$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: Uq0NV9Zr4ZAWkg5+Uq8ToQ4K/0t/eibQPzziRDZkWGc= Subject key identifier: A0:1B:27:34:FE:39:73:B0:38:30:C5:F4:03:76:E8:C2:44:21:7F:F3 Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 258965607F93C3CC76E547CAE9253A073204C053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:46 +0000 Manifest this update: Tue 12 May 2026 18:23:46 +0000 Manifest next update: Wed 13 May 2026 20:03:46 +0000 Files and hashes: 1: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: DD/4TVLndJfMfEONwa6inJS79d7g1rGTL6b1M1riMTE=) 2: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: 3ouLTTMrlORMHlKU1niXf/J5eybW8/1poSHTBw8u7OI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:89:65:60:7f:93:c3:cc:76:e5:47:ca:e9:25:3a:07:32:04:c0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: May 12 18:23:46 2026 GMT Not After : May 13 20:03:46 2026 GMT Subject: CN=A01B2734FE3973B03830C5F40376E8C244217FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:4b:a6:3c:64:4b:0d:0c:68:f5:56:8b:4f: ea:ba:03:9f:39:da:ea:59:d4:41:31:c0:04:d5:38: a0:71:94:7f:60:69:62:b4:50:0f:60:40:a2:09:73: b0:51:c4:2b:31:f4:6b:88:b5:c7:dc:1b:0c:31:e0: d0:53:48:70:ca:f7:3c:a8:e4:3d:1d:f5:a1:1a:35: 46:98:67:35:eb:60:ae:af:9a:9b:50:d0:a7:89:75: e9:f7:fc:3c:2a:ec:bc:9d:01:31:06:d0:c7:cf:16: 8a:d5:93:40:53:cd:31:6c:b9:93:fd:18:a0:ec:88: 1a:5d:37:ff:56:8e:7c:60:d4:b6:b9:3c:3e:28:83: 15:0a:bc:cb:90:2d:24:8e:62:76:7a:89:fe:e5:75: 38:73:c7:93:63:a6:9d:3d:ac:6c:70:68:52:c2:4c: ff:b5:9b:2d:8e:1a:72:96:35:07:55:48:97:fc:a8: 27:20:4f:4a:00:33:31:d6:5c:49:fe:71:52:7c:4f: 25:ba:78:dc:1d:0e:50:5f:3f:78:2f:1b:72:ca:4a: bc:ba:a5:84:a6:45:4c:4f:78:27:bd:82:72:48:b7: 9f:c5:2b:76:be:70:fb:52:7a:7e:90:86:4e:eb:3f: ae:8c:7c:37:69:bf:12:9a:fc:47:61:4d:56:85:7f: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1B:27:34:FE:39:73:B0:38:30:C5:F4:03:76:E8:C2:44:21:7F:F3 X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:4c:08:1b:3b:ec:4d:0c:10:a2:5a:6b:7b:9d:59:7f:1e:ad: 7d:06:ee:d1:f3:cb:ef:50:ad:d1:63:93:24:69:38:29:ba:a6: 54:5c:56:55:64:a8:2d:02:cf:50:2a:bb:01:c8:54:c8:22:06: 7d:d6:1a:6d:d1:5a:1c:f7:2f:ba:fe:67:a5:80:15:0e:68:96: 58:3f:0e:92:b7:4b:5b:8e:75:62:0d:87:c1:39:69:2b:ab:9d: 95:7c:c6:78:a2:31:b8:ef:5f:d0:49:a7:fa:a8:70:4c:e2:7c: 9e:13:1b:b5:2c:26:db:88:3f:fd:a8:98:e6:a8:c9:42:36:7d: f1:1f:1a:d9:e1:c9:86:fd:a3:c3:a4:24:64:3b:32:1a:34:89: 30:fa:ba:7b:f6:7a:63:55:99:35:d9:3d:78:49:39:c1:6c:90: 25:a1:84:2c:62:f0:43:49:8d:56:7b:d7:33:84:2f:81:0a:0b: ee:d7:de:17:60:fe:b2:5b:3f:8d:de:36:12:97:ec:b4:ff:37: 8e:f8:53:76:52:88:6c:db:83:1a:43:1d:42:e8:2c:39:fc:a2: 33:8f:7c:10:75:1e:58:ce:5a:78:5b:a7:91:4a:95:00:89:c0: 5f:1c:d2:9b:c9:b8:f6:d6:5d:45:b6:a8:f5:fa:58:41:28:a6: 82:66:6d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJYllYH+Tw8x25UfK6SU6BzIEwFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA1MTIxODIzNDZaFw0yNjA1MTMyMDAzNDZaMDMxMTAvBgNV BAMTKEEwMUIyNzM0RkUzOTczQjAzODMwQzVGNDAzNzZFOEMyNDQyMTdGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgUumPGRLDQxo9VaLT+q6A585 2upZ1EExwATVOKBxlH9gaWK0UA9gQKIJc7BRxCsx9GuItcfcGwwx4NBTSHDK9zyo 5D0d9aEaNUaYZzXrYK6vmptQ0KeJden3/Dwq7LydATEG0MfPForVk0BTzTFsuZP9 GKDsiBpdN/9Wjnxg1La5PD4ogxUKvMuQLSSOYnZ6if7ldThzx5Njpp09rGxwaFLC TP+1my2OGnKWNQdVSJf8qCcgT0oAMzHWXEn+cVJ8TyW6eNwdDlBfP3gvG3LKSry6 pYSmRUxPeCe9gnJIt5/FK3a+cPtSen6Qhk7rP66MfDdpvxKa/EdhTVaFf1svAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBsnNP45c7A4MMX0A3bowkQhf/MwHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdMCBs77E0MEKJaa3udWX8erX0G7tHzy+9Q rdFjkyRpOCm6plRcVlVkqC0Cz1AquwHIVMgiBn3WGm3RWhz3L7r+Z6WAFQ5ollg/ DpK3S1uOdWINh8E5aSurnZV8xniiMbjvX9BJp/qocEzifJ4TG7UsJtuIP/2omOao yUI2ffEfGtnhyYb9o8OkJGQ7Mho0iTD6unv2emNVmTXZPXhJOcFskCWhhCxi8ENJ jVZ71zOEL4EKC+7X3hdg/rJbP43eNhKX7LT/N474U3ZSiGzbgxpDHULoLDn8ojOP fBB1HljOWnhbp5FKlQCJwF8c0pvJuPbWXUW2qPX6WEEopoJmbRI= -----END CERTIFICATE-----Generated at Wed May 13 02:26:42 2026 by rpki-client