$ rpki-client -vvvf rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft File: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft (raw, json) Hash identifier: 7MjP93CMQULRveusKSPKFsYuOWIb+pJKqKds+x4mUao= Subject key identifier: 52:C9:01:C8:CF:B6:27:76:7A:E1:36:56:11:E1:ED:FC:9C:CC:22:3F Authority key identifier: CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 Certificate issuer: /CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Certificate serial: 17CB02858CC254B1FF8931FF65C08675726B40A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft Manifest number: FD Signing time: Mon 09 Nov 2026 08:56:50 +0000 Manifest this update: Mon 09 Nov 2026 08:51:50 +0000 Manifest next update: Tue 10 Nov 2026 11:10:50 +0000 Files and hashes: 1: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: MlsPGYjwxcTUokzk7qgJtZJ0zjAyD3pAbTHc5VBWDJ4=) 2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: pbFqtdrF857Bo284a6tYg8zQs+U7i5koym7amsZuX/8=) 3: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl (hash: 0Z8Tkt0XX6gO5l/9vb+toCj5lDcdqdU7oljftr9gvRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cb:02:85:8c:c2:54:b1:ff:89:31:ff:65:c0:86:75:72:6b:40:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Validity Not Before: Nov 9 08:51:50 2026 GMT Not After : Nov 10 11:10:50 2026 GMT Subject: CN=52C901C8CFB627767AE1365611E1EDFC9CCC223F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:5b:7a:3e:31:55:7a:2b:ba:3b:c3:85:fb: 2d:ca:d2:ac:2f:66:6c:37:6b:91:e8:5b:66:aa:7d: ea:13:16:28:a4:b9:55:99:5e:88:da:d0:c8:c4:25: 06:b4:32:82:2c:37:7f:a3:99:6a:02:78:3d:a6:06: 79:3c:7a:87:ab:73:3a:5b:d9:b3:c4:23:77:b0:90: a0:a1:b1:77:38:85:93:60:e7:d9:0b:1a:99:50:3f: c0:f7:3f:68:27:e4:21:30:ca:8f:60:8e:29:af:e3: d7:15:f0:9a:74:be:b7:6d:00:6a:33:b4:de:8f:ae: 68:34:8d:b9:1b:23:d3:75:12:4e:0a:41:2c:30:62: ae:d3:d1:e4:d5:bb:3a:f4:c9:84:f3:60:5e:c5:72: 3b:e0:10:85:e4:ef:9e:9b:26:19:35:95:b8:43:e5: 5e:eb:4a:39:1a:84:6b:5f:db:01:c6:29:fa:fc:0f: f6:82:1b:b0:28:c4:65:73:de:c7:ff:52:c0:0d:e3: b1:94:d4:fe:13:2f:69:e6:ed:2c:2b:10:4c:b8:ae: 43:84:10:62:b1:b9:5d:9a:b0:00:25:e2:b1:1f:97: 39:ff:16:01:02:0c:e5:75:33:ad:4e:bf:f2:3b:b5: 8d:03:d3:c4:4e:39:07:b0:f5:6b:28:5e:59:b1:3f: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:01:C8:CF:B6:27:76:7A:E1:36:56:11:E1:ED:FC:9C:CC:22:3F X509v3 Authority Key Identifier: keyid:CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:29:1b:9b:99:ee:60:e6:d5:db:14:2f:45:43:79:f3:cb:d6: 85:7d:c9:1a:d1:ba:7b:3a:89:e3:39:e5:05:05:3c:7e:a5:52: 66:9a:6b:72:cb:5e:b3:58:96:dc:31:8c:91:bf:60:cd:b3:f4: b4:fb:79:a1:7e:e4:8a:1c:20:b6:09:d2:d1:a2:58:ca:a9:68: 36:71:03:43:fa:d3:95:5d:91:3d:6f:17:ff:93:7a:55:9d:54: bc:70:c1:13:6c:65:62:80:e5:2f:99:6f:9f:52:c8:ec:7f:7e: 54:43:1d:a9:7f:9c:c4:d1:6c:3e:6c:df:d3:95:e4:d0:d9:7e: 68:9e:fa:d0:a5:b4:3a:f2:99:9d:a9:b4:5f:9d:39:06:f3:87: e1:14:92:21:2e:3e:b1:cd:eb:3d:fe:3b:31:f6:e4:69:b4:cd: 91:c4:2e:be:98:b2:8a:0a:a9:20:91:40:0f:3f:b0:b1:d8:7d: 69:30:c6:36:60:22:d3:80:15:f9:67:22:d8:65:78:66:ee:ab: 63:9f:c5:6e:e0:ce:6c:eb:f1:c9:40:a2:fd:5a:47:32:8c:31: db:cb:2b:74:33:f8:8e:fe:90:f4:59:33:e6:ca:a1:b7:07:cb: d6:44:d3:6b:75:18:59:14:68:a1:9d:7d:58:97:44:35:51:9c: 40:dc:cf:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8sChYzCVLH/iTH/ZcCGdXJrQKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4 NjJDMTAzNDAeFw0yNjExMDkwODUxNTBaFw0yNjExMTAxMTEwNTBaMDMxMTAvBgNV BAMTKDUyQzkwMUM4Q0ZCNjI3NzY3QUUxMzY1NjExRTFFREZDOUNDQzIyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzFt6PjFVeiu6O8OF+y3K0qwv Zmw3a5HoW2aqfeoTFiikuVWZXoja0MjEJQa0MoIsN3+jmWoCeD2mBnk8eoerczpb 2bPEI3ewkKChsXc4hZNg59kLGplQP8D3P2gn5CEwyo9gjimv49cV8Jp0vrdtAGoz tN6Prmg0jbkbI9N1Ek4KQSwwYq7T0eTVuzr0yYTzYF7FcjvgEIXk756bJhk1lbhD 5V7rSjkahGtf2wHGKfr8D/aCG7AoxGVz3sf/UsAN47GU1P4TL2nm7SwrEEy4rkOE EGKxuV2asAAl4rEflzn/FgECDOV1M61Ov/I7tY0D08ROOQew9WsoXlmxP7ofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUskByM+2J3Z64TZWEeHt/JzMIj8wHwYDVR0j BBgwFoAUy6d7XfABs5sroN7K3bfT7YYsEDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODYyZDRkNzQtNjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURG MDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4NjJDMTAzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkE3N0I1REYwMDFCMzlCMkJBMERFQ0FEREI3RDNFRDg2MkMx MDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0Qz RUQ4NjJDMTAzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0pG5uZ7mDm1dsUL0VDefPL1oV9yRrRuns6 ieM55QUFPH6lUmaaa3LLXrNYltwxjJG/YM2z9LT7eaF+5IocILYJ0tGiWMqpaDZx A0P605VdkT1vF/+TelWdVLxwwRNsZWKA5S+Zb59SyOx/flRDHal/nMTRbD5s39OV 5NDZfmie+tCltDrymZ2ptF+dOQbzh+EUkiEuPrHN6z3+OzH25Gm0zZHELr6YsooK qSCRQA8/sLHYfWkwxjZgItOAFflnIthleGbuq2OfxW7gzmzr8clAov1aRzKMMdvL K3Qz+I7+kPRZM+bKobcHy9ZE02t1GFkUaKGdfViXRDVRnEDcz60= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:19 2026 by rpki-client