$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft File: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft (raw, json) Hash identifier: ljzxfpcKo3tuHVKwrcBEzx6UI7s7nWS4Wb+eo3V6zwQ= Subject key identifier: DB:DA:19:10:61:BA:35:C5:CA:9B:EF:F4:0F:C9:3D:1B:D6:6C:36:03 Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D Certificate issuer: /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Certificate serial: 6129973A43F21B49D1F81D35BC928FFC0F858A52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft Manifest number: BD Signing time: Tue 22 Sep 2026 00:21:54 +0000 Manifest this update: Tue 22 Sep 2026 00:16:54 +0000 Manifest next update: Wed 23 Sep 2026 01:28:54 +0000 Files and hashes: 1: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl (hash: qGCLQiqdWAqbzmaIJpzKARx+9kgNNifRrXrC1RHoSkE=) 2: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=) 3: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: x+d57o1s3Lbg7LZYcyJzqZr5jsNBMksxksKUmCvZjfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:29:97:3a:43:f2:1b:49:d1:f8:1d:35:bc:92:8f:fc:0f:85:8a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Validity Not Before: Sep 22 00:16:54 2026 GMT Not After : Sep 23 01:28:54 2026 GMT Subject: CN=DBDA191061BA35C5CA9BEFF40FC93D1BD66C3603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:25:d4:53:6d:a9:77:32:4a:c4:c2:55:de:ba: 30:0e:df:26:08:dd:31:93:8f:e9:32:cd:9f:19:ce: 99:e2:ad:a7:20:28:b3:a0:54:ec:8b:b8:48:d5:84: 27:67:0b:f2:dd:d9:4c:75:fe:28:93:d7:c1:65:6e: db:93:a9:bc:05:a3:5e:f2:8e:c8:fb:86:d1:77:e5: c9:7d:da:26:4c:75:fe:12:b0:97:34:be:a7:8b:e7: ad:cf:ac:b9:79:56:a3:9c:37:8f:e8:1f:35:58:ed: f2:8e:3c:2e:b0:eb:86:34:3b:f2:9f:34:2a:fa:4f: 8a:39:8c:ce:08:6d:c5:e3:ca:19:cc:09:ce:29:57: 63:31:f1:f3:2f:27:fc:a1:8c:27:ff:0d:52:bf:c4: 91:2e:82:a6:3d:df:cc:ae:3c:4a:11:9a:92:c9:5e: fa:57:13:66:a1:f8:49:0d:59:5e:28:b7:68:69:31: b7:76:f0:05:3d:a1:08:23:3f:da:93:6f:cb:c7:88: 2b:77:84:85:20:86:8c:40:d7:08:57:4e:a2:1d:39: 99:a4:50:a0:b1:ca:76:6a:a5:a9:a6:5b:94:a2:57: b8:d2:a5:45:49:14:bf:7d:5d:b3:d7:cd:2b:bb:37: 6b:1f:43:eb:77:45:f1:49:12:f4:9b:5b:93:c5:03: 00:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DA:19:10:61:BA:35:C5:CA:9B:EF:F4:0F:C9:3D:1B:D6:6C:36:03 X509v3 Authority Key Identifier: keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ae:90:af:b4:f4:2c:81:46:f0:12:6e:4b:9a:0d:14:c2:92: 6c:ff:28:e2:96:85:2e:49:c0:e2:4e:4b:d8:18:df:ed:45:da: ae:c0:af:70:12:d8:a3:f6:7b:1d:23:ba:e0:a3:24:28:24:67: 71:20:6d:1f:bc:1e:c3:6b:05:07:04:6f:d8:24:e1:5d:08:5c: c5:b6:05:89:49:2e:2b:cd:88:34:a6:29:1d:14:a8:ea:69:22: 9e:4a:70:4d:09:54:c0:de:34:1a:6a:0f:1b:fd:4a:0f:10:c2: d4:c0:ff:8f:b9:50:e9:53:56:ff:13:97:3e:8d:81:6f:8c:c6: d8:69:90:08:6d:5f:b5:73:4a:93:ee:fa:d2:4d:8c:f4:d8:50: 1f:ea:ed:dd:58:d0:72:04:33:16:a8:32:5c:7e:fa:22:8d:80: 44:ff:1a:bc:06:04:af:a6:a9:08:45:84:af:24:83:12:c2:c5: 2f:d0:24:17:0d:bc:3f:91:f3:3b:27:01:e6:a7:19:02:99:c8: 11:53:65:d4:68:07:5c:75:97:c3:bd:ca:b6:72:62:10:f9:08: 2c:c8:82:70:ff:2d:a0:9d:6d:d5:cb:53:e0:1c:ae:0b:c6:92: 7b:f0:c3:99:2b:17:c2:6a:54:d8:70:46:c1:52:27:24:46:98: 5a:77:49:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSmXOkPyG0nR+B01vJKP/A+FilIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3 NzM4NzM1RDAeFw0yNjA5MjIwMDE2NTRaFw0yNjA5MjMwMTI4NTRaMDMxMTAvBgNV BAMTKERCREExOTEwNjFCQTM1QzVDQTlCRUZGNDBGQzkzRDFCRDY2QzM2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJdRTbal3MkrEwlXeujAO3yYI 3TGTj+kyzZ8ZzpniracgKLOgVOyLuEjVhCdnC/Ld2Ux1/iiT18FlbtuTqbwFo17y jsj7htF35cl92iZMdf4SsJc0vqeL563PrLl5VqOcN4/oHzVY7fKOPC6w64Y0O/Kf NCr6T4o5jM4IbcXjyhnMCc4pV2Mx8fMvJ/yhjCf/DVK/xJEugqY938yuPEoRmpLJ XvpXE2ah+EkNWV4ot2hpMbd28AU9oQgjP9qTb8vHiCt3hIUghoxA1whXTqIdOZmk UKCxynZqpammW5SiV7jSpUVJFL99XbPXzSu7N2sfQ+t3RfFJEvSbW5PFAwBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU29oZEGG6NcXKm+/0D8k9G9ZsNgMwHwYDVR0j BBgwFoAUyzuKeHM3KMixr6SO78bh93c4c10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyMDQxZjEtNGNlNi00OWI0LTgzYTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3 MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3NzM4NzM1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjNCOEE3ODczMzcyOEM4QjFBRkE0OEVFRkM2RTFGNzc3Mzg3 MzVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUx Rjc3NzM4NzM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOukK+09CyBRvASbkuaDRTCkmz/KOKWhS5J wOJOS9gY3+1F2q7Ar3AS2KP2ex0juuCjJCgkZ3EgbR+8HsNrBQcEb9gk4V0IXMW2 BYlJLivNiDSmKR0UqOppIp5KcE0JVMDeNBpqDxv9Sg8QwtTA/4+5UOlTVv8Tlz6N gW+MxthpkAhtX7VzSpPu+tJNjPTYUB/q7d1Y0HIEMxaoMlx++iKNgET/GrwGBK+m qQhFhK8kgxLCxS/QJBcNvD+R8zsnAeanGQKZyBFTZdRoB1x1l8O9yrZyYhD5CCzI gnD/LaCdbdXLU+AcrgvGknvww5krF8JqVNhwRsFSJyRGmFp3SQE= -----END CERTIFICATE-----Generated at Tue Sep 22 19:38:03 2026 by rpki-client