$ rpki-client -vvf rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft (raw, json) Hash identifier: D+V8gJTm5h7WznN/cR7dz+HGbSnJDTV65dC+xxwvtUM= Subject key identifier: 41:27:37:1B:67:86:D2:D8:91:6E:93:10:50:5F:CF:31:D8:06:5B:A2 Authority key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Certificate issuer: /CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Certificate serial: 107195E731E21A160E89D09DA20E47E8E7E699FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:25 +0000 Manifest this update: Tue 12 May 2026 18:08:25 +0000 Manifest next update: Wed 13 May 2026 20:33:25 +0000 Files and hashes: 1: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: FY4TsqDTq2GdCg6xoOXLww6pp19CeU/LlUR8ZBQGedg=) 2: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl (hash: OcqJC8JaLZvbKSAb63bENkEG3OYGcxN6nzmflNXGVEs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:71:95:e7:31:e2:1a:16:0e:89:d0:9d:a2:0e:47:e8:e7:e6:99:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Validity Not Before: May 12 18:08:25 2026 GMT Not After : May 13 20:33:25 2026 GMT Subject: CN=4127371B6786D2D8916E9310505FCF31D8065BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:0b:c6:6f:2d:57:2c:5a:a7:02:de:67:47: 26:13:3f:c4:e4:cc:ac:22:c6:51:fe:13:11:b7:a3: 4e:7c:e1:3d:8c:ba:5b:cc:e0:8a:6c:32:de:f4:0c: e4:b4:f4:78:2f:73:e1:26:af:7c:65:2c:83:bb:9b: ed:a9:fa:16:58:67:83:7f:cb:52:95:18:f9:ec:b2: 87:60:6b:2e:13:31:5b:ab:ce:78:57:bb:73:ef:1e: e5:13:bc:c2:57:5f:df:b3:c2:35:6b:65:14:68:b3: 83:ce:b0:83:53:49:a4:fa:46:d7:75:01:d5:c1:1e: ec:34:10:a6:21:4b:9b:f4:84:62:d1:72:8f:78:c6: f7:62:0c:fb:51:b4:75:fb:cd:88:38:e8:04:50:84: d0:5b:49:46:1c:2f:86:98:a1:c7:18:0a:3c:52:ac: 70:8d:83:65:15:af:29:80:ac:28:24:4c:9b:43:03: 94:33:ec:5a:f3:3e:6e:31:a2:bc:71:6d:3c:de:97: ee:f3:93:ee:a0:e4:b5:86:93:1a:2d:fb:09:3e:20: f1:fa:a3:7e:26:68:55:f9:17:0d:8e:b4:44:7b:9b: 61:60:31:cf:63:88:a2:e2:8a:c3:cc:6e:d3:6f:c6: ad:30:2c:f0:cd:f1:88:fd:05:fd:c7:e8:c7:2f:52: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:27:37:1B:67:86:D2:D8:91:6E:93:10:50:5F:CF:31:D8:06:5B:A2 X509v3 Authority Key Identifier: keyid:CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b7:a1:e3:4b:45:08:3a:70:6b:a8:5d:6a:cd:f0:c7:b8:be: 82:89:53:67:4b:2b:f6:d5:95:68:5d:e8:cc:d0:88:2f:4f:2e: a8:28:79:91:9c:c5:0c:38:87:ff:f7:98:50:54:c2:ff:c3:43: e9:9f:19:c8:f5:0e:15:82:5b:a8:e3:a0:d8:46:6f:9a:dd:12: 38:07:c5:de:9a:94:32:ac:9c:54:b5:17:0c:cf:a5:d3:66:b1: b7:84:15:07:74:4f:55:68:f4:fb:b2:c0:9d:e7:a2:f9:de:d1: fd:73:86:70:cc:6a:e2:9a:e1:3f:3c:ac:52:67:21:3e:f7:16: 05:6b:d1:2f:12:e6:9a:fe:61:fb:30:2d:a8:20:2b:60:95:87: 71:5f:e1:61:3d:75:90:17:24:f2:07:dc:08:20:04:b1:e4:68: 07:92:51:d6:48:10:ee:be:7a:76:76:71:4a:a6:27:5c:97:d0: b5:5b:cb:21:2b:78:a4:2d:9f:df:3f:0e:95:8f:df:bd:15:86: 22:fb:c2:2a:ba:9f:7f:4f:22:bc:6f:81:c6:01:f9:83:f8:0b: cb:20:3d:c1:60:3f:55:1f:d3:4e:77:09:53:75:75:01:3a:55: fd:40:12:25:ad:e3:28:87:e0:a4:54:00:e8:1f:e9:56:28:ab: 86:f7:18:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHGV5zHiGhYOidCdog5H6Ofmmf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNE OEEyNUJGQjAeFw0yNjA1MTIxODA4MjVaFw0yNjA1MTMyMDMzMjVaMDMxMTAvBgNV BAMTKDQxMjczNzFCNjc4NkQyRDg5MTZFOTMxMDUwNUZDRjMxRDgwNjVCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvgvGby1XLFqnAt5nRyYTP8Tk zKwixlH+ExG3o0584T2MulvM4IpsMt70DOS09Hgvc+Emr3xlLIO7m+2p+hZYZ4N/ y1KVGPnssodgay4TMVurznhXu3PvHuUTvMJXX9+zwjVrZRRos4POsINTSaT6Rtd1 AdXBHuw0EKYhS5v0hGLRco94xvdiDPtRtHX7zYg46ARQhNBbSUYcL4aYoccYCjxS rHCNg2UVrymArCgkTJtDA5Qz7FrzPm4xorxxbTzel+7zk+6g5LWGkxot+wk+IPH6 o34maFX5Fw2OtER7m2FgMc9jiKLiisPMbtNvxq0wLPDN8Yj9Bf3H6McvUsxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQSc3G2eG0tiRbpMQUF/PMdgGW6IwHwYDVR0j BBgwFoAUy/2x8YukNBPOvFuTeMo/o9iiW/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZmMGFmNmEtYzY4MC00NzMxLTliOTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4 QkE0MzQxM0NFQkM1QjkzNzhDQTNGQTNEOEEyNUJGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkZEQjFGMThCQTQzNDEzQ0VCQzVCOTM3OENBM0ZBM0Q4QTI1 QkZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQ0JGREIxRjE4QkE0MzQxM0NFQkM1QjkzNzhDQTNG QTNEOEEyNUJGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO3oeNLRQg6cGuoXWrN8Me4voKJU2dLK/bV lWhd6MzQiC9PLqgoeZGcxQw4h//3mFBUwv/DQ+mfGcj1DhWCW6jjoNhGb5rdEjgH xd6alDKsnFS1FwzPpdNmsbeEFQd0T1Vo9PuywJ3novne0f1zhnDMauKa4T88rFJn IT73FgVr0S8S5pr+YfswLaggK2CVh3Ff4WE9dZAXJPIH3AggBLHkaAeSUdZIEO6+ enZ2cUqmJ1yX0LVbyyEreKQtn98/DpWP370VhiL7wiq6n39PIrxvgcYB+YP4C8sg PcFgP1Uf0053CVN1dQE6Vf1AEiWt4yiH4KRUAOgf6VYoq4b3GP8= -----END CERTIFICATE-----Generated at Wed May 13 00:44:43 2026 by rpki-client