$ rpki-client -vvf rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft File: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft (raw, json) Hash identifier: HABtXOdEbg6fIwb09x9Gvao8W6Sy/App1aS4s0nI0lE= Subject key identifier: 33:87:98:8C:40:A5:FD:AC:E5:C7:B6:47:66:50:71:51:DA:33:9F:B7 Authority key identifier: CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 Certificate issuer: /CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Certificate serial: 03D50F7E1662C35C385ED74BD877ECA188A85C47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:02:40 +0000 Manifest this update: Mon 20 Jul 2026 12:57:40 +0000 Manifest next update: Tue 21 Jul 2026 14:14:40 +0000 Files and hashes: 1: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: kp5yEvA04MPtCYbrno7JgwGY6J9dneDRmDS5pzuyNcQ=) 2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: shzN9V44H6sJbyc7XtBZ0Ia8BJHs5w38s6/XgarDDV4=) 3: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl (hash: CAjFOq0RXxDNIS8/xeUMglyUd5sU6men/nP5oxgsrts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d5:0f:7e:16:62:c3:5c:38:5e:d7:4b:d8:77:ec:a1:88:a8:5c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Validity Not Before: Jul 20 12:57:40 2026 GMT Not After : Jul 21 14:14:40 2026 GMT Subject: CN=3387988C40A5FDACE5C7B64766507151DA339FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ea:50:3f:8f:71:94:07:cb:3a:f2:5f:29:97: 2d:52:4f:16:25:20:1a:ea:d5:1e:de:87:83:b8:68: 4f:ff:95:6c:df:24:77:ab:1e:77:f5:c3:23:53:59: eb:74:c6:fb:0d:64:cc:69:a6:6c:58:0b:66:21:91: 02:50:ec:c2:70:7f:2c:7c:1c:f8:81:41:37:c9:92: 68:3a:3c:24:58:f3:9d:d1:c2:34:27:36:a7:b9:ca: 2a:c3:78:12:b0:78:65:84:71:1a:e2:9b:7f:e6:f0: 85:cd:d4:4e:cf:4f:8e:5a:e9:fd:2c:b2:11:71:b2: 89:29:6b:13:f9:3a:5e:5c:14:24:8e:47:da:bb:c0: 00:db:76:e6:7f:a4:bc:d3:4f:33:54:4a:c1:20:eb: 5b:27:01:56:97:cb:1b:48:9f:3b:be:df:5c:ae:4a: 2a:de:8b:d0:68:f3:7d:fe:86:e1:d9:96:84:99:1f: 12:0d:9b:da:5f:a8:73:e4:fe:4f:98:2f:3b:4f:71: 17:ba:03:14:d6:77:3f:e5:35:58:73:e1:97:ab:a1: ce:a5:27:64:47:c8:b9:14:73:eb:11:6f:5a:91:fb: 25:56:d7:08:9f:40:3f:ea:ef:fb:ba:7e:e2:e4:bf: 3a:a0:94:ce:6e:18:cb:4f:55:7c:eb:f0:34:9e:3a: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:87:98:8C:40:A5:FD:AC:E5:C7:B6:47:66:50:71:51:DA:33:9F:B7 X509v3 Authority Key Identifier: keyid:CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bf:aa:a4:79:2b:eb:4a:a0:8c:d8:61:2c:cd:b8:b1:37:37: 37:13:19:74:17:8d:88:e5:c4:af:27:9b:fb:db:ac:3a:c1:28: 16:a0:b5:d2:94:45:65:7d:d7:d0:91:41:83:e4:97:9f:d0:33: f3:5e:40:bc:78:fd:4e:b3:07:47:58:61:47:98:cf:a2:6a:41: 74:71:76:0a:99:74:13:84:48:13:52:e9:8a:15:43:73:a1:32: 65:cc:93:c3:92:4c:4f:c2:39:36:00:70:80:4e:36:9d:a9:48: d9:8b:ec:af:03:5d:2c:45:7a:1b:b4:05:94:31:71:18:1d:29: 4e:2d:f5:7e:f6:b0:1a:dc:9b:5d:5f:01:d2:0e:4d:61:74:9d: 68:ae:61:bb:b9:e7:8e:25:83:22:0f:05:4e:70:39:07:ac:a7: 64:bb:f6:5b:34:33:b6:1f:23:22:d6:67:d1:a2:bd:78:7d:f6: 7d:d5:d5:da:e6:be:e1:0f:de:a2:fd:1b:1d:97:49:15:c1:d1: 87:dc:5c:26:5f:4a:4c:16:7a:ee:6b:94:c7:41:20:fe:57:6f: 17:99:3c:1c:52:7c:4d:36:91:f1:65:4e:7d:4f:c4:35:25:95: f6:a9:d5:63:86:0a:c5:4c:19:7e:bc:35:db:cf:23:99:7b:cb: 45:14:b5:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9UPfhZiw1w4XtdL2HfsoYioXEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1 RTJCQ0Q4MTAeFw0yNjA3MjAxMjU3NDBaFw0yNjA3MjExNDE0NDBaMDMxMTAvBgNV BAMTKDMzODc5ODhDNDBBNUZEQUNFNUM3QjY0NzY2NTA3MTUxREEzMzlGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6lA/j3GUB8s68l8ply1STxYl IBrq1R7eh4O4aE//lWzfJHerHnf1wyNTWet0xvsNZMxppmxYC2YhkQJQ7MJwfyx8 HPiBQTfJkmg6PCRY853RwjQnNqe5yirDeBKweGWEcRrim3/m8IXN1E7PT45a6f0s shFxsokpaxP5Ol5cFCSOR9q7wADbduZ/pLzTTzNUSsEg61snAVaXyxtInzu+31yu Sirei9Bo833+huHZloSZHxINm9pfqHPk/k+YLztPcRe6AxTWdz/lNVhz4Zeroc6l J2RHyLkUc+sRb1qR+yVW1wifQD/q7/u6fuLkvzqglM5uGMtPVXzr8DSeOi8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4eYjECl/azlx7ZHZlBxUdozn7cwHwYDVR0j BBgwFoAUy7neQn5xJrNiTm/48KwdrF4rzYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzZWJhYmItOTk5Zi00ZjNlLTg0YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3 RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1RTJCQ0Q4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkI5REU0MjdFNzEyNkIzNjI0RTZGRjhGMEFDMURBQzVFMkJD RDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFE QUM1RTJCQ0Q4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe/qqR5K+tKoIzYYSzNuLE3NzcTGXQXjYjl xK8nm/vbrDrBKBagtdKURWV919CRQYPkl5/QM/NeQLx4/U6zB0dYYUeYz6JqQXRx dgqZdBOESBNS6YoVQ3OhMmXMk8OSTE/COTYAcIBONp2pSNmL7K8DXSxFehu0BZQx cRgdKU4t9X72sBrcm11fAdIOTWF0nWiuYbu5544lgyIPBU5wOQesp2S79ls0M7Yf IyLWZ9GivXh99n3V1drmvuEP3qL9Gx2XSRXB0YfcXCZfSkwWeu5rlMdBIP5XbxeZ PBxSfE02kfFlTn1PxDUllfap1WOGCsVMGX68NdvPI5l7y0UUtV4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:17:01 2026 by rpki-client