$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: VpsJkRDpKdKbcTK4820G7ZaQg+vyp/7OCh/8fQkS52k= Subject key identifier: 6F:E4:DC:4E:2B:D0:06:AC:F3:6C:D7:BF:17:01:CD:84:A4:A1:A9:9A Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 7AB4C0C31BF0CEB95E29F92616413B5F73EC4653 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: C5 Signing time: Thu 24 Sep 2026 17:06:52 +0000 Manifest this update: Thu 24 Sep 2026 17:01:52 +0000 Manifest next update: Fri 25 Sep 2026 17:17:52 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32342d3234203d3e20313339343536.roa (hash: 6ZJ53yDSZZbhA3HLWOJtQJ5qYulxYXvBHN4NhIRy3dM=) 2: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: zje+InoD9kL4OJ/R7tDR4en85Nxssi+f7L5xsqtENrI=) 3: 3130332e3138352e34342e302f32332d3233203d3e203538383230.roa (hash: AtTReWoHalW1jTCt7si9vqdmAaRn+woGu9bysUat+zE=) 4: 3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa (hash: 5P1W95x+b+VcAeWv+Uihp1cvRwss8nuTjkrW2k6u0F4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b4:c0:c3:1b:f0:ce:b9:5e:29:f9:26:16:41:3b:5f:73:ec:46:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Sep 24 17:01:52 2026 GMT Not After : Sep 25 17:17:52 2026 GMT Subject: CN=6FE4DC4E2BD006ACF36CD7BF1701CD84A4A1A99A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:12:d5:c3:fb:41:91:53:f7:fc:75:9a:f5: c2:65:7c:00:21:1b:dc:bd:e8:d6:a5:87:79:ee:a3: 61:41:90:4c:32:e1:81:85:9f:3c:99:25:d7:45:b9: 73:ac:df:76:52:c9:15:17:20:47:fc:67:67:28:74: a6:ef:bd:c8:08:36:70:53:88:6d:28:72:a6:71:dd: 79:50:68:5f:f3:af:5b:ce:47:cc:e3:81:83:f6:d9: d2:d6:b3:06:f4:a9:f9:40:85:c7:dc:43:fe:c9:0f: e1:1d:ee:c5:44:ba:1e:1a:a0:fa:bd:37:68:f5:ab: 32:e0:52:c3:27:eb:3f:fa:80:bc:19:df:de:9e:dd: 9b:9b:2a:75:6e:6d:3e:0e:f9:14:1a:3f:16:26:8e: 6d:4c:67:d5:8d:01:c5:0c:e9:6b:55:6a:5e:5d:0d: 4c:35:db:f9:f1:a7:aa:36:a4:fe:1d:e7:d7:71:e2: 6d:05:0a:b9:bf:64:ed:c3:54:f4:c3:1b:2c:b6:e0: 7d:37:ea:c2:71:ca:ff:bc:c7:31:f3:8b:26:8e:fa: 21:1a:a3:89:20:c2:e8:da:c1:63:c2:80:06:32:b6: 80:51:10:2e:72:d8:aa:a7:c7:6d:a8:7b:d6:dd:75: 45:4c:a8:5a:e8:89:96:b4:4c:3f:82:7e:df:76:38: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E4:DC:4E:2B:D0:06:AC:F3:6C:D7:BF:17:01:CD:84:A4:A1:A9:9A X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ff:c1:23:89:e1:b7:05:b8:67:88:ea:a4:da:a4:82:98:79: a5:9f:db:86:37:92:5d:61:cc:00:73:e7:a4:d2:4c:6c:ff:82: 80:1c:ee:1f:d5:95:9e:ff:17:cf:fd:a7:3e:1f:a7:1b:d3:ae: 7d:5c:ca:8f:ff:34:aa:86:a3:2e:62:b3:e2:7a:8f:aa:ee:0b: 24:48:60:14:75:70:84:35:60:8e:7b:b2:1c:9d:14:91:51:21: 26:de:08:eb:47:2a:b6:44:15:09:7e:d7:ee:91:c8:a0:54:19: 08:ca:c4:76:8c:11:8d:01:d6:7e:a7:6c:69:5a:a5:ec:87:e8: b1:89:77:e7:6a:f7:92:e6:83:29:7f:40:17:9e:25:83:d8:bc: 15:5a:36:be:76:1c:85:d6:60:b1:b9:eb:8d:6d:85:9d:7c:e1: d3:05:e4:b0:45:c8:e4:13:a6:51:e2:0f:88:c2:59:e8:c5:86: 1f:8d:0c:c9:5b:02:72:b5:7d:e3:ae:bd:1d:b2:d8:1a:b4:c1: 6e:bb:fc:d9:ad:18:b3:de:8b:bf:01:a7:28:8a:bc:42:f4:f7: c1:96:6e:14:b5:c4:5e:e0:88:a2:ef:5a:76:47:73:6c:ba:37: c4:6c:f1:9c:ec:59:e1:88:2e:e3:83:59:95:00:f0:c7:91:c8: 2a:dd:59:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUerTAwxvwzrleKfkmFkE7X3PsRlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA5MjQxNzAxNTJaFw0yNjA5MjUxNzE3NTJaMDMxMTAvBgNV BAMTKDZGRTREQzRFMkJEMDA2QUNGMzZDRDdCRjE3MDFDRDg0QTRBMUE5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlThLVw/tBkVP3/HWa9cJlfAAh G9y96Nalh3nuo2FBkEwy4YGFnzyZJddFuXOs33ZSyRUXIEf8Z2codKbvvcgINnBT iG0ocqZx3XlQaF/zr1vOR8zjgYP22dLWswb0qflAhcfcQ/7JD+Ed7sVEuh4aoPq9 N2j1qzLgUsMn6z/6gLwZ396e3ZubKnVubT4O+RQaPxYmjm1MZ9WNAcUM6WtVal5d DUw12/nxp6o2pP4d59dx4m0FCrm/ZO3DVPTDGyy24H036sJxyv+8xzHziyaO+iEa o4kgwujawWPCgAYytoBREC5y2Kqnx22oe9bddUVMqFroiZa0TD+Cft92ODMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+TcTivQBqzzbNe/FwHNhKShqZowHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv/wSOJ4bcFuGeI6qTapIKYeaWf24Y3kl1h zABz56TSTGz/goAc7h/VlZ7/F8/9pz4fpxvTrn1cyo//NKqGoy5is+J6j6ruCyRI YBR1cIQ1YI57shydFJFRISbeCOtHKrZEFQl+1+6RyKBUGQjKxHaMEY0B1n6nbGla peyH6LGJd+dq95Lmgyl/QBeeJYPYvBVaNr52HIXWYLG5641thZ184dMF5LBFyOQT plHiD4jCWejFhh+NDMlbAnK1feOuvR2y2Bq0wW67/NmtGLPei78BpyiKvEL098GW bhS1xF7giKLvWnZHc2y6N8Rs8ZzsWeGILuODWZUA8MeRyCrdWcI= -----END CERTIFICATE-----Generated at Thu Sep 24 22:13:34 2026 by rpki-client