$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: /9ezI03Tgh1oXauN18h07/GPkORgq5IKkntWhe5PCls= Subject key identifier: 75:A0:E6:15:08:12:41:57:02:A4:F7:0C:A6:42:25:88:15:60:29:9C Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 795E2E47CF00763866A94EF5643C72A3BC9782C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 04:26:53 +0000 Manifest this update: Tue 22 Sep 2026 04:21:53 +0000 Manifest next update: Wed 23 Sep 2026 06:58:53 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) 3: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: vg2gzO4XCEzd8hzGJPPziZSNuHFHCw02j+vBryo8dUE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5e:2e:47:cf:00:76:38:66:a9:4e:f5:64:3c:72:a3:bc:97:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: Sep 22 04:21:53 2026 GMT Not After : Sep 23 06:58:53 2026 GMT Subject: CN=75A0E6150812415702A4F70CA64225881560299C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:b7:44:dc:df:a1:c6:1b:3d:7f:71:32:ba: 28:68:d2:0a:cd:16:53:e5:2c:c5:1c:79:18:21:93: fe:49:47:b4:d7:58:df:8f:2f:1d:f7:aa:ec:b0:98: 52:72:6b:8e:24:17:1d:c1:ea:0f:a2:91:03:3f:11: 70:7a:94:4b:2e:bb:03:18:18:a0:6e:81:dc:82:5f: 14:2c:6f:71:e4:d2:96:8d:26:1e:3f:66:34:86:56: 29:8a:70:1a:f8:05:03:c4:db:ac:03:b1:c8:c5:1e: 69:cd:2c:0c:01:ec:c9:3d:2e:24:b9:3c:fb:61:60: 1d:ba:47:7d:03:8e:dc:24:16:a7:33:2a:74:69:54: a4:10:62:0f:34:35:e4:48:d9:d2:a0:99:7c:bf:cc: 56:50:18:ec:80:4b:4f:57:7e:d2:aa:c4:34:d9:24: d7:84:b0:26:b4:7c:15:2b:66:b4:5d:2c:d3:e8:9f: 89:67:b5:e9:b2:96:dd:ef:e2:c4:27:fe:2f:04:15: db:4d:4c:f4:88:2c:0a:a7:97:65:e5:00:a4:db:8a: 17:fe:78:d4:f1:ee:71:6d:a2:2b:88:32:36:45:46: a1:5e:7a:f3:06:07:d4:cd:fe:53:a0:f1:cc:65:32: d9:cb:6d:dc:05:1c:7c:f7:4f:cc:52:96:46:1b:be: a3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A0:E6:15:08:12:41:57:02:A4:F7:0C:A6:42:25:88:15:60:29:9C X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d7:34:52:e5:a0:a7:7f:ce:e6:44:da:b6:13:0c:3f:ab:a6: fb:54:62:72:08:d6:87:6e:b2:c2:61:18:4e:70:ff:87:bf:1b: 42:97:24:c7:a4:2b:41:55:3d:0c:b6:69:ef:8c:26:2a:80:65: 87:1f:15:28:77:9f:2f:d6:30:df:f5:c7:95:b0:76:77:2b:93: e2:57:91:d9:6d:94:f9:80:50:f5:59:b8:e0:d1:35:01:7e:56: e3:5f:a1:ea:ad:22:fc:17:d8:b5:4d:4d:69:03:d7:33:a5:b1: b3:95:21:8c:b0:93:43:af:49:ef:3e:26:13:f2:1d:56:00:45: 80:87:6b:ff:23:e3:d9:be:f9:c8:03:3f:a4:6d:28:46:95:dd: 96:09:a8:ad:18:6f:a5:e8:c4:c8:53:aa:7e:dc:ea:21:cf:14: 9e:e1:05:f1:1f:38:3a:bb:d3:26:fd:67:99:a3:57:8b:c3:b5: f6:e8:37:dd:79:27:d1:35:dc:f8:c7:f0:e9:93:fe:a9:38:d3: a4:70:15:dc:9b:b7:e4:e4:8e:93:f8:86:74:30:38:3c:35:a1: 94:54:05:19:58:78:25:31:a2:8f:09:2b:fa:7b:64:fa:27:15: 81:01:9b:9d:5c:24:59:2c:32:4c:5d:b7:f1:a5:bf:09:64:5e: ab:ea:b3:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeV4uR88AdjhmqU71ZDxyo7yXgsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA5MjIwNDIxNTNaFw0yNjA5MjMwNjU4NTNaMDMxMTAvBgNV BAMTKDc1QTBFNjE1MDgxMjQxNTcwMkE0RjcwQ0E2NDIyNTg4MTU2MDI5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLLLdE3N+hxhs9f3Eyuiho0grN FlPlLMUceRghk/5JR7TXWN+PLx33quywmFJya44kFx3B6g+ikQM/EXB6lEsuuwMY GKBugdyCXxQsb3Hk0paNJh4/ZjSGVimKcBr4BQPE26wDscjFHmnNLAwB7Mk9LiS5 PPthYB26R30DjtwkFqczKnRpVKQQYg80NeRI2dKgmXy/zFZQGOyAS09XftKqxDTZ JNeEsCa0fBUrZrRdLNPon4lntemylt3v4sQn/i8EFdtNTPSILAqnl2XlAKTbihf+ eNTx7nFtoiuIMjZFRqFeevMGB9TN/lOg8cxlMtnLbdwFHHz3T8xSlkYbvqM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdaDmFQgSQVcCpPcMpkIliBVgKZwwHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbXNFLloKd/zuZE2rYTDD+rpvtUYnII1odu ssJhGE5w/4e/G0KXJMekK0FVPQy2ae+MJiqAZYcfFSh3ny/WMN/1x5Wwdncrk+JX kdltlPmAUPVZuODRNQF+VuNfoeqtIvwX2LVNTWkD1zOlsbOVIYywk0OvSe8+JhPy HVYARYCHa/8j49m++cgDP6RtKEaV3ZYJqK0Yb6XoxMhTqn7c6iHPFJ7hBfEfODq7 0yb9Z5mjV4vDtfboN915J9E13PjH8OmT/qk406RwFdybt+TkjpP4hnQwODw1oZRU BRlYeCUxoo8JK/p7ZPonFYEBm51cJFksMkxdt/GlvwlkXqvqs4E= -----END CERTIFICATE-----Generated at Tue Sep 22 07:10:10 2026 by rpki-client