$ rpki-client -vvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft File: CB1DBC8005A976151FCB40B190D2FB007257926D.mft (raw, json) Hash identifier: 07HVaPeIZcNKyjeySqDZ20/1hzswI67rqQ4rAhEzuEU= Subject key identifier: 86:31:93:D2:77:C0:5F:14:E4:9C:97:58:15:93:A7:7F:E9:9D:57:E0 Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D Certificate issuer: /CN=CB1DBC8005A976151FCB40B190D2FB007257926D Certificate serial: 32D7B271DF6699ACB2B9296FB1BF6E7578515294 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:31:26 +0000 Manifest this update: Tue 16 Jun 2026 22:26:26 +0000 Manifest next update: Wed 17 Jun 2026 23:18:26 +0000 Files and hashes: 1: CB1DBC8005A976151FCB40B190D2FB007257926D.crl (hash: guNH43UFB3yuOr4yS1kbxXV73dVDc3uoLmCGl8Ag1m4=) 2: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: JtYJWwvzpXOf4hheAO+k8IOGayyc4dYyOp8DCvruUrg=) 3: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: ArRnNfQejR0sI5RjCbfv6zZubamliB/ioJJ0CyHpvz8=) 4: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: pYHFYFUzoJNAsC6Cp8pDGU8Mnw4SxVjzZR48Pyb+I2A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d7:b2:71:df:66:99:ac:b2:b9:29:6f:b1:bf:6e:75:78:51:52:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D Validity Not Before: Jun 16 22:26:26 2026 GMT Not After : Jun 17 23:18:26 2026 GMT Subject: CN=863193D277C05F14E49C97581593A77FE99D57E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:57:f3:fe:dd:66:59:f9:76:1d:36:21:cf: 1a:38:fa:9c:4c:87:84:e4:3d:68:bc:50:63:bb:02: 2d:c1:ca:8c:ec:31:ff:dc:c7:91:b3:7c:d9:08:8d: d5:aa:05:e4:69:95:ca:46:24:5d:a9:6f:6b:f3:aa: ac:d6:e5:0f:18:b7:bb:a7:9c:89:f1:1b:05:3f:98: d4:87:09:73:ce:25:e5:aa:84:3b:6b:06:e4:97:d3: 8f:62:3e:73:2d:17:c8:1c:24:f9:7e:e6:3b:64:48: b5:4f:c2:47:3f:54:96:44:0a:8d:1f:51:bd:b7:24: 2d:b9:0c:30:88:8c:f8:83:c6:c4:a1:38:c1:af:d0: 53:d6:ea:3a:97:20:13:48:f1:a2:d1:05:09:d2:98: fe:f9:05:4d:89:ee:8b:a1:be:1f:4e:01:19:45:78: 3b:75:0f:7e:df:72:f2:18:58:cd:fa:5a:71:a3:43: b5:cb:9c:72:e6:14:2c:d8:9a:aa:f2:2f:a1:92:90: 77:49:39:52:75:c1:28:ff:72:8a:e2:ea:f8:b1:67: af:11:af:07:59:6b:24:e0:3a:b5:93:da:33:a5:fa: be:37:24:66:1c:ff:7d:7c:f3:37:ca:24:fd:44:fa: 84:93:ac:d7:db:bb:f4:a4:62:aa:83:4b:45:51:26: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:93:D2:77:C0:5F:14:E4:9C:97:58:15:93:A7:7F:E9:9D:57:E0 X509v3 Authority Key Identifier: keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a9:9e:cc:84:b0:0d:36:57:7d:7d:74:24:c4:0b:ac:99:e0: 48:3e:8c:9c:d2:d8:79:00:73:a9:51:8c:1d:45:e4:0a:1e:6c: b3:2b:5b:ea:f2:f0:e6:45:8b:62:2d:a3:19:63:ab:b6:b2:cf: 1c:22:6d:88:9e:a0:1f:55:4e:47:d8:12:a3:7a:eb:1f:19:45: b3:f3:05:ee:f2:e5:db:73:00:12:5f:d8:4e:10:4f:80:f3:17: 40:30:ae:82:ba:52:34:cc:8d:b9:9c:1e:4f:c7:98:76:5d:6a: 02:2d:33:5f:52:56:8d:72:52:c2:18:70:63:ac:2a:ab:9a:67: ea:4d:19:33:20:8f:f1:ea:ca:b9:2b:2c:47:66:46:33:d1:ab: f8:46:85:3d:d0:86:d7:58:2b:f0:ad:1a:68:1c:fd:b2:08:e6: ca:6b:65:cd:a3:97:54:26:d0:13:a5:cd:f8:3b:ba:c1:35:05: 33:3f:03:c2:86:ca:8b:dd:48:af:22:fe:0f:01:6c:8b:ad:3a: ff:96:a4:81:5c:39:c2:14:ca:19:7f:db:00:d7:38:c2:22:97: 42:c5:e2:ef:35:b6:bd:2b:4f:e0:8c:af:40:96:5c:13:8e:60: 8a:ca:84:9d:92:71:a1:27:79:9f:a9:e0:c1:21:32:64:cc:06: 31:66:f9:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMteycd9mmayyuSlvsb9udXhRUpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3 MjU3OTI2RDAeFw0yNjA2MTYyMjI2MjZaFw0yNjA2MTcyMzE4MjZaMDMxMTAvBgNV BAMTKDg2MzE5M0QyNzdDMDVGMTRFNDlDOTc1ODE1OTNBNzdGRTk5RDU3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetFfz/t1mWfl2HTYhzxo4+pxM h4TkPWi8UGO7Ai3ByozsMf/cx5GzfNkIjdWqBeRplcpGJF2pb2vzqqzW5Q8Yt7un nInxGwU/mNSHCXPOJeWqhDtrBuSX049iPnMtF8gcJPl+5jtkSLVPwkc/VJZECo0f Ub23JC25DDCIjPiDxsShOMGv0FPW6jqXIBNI8aLRBQnSmP75BU2J7ouhvh9OARlF eDt1D37fcvIYWM36WnGjQ7XLnHLmFCzYmqryL6GSkHdJOVJ1wSj/cori6vixZ68R rwdZayTgOrWT2jOl+r43JGYc/3188zfKJP1E+oSTrNfbu/SkYqqDS0VRJicxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjGT0nfAXxTknJdYFZOnf+mdV+AwHwYDVR0j BBgwFoAUyx28gAWpdhUfy0CxkNL7AHJXkm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjYjVjOWItZjM4My00ZTgxLTgxMmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAw NUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3MjU3OTI2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjFEQkM4MDA1QTk3NjE1MUZDQjQwQjE5MEQyRkIwMDcyNTc5 MjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZC MDA3MjU3OTI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+pnsyEsA02V319dCTEC6yZ4Eg+jJzS2HkA c6lRjB1F5AoebLMrW+ry8OZFi2Itoxljq7ayzxwibYieoB9VTkfYEqN66x8ZRbPz Be7y5dtzABJf2E4QT4DzF0AwroK6UjTMjbmcHk/HmHZdagItM19SVo1yUsIYcGOs KquaZ+pNGTMgj/HqyrkrLEdmRjPRq/hGhT3QhtdYK/CtGmgc/bII5sprZc2jl1Qm 0BOlzfg7usE1BTM/A8KGyovdSK8i/g8BbIutOv+WpIFcOcIUyhl/2wDXOMIil0LF 4u81tr0rT+CMr0CWXBOOYIrKhJ2ScaEneZ+p4MEhMmTMBjFm+TM= -----END CERTIFICATE-----Generated at Wed Jun 17 09:44:19 2026 by rpki-client