$ rpki-client -vvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: J8IoZIFU0RcZNTyeT4Eq9C8xSAMiVVdqAjJGGwKB12I= Subject key identifier: 4C:3D:37:B2:81:38:15:8B:D8:FF:65:AF:70:99:E3:36:B7:03:91:AD Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 75BDCD3542434EF4506DF506C0647D0FED6B4EBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:26:19 +0000 Manifest this update: Tue 16 Jun 2026 22:21:19 +0000 Manifest next update: Thu 18 Jun 2026 01:31:19 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) 2: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: nAU30zKA1FvNfRsB+jyaWKUSY5gQJHwzE6aH+i5NMSw=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bd:cd:35:42:43:4e:f4:50:6d:f5:06:c0:64:7d:0f:ed:6b:4e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: Jun 16 22:21:19 2026 GMT Not After : Jun 18 01:31:19 2026 GMT Subject: CN=4C3D37B28138158BD8FF65AF7099E336B70391AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:65:3e:2d:64:d9:b3:c5:e1:66:e7:a2:a8: e0:35:40:d3:0b:ad:97:6e:92:54:c3:83:16:50:cd: 92:2f:b2:10:dc:85:b2:54:ab:12:fe:66:6e:03:26: f4:cb:a8:5f:37:84:56:43:a1:5f:de:f1:f9:87:74: c3:21:98:c2:c5:6f:af:ff:8e:63:a3:fa:78:7a:c5: 7f:7d:46:ae:e9:5c:63:c8:8a:4e:c6:76:94:75:19: 54:f2:df:03:8c:c8:11:b7:d6:e3:b1:30:29:3e:1a: 8f:7a:07:b0:ca:5f:93:13:97:9d:49:db:4c:19:e3: 3c:1a:d1:96:46:05:45:6a:57:70:81:9e:20:93:da: b4:cb:ca:f4:13:8a:ba:f7:c8:44:50:ed:9a:e2:af: 2e:e0:a4:e4:d9:ce:7c:74:fc:84:26:86:fb:7b:1f: 32:d4:19:56:a0:4d:45:1b:0e:d0:e9:dd:69:ae:e4: 6e:4c:7f:2f:24:1e:18:2a:21:24:1c:68:b7:f5:57: bd:92:08:15:58:12:cb:68:33:30:a9:ea:d2:29:3e: ea:c0:3f:22:ae:df:49:99:62:52:68:a8:5a:fc:95: c9:de:df:94:98:ca:24:d5:ad:99:a2:95:50:6b:4e: cb:9f:eb:4f:f5:0b:38:c3:ee:a2:a8:63:00:62:a9: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3D:37:B2:81:38:15:8B:D8:FF:65:AF:70:99:E3:36:B7:03:91:AD X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:22:14:9c:6a:47:2c:35:29:c7:05:68:c9:15:27:22:30:ae: ff:09:e2:b7:c5:51:b5:bf:41:9e:e6:05:0e:7d:47:b7:b7:1f: 9d:81:f7:ee:4f:f0:80:d2:e3:c4:60:82:7e:75:39:f3:9d:a1: 90:31:0a:d1:3c:3a:43:97:63:0c:53:cb:6d:49:5a:17:4c:46: 3d:b0:55:96:a0:e0:41:12:43:26:eb:53:72:ca:95:9e:31:cd: 9e:0a:71:e1:14:0f:a7:87:1b:60:e7:b5:c0:01:e9:62:cf:4e: df:d0:db:ea:27:4e:68:5d:21:7e:0a:a9:92:58:d5:11:44:ad: 48:63:fe:7f:8d:45:28:18:72:00:11:9a:79:7f:b1:46:03:cd: 8a:a3:64:96:e6:78:57:c8:c5:c4:01:79:87:c6:e3:11:8e:4a: e7:eb:ad:ef:b3:14:ac:1e:41:ed:4d:35:b7:0b:2a:95:32:c3: fd:df:bc:2f:ef:60:af:8c:a3:d9:a9:a9:7c:5e:c1:f1:d7:11: a5:02:a0:6e:89:31:dc:56:e1:e5:a1:50:7b:91:c1:11:05:bd: ed:3f:61:fa:2a:56:68:7f:cd:63:42:02:c6:fb:d9:a9:6e:9d: c7:e2:fe:27:14:97:4e:c3:12:a0:fa:19:7a:7d:cc:85:94:52: 08:0e:7e:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdb3NNUJDTvRQbfUGwGR9D+1rTr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA2MTYyMjIxMTlaFw0yNjA2MTgwMTMxMTlaMDMxMTAvBgNV BAMTKDRDM0QzN0IyODEzODE1OEJEOEZGNjVBRjcwOTlFMzM2QjcwMzkxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxWU+LWTZs8XhZueiqOA1QNML rZduklTDgxZQzZIvshDchbJUqxL+Zm4DJvTLqF83hFZDoV/e8fmHdMMhmMLFb6// jmOj+nh6xX99Rq7pXGPIik7GdpR1GVTy3wOMyBG31uOxMCk+Go96B7DKX5MTl51J 20wZ4zwa0ZZGBUVqV3CBniCT2rTLyvQTirr3yERQ7Zriry7gpOTZznx0/IQmhvt7 HzLUGVagTUUbDtDp3Wmu5G5Mfy8kHhgqISQcaLf1V72SCBVYEstoMzCp6tIpPurA PyKu30mZYlJoqFr8lcne35SYyiTVrZmilVBrTsuf60/1CzjD7qKoYwBiqbAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTD03soE4FYvY/2WvcJnjNrcDka0wHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkiFJxqRyw1KccFaMkVJyIwrv8J4rfFUbW/ QZ7mBQ59R7e3H52B9+5P8IDS48Rggn51OfOdoZAxCtE8OkOXYwxTy21JWhdMRj2w VZag4EESQybrU3LKlZ4xzZ4KceEUD6eHG2DntcAB6WLPTt/Q2+onTmhdIX4KqZJY 1RFErUhj/n+NRSgYcgARmnl/sUYDzYqjZJbmeFfIxcQBeYfG4xGOSufrre+zFKwe Qe1NNbcLKpUyw/3fvC/vYK+Mo9mpqXxewfHXEaUCoG6JMdxW4eWhUHuRwREFve0/ YfoqVmh/zWNCAsb72aluncfi/icUl07DEqD6GXp9zIWUUggOfiQ= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:50 2026 by rpki-client