$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: 9LCQVKSnJUA+OkzkHQzWcLhkAwSOAU0yR0msCddH+yg= Subject key identifier: F1:33:65:56:5A:1A:50:8F:41:FB:52:FD:B0:F5:A9:05:43:8B:05:1B Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 460867A566668B723F85111EF558DFAC4C5618F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: C2 Signing time: Tue 22 Sep 2026 12:06:22 +0000 Manifest this update: Tue 22 Sep 2026 12:01:22 +0000 Manifest next update: Wed 23 Sep 2026 15:55:22 +0000 Files and hashes: 1: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: sILtXKs1cgSVPS2TWnxfk9ohhh+soWqvBvrXj/yGr1w=) 2: 3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa (hash: 5P1W95x+b+VcAeWv+Uihp1cvRwss8nuTjkrW2k6u0F4=) 3: 3130332e3138352e34342e302f32342d3234203d3e20313339343536.roa (hash: 6ZJ53yDSZZbhA3HLWOJtQJ5qYulxYXvBHN4NhIRy3dM=) 4: 3130332e3138352e34342e302f32332d3233203d3e203538383230.roa (hash: AtTReWoHalW1jTCt7si9vqdmAaRn+woGu9bysUat+zE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:08:67:a5:66:66:8b:72:3f:85:11:1e:f5:58:df:ac:4c:56:18:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Sep 22 12:01:22 2026 GMT Not After : Sep 23 15:55:22 2026 GMT Subject: CN=F13365565A1A508F41FB52FDB0F5A905438B051B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:3f:56:f7:f9:cb:c0:1a:35:fb:d6:e6:32: f7:b4:f0:43:cd:9b:94:2c:b4:1e:a0:27:d1:53:1e: 25:f7:bb:b5:41:8f:79:de:8c:5d:24:43:ee:89:a0: 87:32:16:b0:c6:cb:c3:72:37:1e:07:23:e7:93:79: df:39:72:83:ee:39:98:aa:90:2f:a6:1e:12:94:e4: ec:a1:b8:8c:1f:1c:b8:16:10:96:48:4c:fb:ae:51: cd:69:e6:c7:cb:50:b8:35:4b:ad:96:50:f6:86:72: c0:58:f3:25:58:d0:9e:06:fb:c5:db:fe:f0:71:7c: 2c:4a:d2:92:02:da:73:ab:d6:68:fa:53:0c:8a:61: 67:07:df:11:c9:65:6d:45:26:ef:8b:73:17:04:03: fc:13:73:a3:b4:34:77:82:58:01:08:bc:c3:10:67: 5c:f1:5a:f3:21:f9:d6:a1:5e:36:0e:1a:b4:93:cd: b2:b9:5e:8c:a3:38:50:6f:1f:51:1b:ce:8e:73:27: 56:8f:9b:90:fe:4f:69:34:04:85:58:09:c1:aa:7f: 4d:dc:b4:5e:57:79:f7:d0:2b:37:08:f1:99:85:9c: f0:65:73:d3:c2:8b:07:a0:9d:f3:a5:be:4a:a4:7f: d4:c6:96:2c:a3:86:fb:b2:b3:c5:e6:b6:64:61:08: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:33:65:56:5A:1A:50:8F:41:FB:52:FD:B0:F5:A9:05:43:8B:05:1B X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:08:21:4f:5c:73:20:64:02:a2:dd:1d:c0:86:9a:62:c6:35: ce:71:8a:9c:f5:95:ad:e5:40:1d:33:29:29:a6:80:f0:7b:ee: 80:3e:1d:c8:91:c2:d2:f9:16:a7:50:93:a4:36:6a:6b:f4:57: c9:97:23:e1:0a:5a:40:ad:d2:c5:ab:83:10:84:b9:82:88:af: b8:a3:51:c7:7d:fb:3b:cb:7f:83:a4:73:b0:7c:cc:ce:4b:fd: 68:11:e8:ec:30:aa:6b:65:e8:99:3e:89:41:d6:52:17:73:f7: 09:95:6f:d6:11:b6:77:2b:b1:1e:7c:62:14:60:a4:72:f1:e4: 60:b2:a5:83:eb:7a:ed:ab:77:f6:dd:65:77:46:d9:7d:4c:27: 49:88:3a:fa:3f:7d:7b:d3:1f:fc:1e:c3:a7:03:e4:5b:da:f7: 45:10:8f:1f:a3:80:71:18:45:dd:89:9b:11:5a:a1:28:f8:0b: ac:2e:8a:06:ab:7d:2b:5f:d4:d1:f9:89:52:15:e2:27:a5:c0: f3:80:35:ec:a0:3a:81:e2:f1:38:2c:fa:b0:87:69:7a:a9:c3: 93:54:23:e5:06:1d:48:9f:ce:02:b5:0d:fd:06:4d:df:4a:a7: 24:c0:ff:2b:a9:1f:94:92:a1:b2:48:fa:d7:7e:17:d1:9a:45: 0e:37:a1:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURghnpWZmi3I/hREe9VjfrExWGPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA5MjIxMjAxMjJaFw0yNjA5MjMxNTU1MjJaMDMxMTAvBgNV BAMTKEYxMzM2NTU2NUExQTUwOEY0MUZCNTJGREIwRjVBOTA1NDM4QjA1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTej9W9/nLwBo1+9bmMve08EPN m5QstB6gJ9FTHiX3u7VBj3nejF0kQ+6JoIcyFrDGy8NyNx4HI+eTed85coPuOZiq kC+mHhKU5OyhuIwfHLgWEJZITPuuUc1p5sfLULg1S62WUPaGcsBY8yVY0J4G+8Xb /vBxfCxK0pIC2nOr1mj6UwyKYWcH3xHJZW1FJu+LcxcEA/wTc6O0NHeCWAEIvMMQ Z1zxWvMh+dahXjYOGrSTzbK5XoyjOFBvH1Ebzo5zJ1aPm5D+T2k0BIVYCcGqf03c tF5XeffQKzcI8ZmFnPBlc9PCiwegnfOlvkqkf9TGliyjhvuys8XmtmRhCOMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8TNlVloaUI9B+1L9sPWpBUOLBRswHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMIIU9ccyBkAqLdHcCGmmLGNc5xipz1la3l QB0zKSmmgPB77oA+HciRwtL5FqdQk6Q2amv0V8mXI+EKWkCt0sWrgxCEuYKIr7ij Ucd9+zvLf4Okc7B8zM5L/WgR6Owwqmtl6Jk+iUHWUhdz9wmVb9YRtncrsR58YhRg pHLx5GCypYPreu2rd/bdZXdG2X1MJ0mIOvo/fXvTH/wew6cD5Fva90UQjx+jgHEY Rd2JmxFaoSj4C6wuigarfStf1NH5iVIV4ielwPOANeygOoHi8Tgs+rCHaXqpw5NU I+UGHUifzgK1Df0GTd9KpyTA/yupH5SSobJI+td+F9GaRQ43oao= -----END CERTIFICATE-----Generated at Tue Sep 22 16:31:47 2026 by rpki-client