$ rpki-client -vvf rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft File: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft (raw, json) Hash identifier: toLjF62z4sfIrH83TZL+XMk8xgLgT/Dg4hJrtuDwRM0= Subject key identifier: E2:69:99:38:94:FD:02:21:A6:01:3F:7C:4B:7C:32:4B:A4:A4:B2:32 Authority key identifier: CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 Certificate issuer: /CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Certificate serial: 7001040438C5EB5FB87CE68BB5FCDD19386ED2E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:32:37 +0000 Manifest this update: Tue 16 Jun 2026 23:27:37 +0000 Manifest next update: Thu 18 Jun 2026 01:00:37 +0000 Files and hashes: 1: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: MlsPGYjwxcTUokzk7qgJtZJ0zjAyD3pAbTHc5VBWDJ4=) 2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: pbFqtdrF857Bo284a6tYg8zQs+U7i5koym7amsZuX/8=) 3: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl (hash: VYxGswEiUUq4f2kypaQpdI6HGVPAs7fQDnMkavXlxVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:01:04:04:38:c5:eb:5f:b8:7c:e6:8b:b5:fc:dd:19:38:6e:d2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Validity Not Before: Jun 16 23:27:37 2026 GMT Not After : Jun 18 01:00:37 2026 GMT Subject: CN=E269993894FD0221A6013F7C4B7C324BA4A4B232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:a2:f1:bb:c9:de:bc:4a:40:d6:dc:7e:5b: 50:70:d5:a1:67:a2:57:7a:59:d3:bc:2b:72:ea:a8: 68:3b:a7:bd:19:37:46:d4:34:1f:e9:6e:1d:a8:e6: db:1d:1d:2a:e9:30:1b:c7:f1:fa:e6:c9:15:af:07: 10:c2:c4:f2:91:ae:38:3f:ff:dd:b6:07:de:83:b4: 11:f1:4c:9b:95:47:c0:07:28:41:c5:d1:b5:ea:9c: c2:7c:8b:d6:4b:63:9a:a1:12:09:7c:45:23:80:58: 9f:ab:5a:b0:8e:62:b4:64:1d:8a:91:0a:a6:5f:b3: 80:df:79:fd:0c:cf:f2:f9:8a:c2:49:7c:85:9f:bc: 17:36:e8:89:9f:58:cd:99:3f:ad:c8:2b:8a:2f:60: 5d:f9:0f:e7:b2:3f:c7:1e:b7:b9:ff:3c:d9:66:c2: 72:d2:7c:23:ed:b3:73:08:6b:b8:08:0a:a9:50:ef: cb:62:85:ee:ac:73:de:c4:c4:f1:15:4b:83:11:b9: 09:46:ba:6d:cd:88:f9:06:f9:6b:63:b0:33:14:ab: 14:9c:37:4f:ef:5f:92:4c:e5:9a:a4:e0:f9:40:1c: 6a:d9:cf:a2:6f:e8:a2:85:2a:51:f9:20:69:92:6f: a8:c1:50:d3:05:b3:c9:dc:60:29:cc:ed:c8:be:04: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:69:99:38:94:FD:02:21:A6:01:3F:7C:4B:7C:32:4B:A4:A4:B2:32 X509v3 Authority Key Identifier: keyid:CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:2f:0f:5d:f5:16:09:08:54:58:97:e5:cd:25:30:f7:b4:69: f9:17:17:f0:58:ba:39:dd:93:87:99:23:89:29:ce:ce:d3:6d: 54:ae:38:c8:85:15:de:d6:78:18:bf:f2:39:be:06:24:3c:4f: dd:c2:47:87:61:6d:a9:08:70:9d:93:17:01:3d:3b:4e:a0:f9: 4a:e3:ad:a8:d1:7e:f8:85:eb:b8:96:15:d1:e2:ff:a5:29:b5: 2f:6a:97:6b:26:c4:84:43:49:f1:57:bd:69:7a:fe:2b:4f:dc: 21:a1:08:66:ae:cc:5b:99:ec:21:e5:b7:04:ad:b9:e9:e3:19: 55:02:ee:09:c8:f6:fd:e6:14:d4:5c:b8:c3:20:f7:fa:4d:72: 84:15:f9:fb:17:46:34:51:98:ac:a5:62:e0:f4:a3:c4:b9:34: 9b:f6:64:29:5f:97:74:c8:9d:d9:55:e9:e4:b9:f6:4c:4d:b0: 2a:5d:ed:f7:5b:f4:2c:52:c8:ca:4f:c6:f3:1f:28:bb:51:35: 63:5b:2b:1f:d6:5c:fc:88:a5:be:b6:83:cb:4a:c9:c7:8c:30: 97:d9:e3:ca:86:f7:05:d8:16:a9:b2:fe:a0:ce:37:99:00:00: ff:76:c6:f2:67:b4:c5:b5:37:17:bf:88:23:2c:41:ed:cf:9d: 31:84:61:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAEEBDjF61+4fOaLtfzdGThu0ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4 NjJDMTAzNDAeFw0yNjA2MTYyMzI3MzdaFw0yNjA2MTgwMTAwMzdaMDMxMTAvBgNV BAMTKEUyNjk5OTM4OTRGRDAyMjFBNjAxM0Y3QzRCN0MzMjRCQTRBNEIyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/6Lxu8nevEpA1tx+W1Bw1aFn old6WdO8K3LqqGg7p70ZN0bUNB/pbh2o5tsdHSrpMBvH8frmyRWvBxDCxPKRrjg/ /922B96DtBHxTJuVR8AHKEHF0bXqnMJ8i9ZLY5qhEgl8RSOAWJ+rWrCOYrRkHYqR CqZfs4Dfef0Mz/L5isJJfIWfvBc26ImfWM2ZP63IK4ovYF35D+eyP8cet7n/PNlm wnLSfCPts3MIa7gICqlQ78tihe6sc97ExPEVS4MRuQlGum3NiPkG+WtjsDMUqxSc N0/vX5JM5Zqk4PlAHGrZz6Jv6KKFKlH5IGmSb6jBUNMFs8ncYCnM7ci+BEJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4mmZOJT9AiGmAT98S3wyS6SksjIwHwYDVR0j BBgwFoAUy6d7XfABs5sroN7K3bfT7YYsEDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODYyZDRkNzQtNjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURG MDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4NjJDMTAzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkE3N0I1REYwMDFCMzlCMkJBMERFQ0FEREI3RDNFRDg2MkMx MDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0Qz RUQ4NjJDMTAzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQvD131FgkIVFiX5c0lMPe0afkXF/BYujnd k4eZI4kpzs7TbVSuOMiFFd7WeBi/8jm+BiQ8T93CR4dhbakIcJ2TFwE9O06g+Urj rajRfviF67iWFdHi/6UptS9ql2smxIRDSfFXvWl6/itP3CGhCGauzFuZ7CHltwSt uenjGVUC7gnI9v3mFNRcuMMg9/pNcoQV+fsXRjRRmKylYuD0o8S5NJv2ZClfl3TI ndlV6eS59kxNsCpd7fdb9CxSyMpPxvMfKLtRNWNbKx/WXPyIpb62g8tKyceMMJfZ 48qG9wXYFqmy/qDON5kAAP92xvJntMW1Nxe/iCMsQe3PnTGEYY4= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:30 2026 by rpki-client