$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: UlyodkfUeTiEoR58QuSP4EWWRMOGkgL2cfRI82aOrjA= Subject key identifier: A0:66:BE:DD:B1:A7:ED:84:34:3A:F9:2B:1B:1D:33:FB:59:54:EF:F5 Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 2168B6A9A18AA57634E761CB40F2ED390618A42E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:56:21 +0000 Manifest this update: Wed 17 Jun 2026 02:51:21 +0000 Manifest next update: Thu 18 Jun 2026 05:48:21 +0000 Files and hashes: 1: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) 2: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) 3: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: Lg1SmZ5AJX/CG4CIdGzkmInIvODJ7knGI++XIGk6HUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:68:b6:a9:a1:8a:a5:76:34:e7:61:cb:40:f2:ed:39:06:18:a4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: Jun 17 02:51:21 2026 GMT Not After : Jun 18 05:48:21 2026 GMT Subject: CN=A066BEDDB1A7ED84343AF92B1B1D33FB5954EFF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:48:9f:84:1d:bd:c2:51:dc:99:f8:26:23: eb:b9:d8:6a:64:82:1f:8c:d6:c4:5a:a3:f8:64:db: c3:e5:0a:c9:44:96:fc:39:8b:2a:07:7c:46:c7:2a: e7:55:48:41:9f:2d:51:ef:bd:2d:5d:d7:ee:16:06: 14:e1:f5:8b:c9:2b:9e:64:84:5d:25:34:7d:6a:b8: 7a:a9:f7:52:18:ec:b7:bc:9f:fe:f2:46:83:a4:41: e9:76:47:5d:15:6d:ec:03:a3:4b:f2:bb:48:44:4f: 3c:2e:a1:e9:5d:8c:8e:8c:da:d4:8a:ad:9a:72:ad: 6a:40:5a:e7:cd:e3:20:07:89:ff:51:b8:f0:ee:c7: fa:d4:55:35:7f:36:ed:7e:1a:b6:3f:38:d6:9b:e9: fd:3d:3b:3e:ca:20:bc:15:07:1f:03:f5:eb:db:ef: 3e:53:f4:0a:47:02:de:d2:8d:31:48:66:0c:d8:10: db:93:9d:f7:61:14:43:ef:bc:47:ef:51:3f:0b:e5: 3f:4f:5b:c4:8b:3e:cb:0f:67:85:f4:4d:96:1a:24: a9:d7:80:d2:15:3c:7c:ee:2e:07:41:71:da:0d:50: 39:33:36:0b:b6:34:3f:2f:36:a3:04:38:82:2c:5b: a7:d5:52:d8:db:3a:8c:93:f4:c9:7f:2b:c3:b3:e6: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:BE:DD:B1:A7:ED:84:34:3A:F9:2B:1B:1D:33:FB:59:54:EF:F5 X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f5:96:34:18:49:1b:5a:5d:5e:61:9b:b6:97:61:9d:07:07: f3:f7:8f:ab:e5:51:9e:80:e6:5e:2c:a6:a8:4e:11:1e:6e:21: 6e:78:f5:7f:eb:1b:14:7a:07:85:a5:26:48:62:aa:27:3b:36: 0f:6a:f7:97:25:98:ed:ba:cc:3f:15:c3:bd:bc:85:5d:2c:f6: 45:c5:96:29:0b:b9:71:d3:27:1b:b1:94:d2:e3:0b:3d:2f:00: b2:80:30:c1:57:62:33:2b:18:69:87:4e:39:95:af:72:92:89: c1:9d:c3:00:52:87:3e:69:fb:e0:bc:73:26:a8:cf:1b:c7:43: 66:e1:b0:43:b0:0e:ab:43:d9:82:e2:79:d6:eb:a6:f1:aa:f4: 13:8a:5b:c0:f0:a5:5f:12:4c:f4:e9:05:f2:5a:7c:de:a5:f4: 36:d2:12:aa:66:50:5a:74:57:ce:98:b2:00:e3:72:4c:bd:52: fa:5a:99:8c:30:9f:27:4b:ab:a6:33:aa:48:03:20:76:a9:bd: 0b:bd:20:73:68:04:b5:ae:9a:3b:8b:95:bb:02:61:d5:f2:39: a6:a7:19:3b:96:cb:48:a0:4d:97:ef:7d:54:64:32:a5:64:ac: d4:fe:7c:0b:2e:c8:ea:8d:89:2f:73:e5:3c:e4:7d:44:dd:20: a7:43:80:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWi2qaGKpXY052HLQPLtOQYYpC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjA2MTcwMjUxMjFaFw0yNjA2MTgwNTQ4MjFaMDMxMTAvBgNV BAMTKEEwNjZCRUREQjFBN0VEODQzNDNBRjkyQjFCMUQzM0ZCNTk1NEVGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8EifhB29wlHcmfgmI+u52Gpk gh+M1sRao/hk28PlCslElvw5iyoHfEbHKudVSEGfLVHvvS1d1+4WBhTh9YvJK55k hF0lNH1quHqp91IY7Le8n/7yRoOkQel2R10VbewDo0vyu0hETzwuoeldjI6M2tSK rZpyrWpAWufN4yAHif9RuPDux/rUVTV/Nu1+GrY/ONab6f09Oz7KILwVBx8D9evb 7z5T9ApHAt7SjTFIZgzYENuTnfdhFEPvvEfvUT8L5T9PW8SLPssPZ4X0TZYaJKnX gNIVPHzuLgdBcdoNUDkzNgu2ND8vNqMEOIIsW6fVUtjbOoyT9Ml/K8Oz5mITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoGa+3bGn7YQ0OvkrGx0z+1lU7/UwHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ31ljQYSRtaXV5hm7aXYZ0HB/P3j6vlUZ6A 5l4spqhOER5uIW549X/rGxR6B4WlJkhiqic7Ng9q95clmO26zD8Vw728hV0s9kXF likLuXHTJxuxlNLjCz0vALKAMMFXYjMrGGmHTjmVr3KSicGdwwBShz5p++C8cyao zxvHQ2bhsEOwDqtD2YLiedbrpvGq9BOKW8DwpV8STPTpBfJafN6l9DbSEqpmUFp0 V86YsgDjcky9UvpamYwwnydLq6YzqkgDIHapvQu9IHNoBLWumjuLlbsCYdXyOaan GTuWy0igTZfvfVRkMqVkrNT+fAsuyOqNiS9z5TzkfUTdIKdDgDg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:15:06 2026 by rpki-client