$ rpki-client -vvf rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft File: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft (raw, json) Hash identifier: IvtP3XpnmTCQnKtIO+DEPzjskbyIgI+m1ezrd+0WyrY= Subject key identifier: 8A:ED:1E:31:E0:DC:E0:4B:5B:ED:54:63:6A:FF:BC:1F:7E:8C:D0:91 Authority key identifier: CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 Certificate issuer: /CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Certificate serial: 2386F1E6DC8D44D7EBB8D9B4A58653DC3A15DFEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 19:58:25 +0000 Manifest this update: Sat 13 Jun 2026 19:53:25 +0000 Manifest next update: Sun 14 Jun 2026 23:12:25 +0000 Files and hashes: 1: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl (hash: tMJTp07gt1JZE44gOciBAF/Jnt37cSK1d/RUBkzWcrM=) 2: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: kp5yEvA04MPtCYbrno7JgwGY6J9dneDRmDS5pzuyNcQ=) 3: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: shzN9V44H6sJbyc7XtBZ0Ia8BJHs5w38s6/XgarDDV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:86:f1:e6:dc:8d:44:d7:eb:b8:d9:b4:a5:86:53:dc:3a:15:df:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Validity Not Before: Jun 13 19:53:25 2026 GMT Not After : Jun 14 23:12:25 2026 GMT Subject: CN=8AED1E31E0DCE04B5BED54636AFFBC1F7E8CD091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:a5:ee:13:3a:b6:03:8b:7e:d8:a5:6d:83: 9e:84:ea:bc:ef:75:05:b4:70:ea:7d:51:5c:db:17: 27:17:a1:09:f4:56:b0:29:93:d5:d8:b2:24:58:dc: b0:6f:ff:4a:14:ac:34:21:fa:db:19:01:23:29:4c: b1:60:54:f4:3e:3f:9a:f7:ee:ab:ee:98:09:9b:80: 78:7c:83:d5:c7:0b:ee:a7:66:7a:4d:d9:1b:3f:8f: de:be:16:10:77:dd:db:bf:1e:b7:47:47:ff:c3:0c: 87:10:48:dc:d6:5a:f7:c0:f2:e5:1c:40:c1:63:15: 36:a3:61:84:5b:cf:57:88:33:d7:04:ec:74:b8:fb: b4:d9:23:ea:f5:be:f3:35:c7:30:8a:5b:c3:37:da: fd:31:0b:61:4b:9d:94:5d:6a:3e:20:4f:1f:78:84: 09:5b:ec:c1:f9:b2:4c:7c:b6:c3:06:fc:c2:fa:47: 92:e0:d0:d3:bb:dd:8f:cd:87:0d:9e:cb:6e:5c:0b: d8:27:bb:74:fa:cb:89:a1:3b:4d:07:60:f4:96:82: e1:c4:ec:49:0f:54:6d:9d:f8:64:32:7d:a4:c4:63: 33:58:fd:15:79:ea:e8:13:3e:1f:43:57:8b:58:a0: cf:94:6c:e4:7a:94:4e:32:1d:cd:ce:93:75:6e:92: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:1E:31:E0:DC:E0:4B:5B:ED:54:63:6A:FF:BC:1F:7E:8C:D0:91 X509v3 Authority Key Identifier: keyid:CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2c:d5:a4:0f:75:72:fb:a8:9e:6b:b2:bd:b1:de:47:3f:1b: e5:c4:0a:51:59:4c:8b:62:46:aa:23:11:b1:ae:b8:53:44:62: 7c:d8:9f:9b:20:72:6b:18:97:ce:d3:a2:37:f0:cd:e4:54:2f: 27:c7:c7:9a:7f:d4:ba:f0:f1:d7:7f:d2:8b:d0:fb:13:83:d8: 62:d2:f4:b7:cc:c9:d8:1c:05:2e:f7:8a:3b:6f:48:3c:ac:a9: 3d:1c:96:d8:bd:66:36:0e:a3:bf:7c:51:d3:f2:30:a6:e0:76: 6b:a5:26:b3:fd:f2:d1:7b:55:0a:f2:3f:be:d1:0c:06:48:b7: 75:9a:1c:78:7a:14:9a:35:21:ab:86:0c:7e:4d:bf:48:99:13: 60:f8:5c:87:60:b4:c9:d6:2c:30:40:ad:31:32:4a:0c:48:57: 43:03:40:c0:f7:42:7a:71:7d:39:f0:e7:4e:6b:70:e3:c5:bb: 1e:52:2a:7f:50:d7:52:7f:f7:1e:05:56:c4:1b:e4:fc:34:10: 44:34:e3:19:01:86:eb:c3:b9:c9:a3:36:f3:1c:e0:ea:e3:e3: 50:03:f1:81:a1:2c:e5:42:85:0f:40:b3:c5:e8:af:28:06:a1: 51:3f:a5:cb:92:6f:7d:a9:a0:14:92:0a:eb:ea:d9:27:73:9f: c1:5a:87:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4bx5tyNRNfruNm0pYZT3DoV3+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1 RTJCQ0Q4MTAeFw0yNjA2MTMxOTUzMjVaFw0yNjA2MTQyMzEyMjVaMDMxMTAvBgNV BAMTKDhBRUQxRTMxRTBEQ0UwNEI1QkVENTQ2MzZBRkZCQzFGN0U4Q0QwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDp6XuEzq2A4t+2KVtg56E6rzv dQW0cOp9UVzbFycXoQn0VrApk9XYsiRY3LBv/0oUrDQh+tsZASMpTLFgVPQ+P5r3 7qvumAmbgHh8g9XHC+6nZnpN2Rs/j96+FhB33du/HrdHR//DDIcQSNzWWvfA8uUc QMFjFTajYYRbz1eIM9cE7HS4+7TZI+r1vvM1xzCKW8M32v0xC2FLnZRdaj4gTx94 hAlb7MH5skx8tsMG/ML6R5Lg0NO73Y/Nhw2ey25cC9gnu3T6y4mhO00HYPSWguHE 7EkPVG2d+GQyfaTEYzNY/RV56ugTPh9DV4tYoM+UbOR6lE4yHc3Ok3VukoRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiu0eMeDc4Etb7VRjav+8H36M0JEwHwYDVR0j BBgwFoAUy7neQn5xJrNiTm/48KwdrF4rzYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzZWJhYmItOTk5Zi00ZjNlLTg0YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3 RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1RTJCQ0Q4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkI5REU0MjdFNzEyNkIzNjI0RTZGRjhGMEFDMURBQzVFMkJD RDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFE QUM1RTJCQ0Q4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8s1aQPdXL7qJ5rsr2x3kc/G+XEClFZTIti RqojEbGuuFNEYnzYn5sgcmsYl87TojfwzeRULyfHx5p/1Lrw8dd/0ovQ+xOD2GLS 9LfMydgcBS73ijtvSDysqT0clti9ZjYOo798UdPyMKbgdmulJrP98tF7VQryP77R DAZIt3WaHHh6FJo1IauGDH5Nv0iZE2D4XIdgtMnWLDBArTEySgxIV0MDQMD3Qnpx fTnw505rcOPFux5SKn9Q11J/9x4FVsQb5Pw0EEQ04xkBhuvDucmjNvMc4Orj41AD 8YGhLOVChQ9As8XorygGoVE/pcuSb32poBSSCuvq2Sdzn8FahwE= -----END CERTIFICATE-----Generated at Sat Jun 13 22:41:15 2026 by rpki-client