$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft File: CB0A606FD0642E68B5212AE751953E0B9A92959F.mft (raw, json) Hash identifier: RgShjnNWdnosnTObSikIdImcQuiEgxdw5YOPwb48epA= Subject key identifier: 4D:A6:DE:3A:47:BB:F4:83:D8:6B:FF:11:E6:80:3D:64:01:68:AD:79 Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Certificate serial: 1DD1EB9A798ECAC55DD87BBF25499653FEF09E9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 16:46:01 +0000 Manifest this update: Fri 25 Sep 2026 16:41:01 +0000 Manifest next update: Sat 26 Sep 2026 18:47:01 +0000 Files and hashes: 1: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fRTHSzlS/kkerP4SjyexReRSZRyzRj6VQ2sAHATlKhQ=) 2: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: 38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=) 3: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: /7ofNppVXJF7mFM2WeV7e0wu+6LZLrIveqoSX8uAT6s=) 4: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: oXW42mmGQUgoWkxhSR0n+zgivDmIH7l+dG/1UKZo3a4=) 5: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: YBmRyy3cm/KALp/wtAif41lJP/42XGDuyciPr2frXjE=) 6: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: wcqHrqI3rqZ/cg1ulVOK7tcT1pphG3X5jdB33VoSub8=) 7: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: Z9BOHD/0KrdQ2ipOJFVWwYLdiKLHdOuinxG+lCgyfSU=) 8: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: 2cmHQI8Ii2ZFNygrFMRrShrlpj0r3MxaKMXRFrpSYWY=) 9: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: pwtW5wr69XSa+qZr3l0EvDhYLbCZs1lpWX5AfsziilE=) 10: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: W5LcKD4qmyridtk0HHxoc6aUkig5ncs0tdqV8KTXwMk=) 11: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: 2M+FnZ1ZBmMQrnhoHJr000wngHRS8OoEKdb0quE5URw=) 12: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: SV66tcdcW0NqPU/aqR6DolEDFMy8zRwKuiBnvzj6cUg=) 13: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: ywl7AR88MYiWygarcTKtVBDK6lhCOvMO3Qakyf62g7s=) 14: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: c+MUV7F3nnYwWrux4q4qrlxJQ1ToGP6qwbUAs1FDJW0=) 15: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: J+BYXWntjVPciAkV8uAI34vToZOhTHZAVg1OfJSHksA=) 16: CB0A606FD0642E68B5212AE751953E0B9A92959F.crl (hash: fek97ZkaEpcD2KFAO+fdzEfgrX9P82mFO7RVLdVKD6o=) 17: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=) 18: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: zvyBHXFbCbQNnOHxvObPOxxpHvAaypqH5xRId3rVWNo=) 19: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: pmR02dkQafQv6lkZHXLfGyWNIfCNGG5yyCQI8aG1kiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:eb:9a:79:8e:ca:c5:5d:d8:7b:bf:25:49:96:53:fe:f0:9e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Validity Not Before: Sep 25 16:41:01 2026 GMT Not After : Sep 26 18:47:01 2026 GMT Subject: CN=4DA6DE3A47BBF483D86BFF11E6803D640168AD79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:67:8a:9e:d4:a7:6a:68:88:dd:05:96:00:15: 7e:7c:37:e8:9d:40:8a:c3:d8:41:a2:34:f8:17:bf: 9f:9e:e3:df:39:83:80:a6:8d:f9:aa:8c:07:6f:11: 0f:9d:89:74:d1:b7:67:9d:67:ba:7d:49:e6:cc:18: 