$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: E2Gxmzebzm8MvXbXhUOLMm1O2YjU2dEpA9xxe7fLkjI= Subject key identifier: 77:F3:19:8E:88:E6:4D:B8:6A:30:C1:8E:70:BF:CA:8E:45:85:F3:CD Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 5161B8254ED67178BA85993D2464CD78BB5D12D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: D9 Signing time: Sun 11 Oct 2026 10:45:49 +0000 Manifest this update: Sun 11 Oct 2026 10:40:49 +0000 Manifest next update: Mon 12 Oct 2026 11:50:49 +0000 Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) 2: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: 7W7gmfWfx49xPKznKt+pkv74KB6+RuyGhJe9/rtqiVo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:61:b8:25:4e:d6:71:78:ba:85:99:3d:24:64:cd:78:bb:5d:12:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: Oct 11 10:40:49 2026 GMT Not After : Oct 12 11:50:49 2026 GMT Subject: CN=77F3198E88E64DB86A30C18E70BFCA8E4585F3CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:0e:c9:9e:64:fd:fd:63:8e:08:ce:a3:76: 00:b0:49:40:0a:03:21:0f:d3:f6:82:3e:09:04:f7: 23:31:0f:7d:3f:fe:2c:f5:c6:bc:6b:2a:18:06:3c: 14:12:dc:74:d6:eb:79:f7:28:92:83:41:f8:7e:c0: fc:0e:62:38:94:84:32:c8:74:3d:ea:38:c0:d2:a8: 47:32:64:f8:9a:5e:13:26:62:90:4d:01:af:f9:1f: 55:90:9d:81:a4:04:fc:91:06:17:11:14:33:71:e9: e0:3e:f2:e3:4a:94:4d:79:3f:5e:09:06:31:76:0d: 2d:6b:31:3b:ef:33:3e:23:29:df:f9:4f:25:10:0d: 19:ca:03:06:d8:e8:31:67:d2:54:96:7a:d2:59:d8: b8:16:01:ae:e7:25:ff:72:1f:1f:db:8c:f1:95:7b: 3f:ea:28:a9:ef:ab:2c:06:30:b1:4b:57:8a:49:0c: 4c:25:c3:84:66:a8:ad:d2:8e:2c:f0:5f:e9:5c:f2: 78:3b:27:a3:81:24:9f:75:0a:32:21:4f:40:09:74: 9b:ba:c7:06:2b:d5:03:fb:97:94:af:fd:06:3f:3d: bb:18:f8:cb:f5:8b:8f:cf:a5:d7:9e:b3:23:1a:67: 06:32:87:cd:b2:c6:6c:7e:6a:37:ae:24:6f:a8:c5: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:19:8E:88:E6:4D:B8:6A:30:C1:8E:70:BF:CA:8E:45:85:F3:CD X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:79:81:b3:f6:0a:b0:03:1f:24:65:3c:1d:b7:9c:ee:3b:5e: c0:63:2d:b2:29:02:72:68:ba:2b:87:e1:19:6a:c5:48:13:0d: 3b:3c:58:b0:af:5a:ff:fe:d5:65:d3:23:bd:ea:4d:2a:e5:4d: bb:e7:54:35:e4:66:a4:92:16:02:7b:e7:ba:d0:ae:da:d2:dd: 5d:4d:31:05:0c:b9:77:20:c7:60:24:08:df:11:da:d8:6f:a7: 02:2c:79:02:84:9e:17:13:6e:da:6a:18:6b:67:7b:71:52:6b: 16:52:42:ca:a6:54:02:eb:6b:fd:fd:c7:5b:dd:3c:51:27:f6: 47:94:9c:ed:0e:8b:e1:5d:54:66:19:c6:82:d1:41:ce:9a:d5: 30:22:40:8b:aa:ee:61:1f:2b:ac:20:62:0a:80:2a:7e:19:c4: 65:bf:d7:0e:24:98:29:70:20:ad:b8:0d:d4:58:d5:14:c9:d3: f0:13:a4:a6:c4:4b:3a:ca:13:be:6b:ae:a5:cd:11:c6:90:a0: 6c:9d:67:2b:e3:7f:82:51:91:0d:a8:ef:0f:28:25:bb:ca:e2: 62:33:1c:f4:64:c3:42:5d:4d:d2:e0:cd:a8:53:40:d3:67:e1: 0a:93:2e:dc:e0:2f:9c:e1:61:1c:e9:08:f5:41:77:6e:8c:55: 2b:25:f2:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWG4JU7WcXi6hZk9JGTNeLtdEtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjEwMTExMDQwNDlaFw0yNjEwMTIxMTUwNDlaMDMxMTAvBgNV BAMTKDc3RjMxOThFODhFNjREQjg2QTMwQzE4RTcwQkZDQThFNDU4NUYzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2w7JnmT9/WOOCM6jdgCwSUAK AyEP0/aCPgkE9yMxD30//iz1xrxrKhgGPBQS3HTW63n3KJKDQfh+wPwOYjiUhDLI dD3qOMDSqEcyZPiaXhMmYpBNAa/5H1WQnYGkBPyRBhcRFDNx6eA+8uNKlE15P14J BjF2DS1rMTvvMz4jKd/5TyUQDRnKAwbY6DFn0lSWetJZ2LgWAa7nJf9yHx/bjPGV ez/qKKnvqywGMLFLV4pJDEwlw4RmqK3SjizwX+lc8ng7J6OBJJ91CjIhT0AJdJu6 xwYr1QP7l5Sv/QY/PbsY+Mv1i4/PpdeesyMaZwYyh82yxmx+ajeuJG+oxfJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/MZjojmTbhqMMGOcL/KjkWF880wHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd5gbP2CrADHyRlPB23nO47XsBjLbIpAnJo uiuH4RlqxUgTDTs8WLCvWv/+1WXTI73qTSrlTbvnVDXkZqSSFgJ757rQrtrS3V1N MQUMuXcgx2AkCN8R2thvpwIseQKEnhcTbtpqGGtne3FSaxZSQsqmVALra/39x1vd PFEn9keUnO0Oi+FdVGYZxoLRQc6a1TAiQIuq7mEfK6wgYgqAKn4ZxGW/1w4kmClw IK24DdRY1RTJ0/ATpKbESzrKE75rrqXNEcaQoGydZyvjf4JRkQ2o7w8oJbvK4mIz HPRkw0JdTdLgzahTQNNn4QqTLtzgL5zhYRzpCPVBd26MVSsl8vw= -----END CERTIFICATE-----Generated at Mon Oct 12 00:12:59 2026 by rpki-client