$ rpki-client -vvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: Vj25wjmtuPpr2hfwC4OVmiKXh/g3Jz5X1mIwcQwbsxE= Subject key identifier: E0:EB:CB:E8:92:5C:18:BB:FD:F7:98:14:70:FC:4C:D2:AD:A4:90:6B Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 25445971D080987D69472230FC26FF4D8E503160 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:42:54 +0000 Manifest this update: Thu 23 Jul 2026 14:37:54 +0000 Manifest next update: Fri 24 Jul 2026 17:04:54 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) 2: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: cA/MnEOL2V4d0tbF4+vGnFqpiXKVJAp3ysFFpRrNDiI=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:44:59:71:d0:80:98:7d:69:47:22:30:fc:26:ff:4d:8e:50:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: Jul 23 14:37:54 2026 GMT Not After : Jul 24 17:04:54 2026 GMT Subject: CN=E0EBCBE8925C18BBFDF7981470FC4CD2ADA4906B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:37:d7:ae:ad:31:36:a8:62:06:69:dc:e5:38: ca:56:37:81:b4:91:3f:75:bf:b2:20:93:7b:cc:4c: 8e:f1:15:3b:91:f7:fe:53:62:3d:27:9b:27:31:1e: c5:b9:b3:ac:dd:69:79:e8:f9:1e:87:44:69:24:8e: 5c:7b:7a:bd:ed:df:2c:e3:8d:9a:9f:64:72:a5:a5: be:5f:c8:6e:55:10:f5:55:df:9c:02:d5:9e:bc:45: c0:73:67:90:e2:d1:5c:90:b0:c9:0c:cd:62:e4:4f: 59:e1:cf:36:bf:69:03:5b:86:70:97:43:62:c5:8b: e0:86:6c:19:5e:d9:1e:31:8b:b1:80:f8:69:0f:e2: 15:01:c6:7b:42:e0:cd:59:62:bf:ef:51:66:9f:d9: ed:f0:0b:3c:5e:aa:e5:0e:ff:0a:28:57:55:07:3f: 9a:36:c6:5c:e3:29:65:55:24:c1:c5:37:17:ae:2c: 39:98:12:08:25:5c:cc:8e:c2:88:5b:08:12:db:66: 4e:02:1f:d5:d5:6d:c9:1a:0d:fb:14:7e:27:57:0f: 67:31:23:47:bb:37:fb:f2:4b:a4:cd:96:ae:d2:5f: 58:ac:be:f9:85:06:2f:33:6f:b9:91:10:2f:27:b0: 40:c2:a3:49:ec:38:73:7a:60:5e:a2:c5:f3:4d:cd: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EB:CB:E8:92:5C:18:BB:FD:F7:98:14:70:FC:4C:D2:AD:A4:90:6B X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ef:61:15:58:63:33:cc:1e:68:a1:14:4f:fc:5d:c6:2a:05: 9e:71:31:7a:ce:03:48:99:bb:7f:39:48:b5:d9:c8:e5:d0:28: 48:7a:54:c0:14:6d:2e:06:c7:6c:c1:92:3b:42:e8:96:e7:08: 9d:30:55:16:82:fc:1b:ca:76:6f:6b:16:5c:a6:74:91:97:ec: 5a:04:ab:67:47:48:83:fc:d2:0f:4d:d8:1c:5f:bd:7f:ee:90: 41:f8:f4:1b:2f:71:10:ac:d1:47:59:d1:7e:70:94:31:11:ef: 97:69:d5:ff:94:ed:94:b5:c7:b3:04:b0:3b:ee:82:32:58:ec: 60:a6:5a:56:af:10:4d:4e:29:4e:69:ee:8c:a5:7c:aa:39:61: fd:96:36:b6:1e:90:88:04:a1:a6:f8:95:d1:d8:4f:e5:0e:7e: 07:c5:89:60:95:4c:ce:3c:3c:a5:d5:cd:03:14:f5:9b:d9:c5: c0:a9:92:0d:cc:5c:e4:70:54:7f:d0:db:a7:6a:1a:c9:50:f3: 42:06:26:70:b1:4e:f1:34:91:cf:15:ee:18:b8:12:64:e7:56: 5a:fb:a3:5e:ac:73:ea:35:b8:8d:c7:20:fb:b2:9e:41:a9:99: 66:e0:45:bd:b2:dc:96:29:75:f9:6c:69:0d:65:2a:27:7c:a7: 0b:1d:4c:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJURZcdCAmH1pRyIw/Cb/TY5QMWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA3MjMxNDM3NTRaFw0yNjA3MjQxNzA0NTRaMDMxMTAvBgNV BAMTKEUwRUJDQkU4OTI1QzE4QkJGREY3OTgxNDcwRkM0Q0QyQURBNDkwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaN9eurTE2qGIGadzlOMpWN4G0 kT91v7Igk3vMTI7xFTuR9/5TYj0nmycxHsW5s6zdaXno+R6HRGkkjlx7er3t3yzj jZqfZHKlpb5fyG5VEPVV35wC1Z68RcBzZ5Di0VyQsMkMzWLkT1nhzza/aQNbhnCX Q2LFi+CGbBle2R4xi7GA+GkP4hUBxntC4M1ZYr/vUWaf2e3wCzxequUO/wooV1UH P5o2xlzjKWVVJMHFNxeuLDmYEgglXMyOwohbCBLbZk4CH9XVbckaDfsUfidXD2cx I0e7N/vyS6TNlq7SX1isvvmFBi8zb7mREC8nsEDCo0nsOHN6YF6ixfNNzfCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OvL6JJcGLv995gUcPxM0q2kkGswHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7vYRVYYzPMHmihFE/8XcYqBZ5xMXrOA0iZ u385SLXZyOXQKEh6VMAUbS4Gx2zBkjtC6JbnCJ0wVRaC/BvKdm9rFlymdJGX7FoE q2dHSIP80g9N2BxfvX/ukEH49BsvcRCs0UdZ0X5wlDER75dp1f+U7ZS1x7MEsDvu gjJY7GCmWlavEE1OKU5p7oylfKo5Yf2WNrYekIgEoab4ldHYT+UOfgfFiWCVTM48 PKXVzQMU9ZvZxcCpkg3MXORwVH/Q26dqGslQ80IGJnCxTvE0kc8V7hi4EmTnVlr7 o16sc+o1uI3HIPuynkGpmWbgRb2y3JYpdflsaQ1lKid8pwsdTP0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:14:40 2026 by rpki-client