$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: iCmDQBy0YHfu0k5bqDKgTPzgBH7bhUuXD1agTQF/feo= Subject key identifier: DA:45:E7:1F:D8:5A:CE:54:F1:F0:11:0B:5E:40:8E:33:E9:C9:A2:7F Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 7284C6042C8983E2DAD7CF03F042ECBC978A1DD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 05:15:55 +0000 Manifest this update: Fri 24 Jul 2026 05:10:55 +0000 Manifest next update: Sat 25 Jul 2026 06:38:55 +0000 Files and hashes: 1: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: 2P391CeLXbYCU8o/FBgPZGCqCmVLli37yX9CGSrZkp4=) 2: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: 3ouLTTMrlORMHlKU1niXf/J5eybW8/1poSHTBw8u7OI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:84:c6:04:2c:89:83:e2:da:d7:cf:03:f0:42:ec:bc:97:8a:1d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Jul 24 05:10:55 2026 GMT Not After : Jul 25 06:38:55 2026 GMT Subject: CN=DA45E71FD85ACE54F1F0110B5E408E33E9C9A27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:d5:e3:e3:4b:32:af:6f:4d:66:02:77:11: 32:3b:c6:13:bc:57:eb:66:72:b2:01:6a:9a:79:fe: 72:57:f7:7e:33:9c:a2:34:bf:77:99:22:4d:a6:72: c8:04:7a:9b:49:af:dd:cc:5b:30:60:67:fc:d8:06: 3b:bc:d0:9f:8c:16:03:c8:50:cf:ab:59:f6:9f:6e: f8:0e:74:01:47:6a:89:2d:5a:7f:ba:7e:cc:79:1e: 71:b7:7b:5d:69:e5:15:14:37:9a:98:ce:ea:c1:6d: 27:f4:25:e1:8a:85:27:22:9b:99:61:23:42:10:ef: bf:27:27:0e:e9:64:33:7a:bb:3c:41:17:42:45:7c: 05:a8:e5:bb:c0:51:3e:7a:ef:6c:40:04:11:83:7a: 2d:86:30:55:ff:81:07:91:a0:0f:73:5e:53:ea:15: e2:a1:21:b3:42:ad:52:4e:98:ec:13:fa:25:aa:59: e9:c1:d4:95:7c:7d:1f:68:25:25:b8:6c:1d:e0:55: f5:9a:4a:5e:d9:03:80:df:50:1f:6b:32:f7:e3:9d: 17:86:eb:ad:3b:55:a3:47:85:c8:48:5d:a3:01:f1: 9f:4a:a4:1f:25:a2:b9:76:ff:8b:65:bb:d2:37:d2: e4:82:81:e9:86:fa:08:a1:74:c5:5a:f8:57:e7:48: c1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:E7:1F:D8:5A:CE:54:F1:F0:11:0B:5E:40:8E:33:E9:C9:A2:7F X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3d:81:0a:e3:e4:15:17:39:53:86:4e:3e:80:4c:f2:2d:fd: db:79:de:31:c7:51:d0:27:8d:b3:f7:48:26:3a:4c:ee:5f:2c: 9e:48:cb:18:71:ae:e5:ab:8f:79:0b:9d:78:12:4e:62:57:1d: 89:d5:88:9d:b9:8f:ba:c0:17:f5:3a:21:68:1c:20:0b:46:06: 1b:eb:df:31:f7:d1:55:95:fa:10:69:87:b8:62:a0:8f:b3:24: f2:29:af:6b:1b:af:37:e4:67:4a:e0:ce:aa:89:a1:52:84:ce: 27:31:e0:20:fc:ae:0c:bb:50:62:92:88:cc:2f:ec:a9:5b:09: 74:10:b9:26:ce:a1:00:77:0a:40:32:7e:fe:3c:17:f4:04:8c: 36:c9:32:2f:26:ba:29:7d:1b:c4:2c:98:b6:80:57:6c:8f:82: bc:92:30:e3:6a:47:d0:8d:b9:88:b3:a5:a1:e3:ef:4d:77:a3: 6d:34:e4:07:53:47:43:52:f4:cc:b3:1e:c1:59:90:1e:e0:f5: 40:b0:75:f7:d6:26:6f:ae:70:84:04:b9:1f:6c:1e:62:3c:48: 98:3f:1a:09:51:1b:3f:91:f9:9a:78:3b:55:2b:6f:2a:ef:c4: b5:4c:66:95:23:82:75:f7:34:62:a0:06:17:a9:9a:ea:4f:49: 95:4d:60:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoTGBCyJg+La188D8ELsvJeKHdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA3MjQwNTEwNTVaFw0yNjA3MjUwNjM4NTVaMDMxMTAvBgNV BAMTKERBNDVFNzFGRDg1QUNFNTRGMUYwMTEwQjVFNDA4RTMzRTlDOUEyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVtXj40syr29NZgJ3ETI7xhO8 V+tmcrIBapp5/nJX934znKI0v3eZIk2mcsgEeptJr93MWzBgZ/zYBju80J+MFgPI UM+rWfafbvgOdAFHaoktWn+6fsx5HnG3e11p5RUUN5qYzurBbSf0JeGKhScim5lh I0IQ778nJw7pZDN6uzxBF0JFfAWo5bvAUT5672xABBGDei2GMFX/gQeRoA9zXlPq FeKhIbNCrVJOmOwT+iWqWenB1JV8fR9oJSW4bB3gVfWaSl7ZA4DfUB9rMvfjnReG 6607VaNHhchIXaMB8Z9KpB8lorl2/4tlu9I30uSCgemG+gihdMVa+FfnSMGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kXnH9hazlTx8BELXkCOM+nJon8wHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC09gQrj5BUXOVOGTj6ATPIt/dt53jHHUdAn jbP3SCY6TO5fLJ5IyxhxruWrj3kLnXgSTmJXHYnViJ25j7rAF/U6IWgcIAtGBhvr 3zH30VWV+hBph7hioI+zJPIpr2sbrzfkZ0rgzqqJoVKEzicx4CD8rgy7UGKSiMwv 7KlbCXQQuSbOoQB3CkAyfv48F/QEjDbJMi8muil9G8QsmLaAV2yPgrySMONqR9CN uYizpaHj7013o2005AdTR0NS9MyzHsFZkB7g9UCwdffWJm+ucIQEuR9sHmI8SJg/ GglRGz+R+Zp4O1UrbyrvxLVMZpUjgnX3NGKgBhepmupPSZVNYLw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:41:25 2026 by rpki-client