$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: IwHpNiS53tP1/vIbyPMmDQxgVpaFady3t4eEXK1dCgA= Subject key identifier: E3:E6:BC:D2:3B:74:6B:C6:12:A2:77:57:BE:DB:68:8B:87:27:E8:ED Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 49FDDDEA1A334DE6DF00802ADB51D65982AFA87E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 15:53:19 +0000 Manifest this update: Wed 04 Nov 2026 15:48:19 +0000 Manifest next update: Thu 05 Nov 2026 16:12:19 +0000 Files and hashes: 1: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) 2: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: XGjvglvsZmFkQwgSLjm2funtVU2sPebROky28rArZ9Q=) 3: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fd:dd:ea:1a:33:4d:e6:df:00:80:2a:db:51:d6:59:82:af:a8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: Nov 4 15:48:19 2026 GMT Not After : Nov 5 16:12:19 2026 GMT Subject: CN=E3E6BCD23B746BC612A27757BEDB688B8727E8ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:dc:96:a5:1b:c8:8a:50:4b:ff:f1:2d:c3: 13:41:75:c3:07:d1:ee:27:dd:3b:af:a1:d8:b6:5a: 12:6e:f8:5f:01:d7:07:37:b4:32:aa:14:15:51:79: c2:2d:24:29:99:d6:4e:5d:f0:d5:3b:ad:13:4f:95: aa:ed:1d:11:17:46:03:94:85:6f:c6:f8:2f:40:6d: 34:fa:b5:45:88:f9:a2:3a:d6:7f:4b:da:00:3d:d8: ff:2a:33:7c:34:eb:1c:a5:71:13:8c:0b:35:0f:bb: 5d:ad:03:07:3d:54:88:3b:fc:45:ea:df:3e:96:5e: e7:50:4b:f1:f1:f5:bb:09:9e:0f:38:64:2c:a1:28: ff:90:d2:12:7a:28:91:51:4c:e7:6f:63:15:3d:9d: 0b:b8:3e:b6:d6:19:06:ac:f2:6a:61:16:cf:77:60: c0:4f:f4:7a:8d:22:e9:fb:a1:3f:76:6d:46:a2:32: cb:50:10:7d:64:9e:f0:fd:48:54:b2:a9:66:fe:3d: 8f:ea:82:1f:c2:21:f7:4f:04:d4:f0:c7:d2:fb:4b: 8a:1f:35:06:80:7e:4f:1d:81:37:95:81:5f:2a:f3: 15:14:a9:d3:af:6a:d2:7f:a8:62:32:11:5d:85:42: 99:2b:38:8d:15:28:2c:4f:a3:04:a9:66:96:22:03: bb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E6:BC:D2:3B:74:6B:C6:12:A2:77:57:BE:DB:68:8B:87:27:E8:ED X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bc:34:93:d8:a1:ed:28:5f:51:86:96:ac:31:5b:da:fa:0b: 6f:67:1c:81:b5:1f:ff:48:52:32:95:d8:a4:a7:1a:a3:21:8e: a2:ed:53:91:ca:7d:28:c6:0e:db:0b:79:30:cb:e0:da:0b:2d: 3b:6c:2d:f6:c5:a3:e5:1b:6e:26:ce:cf:ac:04:71:c5:9f:ae: 2c:e3:32:bb:9b:c8:bb:6d:69:40:64:f1:2c:94:5e:bd:71:86: c1:51:b1:57:0b:27:53:e3:9d:3d:23:de:65:a6:0f:11:17:22: 0b:0e:c8:02:89:ab:1b:29:0d:98:c4:29:92:f4:9f:b8:0c:aa: fb:76:36:5f:0f:e0:47:3c:2e:0b:7c:82:ac:8d:4f:40:e0:e8: d9:be:3b:f8:d8:a2:4b:f1:e9:70:6b:c8:81:19:a2:67:70:40: 86:82:a9:81:14:5d:4c:e4:87:4f:d3:0a:2c:0a:b0:d1:6e:de: 36:77:de:57:c2:09:a2:d5:17:67:70:ce:94:51:09:4d:f4:28: f6:86:5b:29:dd:17:7c:4c:4a:8f:cd:f6:7f:0e:6f:11:79:1d: 3a:2c:23:db:fd:e5:fc:93:f9:78:89:d7:a8:a6:d3:01:d0:6a: 42:3c:a8:f8:05:eb:79:0f:b8:34:ba:e8:ed:8c:2d:a0:88:4d: 99:67:cc:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSf3d6hozTebfAIAq21HWWYKvqH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjExMDQxNTQ4MTlaFw0yNjExMDUxNjEyMTlaMDMxMTAvBgNV BAMTKEUzRTZCQ0QyM0I3NDZCQzYxMkEyNzc1N0JFREI2ODhCODcyN0U4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH29yWpRvIilBL//EtwxNBdcMH 0e4n3Tuvodi2WhJu+F8B1wc3tDKqFBVRecItJCmZ1k5d8NU7rRNPlartHREXRgOU hW/G+C9AbTT6tUWI+aI61n9L2gA92P8qM3w06xylcROMCzUPu12tAwc9VIg7/EXq 3z6WXudQS/Hx9bsJng84ZCyhKP+Q0hJ6KJFRTOdvYxU9nQu4PrbWGQas8mphFs93 YMBP9HqNIun7oT92bUaiMstQEH1knvD9SFSyqWb+PY/qgh/CIfdPBNTwx9L7S4of NQaAfk8dgTeVgV8q8xUUqdOvatJ/qGIyEV2FQpkrOI0VKCxPowSpZpYiA7udAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+a80jt0a8YSondXvttoi4cn6O0wHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe8NJPYoe0oX1GGlqwxW9r6C29nHIG1H/9I UjKV2KSnGqMhjqLtU5HKfSjGDtsLeTDL4NoLLTtsLfbFo+UbbibOz6wEccWfrizj MrubyLttaUBk8SyUXr1xhsFRsVcLJ1PjnT0j3mWmDxEXIgsOyAKJqxspDZjEKZL0 n7gMqvt2Nl8P4Ec8Lgt8gqyNT0Dg6Nm+O/jYokvx6XBryIEZomdwQIaCqYEUXUzk h0/TCiwKsNFu3jZ33lfCCaLVF2dwzpRRCU30KPaGWyndF3xMSo/N9n8ObxF5HTos I9v95fyT+XiJ16im0wHQakI8qPgF63kPuDS66O2MLaCITZlnzJ8= -----END CERTIFICATE-----Generated at Wed Nov 4 19:46:36 2026 by rpki-client