$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: HcIb9C34W9ERwFbWZF0sigd2YaofNkhMfpnFHK6NNN8= Subject key identifier: 08:4E:4C:A0:CC:89:ED:82:B4:DE:98:EA:74:06:BE:C6:B7:28:FA:38 Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 4CFEF4E7EAE2C0F0166433C98E96BE68D89BBF44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 07:57:54 +0000 Manifest this update: Thu 08 Oct 2026 07:52:54 +0000 Manifest next update: Fri 09 Oct 2026 11:46:54 +0000 Files and hashes: 1: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: nReiLbXQ/jFZSmYqloQSsNTFss8JPeGEI2xVMzd6yyE=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fe:f4:e7:ea:e2:c0:f0:16:64:33:c9:8e:96:be:68:d8:9b:bf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: Oct 8 07:52:54 2026 GMT Not After : Oct 9 11:46:54 2026 GMT Subject: CN=084E4CA0CC89ED82B4DE98EA7406BEC6B728FA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:8e:72:37:a2:e5:16:f3:62:dc:63:9c:75: da:f0:62:20:17:2a:a5:d9:2e:c7:84:b1:81:54:0f: b2:39:df:59:16:16:ec:9b:5c:24:bf:16:14:56:fd: 71:b0:5a:8d:b1:34:af:38:e2:b1:c4:c4:ad:04:d8: 2f:89:38:d6:b0:35:0b:01:39:a5:33:2b:83:a4:42: 4b:30:11:10:c3:0e:3a:68:a7:7f:14:a4:82:c9:27: 20:bc:d5:0d:63:33:5f:50:47:cc:a8:55:b1:39:8f: a8:7c:17:f3:25:91:47:4d:e6:19:83:9b:8f:75:3f: 0c:1d:c3:40:ff:ae:06:1c:cc:c0:72:b3:53:8e:82: 87:a8:76:c4:db:27:5e:84:45:ce:84:76:c8:12:92: 48:1b:6f:c0:86:36:85:3a:4f:f2:17:45:df:d9:40: 24:65:16:8b:53:d7:76:9d:3c:f9:97:d3:45:77:d9: 39:9b:ae:47:3a:4d:ae:99:4c:1f:fa:6d:ea:6e:cc: a7:5e:31:1f:bd:83:29:88:59:89:21:0a:1e:9a:16: 36:42:93:84:01:49:17:bc:46:ba:af:89:3e:64:37: cd:d5:55:e3:b6:c4:60:d3:f7:c1:42:ca:d2:7e:ce: 8d:6b:5d:bf:d1:2a:c1:16:b5:e2:75:58:bf:b1:b5: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4E:4C:A0:CC:89:ED:82:B4:DE:98:EA:74:06:BE:C6:B7:28:FA:38 X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:62:c5:6b:cb:c8:c1:08:d8:5b:63:89:1a:0b:a5:f6:34:db: 9e:e1:f5:60:a9:e2:0e:8d:b7:76:70:76:07:f8:d9:aa:b1:8b: 8c:8e:c2:c8:db:bc:f8:cd:6c:14:fb:80:60:2a:34:89:66:e2: dc:47:34:08:d4:70:1e:7d:53:c2:c1:e8:b9:1e:26:60:1e:70: 7d:ae:fd:c8:11:29:6e:39:56:45:58:80:c8:8f:97:22:e2:6d: 55:ae:07:f1:5e:2c:eb:ae:20:09:8e:a1:57:b6:c9:db:b4:b3: af:7c:5d:8c:65:b0:93:2f:c9:47:8d:2f:c1:3f:09:61:71:74: aa:72:3e:eb:a4:64:e5:1b:e2:19:0a:0b:57:57:1c:39:8d:02: 2e:8e:53:69:e2:27:61:3f:50:fb:76:d6:d3:99:5b:f7:0a:7d: d4:2d:34:57:eb:c7:b9:ed:9d:4c:91:0a:22:f4:c2:35:3b:71: 2e:cb:62:ff:45:98:5b:3e:a6:62:22:3c:0c:d9:9a:f3:0a:e7: c8:1a:c0:47:d1:88:38:7e:29:c6:26:01:0f:cf:97:51:97:32: c9:7d:cc:8b:b0:60:ed:3d:f1:15:be:35:a6:4d:76:e7:a4:a2: ce:52:35:48:c5:f1:2b:be:e8:a5:64:af:f2:ea:43:e0:42:95: 41:5f:3b:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTP705+riwPAWZDPJjpa+aNibv0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjEwMDgwNzUyNTRaFw0yNjEwMDkxMTQ2NTRaMDMxMTAvBgNV BAMTKDA4NEU0Q0EwQ0M4OUVEODJCNERFOThFQTc0MDZCRUM2QjcyOEZBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioo5yN6LlFvNi3GOcddrwYiAX KqXZLseEsYFUD7I531kWFuybXCS/FhRW/XGwWo2xNK844rHExK0E2C+JONawNQsB OaUzK4OkQkswERDDDjpop38UpILJJyC81Q1jM19QR8yoVbE5j6h8F/MlkUdN5hmD m491Pwwdw0D/rgYczMBys1OOgoeodsTbJ16ERc6EdsgSkkgbb8CGNoU6T/IXRd/Z QCRlFotT13adPPmX00V32Tmbrkc6Ta6ZTB/6bepuzKdeMR+9gymIWYkhCh6aFjZC k4QBSRe8RrqviT5kN83VVeO2xGDT98FCytJ+zo1rXb/RKsEWteJ1WL+xtZ5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCE5MoMyJ7YK03pjqdAa+xrco+jgwHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1ixWvLyMEI2FtjiRoLpfY0257h9WCp4g6N t3Zwdgf42aqxi4yOwsjbvPjNbBT7gGAqNIlm4txHNAjUcB59U8LB6LkeJmAecH2u /cgRKW45VkVYgMiPlyLibVWuB/FeLOuuIAmOoVe2ydu0s698XYxlsJMvyUeNL8E/ CWFxdKpyPuukZOUb4hkKC1dXHDmNAi6OU2niJ2E/UPt21tOZW/cKfdQtNFfrx7nt nUyRCiL0wjU7cS7LYv9FmFs+pmIiPAzZmvMK58gawEfRiDh+KcYmAQ/Pl1GXMsl9 zIuwYO098RW+NaZNduekos5SNUjF8Su+6KVkr/LqQ+BClUFfOy8= -----END CERTIFICATE-----Generated at Thu Oct 8 23:19:32 2026 by rpki-client