$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft File: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft (raw, json) Hash identifier: JCLeY8XtXAgHguRarVGzE4a40kVkxXGC85UT7wTSqiU= Subject key identifier: C9:AA:C3:CA:A4:91:D1:A0:E1:6A:69:D9:D2:67:84:88:DE:C5:2B:F8 Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D Certificate issuer: /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Certificate serial: 1E00D8BC7A1BFB5F84134D769FEECD04B07147CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 08:53:43 +0000 Manifest this update: Wed 17 Jun 2026 08:48:43 +0000 Manifest next update: Thu 18 Jun 2026 11:39:43 +0000 Files and hashes: 1: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=) 2: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl (hash: Bg16Hl8+/GwGBQG4+O7SDICY41Ur4SMjaowtLvGyQD0=) 3: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: x+d57o1s3Lbg7LZYcyJzqZr5jsNBMksxksKUmCvZjfA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:00:d8:bc:7a:1b:fb:5f:84:13:4d:76:9f:ee:cd:04:b0:71:47:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Validity Not Before: Jun 17 08:48:43 2026 GMT Not After : Jun 18 11:39:43 2026 GMT Subject: CN=C9AAC3CAA491D1A0E16A69D9D2678488DEC52BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:30:c6:2b:a3:f1:c0:ba:f9:cd:3c:d5:92: 2b:1e:03:b6:58:53:3f:fe:8e:7b:4a:fa:7a:7d:aa: 7f:1b:e0:31:77:1a:94:c9:fe:6b:9a:32:93:ba:30: 26:0a:7d:df:6d:de:48:7f:1f:d4:be:0c:66:30:f7: ee:56:c4:3e:d6:f1:ae:ba:6d:b2:ae:9f:65:37:de: 11:de:c5:1d:e3:58:81:c9:80:ed:c7:2e:f8:da:13: a6:dc:fc:9c:19:f1:22:60:37:f0:6e:be:54:10:9b: e0:92:8f:6c:fa:bb:c5:f2:55:c8:4d:0c:d9:c8:4f: 36:0c:b3:17:8a:08:8c:03:c0:71:0d:62:0a:80:53: 4f:94:e3:fb:40:5b:25:4a:96:31:83:34:1a:d8:4c: 4b:3d:ae:b8:f5:eb:92:48:73:2d:23:8a:a0:4e:74: 22:63:81:5b:85:d3:ac:e7:88:33:ff:d4:86:d2:14: 80:86:41:e7:6d:cd:f5:68:e2:67:1f:90:f9:11:bf: f0:35:61:7f:ad:6c:ba:c2:3f:69:3c:4e:d2:57:50: c1:37:d9:8b:1f:d7:1e:df:35:ce:ea:4f:ea:01:f2: 36:5f:cf:b6:3a:49:78:c0:d3:6e:5f:34:fe:0a:72: 52:db:45:1a:bb:dd:97:a2:06:62:7d:81:d5:6f:f7: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AA:C3:CA:A4:91:D1:A0:E1:6A:69:D9:D2:67:84:88:DE:C5:2B:F8 X509v3 Authority Key Identifier: keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:09:a1:60:90:13:91:0e:54:1c:84:76:64:8e:74:26:2a:fb: 49:b6:8d:d1:61:3d:47:10:74:e5:57:64:57:8e:f3:93:38:52: 3c:53:45:0d:8d:04:bc:ca:9e:9d:e3:a0:ba:4f:5b:4b:0c:b0: 53:a3:01:9d:bc:45:c5:8c:c9:6c:13:12:d8:3e:bf:45:13:d2: 31:41:b6:dd:8c:8d:6c:6e:9f:25:6e:f1:b8:c5:41:18:e2:aa: ac:b6:14:ab:7a:a1:71:8f:e7:4d:ec:0a:63:fc:76:5f:fc:2f: f1:ee:b7:b8:d0:86:d4:f7:f6:2d:5a:81:ff:1b:24:a1:5d:29: 30:d3:53:ae:b8:f9:23:39:d2:5d:a2:1b:86:5a:4f:31:c9:a5: db:ae:e5:15:a7:53:3c:c0:7d:29:9f:84:6a:b0:d3:d2:ac:38: 8c:4b:b6:2a:2a:c5:8c:09:6d:24:0d:da:72:91:03:d4:be:76: 99:be:cf:22:e3:41:48:18:c9:e0:9b:9f:27:4c:2e:4d:08:61: 3d:21:b4:0f:51:d8:71:b5:c0:38:fc:a8:df:16:a5:6c:4c:c5: c6:54:0a:e0:b0:9b:ce:6d:05:72:26:c8:0f:4f:d1:f0:0a:3f: ed:40:70:88:7e:9b:3e:e0:82:41:4e:60:6d:b9:ca:cb:d2:0c: 65:fb:ff:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgDYvHob+1+EE012n+7NBLBxR8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3 NzM4NzM1RDAeFw0yNjA2MTcwODQ4NDNaFw0yNjA2MTgxMTM5NDNaMDMxMTAvBgNV BAMTKEM5QUFDM0NBQTQ5MUQxQTBFMTZBNjlEOUQyNjc4NDg4REVDNTJCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOTDGK6PxwLr5zTzVkiseA7ZY Uz/+jntK+np9qn8b4DF3GpTJ/muaMpO6MCYKfd9t3kh/H9S+DGYw9+5WxD7W8a66 bbKun2U33hHexR3jWIHJgO3HLvjaE6bc/JwZ8SJgN/BuvlQQm+CSj2z6u8XyVchN DNnITzYMsxeKCIwDwHENYgqAU0+U4/tAWyVKljGDNBrYTEs9rrj165JIcy0jiqBO dCJjgVuF06zniDP/1IbSFICGQedtzfVo4mcfkPkRv/A1YX+tbLrCP2k8TtJXUME3 2Ysf1x7fNc7qT+oB8jZfz7Y6SXjA025fNP4KclLbRRq73ZeiBmJ9gdVv9w+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyarDyqSR0aDhamnZ0meEiN7FK/gwHwYDVR0j BBgwFoAUyzuKeHM3KMixr6SO78bh93c4c10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyMDQxZjEtNGNlNi00OWI0LTgzYTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3 MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3NzM4NzM1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjNCOEE3ODczMzcyOEM4QjFBRkE0OEVFRkM2RTFGNzc3Mzg3 MzVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUx Rjc3NzM4NzM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYJoWCQE5EOVByEdmSOdCYq+0m2jdFhPUcQ dOVXZFeO85M4UjxTRQ2NBLzKnp3joLpPW0sMsFOjAZ28RcWMyWwTEtg+v0UT0jFB tt2MjWxunyVu8bjFQRjiqqy2FKt6oXGP503sCmP8dl/8L/Hut7jQhtT39i1agf8b JKFdKTDTU664+SM50l2iG4ZaTzHJpduu5RWnUzzAfSmfhGqw09KsOIxLtioqxYwJ bSQN2nKRA9S+dpm+zyLjQUgYyeCbnydMLk0IYT0htA9R2HG1wDj8qN8WpWxMxcZU CuCwm85tBXImyA9P0fAKP+1AcIh+mz7ggkFOYG25ysvSDGX7/4w= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:23 2026 by rpki-client