$ rpki-client -vvf rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft File: CB1DBC8005A976151FCB40B190D2FB007257926D.mft (raw, json) Hash identifier: 9h5uVForGdmyA2up2xrg3PmLQo/xiZJrIvpN9gcJexI= Subject key identifier: 7E:34:E1:2D:52:DE:AB:1D:A5:B0:E9:53:80:54:41:6B:43:DE:2B:63 Authority key identifier: CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D Certificate issuer: /CN=CB1DBC8005A976151FCB40B190D2FB007257926D Certificate serial: 2CA2751E35BE5B53D69A970575BD3213DC3F967C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 18:57:50 +0000 Manifest this update: Tue 02 Jun 2026 18:52:50 +0000 Manifest next update: Wed 03 Jun 2026 19:38:50 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: pYHFYFUzoJNAsC6Cp8pDGU8Mnw4SxVjzZR48Pyb+I2A=) 2: CB1DBC8005A976151FCB40B190D2FB007257926D.crl (hash: Q9x0hN6GdcU4b6faG2TehQ5k+d8n192FclJ2tYSXfNw=) 3: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: JtYJWwvzpXOf4hheAO+k8IOGayyc4dYyOp8DCvruUrg=) 4: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: ArRnNfQejR0sI5RjCbfv6zZubamliB/ioJJ0CyHpvz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a2:75:1e:35:be:5b:53:d6:9a:97:05:75:bd:32:13:dc:3f:96:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB1DBC8005A976151FCB40B190D2FB007257926D Validity Not Before: Jun 2 18:52:50 2026 GMT Not After : Jun 3 19:38:50 2026 GMT Subject: CN=7E34E12D52DEAB1DA5B0E9538054416B43DE2B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:c4:64:3c:51:70:18:19:15:f9:db:f7:0f: 6e:70:12:5b:00:0a:c1:f1:0f:4f:49:01:65:90:ea: b5:c0:bf:59:8a:74:6e:c3:4f:84:1c:03:3b:da:ed: 64:ae:84:db:b0:95:a3:6a:da:55:07:3d:98:06:c4: 17:84:f9:b1:3b:de:e6:4e:25:d8:09:6e:97:8a:bc: 51:5f:12:ff:1e:78:a7:88:51:9c:ac:16:49:ce:11: 6b:28:b9:c0:d8:8f:23:c7:5e:10:f8:a9:2a:90:a6: 84:b5:24:49:89:97:8e:67:79:6c:9c:f0:f1:ae:ae: b0:f9:a7:7d:68:1e:69:cc:f7:7e:b8:26:f3:ca:34: 1e:c0:7e:a8:1a:12:81:07:c5:8e:b8:36:f2:bf:7b: 89:35:46:7a:2e:7e:f2:d0:c3:55:a0:02:af:2b:85: f2:3e:d9:74:ec:bf:4b:b9:95:c9:f7:a3:55:01:36: 43:34:a0:04:bd:4a:38:a4:c7:aa:6a:6c:6b:d2:9b: ad:e5:b6:3d:53:72:1d:47:92:e8:c5:6b:4f:1e:c8: e5:d5:ba:aa:eb:ed:c9:ad:98:0f:d3:b1:7b:d7:33: 6d:6a:ef:e5:f7:75:64:c0:ee:13:df:e4:92:db:c9: fd:5b:a8:79:f5:9c:71:9b:6b:c3:8c:67:c5:dc:01: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:34:E1:2D:52:DE:AB:1D:A5:B0:E9:53:80:54:41:6B:43:DE:2B:63 X509v3 Authority Key Identifier: