$ rpki-client -vvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: k5P7jzwzKISnN22sowx351sfTlevkhxfKof6RCG2Y/k= Subject key identifier: 86:29:C4:10:1E:07:90:EF:E5:3C:DE:00:8B:63:CD:72:61:5E:D9:C4 Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 2AEBAC3512EC4BE757F9B225353B7D42AFAF5B02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 06:08:17 +0000 Manifest this update: Wed 29 Jul 2026 06:03:17 +0000 Manifest next update: Thu 30 Jul 2026 08:38:17 +0000 Files and hashes: 1: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: fGYD72MnOiyjcHk1jG6retIE5I7Vw6cgTs4R0jgPElI=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:eb:ac:35:12:ec:4b:e7:57:f9:b2:25:35:3b:7d:42:af:af:5b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: Jul 29 06:03:17 2026 GMT Not After : Jul 30 08:38:17 2026 GMT Subject: CN=8629C4101E0790EFE53CDE008B63CD72615ED9C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:db:53:da:19:c6:00:35:99:50:61:8a:68: 31:4a:ce:be:62:92:b8:5c:62:5e:06:ec:f9:7c:97: 8c:32:1a:65:9e:28:24:94:81:ec:8c:c6:cc:b2:d1: e5:c3:56:b7:13:0d:b5:81:e2:ad:f8:f7:62:06:af: 28:af:8c:d3:aa:0b:52:dc:58:77:a2:96:b4:07:9d: d4:9f:f7:f2:44:b2:1f:e5:c7:0f:8c:25:3c:5b:5e: 91:f5:a0:0a:37:7f:01:20:70:8b:33:b7:33:b8:07: 13:89:67:c2:4a:29:f7:fb:33:b1:a3:9f:54:72:0b: 12:a2:eb:ae:d2:0b:f5:0a:04:94:95:6d:a1:f8:22: 5c:58:8e:d7:f4:a5:23:be:06:74:b3:17:46:21:f6: 18:5a:b0:5f:58:db:aa:9f:bb:1e:5f:f2:c0:0b:be: 47:6d:f0:e1:7b:fc:38:f6:dc:cc:d0:a4:13:b9:4d: 72:28:b2:f0:4a:07:6f:11:36:0e:19:ff:cf:73:85: 94:f7:94:93:7d:2b:9d:0f:46:73:91:3e:ff:03:32: 65:22:cc:0b:94:46:99:85:eb:df:d1:eb:07:d4:e5: 9c:c1:cb:71:65:33:44:32:b6:b9:8a:69:43:a0:7b: de:b4:40:f5:c0:a9:5e:b8:0f:ee:ba:77:34:d0:b5: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:29:C4:10:1E:07:90:EF:E5:3C:DE:00:8B:63:CD:72:61:5E:D9:C4 X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8a:49:84:c7:c3:08:7e:bf:a3:17:0f:4a:8d:06:95:ac:c3: 90:db:48:6d:4b:3a:65:8b:53:9a:fb:22:f5:0d:95:6d:33:af: 38:30:b3:77:99:88:ca:8a:35:11:68:0d:d6:05:9b:b6:86:11: 5d:73:87:4e:39:69:f4:cc:30:27:c5:a5:54:c3:f6:38:78:0f: 10:89:79:8d:56:a0:0d:97:7d:4b:fa:a0:da:b3:1a:11:20:66: 78:99:25:6d:41:17:7b:ee:db:8c:89:62:b2:94:11:14:a3:29: 20:25:00:f8:31:38:54:64:30:70:d7:48:07:00:99:16:d6:60: 5b:fa:33:ca:c7:06:79:a1:d7:f7:e7:0f:0c:0c:f7:92:19:b8: 11:bb:07:ea:79:15:82:f8:b3:ff:bb:db:62:c6:b0:39:89:95: c4:11:1d:6b:1b:22:5e:13:79:b0:ac:74:ad:a9:2f:68:a1:c7: e3:fc:5c:e8:e4:15:6c:c8:4c:5c:19:30:75:8b:29:f0:e5:39: 06:6f:5f:e8:58:82:45:ca:87:be:cd:92:be:60:db:92:27:f5: b8:73:e5:6d:df:47:b2:c6:7b:9f:a2:b3:93:d1:3d:7b:aa:1b: ea:53:62:26:11:5b:26:e5:c8:ed:48:67:ae:df:2a:04:14:e0: a5:4e:48:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuusNRLsS+dX+bIlNTt9Qq+vWwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjA3MjkwNjAzMTdaFw0yNjA3MzAwODM4MTdaMDMxMTAvBgNV BAMTKDg2MjlDNDEwMUUwNzkwRUZFNTNDREUwMDhCNjNDRDcyNjE1RUQ5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38NtT2hnGADWZUGGKaDFKzr5i krhcYl4G7Pl8l4wyGmWeKCSUgeyMxsyy0eXDVrcTDbWB4q3492IGryivjNOqC1Lc WHeilrQHndSf9/JEsh/lxw+MJTxbXpH1oAo3fwEgcIsztzO4BxOJZ8JKKff7M7Gj n1RyCxKi667SC/UKBJSVbaH4IlxYjtf0pSO+BnSzF0Yh9hhasF9Y26qfux5f8sAL vkdt8OF7/Dj23MzQpBO5TXIosvBKB28RNg4Z/89zhZT3lJN9K50PRnORPv8DMmUi zAuURpmF69/R6wfU5ZzBy3FlM0QytrmKaUOge960QPXAqV64D+66dzTQtblbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhinEEB4HkO/lPN4Ai2PNcmFe2cQwHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGKSYTHwwh+v6MXD0qNBpWsw5DbSG1LOmWL U5r7IvUNlW0zrzgws3eZiMqKNRFoDdYFm7aGEV1zh045afTMMCfFpVTD9jh4DxCJ eY1WoA2XfUv6oNqzGhEgZniZJW1BF3vu24yJYrKUERSjKSAlAPgxOFRkMHDXSAcA mRbWYFv6M8rHBnmh1/fnDwwM95IZuBG7B+p5FYL4s/+722LGsDmJlcQRHWsbIl4T ebCsdK2pL2ihx+P8XOjkFWzITFwZMHWLKfDlOQZvX+hYgkXKh77Nkr5g25In9bhz 5W3fR7LGe5+is5PRPXuqG+pTYiYRWyblyO1IZ67fKgQU4KVOSMI= -----END CERTIFICATE-----Generated at Wed Jul 29 08:25:55 2026 by rpki-client