$ rpki-client -vvf rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft File: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft (raw, json) Hash identifier: liQRt51/5NUKY6IAajbMv926oKXWWtZJKn7sgO43EyM= Subject key identifier: 9B:B7:F0:F4:87:8B:AC:68:F7:F5:88:30:05:05:13:70:6C:2C:1D:DA Authority key identifier: CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 Certificate issuer: /CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Certificate serial: 4B296FF8FBB1B65E4C2D8AA7A2B2999949CC442C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 21:07:40 +0000 Manifest this update: Tue 28 Jul 2026 21:02:40 +0000 Manifest next update: Wed 29 Jul 2026 23:58:40 +0000 Files and hashes: 1: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl (hash: xCIdRwvpc3z8teX4rst9MBkaTaNzzSMGqMhcQvQuZG4=) 2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: shzN9V44H6sJbyc7XtBZ0Ia8BJHs5w38s6/XgarDDV4=) 3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: kp5yEvA04MPtCYbrno7JgwGY6J9dneDRmDS5pzuyNcQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:29:6f:f8:fb:b1:b6:5e:4c:2d:8a:a7:a2:b2:99:99:49:cc:44:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Validity Not Before: Jul 28 21:02:40 2026 GMT Not After : Jul 29 23:58:40 2026 GMT Subject: CN=9BB7F0F4878BAC68F7F58830050513706C2C1DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:cb:3f:05:a3:a1:78:7c:fe:36:a8:0b:aa: 79:fc:50:bb:a5:43:0f:21:b9:e9:b6:1f:7e:50:fa: fd:41:41:83:b0:ae:ef:a3:5d:e2:76:6b:c1:a0:a4: 73:9d:c0:4e:d9:83:58:96:dd:ea:d3:c1:18:4c:46: 9d:0e:9d:09:4d:bb:19:6d:c3:c7:aa:bc:19:1b:92: 89:0e:9e:75:ba:44:9d:f0:dc:e5:4b:2b:ac:b6:29: 6e:cd:f1:f7:80:6a:d4:56:c5:c8:3e:cf:59:cc:ed: 45:6b:b4:8e:b1:55:17:a2:57:b9:44:be:6f:79:5e: 07:c2:b9:01:89:fd:ce:7c:eb:a4:81:65:6f:60:50: 3d:69:14:c4:07:62:ef:a7:c2:3d:e8:62:77:69:d0: e8:30:72:97:e0:27:3f:23:84:58:3e:c0:ca:5f:2c: 22:5d:be:70:a8:b3:c7:63:d1:66:74:c0:9a:ee:77: 1d:0e:23:28:16:0e:47:d0:3f:12:48:25:9c:02:cc: 77:4d:b5:03:5b:88:8c:9f:0f:39:15:66:ba:33:6f: 5a:66:31:7b:e9:a2:37:8f:fa:50:3d:4f:14:16:08: 55:24:5f:12:2c:a9:b1:86:77:65:96:fb:22:40:5e: 0d:2c:df:55:9c:12:d2:d1:37:08:7e:97:9f:91:91: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B7:F0:F4:87:8B:AC:68:F7:F5:88:30:05:05:13:70:6C:2C:1D:DA X509v3 Authority Key Identifier: keyid:CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b5:88:e9:a6:43:36:ed:52:53:4d:12:91:3a:e8:15:73:2c: 6b:16:0a:9e:73:34:5d:49:c3:6f:93:28:08:5c:d1:2a:3d:be: e7:23:ae:3c:2a:ae:89:c3:a3:d4:98:be:a7:d6:f2:8c:c9:8e: 54:ba:a7:ce:df:ad:ad:5d:74:3e:d3:da:64:08:9a:81:96:a3: 1a:33:4c:4d:c3:67:44:90:35:d9:84:b0:cb:29:8f:ec:21:da: bf:f2:34:9b:77:fa:8c:8e:ab:60:8b:ef:b5:83:55:34:67:38: 4c:58:b0:f3:aa:11:57:82:0f:aa:71:03:35:07:48:7c:38:e7: 95:7f:77:5c:76:ab:13:8a:69:61:3e:83:b5:01:3b:3b:9e:3f: 71:84:cf:eb:6e:e2:22:bf:c5:3c:eb:18:dc:9d:a3:4a:bb:12: b4:4d:58:69:70:99:66:6b:74:21:e5:32:b3:75:3e:73:06:fe: 6a:6e:51:2b:19:08:d8:10:f1:ce:0f:33:d8:a0:0e:dd:9f:55: 10:af:e6:f0:dd:17:eb:59:97:49:43:ca:a5:57:df:d1:44:5d: 1e:f0:25:21:ec:e5:44:8a:56:e2:87:5d:2c:0b:ee:93:f7:71: 12:06:05:01:f7:b2:c2:1b:1c:7b:5f:28:44:b6:51:78:8e:3e: d8:1c:db:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSylv+Puxtl5MLYqnorKZmUnMRCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1 RTJCQ0Q4MTAeFw0yNjA3MjgyMTAyNDBaFw0yNjA3MjkyMzU4NDBaMDMxMTAvBgNV BAMTKDlCQjdGMEY0ODc4QkFDNjhGN0Y1ODgzMDA1MDUxMzcwNkMyQzFEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/8s/BaOheHz+NqgLqnn8ULul Qw8huem2H35Q+v1BQYOwru+jXeJ2a8GgpHOdwE7Zg1iW3erTwRhMRp0OnQlNuxlt w8eqvBkbkokOnnW6RJ3w3OVLK6y2KW7N8feAatRWxcg+z1nM7UVrtI6xVReiV7lE vm95XgfCuQGJ/c5866SBZW9gUD1pFMQHYu+nwj3oYndp0OgwcpfgJz8jhFg+wMpf LCJdvnCos8dj0WZ0wJrudx0OIygWDkfQPxJIJZwCzHdNtQNbiIyfDzkVZrozb1pm MXvpojeP+lA9TxQWCFUkXxIsqbGGd2WW+yJAXg0s31WcEtLRNwh+l5+RkZ4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7fw9IeLrGj39YgwBQUTcGwsHdowHwYDVR0j BBgwFoAUy7neQn5xJrNiTm/48KwdrF4rzYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzZWJhYmItOTk5Zi00ZjNlLTg0YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3 RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1RTJCQ0Q4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkI5REU0MjdFNzEyNkIzNjI0RTZGRjhGMEFDMURBQzVFMkJD RDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFE QUM1RTJCQ0Q4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi1iOmmQzbtUlNNEpE66BVzLGsWCp5zNF1J w2+TKAhc0So9vucjrjwqronDo9SYvqfW8ozJjlS6p87fra1ddD7T2mQImoGWoxoz TE3DZ0SQNdmEsMspj+wh2r/yNJt3+oyOq2CL77WDVTRnOExYsPOqEVeCD6pxAzUH SHw455V/d1x2qxOKaWE+g7UBOzueP3GEz+tu4iK/xTzrGNydo0q7ErRNWGlwmWZr dCHlMrN1PnMG/mpuUSsZCNgQ8c4PM9igDt2fVRCv5vDdF+tZl0lDyqVX39FEXR7w JSHs5USKVuKHXSwL7pP3cRIGBQH3ssIbHHtfKES2UXiOPtgc2xQ= -----END CERTIFICATE-----Generated at Wed Jul 29 08:33:46 2026 by rpki-client