$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft File: CB1DBC8005A976151FCB40B190D2FB007257926D.mft (raw, json) Hash identifier: D6QB+aFDXwG5RyTNTy0cp1YvS/wtVZJXEwB/4MrRkZk= Subject key identifier: 08:F2:DC:F3:94:19:79:83:E0:35:46:84:CA:C1:62:29:3E:C7:17:AB Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D Certificate issuer: /CN=CB1DBC8005A976151FCB40B190D2FB007257926D Certificate serial: 66C05FB604838D4A94C6E1FA1EFF1E77E1720104 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft Manifest number: BF Signing time: Tue 22 Sep 2026 10:55:05 +0000 Manifest this update: Tue 22 Sep 2026 10:50:05 +0000 Manifest next update: Wed 23 Sep 2026 11:16:05 +0000 Files and hashes: 1: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: JtYJWwvzpXOf4hheAO+k8IOGayyc4dYyOp8DCvruUrg=) 2: CB1DBC8005A976151FCB40B190D2FB007257926D.crl (hash: Stw9EJFTCeel3/2tPqf7voD6tiragQ7QpKAS4vHvMls=) 3: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: pYHFYFUzoJNAsC6Cp8pDGU8Mnw4SxVjzZR48Pyb+I2A=) 4: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: ArRnNfQejR0sI5RjCbfv6zZubamliB/ioJJ0CyHpvz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c0:5f:b6:04:83:8d:4a:94:c6:e1:fa:1e:ff:1e:77:e1:72:01:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D Validity Not Before: Sep 22 10:50:05 2026 GMT Not After : Sep 23 11:16:05 2026 GMT Subject: CN=08F2DCF394197983E0354684CAC162293EC717AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:9d:ed:d6:11:4e:86:c9:3d:8c:31:6a:23: ce:46:86:d5:87:bc:85:c2:d0:d4:de:72:e3:c5:e8: 37:4d:44:74:54:3c:6f:97:1b:5e:a5:83:fc:48:84: 68:7d:0a:a8:62:91:e9:1f:40:3a:10:3d:7b:6b:cd: ef:e8:66:b6:0c:43:76:d5:16:5c:2a:11:46:18:02: a0:44:44:b8:fd:6f:c7:37:01:0f:f1:6e:c8:16:42: 99:01:64:fe:35:b2:e2:f6:30:aa:71:52:eb:20:0e: 16:69:fd:32:43:aa:7c:af:66:21:45:4f:43:2d:f6: 6a:d4:db:b0:95:87:ec:bb:d1:75:43:7c:33:3b:54: ef:95:60:a4:10:fd:c8:d0:77:7e:ec:28:38:ab:13: f9:c6:ea:0e:48:58:ac:0b:2e:f3:67:05:ed:15:f2: 7f:1a:34:cf:33:7b:e3:b7:ac:eb:42:57:57:42:c6: a7:0b:97:e8:53:26:5c:67:f1:6f:dd:55:6e:67:53: 25:2b:c1:82:ac:56:4d:a0:37:2d:85:02:4d:b4:a7: 8e:61:f3:8a:cf:27:27:a0:8e:a9:58:87:9d:07:c9: ed:e9:4d:eb:a9:24:47:77:8a:66:7f:33:08:e2:08: fc:80:48:1e:08:2f:d2:9b:c9:10:ae:0d:90:9d:db: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F2:DC:F3:94:19:79:83:E0:35:46:84:CA:C1:62:29:3E:C7:17:AB X509v3 Authority Key Identifier: keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:89:16:53:ba:89:35:9a:69:56:7a:64:5c:09:d0:2b:09:37: 4f:54:6a:6d:a7:42:37:72:ed:18:0a:4d:fc:50:49:7b:91:8b: 25:75:e2:5d:93:bd:7f:5b:64:79:06:ea:25:0f:0d:0e:28:34: a6:24:05:61:d0:87:39:3c:3a:1d:4b:c8:21:b6:6c:60:73:09: c7:93:2f:42:ed:60:09:ee:dd:b5:30:ca:b8:ef:46:94:5d:fb: d4:10:8f:cb:31:8c:77:36:43:09:48:99:ca:bc:f9:72:f5:b3: b9:fe:bf:16:ab:d1:7f:75:70:0b:d6:09:1b:cf:8e:5a:18:65: a2:a7:5c:7b:16:16:59:39:5f:87:bd:14:cb:95:0e:3d:14:76: 94:44:a2:76:63:42:fa:d1:31:7a:e8:05:b0:de:a3:d1:c2:c5: c3:86:35:8e:68:ea:c1:d1:f9:66:ec:df:86:21:4c:89:7b:76: b9:74:9f:ec:de:4f:27:71:f6:71:0a:3c:2a:e2:fb:5d:ba:af: 49:6b:92:b7:8b:4c:cb:59:a4:d4:ef:2c:d4:5e:86:53:b2:83: e0:cf:c5:46:40:94:79:8b:c3:26:d1:96:a7:a7:31:4e:a9:03: 6b:b8:18:d1:45:5c:03:27:7f:7c:41:e5:91:b8:ec:55:bc:0d: 88:58:cf:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsBftgSDjUqUxuH6Hv8ed+FyAQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3 MjU3OTI2RDAeFw0yNjA5MjIxMDUwMDVaFw0yNjA5MjMxMTE2MDVaMDMxMTAvBgNV BAMTKDA4RjJEQ0YzOTQxOTc5ODNFMDM1NDY4NENBQzE2MjI5M0VDNzE3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVjZ3t1hFOhsk9jDFqI85GhtWH vIXC0NTecuPF6DdNRHRUPG+XG16lg/xIhGh9CqhikekfQDoQPXtrze/oZrYMQ3bV FlwqEUYYAqBERLj9b8c3AQ/xbsgWQpkBZP41suL2MKpxUusgDhZp/TJDqnyvZiFF T0Mt9mrU27CVh+y70XVDfDM7VO+VYKQQ/cjQd37sKDirE/nG6g5IWKwLLvNnBe0V 8n8aNM8ze+O3rOtCV1dCxqcLl+hTJlxn8W/dVW5nUyUrwYKsVk2gNy2FAk20p45h 84rPJyegjqlYh50Hye3pTeupJEd3imZ/MwjiCPyASB4IL9KbyRCuDZCd22MHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCPLc85QZeYPgNUaEysFiKT7HF6swHwYDVR0j BBgwFoAUyx28gAWpdhUfy0CxkNL7AHJXkm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjYjVjOWItZjM4My00ZTgxLTgxMmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAw NUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3MjU3OTI2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjFEQkM4MDA1QTk3NjE1MUZDQjQwQjE5MEQyRkIwMDcyNTc5 MjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZC MDA3MjU3OTI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCJFlO6iTWaaVZ6ZFwJ0CsJN09Uam2nQjdy 7RgKTfxQSXuRiyV14l2TvX9bZHkG6iUPDQ4oNKYkBWHQhzk8Oh1LyCG2bGBzCceT L0LtYAnu3bUwyrjvRpRd+9QQj8sxjHc2QwlImcq8+XL1s7n+vxar0X91cAvWCRvP jloYZaKnXHsWFlk5X4e9FMuVDj0UdpREonZjQvrRMXroBbDeo9HCxcOGNY5o6sHR +Wbs34YhTIl7drl0n+zeTydx9nEKPCri+126r0lrkreLTMtZpNTvLNRehlOyg+DP xUZAlHmLwybRlqenMU6pA2u4GNFFXAMnf3xB5ZG47FW8DYhYz+0= -----END CERTIFICATE-----Generated at Tue Sep 22 18:51:08 2026 by rpki-client