$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: IgZbhvpBtLf5NEzJldgkML9W3HIe2Lvm2K73TeSqcyw= Subject key identifier: 81:BC:56:D5:6C:21:3F:EF:AF:9B:19:A5:CF:81:7B:4B:E1:6B:80:A8 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 45D7F2DDE96534604226ED859DCD54F5FC211819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 020C Signing time: Thu 16 Apr 2026 14:32:03 +0000 Manifest this update: Thu 16 Apr 2026 14:27:03 +0000 Manifest next update: Sun 19 Apr 2026 23:25:03 +0000 Files and hashes: 1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: Q/JeO1Y1VHpz6dilLGSiFjJ/q+o4OlO5zjpumW3VeP8=) 2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=) 3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d7:f2:dd:e9:65:34:60:42:26:ed:85:9d:cd:54:f5:fc:21:18:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Apr 16 14:27:03 2026 GMT Not After : Apr 19 23:25:03 2026 GMT Subject: CN=81BC56D56C213FEFAF9B19A5CF817B4BE16B80A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:c2:a2:06:eb:d4:75:92:bf:e5:c6:95:3c: 6d:0c:cd:8b:85:67:1b:4a:6a:0d:e1:33:5a:16:8e: c5:8c:e2:5a:ca:32:4c:b1:15:a6:69:29:c8:ca:9b: af:0a:e3:e0:e9:d2:6f:71:b5:7e:e1:53:08:67:bb: 9e:00:3c:28:4c:f7:fc:38:56:b4:f1:1b:02:98:a2: 10:46:52:fe:74:c7:08:d0:93:a8:c0:c1:51:05:b6: 1c:0f:5b:0a:fb:1f:e9:4b:fe:a4:52:7d:ea:b9:1f: b2:2e:33:b2:31:65:b5:a9:a7:38:48:aa:9f:b3:b4: 5c:ae:ae:c9:3c:17:90:39:5a:81:72:96:16:f1:cf: 81:e2:b7:c4:30:59:8e:31:0c:21:ea:14:5e:5d:a0: 40:7f:05:08:c5:f6:51:2c:1f:2a:e2:24:05:a6:85: 6f:70:d1:92:e7:28:20:45:00:39:d2:28:26:5b:80: 76:c7:fe:b2:4c:fa:7a:11:22:82:73:22:00:d6:98: 83:41:16:7f:38:73:15:87:7f:f9:c2:af:a6:c1:e8: 63:01:24:4f:3f:6c:9d:1d:f8:a2:0f:1d:97:be:ce: 0c:d1:16:99:12:84:2f:29:53:a1:6a:e5:27:62:87: 9e:0f:52:d8:ad:13:00:5d:24:90:ab:a7:f6:c2:d4: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BC:56:D5:6C:21:3F:EF:AF:9B:19:A5:CF:81:7B:4B:E1:6B:80:A8 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c0:d2:42:d8:f0:5a:77:b8:ed:6f:cb:f9:71:38:fb:75:c5: 98:b1:38:b0:3e:62:1e:7a:7f:9b:d1:47:49:75:ef:e5:00:c2: 21:ef:9d:3a:b0:cd:8a:7e:40:88:79:e0:ea:11:f1:22:37:ec: 73:02:37:c4:a8:e9:89:66:42:93:f2:44:96:1f:1c:09:c6:6a: de:ea:1f:21:ba:ea:27:18:40:33:89:d8:d5:f3:78:f2:65:56: bc:b6:57:a8:8c:cc:26:43:6d:ff:82:71:9d:44:5b:5f:64:5f: ec:d6:02:f0:1a:ae:7b:fd:ab:16:ea:8c:e2:fc:d5:1d:b8:c6: e5:84:e8:3d:5f:e2:1d:98:d1:91:bf:88:93:59:a3:7d:5c:99: d6:77:19:25:a4:63:2e:6f:39:f7:b2:f5:e0:d2:96:82:26:24: 24:a2:62:b1:ec:1c:a2:d9:ea:42:e0:4e:f2:3c:58:77:e8:42: 51:99:7c:ae:a9:5b:cc:c9:43:41:7d:48:42:de:3a:19:4d:e7: e1:a9:25:72:a5:4b:b8:a0:31:f0:70:bf:30:4b:dc:52:0e:7e: a0:55:10:cc:2d:e6:1f:48:6a:9b:23:9e:f7:1e:21:ed:4e:a0: e0:2c:c2:66:b7:cb:59:5e:99:d9:5d:41:12:de:9f:35:98:25: aa:f4:c9:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdfy3ellNGBCJu2Fnc1U9fwhGBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNjA0MTYxNDI3MDNaFw0yNjA0MTkyMzI1MDNaMDMxMTAvBgNV BAMTKDgxQkM1NkQ1NkMyMTNGRUZBRjlCMTlBNUNGODE3QjRCRTE2QjgwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDsKiBuvUdZK/5caVPG0MzYuF ZxtKag3hM1oWjsWM4lrKMkyxFaZpKcjKm68K4+Dp0m9xtX7hUwhnu54APChM9/w4 VrTxGwKYohBGUv50xwjQk6jAwVEFthwPWwr7H+lL/qRSfeq5H7IuM7IxZbWppzhI qp+ztFyursk8F5A5WoFylhbxz4Hit8QwWY4xDCHqFF5doEB/BQjF9lEsHyriJAWm hW9w0ZLnKCBFADnSKCZbgHbH/rJM+noRIoJzIgDWmINBFn84cxWHf/nCr6bB6GMB JE8/bJ0d+KIPHZe+zgzRFpkShC8pU6Fq5Sdih54PUtitEwBdJJCrp/bC1DMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgbxW1WwhP++vmxmlz4F7S+FrgKgwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnA0kLY8Fp3uO1vy/lxOPt1xZixOLA+Yh56 f5vRR0l17+UAwiHvnTqwzYp+QIh54OoR8SI37HMCN8So6YlmQpPyRJYfHAnGat7q HyG66icYQDOJ2NXzePJlVry2V6iMzCZDbf+CcZ1EW19kX+zWAvAarnv9qxbqjOL8 1R24xuWE6D1f4h2Y0ZG/iJNZo31cmdZ3GSWkYy5vOfey9eDSloImJCSiYrHsHKLZ 6kLgTvI8WHfoQlGZfK6pW8zJQ0F9SELeOhlN5+GpJXKlS7igMfBwvzBL3FIOfqBV EMwt5h9IapsjnvceIe1OoOAswma3y1lemdldQRLenzWYJar0yQE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:30:14 2026 by rpki-client