keyid:CB:1D:BC:80:05:A9:76:15:1F:CB:40:B1:90:D2:FB:00:72:57:92:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB1DBC8005A976151FCB40B190D2FB007257926D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/CB1DBC8005A976151FCB40B190D2FB007257926D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:57:35:f9:0d:a0:f1:69:1f:ad:2e:dc:11:47:17:66:7f:82: 37:a1:d6:4b:a5:1e:ec:cb:57:0c:7c:39:d1:6a:b4:8a:d7:25: d1:a4:b2:5a:bd:7a:86:bd:43:d9:ec:e9:0f:68:00:88:91:13: 3f:cc:b2:fc:8b:bc:42:74:89:05:81:0e:c6:e2:c1:c1:7e:2e: 78:6e:28:c2:f7:8f:6d:20:13:38:a6:7c:29:95:1e:d6:73:47: e6:9e:ff:e7:81:22:fc:dc:1b:ee:e6:78:dd:07:39:95:f0:6d: 55:f2:e3:9d:21:74:49:85:1d:3b:91:2e:61:93:46:26:7d:f0: be:f0:06:ed:b5:41:77:e5:9a:e8:47:1b:be:c3:d1:67:79:91: 47:79:c7:89:9c:6e:7d:5a:df:4d:0f:87:b8:d7:be:be:bf:20: 80:45:db:38:8e:48:44:8a:8a:9e:fb:74:2b:a7:7e:b9:08:76: 73:e0:e6:19:99:53:ac:42:48:a1:68:25:9d:ad:69:7f:ef:cc: 02:09:e5:ce:7a:d1:c6:2a:32:c3:36:d2:99:d0:db:44:2b:f1: 7c:fe:58:49:7d:f9:ad:da:7c:12:75:77:75:39:e0:5d:60:cc: 07:66:c9:b5:7a:00:c5:d6:d4:0f:39:ed:9b:ef:07:7e:95:60: 26:9e:64:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKJ1HjW+W1PWmpcFdb0yE9w/lnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3 MjU3OTI2RDAeFw0yNjA2MDIxODUyNTBaFw0yNjA2MDMxOTM4NTBaMDMxMTAvBgNV BAMTKDdFMzRFMTJENTJERUFCMURBNUIwRTk1MzgwNTQ0MTZCNDNERTJCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGMRkPFFwGBkV+dv3D25wElsA CsHxD09JAWWQ6rXAv1mKdG7DT4QcAzva7WSuhNuwlaNq2lUHPZgGxBeE+bE73uZO JdgJbpeKvFFfEv8eeKeIUZysFknOEWsoucDYjyPHXhD4qSqQpoS1JEmJl45neWyc 8PGurrD5p31oHmnM9364JvPKNB7AfqgaEoEHxY64NvK/e4k1RnoufvLQw1WgAq8r hfI+2XTsv0u5lcn3o1UBNkM0oAS9Sjikx6pqbGvSm63ltj1Tch1HkujFa08eyOXV uqrr7cmtmA/TsXvXM21q7+X3dWTA7hPf5JLbyf1bqHn1nHGba8OMZ8XcAVBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjThLVLeqx2lsOlTgFRBa0PeK2MwHwYDVR0j BBgwFoAUyx28gAWpdhUfy0CxkNL7AHJXkm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjYjVjOWItZjM4My00ZTgxLTgxMmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAw NUE5NzYxNTFGQ0I0MEIxOTBEMkZCMDA3MjU3OTI2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjFEQkM4MDA1QTk3NjE1MUZDQjQwQjE5MEQyRkIwMDcyNTc5 MjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQ0IxREJDODAwNUE5NzYxNTFGQ0I0MEIxOTBEMkZC MDA3MjU3OTI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpXNfkNoPFpH60u3BFHF2Z/gjeh1kulHuzL Vwx8OdFqtIrXJdGkslq9eoa9Q9ns6Q9oAIiREz/MsvyLvEJ0iQWBDsbiwcF+Lnhu KML3j20gEzimfCmVHtZzR+ae/+eBIvzcG+7meN0HOZXwbVXy450hdEmFHTuRLmGT RiZ98L7wBu21QXflmuhHG77D0Wd5kUd5x4mcbn1a300Ph7jXvr6/IIBF2ziOSESK ip77dCunfrkIdnPg5hmZU6xCSKFoJZ2taX/vzAIJ5c560cYqMsM20pnQ20Qr8Xz+ WEl9+a3afBJ1d3U54F1gzAdmybV6AMXW1A857ZvvB36VYCaeZIs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:20 2026 by rpki-client