$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: f/Fv+IfaVp358e3grHvYt0gEE5lMvVsgUWhNsQ4flas= Subject key identifier: BE:BE:1E:E1:49:A9:A8:99:15:3A:33:CD:D3:92:0E:89:74:90:3D:13 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 49710605D8E81A3C20D72A163D4A75F5A5D517EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01F7 Signing time: Sun 01 Mar 2026 01:22:00 +0000 Manifest this update: Sun 01 Mar 2026 01:17:00 +0000 Manifest next update: Wed 04 Mar 2026 01:45:00 +0000 Files and hashes: 1: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=) 2: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: mKk1QcdrOkf1NzS2eVk6biUZn+VX9nXtN8cshbhjoYE=) 3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:71:06:05:d8:e8:1a:3c:20:d7:2a:16:3d:4a:75:f5:a5:d5:17:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Mar 1 01:17:00 2026 GMT Not After : Mar 4 01:45:00 2026 GMT Subject: CN=BEBE1EE149A9A899153A33CDD3920E8974903D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:89:f5:90:14:e9:85:ba:fe:f2:8a:ac:9a: 18:48:2b:10:a1:37:87:be:2c:72:3e:ea:a8:e7:9a: ec:c5:85:e3:db:c5:2f:2d:de:18:c2:f3:9b:52:83: d1:77:6e:c6:08:a5:5c:92:10:0a:68:b9:72:fd:13: d0:16:d4:d2:49:69:d0:55:06:97:be:ad:38:2f:e7: 5a:11:a9:0f:e8:76:f4:58:94:94:50:23:30:79:04: 47:b7:f9:09:40:d8:e3:18:c0:47:e6:27:53:ee:64: 90:36:e9:ae:82:5f:88:4b:d9:0a:fd:5f:07:54:0e: bd:bf:01:a9:d5:b3:65:58:34:cd:7e:ca:7b:48:f0: 1e:15:8a:7e:54:65:a7:7e:59:10:94:4f:a1:bd:d4: f3:94:e3:a6:08:36:ca:be:d9:a2:30:85:10:d1:5f: 8e:a3:6e:a4:39:20:3f:7f:c1:b9:b9:86:08:a9:a8: eb:62:f2:47:0d:5d:6b:c5:54:2b:b4:07:c5:ad:fc: f2:01:9a:67:e6:56:80:05:68:5d:80:a2:5e:5b:0d: 37:73:d1:7a:1b:15:0f:af:23:dc:88:41:35:88:63: c8:06:ab:26:b4:52:f6:6b:79:ec:ea:d6:34:04:c2: 61:9a:39:90:1b:99:ff:63:17:96:53:6c:5b:2a:4c: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BE:1E:E1:49:A9:A8:99:15:3A:33:CD:D3:92:0E:89:74:90:3D:13 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:76:d5:0a:70:37:33:d4:3b:01:fd:9f:dd:e5:45:7b:b6:c0: 31:7b:d2:4a:38:d9:c6:7d:3c:a7:d7:83:29:9e:57:17:1d:92: 7f:1d:f9:77:a9:dd:60:ae:c4:be:20:d5:59:d3:b2:01:9a:dd: dc:11:8b:58:20:73:b3:c9:d6:8d:f7:b0:43:d6:f8:c4:66:71: bd:c4:51:08:2b:b0:02:af:97:2e:a7:f1:35:a7:9e:ca:87:d2: fe:e4:97:f2:1f:ea:05:4d:66:45:23:7b:23:72:fe:d1:6c:a3: b6:9e:92:f2:75:b8:eb:a9:56:9c:03:26:f2:7c:ee:87:fb:21: 97:31:1e:cb:14:e8:f3:9a:d1:e8:eb:01:36:85:dc:70:d5:27: 9f:7f:41:a6:8b:2c:7e:58:a3:74:06:31:46:cc:aa:f7:67:0c: 3d:2c:4f:4a:83:63:82:dc:94:96:c8:ee:22:6d:d8:c7:0f:46: 38:77:93:70:bf:6b:38:a8:65:6d:d9:4b:49:55:4e:bc:76:46: 72:ad:0d:98:cd:dd:bf:d5:cd:ee:96:c2:58:2b:05:49:5e:b5: 67:8d:93:00:55:d9:ba:76:85:81:17:72:16:c8:bc:47:96:85: ef:ce:72:4a:25:00:04:79:25:ec:8c:85:c1:7a:42:0c:78:6a: c7:1e:1b:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXEGBdjoGjwg1yoWPUp19aXVF+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNjAzMDEwMTE3MDBaFw0yNjAzMDQwMTQ1MDBaMDMxMTAvBgNV BAMTKEJFQkUxRUUxNDlBOUE4OTkxNTNBMzNDREQzOTIwRTg5NzQ5MDNEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGP4n1kBTphbr+8oqsmhhIKxCh N4e+LHI+6qjnmuzFhePbxS8t3hjC85tSg9F3bsYIpVySEApouXL9E9AW1NJJadBV Bpe+rTgv51oRqQ/odvRYlJRQIzB5BEe3+QlA2OMYwEfmJ1PuZJA26a6CX4hL2Qr9 XwdUDr2/AanVs2VYNM1+yntI8B4Vin5UZad+WRCUT6G91POU46YINsq+2aIwhRDR X46jbqQ5ID9/wbm5hgipqOti8kcNXWvFVCu0B8Wt/PIBmmfmVoAFaF2Aol5bDTdz 0XobFQ+vI9yIQTWIY8gGqya0UvZreezq1jQEwmGaOZAbmf9jF5ZTbFsqTGoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvr4e4UmpqJkVOjPN05IOiXSQPRMwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMN21QpwNzPUOwH9n93lRXu2wDF70ko42cZ9 PKfXgymeVxcdkn8d+Xep3WCuxL4g1VnTsgGa3dwRi1ggc7PJ1o33sEPW+MRmcb3E UQgrsAKvly6n8TWnnsqH0v7kl/If6gVNZkUjeyNy/tFso7aekvJ1uOupVpwDJvJ8 7of7IZcxHssU6POa0ejrATaF3HDVJ59/QaaLLH5Yo3QGMUbMqvdnDD0sT0qDY4Lc lJbI7iJt2McPRjh3k3C/azioZW3ZS0lVTrx2RnKtDZjN3b/Vze6WwlgrBUletWeN kwBV2bp2hYEXchbIvEeWhe/OckolAAR5JeyMhcF6Qgx4asceG9o= -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:21 2026 by rpki-client