:4c:7d:8f:dd:e5:b2:73:b7: ac:20:55:1a:75:b3:0f:23:50:7d:46:9c:17:7e:72: a7:1d:33:ab:35:d2:a4:6f:9a:64:c4:9f:89:f8:2c: a8:b8:c6:b6:8e:c2:e8:15:7a:5e:58:08:ef:b9:d2: 99:46:15:30:75:9e:ec:ba:26:a6:3f:ab:12:e9:78: f4:a1:fe:0f:79:58:26:f3:7d:3e:a5:4e:f9:de:86: 43:b2:11:0c:bf:db:13:ef:fe:95:1b:eb:18:cb:48: 35:45:1e:8e:c5:be:e2:b8:d0:62:4d:f8:a8:0a:c3: 31:24:84:e8:8a:2e:d5:48:90:22:96:77:86:e9:fb: 12:52:98:dd:07:60:84:ac:36:47:5a:9f:c1:07:2f: 1d:ac:e1:da:fb:63:18:5c:93:7b:9a:0e:ba:f5:f8: a5:4e:bf:0d:61:c4:fe:73:72:d4:cb:a1:8a:54:f4: 80:b0:4a:89:6e:0c:ee:6e:30:0e:c0:ad:f8:4b:1f: 61:29:12:85:6e:1a:b6:b6:51:35:db:56:90:71:53: 82:06:9d:25:08:cf:2d:d7:aa:89:cc:ea:d6:17:fe: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CA:AF:57:4B:49:8B:3C:9A:56:32:2A:34:04:E4:2E:82:15:99:6D X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:66:ef:f2:53:bf:8b:45:0b:76:3c:d3:43:e8:90:4d:b6:d0: 89:32:71:49:08:2d:93:b5:42:43:51:34:93:2a:2e:b1:34:ad: 6e:e6:91:11:bc:1e:9d:68:b0:88:15:11:3f:95:69:9b:39:a0: 17:c0:dc:17:40:87:29:99:2d:d7:ac:ac:fc:55:2c:b2:4c:9c: b5:fa:09:c0:73:bd:3b:8f:4c:ec:5f:8d:63:30:21:5d:95:2e: ec:04:db:f7:6c:1b:41:c9:1a:20:f3:05:c5:50:fb:11:9c:f1: 31:97:7e:65:e3:ef:e6:ee:53:3b:b2:f7:c3:79:01:6d:a6:46: ab:68:9c:01:fd:8a:17:09:44:83:9e:3f:31:c1:0f:d2:73:e6: cd:41:79:e4:58:17:83:9e:0a:a1:82:f7:6a:8f:60:44:8d:3b: b4:dc:5e:c4:92:f8:0b:14:d6:1d:01:eb:fa:8d:43:32:d2:67: c7:bf:4e:b0:b4:b8:55:87:4f:45:97:45:b6:d1:59:2b:c3:39: 25:3c:f7:2d:67:aa:44:4e:28:bc:ca:26:fc:75:2b:ac:ed:7c: 7f:d8:0d:49:b3:6b:1e:80:bc:dd:bd:41:b5:eb:ec:69:1d:59: 25:43:bc:21:c9:f2:f2:74:92:92:e1:2b:87:fe:0d:62:44:77: 1f:b0:70:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWxg1U+v4kBEAqIZ9kIU4fS22i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA1MTIxNDI0MTRaFw0yNjA1MTMxNjUxMTRaMDMxMTAvBgNV BAMTKDlDQ0FBRjU3NEI0OThCM0M5QTU2MzIyQTM0MDRFNDJFODIxNTk5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sB6a+7tXKgm+td66MFDcKVXG Fgl3XyxBP2DjzaEct+S3sUNMfY/d5bJzt6wgVRp1sw8jUH1GnBd+cqcdM6s10qRv mmTEn4n4LKi4xraOwugVel5YCO+50plGFTB1nuy6JqY/qxLpePSh/g95WCbzfT6l TvnehkOyEQy/2xPv/pUb6xjLSDVFHo7FvuK40GJN+KgKwzEkhOiKLtVIkCKWd4bp +xJSmN0HYISsNkdan8EHLx2s4dr7Yxhck3uaDrr1+KVOvw1hxP5zctTLoYpU9ICw SoluDO5uMA7ArfhLH2EpEoVuGra2UTXbVpBxU4IGnSUIzy3XqonM6tYX/o+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnMqvV0tJizyaVjIqNATkLoIVmW0wHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxm7/JTv4tFC3Y800PokE220IkycUkILZO1 QkNRNJMqLrE0rW7mkRG8Hp1osIgVET+VaZs5oBfA3BdAhymZLdesrPxVLLJMnLX6 CcBzvTuPTOxfjWMwIV2VLuwE2/dsG0HJGiDzBcVQ+xGc8TGXfmXj7+buUzuy98N5 AW2mRqtonAH9ihcJRIOePzHBD9Jz5s1BeeRYF4OeCqGC92qPYESNO7TcXsSS+AsU 1h0B6/qNQzLSZ8e/TrC0uFWHT0WXRbbRWSvDOSU89y1nqkROKLzKJvx1K6ztfH/Y DUmzax6AvN29QbXr7GkdWSVDvCHJ8vJ0kpLhK4f+DWJEdx+wcHA= -----END CERTIFICATE-----Generated at Wed May 13 04:09:55 2026 by rpki-client