$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: l05nWPHwR2zLDORIwgOrMan47kcrUtQA8p8lXqaJ6A4= Subject key identifier: E8:9D:5B:A8:12:71:98:4C:97:35:0F:A2:38:07:63:09:64:0A:FC:4C Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 5D6435A0F3548111E0527516B1E1540DBF38A0FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 11:33:31 +0000 Manifest this update: Sat 13 Jun 2026 11:28:31 +0000 Manifest next update: Sun 14 Jun 2026 12:15:31 +0000 Files and hashes: 1: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: VSooBj/visFHx3A+cDtrNNX5jbOzxtLb+lCvy/Kc2PQ=) 2: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: 3ouLTTMrlORMHlKU1niXf/J5eybW8/1poSHTBw8u7OI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:64:35:a0:f3:54:81:11:e0:52:75:16:b1:e1:54:0d:bf:38:a0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Jun 13 11:28:31 2026 GMT Not After : Jun 14 12:15:31 2026 GMT Subject: CN=E89D5BA81271984C97350FA238076309640AFC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:16:51:60:91:2e:5e:d6:21:c3:22:2f:d6: 51:32:60:53:56:c9:27:40:88:3a:0b:9d:fb:9d:90: 0e:28:27:0a:8b:17:80:3b:f3:e3:3e:bf:5a:4a:65: 6f:b6:8d:cb:30:68:83:d7:19:00:06:79:1f:20:34: cf:bb:5d:14:a6:1b:d9:8e:a4:0d:f9:e5:36:29:15: a0:ae:ea:10:b2:f2:fd:c1:ef:33:e3:bb:19:d3:36: 0c:b7:11:52:79:1d:24:87:d9:1f:48:ad:1c:39:1e: cb:2d:e7:4b:b1:27:5c:ed:d0:07:ec:b9:5a:c9:e7: a0:56:3b:40:5d:2a:75:16:0b:48:0c:74:42:29:3b: ce:62:37:b6:35:cc:16:8c:c4:7e:bb:00:9a:2d:85: 3c:75:bc:d1:fd:ac:20:c0:3a:7b:70:89:b0:f8:b7: 81:7e:66:0e:dc:e2:59:5e:39:63:15:63:73:43:3f: 24:b8:02:8f:e4:c0:8e:50:fd:d1:02:ff:db:be:78: 28:e5:5d:89:50:d7:15:5a:3e:22:be:b6:4a:0c:30: 52:57:55:58:66:00:a4:2e:7d:1e:a0:70:ab:10:e9: 9c:db:1f:73:72:61:04:18:a0:31:86:8b:1f:71:24: e0:39:01:0f:49:97:7c:21:ed:43:d2:29:98:85:91: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9D:5B:A8:12:71:98:4C:97:35:0F:A2:38:07:63:09:64:0A:FC:4C X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a3:df:6e:2c:7d:3e:27:b7:88:2d:e2:da:a2:dd:7c:1b:8c: be:c4:b7:b5:f3:c3:23:49:c9:06:da:31:f0:b8:a1:22:d3:33: 6f:63:fa:6d:31:2e:4d:d9:10:97:c9:87:d0:fb:f6:d1:15:a5: 9e:19:96:d4:0e:6f:1b:c1:0f:24:49:59:a2:e8:eb:64:a7:c0: 71:bd:57:1d:1d:b2:09:05:ff:d9:bb:d3:23:6c:6b:a8:cc:12: db:3f:43:52:a6:49:ca:7e:32:95:1e:c7:f0:9c:bf:70:22:48: c8:b2:00:8c:74:c5:6f:fb:c9:f8:b2:ee:f8:84:25:a1:83:18: 35:79:31:2f:68:a7:3f:49:d9:16:80:29:45:4d:a9:4e:e9:18: 62:c5:15:84:3a:5a:91:95:f0:0c:92:6e:ad:aa:7c:e5:ce:af: 2f:81:e6:97:9b:3a:67:af:0c:b9:e9:3b:c1:86:88:8b:ac:2c: 55:a6:4f:18:57:81:3d:b0:cd:c1:f5:c3:c9:8e:b2:3d:50:93: 81:fc:24:8d:cf:22:fb:dd:5b:28:c3:ca:4d:af:3b:c1:84:17: f9:e5:3e:13:08:8a:3b:b1:b5:d4:af:88:25:e7:e1:60:9e:3b: 30:ce:bd:2c:2a:86:74:b0:81:3b:0e:b1:0f:40:32:83:96:d9: 57:d6:d3:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWQ1oPNUgRHgUnUWseFUDb84oPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA2MTMxMTI4MzFaFw0yNjA2MTQxMjE1MzFaMDMxMTAvBgNV BAMTKEU4OUQ1QkE4MTI3MTk4NEM5NzM1MEZBMjM4MDc2MzA5NjQwQUZDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaRZRYJEuXtYhwyIv1lEyYFNW ySdAiDoLnfudkA4oJwqLF4A78+M+v1pKZW+2jcswaIPXGQAGeR8gNM+7XRSmG9mO pA355TYpFaCu6hCy8v3B7zPjuxnTNgy3EVJ5HSSH2R9IrRw5Hsst50uxJ1zt0Afs uVrJ56BWO0BdKnUWC0gMdEIpO85iN7Y1zBaMxH67AJothTx1vNH9rCDAOntwibD4 t4F+Zg7c4lleOWMVY3NDPyS4Ao/kwI5Q/dEC/9u+eCjlXYlQ1xVaPiK+tkoMMFJX VVhmAKQufR6gcKsQ6ZzbH3NyYQQYoDGGix9xJOA5AQ9Jl3wh7UPSKZiFkbwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6J1bqBJxmEyXNQ+iOAdjCWQK/EwwHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuj324sfT4nt4gt4tqi3XwbjL7Et7XzwyNJ yQbaMfC4oSLTM29j+m0xLk3ZEJfJh9D79tEVpZ4ZltQObxvBDyRJWaLo62SnwHG9 Vx0dsgkF/9m70yNsa6jMEts/Q1KmScp+MpUex/Ccv3AiSMiyAIx0xW/7yfiy7viE JaGDGDV5MS9opz9J2RaAKUVNqU7pGGLFFYQ6WpGV8AySbq2qfOXOry+B5pebOmev DLnpO8GGiIusLFWmTxhXgT2wzcH1w8mOsj1Qk4H8JI3PIvvdWyjDyk2vO8GEF/nl PhMIijuxtdSviCXn4WCeOzDOvSwqhnSwgTsOsQ9AMoOW2VfW0/M= -----END CERTIFICATE-----Generated at Sat Jun 13 14:05:41 2026 by rpki-client