$ rpki-client -vvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: g8KWV+XdgBmZ+l2OYL8Xndsqzw/lGtlHMXssQWjwncE= Subject key identifier: 69:E4:79:B6:C3:09:EB:27:3A:DC:CC:1D:A3:39:19:FF:BE:3C:22:7B Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 403A4F706897DE22B7FF69E1E258415867C9093A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: 0F Signing time: Wed 13 May 2026 06:19:11 +0000 Manifest this update: Wed 13 May 2026 06:14:11 +0000 Manifest next update: Thu 14 May 2026 09:31:11 +0000 Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) 2: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: ZyscjDeeNIa73sESqpAAYHfwJHZpNGCHpPGh97hEu2k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3a:4f:70:68:97:de:22:b7:ff:69:e1:e2:58:41:58:67:c9:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: May 13 06:14:11 2026 GMT Not After : May 14 09:31:11 2026 GMT Subject: CN=69E479B6C309EB273ADCCC1DA33919FFBE3C227B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:05:7f:b0:96:08:c6:18:2e:8a:a8:b6:6b:b7: ac:9d:f7:35:a3:d8:78:88:08:8b:92:cf:10:4c:ba: 9d:34:40:6e:da:da:e0:46:60:35:7e:f6:29:d3:03: 58:73:18:f4:4c:75:cc:f8:a9:47:9c:08:61:bb:28: 30:ce:ba:c9:87:a3:46:c5:c4:1a:80:e9:d8:25:fc: 0a:6a:6c:c9:37:89:4f:df:11:69:3e:a3:f8:da:c6: 30:d7:e9:be:5e:5a:9a:ba:2d:26:f8:1c:72:34:2e: 22:d9:4c:bd:89:82:42:ab:c8:9f:75:09:af:c1:02: 4e:48:9e:06:ba:35:96:71:5a:fd:8f:c7:49:de:8f: 95:43:e2:c6:bc:e9:a6:44:d5:7e:d0:3e:b7:c2:3a: 67:7e:06:ac:83:9e:a6:b1:90:30:f7:34:d2:8d:6a: f5:f3:f2:7e:f7:99:bd:d3:d2:2e:ea:4b:79:7b:79: 4c:07:1f:ee:7f:92:e2:e5:43:5a:3a:be:7d:56:ef: 38:76:e2:e1:50:7c:d2:a5:c2:ce:96:67:db:a4:18: 72:e8:d9:7e:24:a2:31:53:2d:95:76:62:d2:ba:f9: e4:06:89:f9:0d:2b:0e:83:b9:9e:12:85:5f:9b:b5: 68:66:7c:cf:b3:da:81:ba:b7:97:48:a4:40:ef:8d: 57:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:79:B6:C3:09:EB:27:3A:DC:CC:1D:A3:39:19:FF:BE:3C:22:7B X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:71:82:d2:d4:e0:52:23:50:05:1e:99:21:a3:a0:4d:dd:19: 65:a7:76:13:88:0a:d3:58:2a:8b:6a:ee:ba:a2:b1:ce:39:d1: 99:bb:ea:e3:54:50:95:78:ad:72:e3:da:9a:00:87:90:ef:97: f5:75:48:53:39:f4:76:3f:e8:77:e4:77:d7:b6:2a:89:22:fb: 9d:a0:46:b2:8b:b5:7c:b2:e1:f7:96:7c:9f:f2:ac:3e:f8:94: e4:53:76:bb:61:09:1e:71:91:03:34:85:fc:b8:72:7e:37:27: 27:35:8d:cb:34:19:ee:99:3b:f1:85:ae:3f:8c:e4:d2:12:3b: d5:d5:6e:36:17:32:16:8e:0d:73:da:c4:f1:bc:81:20:87:13: c6:27:a5:74:1d:2c:80:84:63:c2:f3:b4:51:3f:d1:2d:78:41: 8b:df:26:9b:50:ec:01:8c:2f:5f:e2:3e:8d:08:4b:57:92:30: 18:c5:db:b5:56:e4:8f:53:f0:4c:6e:18:5e:78:df:9c:c4:89: 29:f3:63:2b:0c:b8:e3:09:06:b9:58:fa:ea:fd:07:12:8a:5d: 8f:6d:84:6f:19:5e:e9:73:60:15:c5:c5:7b:8c:be:ba:69:66: c7:ee:fa:b2:4d:1c:c4:20:fa:b4:46:e5:e0:2a:41:59:ad:39: 60:aa:09:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDpPcGiX3iK3/2nh4lhBWGfJCTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjA1MTMwNjE0MTFaFw0yNjA1MTQwOTMxMTFaMDMxMTAvBgNV BAMTKDY5RTQ3OUI2QzMwOUVCMjczQURDQ0MxREEzMzkxOUZGQkUzQzIyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtBX+wlgjGGC6KqLZrt6yd9zWj 2HiICIuSzxBMup00QG7a2uBGYDV+9inTA1hzGPRMdcz4qUecCGG7KDDOusmHo0bF xBqA6dgl/ApqbMk3iU/fEWk+o/jaxjDX6b5eWpq6LSb4HHI0LiLZTL2JgkKryJ91 Ca/BAk5Inga6NZZxWv2Px0nej5VD4sa86aZE1X7QPrfCOmd+BqyDnqaxkDD3NNKN avXz8n73mb3T0i7qS3l7eUwHH+5/kuLlQ1o6vn1W7zh24uFQfNKlws6WZ9ukGHLo 2X4kojFTLZV2YtK6+eQGifkNKw6DuZ4ShV+btWhmfM+z2oG6t5dIpEDvjVdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaeR5tsMJ6yc63MwdozkZ/748InswHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpxgtLU4FIjUAUemSGjoE3dGWWndhOICtNY Kotq7rqisc450Zm76uNUUJV4rXLj2poAh5Dvl/V1SFM59HY/6Hfkd9e2Koki+52g RrKLtXyy4feWfJ/yrD74lORTdrthCR5xkQM0hfy4cn43Jyc1jcs0Ge6ZO/GFrj+M 5NISO9XVbjYXMhaODXPaxPG8gSCHE8YnpXQdLICEY8LztFE/0S14QYvfJptQ7AGM L1/iPo0IS1eSMBjF27VW5I9T8ExuGF5435zEiSnzYysMuOMJBrlY+ur9BxKKXY9t hG8ZXulzYBXFxXuMvrppZsfu+rJNHMQg+rRG5eAqQVmtOWCqCUw= -----END CERTIFICATE-----Generated at Wed May 13 12:14:06 2026 by rpki-client