$ rpki-client -vvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft File: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft (raw, json) Hash identifier: 4DYzEUC/gxOwaBklVfepuOh0WYnad64gKQR0KIQYokA= Subject key identifier: 5D:2A:01:13:35:5E:9D:19:AF:BC:C6:7A:BB:47:47:8F:0D:31:F4:1A Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D Certificate issuer: /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Certificate serial: 27AEDC0624AC9069E3AD3B570CCF1318AEB2A980 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 20:00:59 +0000 Manifest this update: Mon 20 Jul 2026 19:55:59 +0000 Manifest next update: Tue 21 Jul 2026 23:29:59 +0000 Files and hashes: 1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: x+d57o1s3Lbg7LZYcyJzqZr5jsNBMksxksKUmCvZjfA=) 2: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl (hash: ZIC69iQivjIUiO6ZCv74vqVd29L2Pb0rqe+J0bXilUA=) 3: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ae:dc:06:24:ac:90:69:e3:ad:3b:57:0c:cf:13:18:ae:b2:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Validity Not Before: Jul 20 19:55:59 2026 GMT Not After : Jul 21 23:29:59 2026 GMT Subject: CN=5D2A0113355E9D19AFBCC67ABB47478F0D31F41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:49:44:2f:b9:ec:36:19:b2:db:83:e8:6a: ed:e7:1e:aa:b5:a5:22:f4:85:fe:8d:02:94:08:eb: 80:e6:a8:bd:02:42:4b:cb:88:be:90:70:7b:4b:dd: 59:3c:32:f9:bc:37:3a:ba:c4:0b:3b:1f:03:da:a2: 78:d6:6e:8d:74:5f:14:36:de:d2:a1:02:6a:16:65: ae:93:e4:53:10:e9:e3:5b:38:7a:b4:fa:7e:54:46: a8:98:3f:d9:31:72:f3:5c:08:02:b8:93:97:a1:23: ee:56:0c:67:af:3f:15:ab:f6:9b:61:11:ee:73:4b: 9a:99:2a:54:c5:84:98:6c:f5:30:32:30:37:9e:73: c4:23:d1:3c:5f:b5:ad:a9:34:af:46:d5:56:e9:34: 86:dc:19:af:20:98:16:bb:2b:5a:a0:5f:a8:a3:0c: ae:88:b8:dc:2f:b4:42:10:fc:e4:94:d8:e8:59:26: d2:36:eb:63:3b:f3:93:ce:7f:5e:5b:33:37:91:b5: d9:55:22:f1:85:45:fe:8e:b6:35:8b:86:c7:97:44: 1d:54:99:b5:3d:74:ff:09:1f:c4:6f:be:9a:38:c4: ac:7e:bb:05:3e:e6:8b:f1:61:a6:f0:69:4a:81:76: f8:26:82:32:15:62:b4:ee:4d:94:ec:a6:51:ca:6d: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2A:01:13:35:5E:9D:19:AF:BC:C6:7A:BB:47:47:8F:0D:31:F4:1A X509v3 Authority Key Identifier: keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:12:a9:0a:8d:70:c3:14:70:f9:e7:f5:5b:61:ce:9a:76:f2: 10:a0:51:84:ac:fc:fa:24:d4:07:2f:a3:e4:63:d8:a6:5b:26: 7a:54:4c:8e:15:25:47:b3:d3:7b:0d:45:dd:03:48:e1:94:65: 12:bf:3a:0d:7a:1e:ed:fa:87:b8:8b:45:6c:be:08:b2:f2:9c: d1:e7:95:5b:c5:98:27:e0:a7:b2:ab:97:0e:03:d1:e3:9f:a2: c0:6d:a4:03:a6:32:fc:66:89:08:b4:63:27:f5:1a:ab:ff:dd: 95:d2:dc:35:4d:d9:28:d6:2b:9d:03:c8:79:87:3d:55:92:f4: 7a:d2:7a:8b:bc:29:05:dd:93:04:d9:fd:4c:32:93:a8:a3:65: d3:38:1f:c4:91:fe:65:82:f4:e5:a4:1a:29:03:5e:14:45:0d: c6:c1:86:9d:84:98:bd:21:d0:9c:21:9a:94:b4:da:b3:30:6d: 97:06:5f:eb:bc:5d:98:90:fc:e8:e3:7c:f6:97:2b:a2:fe:f1: 0a:0e:1b:11:50:99:f9:ce:db:2b:ec:d0:78:ec:f8:c7:8d:e5: 41:dc:c4:5e:ef:68:16:1d:14:ea:4b:7a:c0:e9:f5:35:6f:c7: ed:51:91:99:2d:92:72:1b:22:bf:41:00:80:c7:92:ed:2a:78: 04:45:ae:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ67cBiSskGnjrTtXDM8TGK6yqYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3 NzM4NzM1RDAeFw0yNjA3MjAxOTU1NTlaFw0yNjA3MjEyMzI5NTlaMDMxMTAvBgNV BAMTKDVEMkEwMTEzMzU1RTlEMTlBRkJDQzY3QUJCNDc0NzhGMEQzMUY0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYa0lEL7nsNhmy24Poau3nHqq1 pSL0hf6NApQI64DmqL0CQkvLiL6QcHtL3Vk8Mvm8Nzq6xAs7HwPaonjWbo10XxQ2 3tKhAmoWZa6T5FMQ6eNbOHq0+n5URqiYP9kxcvNcCAK4k5ehI+5WDGevPxWr9pth Ee5zS5qZKlTFhJhs9TAyMDeec8Qj0Txfta2pNK9G1VbpNIbcGa8gmBa7K1qgX6ij DK6IuNwvtEIQ/OSU2OhZJtI262M785POf15bMzeRtdlVIvGFRf6OtjWLhseXRB1U mbU9dP8JH8Rvvpo4xKx+uwU+5ovxYabwaUqBdvgmgjIVYrTuTZTsplHKbWHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXSoBEzVenRmvvMZ6u0dHjw0x9BowHwYDVR0j BBgwFoAUyzuKeHM3KMixr6SO78bh93c4c10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyMDQxZjEtNGNlNi00OWI0LTgzYTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3 MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3NzM4NzM1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjNCOEE3ODczMzcyOEM4QjFBRkE0OEVFRkM2RTFGNzc3Mzg3 MzVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUx Rjc3NzM4NzM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUSqQqNcMMUcPnn9Vthzpp28hCgUYSs/Pok 1Acvo+Rj2KZbJnpUTI4VJUez03sNRd0DSOGUZRK/Og16Hu36h7iLRWy+CLLynNHn lVvFmCfgp7Krlw4D0eOfosBtpAOmMvxmiQi0Yyf1Gqv/3ZXS3DVN2SjWK50DyHmH PVWS9HrSeou8KQXdkwTZ/Uwyk6ijZdM4H8SR/mWC9OWkGikDXhRFDcbBhp2EmL0h 0JwhmpS02rMwbZcGX+u8XZiQ/OjjfPaXK6L+8QoOGxFQmfnO2yvs0Hjs+MeN5UHc xF7vaBYdFOpLesDp9TVvx+1RkZktknIbIr9BAIDHku0qeARFrts= -----END CERTIFICATE-----Generated at Tue Jul 21 08:58:09 2026 by rpki-client