$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: n9rlYmMyDqHuVGQeNb7L3Rgy1Nrtv6Uww7xiFraGqQw= Subject key identifier: 48:E8:38:38:0D:C6:0A:DE:CF:CC:EF:86:7B:AE:47:38:70:FC:39:EC Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 6FFAE07190BBF1852356308C3735A68A84F09102 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: 73 Signing time: Tue 28 Jul 2026 02:20:02 +0000 Manifest this update: Tue 28 Jul 2026 02:15:02 +0000 Manifest next update: Wed 29 Jul 2026 06:01:02 +0000 Files and hashes: 1: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: JuNQpg5s24EQNSCLcfW3iBru2gt6wZdVfJOK62Kf0q0=) 2: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: 3ouLTTMrlORMHlKU1niXf/J5eybW8/1poSHTBw8u7OI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fa:e0:71:90:bb:f1:85:23:56:30:8c:37:35:a6:8a:84:f0:91:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Jul 28 02:15:02 2026 GMT Not After : Jul 29 06:01:02 2026 GMT Subject: CN=48E838380DC60ADECFCCEF867BAE473870FC39EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:b9:84:01:b2:c7:57:2f:72:93:92:f4:ce: 82:b4:52:60:7e:5d:89:af:57:3b:f8:da:f9:eb:66: 36:dd:ca:2d:90:10:83:2e:20:10:47:d5:92:a8:57: e7:2c:28:df:90:a7:2f:f8:22:22:30:ca:78:17:5a: 5d:5f:bf:8d:81:c5:96:3b:af:5b:62:96:6d:33:6a: 69:64:83:1c:e3:70:05:a7:b0:16:f5:f2:a4:6a:44: e0:f0:3e:c7:f8:f3:36:ec:e7:67:ee:f9:78:42:59: b7:76:f2:bc:e3:6f:f5:71:75:29:15:62:b7:ae:fe: 34:fb:cc:42:59:8e:81:92:6c:4d:0f:39:b5:b1:7a: d7:66:d3:e2:db:91:c1:3f:2f:d7:d9:7a:3b:6f:db: 0b:05:64:c5:a9:a0:50:67:11:24:c4:69:df:ef:17: cb:c4:5c:8d:8c:97:b9:4c:30:00:09:79:33:bf:57: 76:49:34:d4:a7:7b:9d:a2:7a:0c:18:90:33:63:6c: c2:2d:89:f9:0e:86:d9:cd:b1:6c:9c:fd:7b:86:0d: 82:96:53:12:81:d7:8f:ad:21:8d:ae:4a:5b:87:89: 21:d3:64:0f:b3:04:c8:42:c4:8b:8b:f9:22:fc:9a: 07:c0:97:64:ca:a5:bf:7b:c1:dd:5d:f3:64:83:e8: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E8:38:38:0D:C6:0A:DE:CF:CC:EF:86:7B:AE:47:38:70:FC:39:EC X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:24:83:45:af:e8:ca:30:7c:4a:14:bf:3c:d7:9b:3f:61:f4: df:81:e7:8e:92:74:f5:1f:e5:5b:68:76:31:c7:58:9e:e9:9f: a4:1f:f5:e7:1a:03:25:d0:4b:51:72:e2:a5:58:15:a0:55:cc: 2e:2e:19:3a:d5:e6:b2:51:f3:62:38:ef:a2:33:82:14:e6:f2: 81:c7:60:20:b6:6d:a9:4b:3a:58:c6:e2:49:49:4c:dc:4b:07: 43:59:be:91:1a:ad:2c:dd:2d:79:00:87:84:d9:85:4e:1d:0a: d5:eb:44:80:07:78:00:d4:06:5d:d5:44:47:09:13:74:3b:fb: d1:87:26:fc:44:ba:10:fb:2e:ae:cb:6c:86:49:b7:4b:e2:c5: 3a:ae:9a:06:7e:b0:28:0d:99:04:ae:19:c2:41:7d:e7:c1:a5: 45:f4:79:3b:c3:15:8c:62:e3:eb:9f:fe:dc:f2:7d:36:45:a5: e4:44:06:65:b4:07:af:99:04:3c:d8:b4:81:a0:71:77:f2:69: 46:ce:82:ff:3b:1c:9d:7c:8c:73:c2:1b:e0:db:e8:18:bf:7f: b7:e0:2e:85:20:c7:1a:42:c4:a6:50:9d:36:de:54:3c:38:41: eb:13:95:b3:59:57:8b:94:eb:9e:79:d5:c2:0f:20:06:4d:32: b4:1e:19:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/rgcZC78YUjVjCMNzWmioTwkQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA3MjgwMjE1MDJaFw0yNjA3MjkwNjAxMDJaMDMxMTAvBgNV BAMTKDQ4RTgzODM4MERDNjBBREVDRkNDRUY4NjdCQUU0NzM4NzBGQzM5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCts7mEAbLHVy9yk5L0zoK0UmB+ XYmvVzv42vnrZjbdyi2QEIMuIBBH1ZKoV+csKN+Qpy/4IiIwyngXWl1fv42BxZY7 r1tilm0zamlkgxzjcAWnsBb18qRqRODwPsf48zbs52fu+XhCWbd28rzjb/VxdSkV Yreu/jT7zEJZjoGSbE0PObWxetdm0+LbkcE/L9fZejtv2wsFZMWpoFBnESTEad/v F8vEXI2Ml7lMMAAJeTO/V3ZJNNSne52iegwYkDNjbMItifkOhtnNsWyc/XuGDYKW UxKB14+tIY2uSluHiSHTZA+zBMhCxIuL+SL8mgfAl2TKpb97wd1d82SD6GP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOg4OA3GCt7PzO+Ge65HOHD8OewwHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIkg0Wv6MowfEoUvzzXmz9h9N+B546SdPUf 5VtodjHHWJ7pn6Qf9ecaAyXQS1Fy4qVYFaBVzC4uGTrV5rJR82I476IzghTm8oHH YCC2balLOljG4klJTNxLB0NZvpEarSzdLXkAh4TZhU4dCtXrRIAHeADUBl3VREcJ E3Q7+9GHJvxEuhD7Lq7LbIZJt0vixTqumgZ+sCgNmQSuGcJBfefBpUX0eTvDFYxi 4+uf/tzyfTZFpeREBmW0B6+ZBDzYtIGgcXfyaUbOgv87HJ18jHPCG+Db6Bi/f7fg LoUgxxpCxKZQnTbeVDw4QesTlbNZV4uU65551cIPIAZNMrQeGaY= -----END CERTIFICATE-----Generated at Tue Jul 28 22:06:11 2026 by rpki-client