$ rpki-client -vvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft (raw, json) Hash identifier: khq3PZH0V919b/apKYXShAoKObQVMS/x7LjFjCnO+WM= Subject key identifier: A8:C1:7F:FD:40:13:37:FD:88:E2:0F:89:AA:73:F5:43:F2:28:B4:C2 Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 3878D0CD86B3743C2D686E2EB820188C53AE7EB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:31:21 +0000 Manifest this update: Thu 23 Jul 2026 21:26:21 +0000 Manifest next update: Sat 25 Jul 2026 00:26:21 +0000 Files and hashes: 1: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl (hash: 8xobB3xmaf/S0tHTNzWQMp6GkB0zmGwFWawXl+o6VH8=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:78:d0:cd:86:b3:74:3c:2d:68:6e:2e:b8:20:18:8c:53:ae:7e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: Jul 23 21:26:21 2026 GMT Not After : Jul 25 00:26:21 2026 GMT Subject: CN=A8C17FFD401337FD88E20F89AA73F543F228B4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:e7:d9:5f:04:c9:f4:a2:db:40:ba:b5:8b: b2:e0:a8:e0:a0:73:2b:b6:5b:6b:1f:fb:c2:dd:14: 57:12:9b:35:33:ad:fa:6f:42:72:94:af:44:4b:ce: 35:10:cd:6a:d1:19:fd:da:9d:41:0f:8e:4c:8d:f0: c0:66:25:73:a3:40:cd:f4:2b:93:4c:7a:c2:c0:db: 1b:ec:b5:28:c6:c4:6e:3e:22:2b:61:19:49:96:cb: 4f:87:7a:7f:8d:68:8a:20:7e:bb:53:8f:2d:50:3e: 15:5a:83:11:85:cd:ab:53:33:42:bf:79:70:3a:9b: a6:76:4c:9f:b2:30:da:69:00:11:1b:3c:4e:68:66: 0a:18:e8:ef:fd:d3:a2:0a:e6:f5:14:a8:b9:6f:35: b0:87:2b:a4:67:69:49:ab:fa:12:d0:49:42:2b:a6: 4c:64:0d:45:7c:13:e2:46:bd:a0:2d:24:21:8e:61: 1d:2e:a0:41:76:82:7b:1e:88:b9:2e:38:04:f3:cc: 6d:7b:e5:cb:5c:d5:31:b5:33:51:ca:c8:82:24:10: d4:e1:39:4e:c5:b4:86:3c:1a:1e:cb:5a:d6:2e:8d: 5a:10:da:f0:25:ec:a1:dd:31:da:d4:aa:78:62:f5: d6:54:fc:7d:c5:81:88:32:df:58:9e:22:93:7a:e0: 69:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C1:7F:FD:40:13:37:FD:88:E2:0F:89:AA:73:F5:43:F2:28:B4:C2 X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:59:d2:db:92:e7:46:85:a7:e1:af:09:00:c5:d5:40:5b:52: 19:90:94:41:d0:d2:73:2b:7a:02:0e:cb:44:91:6c:89:ba:3b: 77:18:ca:f0:77:92:34:4f:e5:7b:84:77:9b:69:52:4f:e6:c3: 0d:99:00:1d:36:15:d3:0e:9b:3f:24:57:a8:63:1d:80:b5:cd: 12:85:ea:03:33:65:44:08:9f:98:6a:48:37:77:98:96:f6:8f: 78:98:9a:44:c3:57:6a:96:2f:07:a5:18:ef:e7:8a:ee:e8:46: 6f:bd:7a:3e:85:9c:66:55:86:47:01:fc:f4:19:9e:a3:e2:09: 02:02:d4:8a:7c:e4:c8:63:fe:f5:d5:a1:13:03:28:44:0c:48: 26:5d:95:31:9f:7e:eb:a2:cf:97:46:f6:7c:3b:40:6f:24:b3: 42:be:ba:57:43:07:e5:d2:f4:09:c6:bb:42:83:a9:eb:b4:c0: 71:71:9d:f0:90:17:40:d1:f4:a0:57:e8:67:0c:90:6e:87:91: 31:48:1e:92:38:53:30:39:e0:48:a0:a7:3d:62:5a:f6:ee:cc: db:2d:85:10:5c:5c:15:b8:be:7f:a0:f1:f2:bd:fd:10:18:59: 18:16:e2:19:be:32:82:e6:1b:66:b6:29:d8:f6:54:27:6b:49: 71:9a:3c:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHjQzYazdDwtaG4uuCAYjFOufrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjA3MjMyMTI2MjFaFw0yNjA3MjUwMDI2MjFaMDMxMTAvBgNV BAMTKEE4QzE3RkZENDAxMzM3RkQ4OEUyMEY4OUFBNzNGNTQzRjIyOEI0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSx+fZXwTJ9KLbQLq1i7LgqOCg cyu2W2sf+8LdFFcSmzUzrfpvQnKUr0RLzjUQzWrRGf3anUEPjkyN8MBmJXOjQM30 K5NMesLA2xvstSjGxG4+IithGUmWy0+Hen+NaIogfrtTjy1QPhVagxGFzatTM0K/ eXA6m6Z2TJ+yMNppABEbPE5oZgoY6O/906IK5vUUqLlvNbCHK6RnaUmr+hLQSUIr pkxkDUV8E+JGvaAtJCGOYR0uoEF2gnseiLkuOATzzG175ctc1TG1M1HKyIIkENTh OU7FtIY8Gh7LWtYujVoQ2vAl7KHdMdrUqnhi9dZU/H3FgYgy31ieIpN64GmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqMF//UATN/2I4g+JqnP1Q/IotMIwHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNG QTNEOEEyNUJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBZ0tuS50aFp+GvCQDF1UBbUhmQlEHQ0nMr egIOy0SRbIm6O3cYyvB3kjRP5XuEd5tpUk/mww2ZAB02FdMOmz8kV6hjHYC1zRKF 6gMzZUQIn5hqSDd3mJb2j3iYmkTDV2qWLwelGO/niu7oRm+9ej6FnGZVhkcB/PQZ nqPiCQIC1Ip85Mhj/vXVoRMDKEQMSCZdlTGffuuiz5dG9nw7QG8ks0K+uldDB+XS 9AnGu0KDqeu0wHFxnfCQF0DR9KBX6GcMkG6HkTFIHpI4UzA54Eigpz1iWvbuzNst hRBcXBW4vn+g8fK9/RAYWRgW4hm+MoLmG2a2Kdj2VCdrSXGaPN8= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:20 2026 by rpki-client