$ rpki-client -vvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: 7Pd8YOPGk5lU3j1DrvgFiB32vPdSWs5ULRZdvXh6a3w= Subject key identifier: DA:6C:7C:D7:90:47:22:01:30:5F:48:22:92:90:A9:E2:3E:F9:85:A1 Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 6D25F3EADE43FF3CDD057E9B9F7F988890A3A612 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 18:26:47 +0000 Manifest this update: Sat 13 Jun 2026 18:21:47 +0000 Manifest next update: Sun 14 Jun 2026 18:54:47 +0000 Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) 2: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: uMN9m214i5Jh/m6a+uWR2kpWht4Fx9JYSo/ZvWO2uII=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:f3:ea:de:43:ff:3c:dd:05:7e:9b:9f:7f:98:88:90:a3:a6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: Jun 13 18:21:47 2026 GMT Not After : Jun 14 18:54:47 2026 GMT Subject: CN=DA6C7CD790472201305F48229290A9E23EF985A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:28:60:b9:b7:2b:2b:8d:07:65:06:96:bb: 2a:8b:e0:8a:13:91:ef:45:92:38:2f:ab:52:c5:f3: 73:9c:05:59:b4:a9:37:96:73:8f:b1:64:4e:f0:68: cb:33:c9:2a:43:cf:db:54:a0:ff:e2:08:9a:76:30: 38:e1:31:b9:a3:1a:81:16:e7:d3:14:1f:49:c4:18: 2f:4e:d6:73:85:f2:56:da:67:63:1d:7f:2a:ed:c6: 53:2c:3c:d7:ab:86:ef:79:23:81:06:7b:88:ce:c2: 0c:7f:a3:41:6f:0e:45:c9:f5:f1:38:8d:e7:e3:0b: 89:84:e2:9e:90:53:41:82:4a:8a:bf:a6:1e:df:f7: 4e:42:3b:e9:ec:51:c5:b2:db:2f:84:09:12:48:1e: a6:27:07:4f:a4:76:f4:41:78:55:a5:f8:09:10:8e: 95:9c:48:cb:d1:1a:57:bc:8f:55:f1:d8:3d:74:76: 60:84:ab:80:ad:db:78:d3:2c:e7:cf:09:a2:cd:1d: 6d:95:3f:d8:d3:2f:ac:9c:bf:13:7c:5d:c7:aa:8c: de:2b:41:80:d7:9a:5c:be:84:ea:f6:c1:f6:38:cf: 3f:d2:ff:79:a5:90:80:d6:8d:65:a4:ac:75:35:2d: 65:e1:22:74:74:f3:0e:0a:a7:38:79:37:8f:6c:61: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:7C:D7:90:47:22:01:30:5F:48:22:92:90:A9:E2:3E:F9:85:A1 X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d7:a5:bd:33:cd:1a:92:84:6f:ac:46:97:dd:8b:f5:86:cd: 8b:c8:91:2f:6e:18:f4:b4:a3:1b:28:d0:36:b4:af:74:a1:92: 76:b9:ff:7a:ed:46:07:07:6d:9b:78:99:a1:eb:5d:77:ae:24: 27:b7:f9:31:9b:4a:8d:ea:c3:d1:d9:2f:b2:da:e8:86:b7:f2: ca:65:91:54:ab:1c:a3:d8:10:6c:23:12:9f:e4:f2:70:44:38: 7e:47:7e:d7:4a:b7:d6:49:71:eb:f6:f6:66:8d:fe:65:7d:13: c9:e6:38:ae:f7:22:80:35:b7:b8:59:87:53:22:d3:7f:34:2b: 37:c7:a7:98:58:22:74:9b:78:f9:34:a1:37:5d:99:e2:4d:1c: b5:82:99:20:fe:26:4c:cb:d3:d3:11:15:65:30:05:55:ab:78: 8d:a4:06:4e:66:20:32:40:f8:25:1a:dd:41:43:27:b1:c4:e6: 3e:5f:3b:e9:4f:36:9b:c9:8d:66:27:4c:d7:9d:23:4b:9e:a8: 9a:61:40:ff:f4:28:70:02:58:73:5c:44:bd:1e:0d:48:0c:c8: 2a:27:85:9b:d1:79:14:89:3b:15:10:dc:10:2b:d1:23:37:ee: 15:b0:4b:46:0d:fd:6e:c5:7b:99:07:c4:ef:25:5b:2e:28:27: a7:36:27:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSXz6t5D/zzdBX6bn3+YiJCjphIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjA2MTMxODIxNDdaFw0yNjA2MTQxODU0NDdaMDMxMTAvBgNV BAMTKERBNkM3Q0Q3OTA0NzIyMDEzMDVGNDgyMjkyOTBBOUUyM0VGOTg1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEayhgubcrK40HZQaWuyqL4IoT ke9Fkjgvq1LF83OcBVm0qTeWc4+xZE7waMszySpDz9tUoP/iCJp2MDjhMbmjGoEW 59MUH0nEGC9O1nOF8lbaZ2MdfyrtxlMsPNerhu95I4EGe4jOwgx/o0FvDkXJ9fE4 jefjC4mE4p6QU0GCSoq/ph7f905CO+nsUcWy2y+ECRJIHqYnB0+kdvRBeFWl+AkQ jpWcSMvRGle8j1Xx2D10dmCEq4Ct23jTLOfPCaLNHW2VP9jTL6ycvxN8XceqjN4r QYDXmly+hOr2wfY4zz/S/3mlkIDWjWWkrHU1LWXhInR08w4Kpzh5N49sYYBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mx815BHIgEwX0gikpCp4j75haEwHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETXpb0zzRqShG+sRpfdi/WGzYvIkS9uGPS0 oxso0Da0r3Shkna5/3rtRgcHbZt4maHrXXeuJCe3+TGbSo3qw9HZL7La6Ia38spl kVSrHKPYEGwjEp/k8nBEOH5HftdKt9ZJcev29maN/mV9E8nmOK73IoA1t7hZh1Mi 0380KzfHp5hYInSbePk0oTddmeJNHLWCmSD+JkzL09MRFWUwBVWreI2kBk5mIDJA +CUa3UFDJ7HE5j5fO+lPNpvJjWYnTNedI0ueqJphQP/0KHACWHNcRL0eDUgMyCon hZvReRSJOxUQ3BAr0SM37hWwS0YN/W7Fe5kHxO8lWy4oJ6c2J0o= -----END CERTIFICATE-----Generated at Sat Jun 13 21:33:58 2026 by rpki-client