8f:5d:a6:ec:20:93:cb:ac:dc:38:46:a1:d3:60:17: a8:82:d2:73:97:1c:7b:6e:1f:7d:30:00:dd:3a:23: dc:9b:7c:d2:ee:a5:a5:6f:d0:a6:76:d0:a8:ee:cc: 77:73:f3:00:10:22:7d:dd:56:4b:87:cd:75:7f:3e: dc:64:64:ff:fb:6f:78:e7:6e:2a:ef:06:a7:97:24: 72:b7:36:7d:2b:7a:53:fd:e4:e8:ec:6a:1f:9c:1d: 7b:de:1a:97:c7:d0:e7:4f:e0:56:d9:d4:11:c3:6b: 03:de:9d:6b:e4:42:63:27:23:b4:76:e6:52:e8:0b: aa:2a:36:2e:46:96:90:75:5c:62:a0:f4:45:71:b9: 72:8b:c0:b4:11:48:7c:bb:bf:41:d7:0a:1b:34:a8: 43:02:5a:2b:7c:a2:52:2a:c6:ea:d3:62:8c:7e:a8: db:71:5d:ae:04:b2:24:ed:21:5a:24:e5:70:4c:49: aa:2d:ad:55:78:c8:0d:b9:3c:07:8e:54:36:b5:b6: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:DE:3A:47:BB:F4:83:D8:6B:FF:11:E6:80:3D:64:01:68:AD:79 X509v3 Authority Key Identifier: keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:51:1d:3c:38:f1:67:0a:a3:22:6d:8f:ae:92:42:28:0c:c1: 06:05:a3:75:b3:91:02:c8:9d:72:88:f8:bb:a9:50:d6:dd:1a: f3:ef:89:6e:38:ac:9e:f5:63:6c:0d:f4:28:c3:2f:44:38:47: 59:c8:78:71:10:88:cd:b6:15:73:22:66:44:68:d5:05:27:39: 68:b4:46:14:2c:2d:38:42:3d:aa:ca:dc:9e:4d:44:80:82:60: 74:80:7f:b9:1a:1c:95:59:21:3d:cf:0d:e7:ab:31:90:cc:9a: 1c:0a:8f:00:1c:3f:65:d8:3d:cd:fd:02:d1:de:03:95:6c:c3: 21:31:6a:ee:9f:93:1a:c2:36:ff:01:5a:30:4d:53:fc:e4:39: 1e:a1:23:32:ea:14:65:42:eb:db:fa:96:39:52:a5:91:e6:50: cc:06:96:c3:a4:56:cc:53:a5:a3:8a:f6:d1:a5:bc:f5:cd:ad: 6e:83:c2:99:f3:6e:f7:e3:6e:59:5c:48:f5:ab:5f:6f:2d:97: bd:c9:82:b6:32:dc:1e:3c:c1:05:1f:e3:a1:89:26:58:cd:42: ac:33:33:9b:67:ed:22:67:cf:39:e2:5b:59:04:dc:c8:37:0f: a9:99:47:7d:c9:60:de:9e:ae:81:e9:45:b2:0a:29:50:d4:19: 79:47:99:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdHrmnmOysVd2Hu/JUmWU/7wnpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5 QTkyOTU5RjAeFw0yNjA5MjUxNjQxMDFaFw0yNjA5MjYxODQ3MDFaMDMxMTAvBgNV BAMTKDREQTZERTNBNDdCQkY0ODNEODZCRkYxMUU2ODAzRDY0MDE2OEFENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxZ4qe1KdqaIjdBZYAFX58N+id QIrD2EGiNPgXv5+e4985g4CmjfmqjAdvEQ+diXTRt2edZ7p9SebMGI9dpuwgk8us 3DhGodNgF6iC0nOXHHtuH30wAN06I9ybfNLupaVv0KZ20KjuzHdz8wAQIn3dVkuH zXV/PtxkZP/7b3jnbirvBqeXJHK3Nn0relP95Ojsah+cHXveGpfH0OdP4FbZ1BHD awPenWvkQmMnI7R25lLoC6oqNi5GlpB1XGKg9EVxuXKLwLQRSHy7v0HXChs0qEMC Wit8olIqxurTYox+qNtxXa4EsiTtIVok5XBMSaotrVV4yA25PAeOVDa1thNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTabeOke79IPYa/8R5oA9ZAForXkwHwYDVR0j BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5 NTlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA3NDcxYTMtZWU1My00OTljLTlm MmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNF MEI5QTkyOTU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpRHTw48WcKoyJtj66SQigMwQYFo3WzkQLI nXKI+LupUNbdGvPviW44rJ71Y2wN9CjDL0Q4R1nIeHEQiM22FXMiZkRo1QUnOWi0 RhQsLThCParK3J5NRICCYHSAf7kaHJVZIT3PDeerMZDMmhwKjwAcP2XYPc39AtHe A5VswyExau6fkxrCNv8BWjBNU/zkOR6hIzLqFGVC69v6ljlSpZHmUMwGlsOkVsxT paOK9tGlvPXNrW6DwpnzbvfjbllcSPWrX28tl73JgrYy3B48wQUf46GJJljNQqwz M5tn7SJnzzniW1kE3Mg3D6mZR33JYN6eroHpRbIKKVDUGXlHmXg= -----END CERTIFICATE-----Generated at Fri Sep 25 22:15:46 2026 by rpki-client