$ rpki-client -vvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft File: CB1DBC8005A976151FCB40B190D2FB007257926D.mft (raw, json) Hash identifier: bBT6qn2HIXEAWtzcsadSeSgFDCuYERK6Nalc5sjRUtU= Subject key identifier: FF:95:46:2D:7E:12:D2:2F:10:F3:DB:32:16:C8:CB:68:52:26:1C:D7 Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D Certificate issuer: /CN=CB1DBC8005A976151FCB40B190D2FB007257926D Certificate serial: 2E00EE7F1CD7BADC89B94784B6C9C384718AE81A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:02:14 +0000 Manifest this update: Mon 20 Jul 2026 20:57:14 +0000 Manifest next update: Wed 22 Jul 2026 00:08:14 +0000 Files and hashes: 1: CB1DBC8005A976151FCB40B190D2FB007257926D.crl (hash: MI6P01+n4qRLu3T9Lw5+wtq43bnSzcivPWrwHiOrSxo=) 2: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: ArRnNfQejR0sI5RjCbfv6zZubamliB/ioJJ0CyHpvz8=) 3: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: JtYJWwvzpXOf4hheAO+k8IOGayyc4dYyOp8DCvruUrg=) 4: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: pYHFYFUzoJNAsC6Cp8pDGU8Mnw4SxVjzZR48Pyb+I2A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:00:ee:7f:1c:d7:ba:dc:89:b9:47:84:b6:c9:c3:84:71:8a:e8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D Validity Not Before: Jul 20 20:57:14 2026 GMT Not After : Jul 22 00:08:14 2026 GMT Subject: CN=FF95462D7E12D22F10F3DB3216C8CB6852261CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:4e:b3:fc:a5:2e:6a:7c:e0:bc:ae:bf:46: 90:8b:91:72:40:c6:29:9b:ef:f1:64:06:07:a0:1c: b6:d9:fc:f0:3c:46:f8:b2:74:8c:78:fc:12:3d:35: a7:83:2b:26:19:93:4e:39:87:99:75:b8:8e:f8:6c: 51:45:58:98:c1:28:85:76:99:78:e3:06:50:1c:54: 66:1c:4e:6d:57:92:86:df:40:86:dc:98:24:01:b6: 98:3b:02:d2:94:3a:be:ec:ad:01:fa:62:8b:ca:1b: ad:63:e2:92:04:60:64:a8:5b:37:3e:9d:00:4f:77: c7:52:a4:78:ce:67:c8:e7:28:a2:cf:6b:d6:a2:24: 0b:a1:c6:ac:7c:59:b1:2d:f3:f7:9e:3d:bd:1f:c6: 0c:bb:1d:1a:27:c5:87:b7:d7:ff:8c:5b:f6:97:16: 4b:2e:e4:f9:b4:32:10:ce:e9:a9:17:30:3d:c0:a7: 95:94:54:d8:66:33:83:36:19:25:d8:e2:03:ed:06: be:ae:a7:cc:91:8a:e8:b1:04:09:57:17:f6:57:79: 1a:86:2a:d3:0a:82:d4:e7:2e:9c:d9:63:f5:38:cd: 87:f5:be:2f:0d:42:1f:2d:8d:dd:6e:9d:6c:91:58: b2:86:0c:2a:4f:2e:b7:cb:8f:f3:77:66:23:59:78: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:46:2D:7E:12:D2:2F:10:F3:DB:32:16:C8:CB:68:52:26:1C:D7 X509v3 Authority Key Identifier: keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6b:63:bd:f5:79:6d:1d:83:f5:81:53:43:b3:08:e1:1e:7d: b2:ea:25:c9:7e:42:3f:85:77:70:43:32:96:91:9c:0b:44:8d: 1f:39:f8:29:0c:05:3b:a6:84:69:27:28:99:20:21:d7:84:3a: 16:b9:6b:c5:78:64:44:71:f0:37:37:fc:4d:a5:85:36:7d:25: 8d:79:88:b1:a7:c1:79:e0:ef:0d:53:1a:1a:f2:35:df:0c:84: 2b:6f:b0:26:58:79:24:a9:40:dc:ba:46:13:e0:dd:4c:2e:bb: e7:bd:8c:9c:9b:b5:f7:6c:9f:a4:b9:79:7a:c8:9a:7a:66:1d: 79:31:aa:31:c4:80:ad:e9:c5:15:5b:a4:af:87:cc:28:f8:74: 71:ed:9f:9f:27:db:54:23:7e:7f:8d:60:d2:e7:c2:4c:fa:56: 31:ec:a7:0b:c6:ac:dc:f2:a4:74:3e:00:c5:0a:50:21:65:0a: 06:c5:20:11:06:10:32:5b:fa:ac:41:c5:38:a3:dd:a4:2b:fd: 4e:c5:c4:b0:a4:ff:ee:7c:02:8a:c9:ce:0b:ae:33:90:17:48: a7:db:44:49:68:09:92:90:e0:18:3a:8b:71:b1:8e:91:57:69: 0a:fc:db:69:38:7b:75:d5:7b:0e:fb:fb:21:1d:9a:94:21:61: 85:20:49:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULgDufxzXutyJuUeEtsnDhHGK6BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3 MjU3OTI2RDAeFw0yNjA3MjAyMDU3MTRaFw0yNjA3MjIwMDA4MTRaMDMxMTAvBgNV BAMTKEZGOTU0NjJEN0UxMkQyMkYxMEYzREIzMjE2QzhDQjY4NTIyNjFDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJpU6z/KUuanzgvK6/RpCLkXJA ximb7/FkBgegHLbZ/PA8RviydIx4/BI9NaeDKyYZk045h5l1uI74bFFFWJjBKIV2 mXjjBlAcVGYcTm1XkobfQIbcmCQBtpg7AtKUOr7srQH6YovKG61j4pIEYGSoWzc+ nQBPd8dSpHjOZ8jnKKLPa9aiJAuhxqx8WbEt8/eePb0fxgy7HRonxYe31/+MW/aX Fksu5Pm0MhDO6akXMD3Ap5WUVNhmM4M2GSXY4gPtBr6up8yRiuixBAlXF/ZXeRqG KtMKgtTnLpzZY/U4zYf1vi8NQh8tjd1unWyRWLKGDCpPLrfLj/N3ZiNZeASTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5VGLX4S0i8Q89syFsjLaFImHNcwHwYDVR0j BBgwFoAUyx28gAWpdhUfy0CxkNL7AHJXkm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjYjVjOWItZjM4My00ZTgxLTgxMmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAw NUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3MjU3OTI2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjFEQkM4MDA1QTk3NjE1MUZDQjQwQjE5MEQyRkIwMDcyNTc5 MjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZC MDA3MjU3OTI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExrY731eW0dg/WBU0OzCOEefbLqJcl+Qj+F d3BDMpaRnAtEjR85+CkMBTumhGknKJkgIdeEOha5a8V4ZERx8Dc3/E2lhTZ9JY15 iLGnwXng7w1TGhryNd8MhCtvsCZYeSSpQNy6RhPg3Uwuu+e9jJybtfdsn6S5eXrI mnpmHXkxqjHEgK3pxRVbpK+HzCj4dHHtn58n21Qjfn+NYNLnwkz6VjHspwvGrNzy pHQ+AMUKUCFlCgbFIBEGEDJb+qxBxTij3aQr/U7FxLCk/+58AorJzguuM5AXSKfb REloCZKQ4Bg6i3GxjpFXaQr822k4e3XVew77+yEdmpQhYYUgSQs= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:18 2026 by rpki-client