$ rpki-client -vvvf rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft File: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft (raw, json) Hash identifier: nHovO/2LmjTokZkVtDaK6r0sZv2eANwf8s5UDsnsRgI= Subject key identifier: D9:32:69:E9:82:62:BB:6D:0C:60:94:3A:F0:5D:A9:B8:A7:64:57:0C Authority key identifier: CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 Certificate issuer: /CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Certificate serial: 258E719C66A1084B0FC1ABB245F6138553DA90E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft Manifest number: BC Signing time: Sun 20 Sep 2026 05:03:26 +0000 Manifest this update: Sun 20 Sep 2026 04:58:26 +0000 Manifest next update: Mon 21 Sep 2026 08:36:26 +0000 Files and hashes: 1: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl (hash: ITdP0WIPZ5kLatoGjRN1OHlsSuO//y7BRteWJvTpcmA=) 2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: pbFqtdrF857Bo284a6tYg8zQs+U7i5koym7amsZuX/8=) 3: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: MlsPGYjwxcTUokzk7qgJtZJ0zjAyD3pAbTHc5VBWDJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8e:71:9c:66:a1:08:4b:0f:c1:ab:b2:45:f6:13:85:53:da:90:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Validity Not Before: Sep 20 04:58:26 2026 GMT Not After : Sep 21 08:36:26 2026 GMT Subject: CN=D93269E98262BB6D0C60943AF05DA9B8A764570C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:ee:37:7d:95:7e:c2:f3:00:ab:4b:af:34: 25:73:b0:76:6e:58:1d:bc:21:8b:c5:d0:1c:1c:25: fa:76:05:70:11:8a:cb:b6:12:28:a2:7e:ab:99:f2: a5:9c:3d:4a:34:73:c8:c5:c2:c2:f4:3b:a1:54:92: 79:e3:b8:3d:23:df:88:5f:cd:ef:70:a5:a8:28:32: c1:4c:d4:07:50:92:68:20:54:1e:ad:60:a6:f5:fc: 34:76:e0:f7:69:23:04:c0:6e:ea:0e:65:f6:fd:58: 46:bc:c2:3d:f5:cf:64:a2:32:d5:87:48:35:a8:ad: 07:3a:00:c2:dc:9f:4b:6c:2c:83:91:45:59:a3:54: 68:40:25:d0:9d:a1:1e:62:a4:45:9e:5b:4f:50:62: 0f:b7:ff:4e:94:60:92:f2:70:04:69:88:e2:b0:d1: 64:d0:17:e3:47:53:98:54:c3:45:a8:7e:98:77:4e: f8:fe:91:68:62:31:ce:9d:35:18:19:98:ec:1c:ac: 02:2b:79:56:db:fe:f5:54:04:4b:f9:f7:05:2f:39: 93:e2:6f:37:c1:d4:41:0b:5c:49:6e:a9:54:11:ed: e7:67:e8:1c:10:41:56:4c:e7:57:51:c6:78:d1:d2: 48:3b:d7:e1:a4:fa:e9:55:7f:a1:86:f1:fe:65:70: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:32:69:E9:82:62:BB:6D:0C:60:94:3A:F0:5D:A9:B8:A7:64:57:0C X509v3 Authority Key Identifier: keyid:CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:07:a5:20:e4:9c:6d:07:7b:69:f9:19:bd:be:e8:d3:1e:e3: d6:87:f8:db:22:01:c4:78:f2:23:d0:58:7c:1e:53:2d:6a:f5: 10:7e:23:f1:89:e9:ef:33:6c:78:da:3f:b2:bf:7d:11:50:64: f5:a3:95:4d:66:d2:95:e4:36:f1:8c:65:e0:c1:47:c2:55:34: 9e:e0:df:e3:de:23:d0:58:5e:b3:eb:43:a4:95:ce:a8:12:81: 18:8d:b7:73:55:b1:e6:e5:c4:dc:28:6c:75:2d:f7:87:d9:f0: 9f:36:48:fd:3c:1d:f1:7b:c9:82:d9:37:7a:bb:82:ea:3e:8d: fd:c7:95:a4:5f:5a:46:63:91:6b:64:b9:51:50:6d:e5:ed:df: 74:80:3d:e1:81:b5:8e:e1:03:8f:68:96:b4:04:25:4a:b6:88: 52:8a:c4:89:d3:a8:9f:48:e0:87:e6:8a:2a:d8:79:23:f6:ec: 8e:20:88:f8:69:b0:02:b0:d4:dd:ea:36:29:c7:10:b7:be:07: 52:85:97:7f:df:76:45:cf:fc:39:14:39:1c:01:59:b3:1b:d7: f0:76:49:d0:4e:56:ce:e1:ad:60:b6:73:13:20:c1:f2:f4:89: 23:9b:97:80:62:75:16:f3:e7:5b:fb:ae:ff:20:02:38:6f:10: 95:3e:2b:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJY5xnGahCEsPwauyRfYThVPakOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4 NjJDMTAzNDAeFw0yNjA5MjAwNDU4MjZaFw0yNjA5MjEwODM2MjZaMDMxMTAvBgNV BAMTKEQ5MzI2OUU5ODI2MkJCNkQwQzYwOTQzQUYwNURBOUI4QTc2NDU3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3O43fZV+wvMAq0uvNCVzsHZu WB28IYvF0BwcJfp2BXARisu2EiiifquZ8qWcPUo0c8jFwsL0O6FUknnjuD0j34hf ze9wpagoMsFM1AdQkmggVB6tYKb1/DR24PdpIwTAbuoOZfb9WEa8wj31z2SiMtWH SDWorQc6AMLcn0tsLIORRVmjVGhAJdCdoR5ipEWeW09QYg+3/06UYJLycARpiOKw 0WTQF+NHU5hUw0Wofph3Tvj+kWhiMc6dNRgZmOwcrAIreVbb/vVUBEv59wUvOZPi bzfB1EELXEluqVQR7edn6BwQQVZM51dRxnjR0kg71+Gk+ulVf6GG8f5lcI7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TJp6YJiu20MYJQ68F2puKdkVwwwHwYDVR0j BBgwFoAUy6d7XfABs5sroN7K3bfT7YYsEDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODYyZDRkNzQtNjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURG MDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4NjJDMTAzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkE3N0I1REYwMDFCMzlCMkJBMERFQ0FEREI3RDNFRDg2MkMx MDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0Qz RUQ4NjJDMTAzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIHpSDknG0He2n5Gb2+6NMe49aH+NsiAcR4 8iPQWHweUy1q9RB+I/GJ6e8zbHjaP7K/fRFQZPWjlU1m0pXkNvGMZeDBR8JVNJ7g 3+PeI9BYXrPrQ6SVzqgSgRiNt3NVseblxNwobHUt94fZ8J82SP08HfF7yYLZN3q7 guo+jf3HlaRfWkZjkWtkuVFQbeXt33SAPeGBtY7hA49olrQEJUq2iFKKxInTqJ9I 4IfmiirYeSP27I4giPhpsAKw1N3qNinHELe+B1KFl3/fdkXP/DkUORwBWbMb1/B2 SdBOVs7hrWC2cxMgwfL0iSObl4BidRbz51v7rv8gAjhvEJU+K3U= -----END CERTIFICATE-----Generated at Mon Sep 21 02:45:36 2026 by rpki-client