$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft File: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft (raw, json) Hash identifier: CJcqC6dKzstVFzF+Bh1cyNw0j51cFQNl6dW0Q+ZvM7k= Subject key identifier: 63:88:91:29:87:9D:27:BB:74:E2:60:37:29:B2:77:88:AA:D2:06:E3 Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D Certificate issuer: /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Certificate serial: 2906223DB31702A0DA2241AC84628F2AC43991CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 15:27:34 +0000 Manifest this update: Wed 04 Nov 2026 15:22:34 +0000 Manifest next update: Thu 05 Nov 2026 17:59:34 +0000 Files and hashes: 1: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=) 2: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: x+d57o1s3Lbg7LZYcyJzqZr5jsNBMksxksKUmCvZjfA=) 3: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl (hash: WDEsxuu7fkgSgplChol8NshTVXN0YmKeBY4KarksxzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:06:22:3d:b3:17:02:a0:da:22:41:ac:84:62:8f:2a:c4:39:91:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Validity Not Before: Nov 4 15:22:34 2026 GMT Not After : Nov 5 17:59:34 2026 GMT Subject: CN=63889129879D27BB74E2603729B27788AAD206E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:4e:08:c3:5d:0a:cc:da:b6:ff:7f:0b:ee: 47:40:02:eb:77:67:34:b2:82:53:82:8f:15:58:33: 6b:2e:43:46:14:2b:69:a7:93:0c:ac:f0:e0:55:6d: 90:29:11:15:d3:84:95:15:29:bd:7f:3e:58:1f:1c: 51:ec:24:62:6b:a6:54:ac:45:ec:b3:c2:7c:78:0e: d1:aa:a0:ef:cc:e4:07:4c:e1:92:b2:03:25:79:db: f3:cb:fd:41:5c:60:e6:4e:7a:b8:49:06:ca:d5:65: 02:09:6c:94:f6:d7:40:f4:0a:95:44:d8:8e:7e:5c: c4:0a:88:8f:a5:d1:fe:ed:e1:8c:c3:17:a1:d3:e8: 29:8c:d7:44:3e:ca:10:06:da:be:9b:37:bc:4a:cb: 12:48:12:f9:a8:60:c2:db:67:a8:2c:ea:f4:0a:9c: 67:a1:d1:b2:8c:70:58:14:f6:ca:58:10:c6:f3:cf: 87:68:e7:67:9b:09:08:60:2d:53:4d:7c:4f:98:db: e9:08:76:c5:5e:c4:a9:26:11:92:84:ea:32:f2:ef: 3c:ad:b7:22:c6:6d:b7:72:29:fc:d4:d1:76:bc:aa: b7:6a:42:68:e0:8a:0c:5e:7c:78:aa:d2:cc:93:9a: 58:6c:ef:d1:37:9e:99:94:4d:4a:29:04:aa:dd:75: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:91:29:87:9D:27:BB:74:E2:60:37:29:B2:77:88:AA:D2:06:E3 X509v3 Authority Key Identifier: keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9c:04:50:b6:2b:1b:e4:19:45:49:e3:f3:f9:97:da:48:13: 5a:b0:8f:56:20:6d:02:31:c2:fe:20:68:14:3b:94:a6:94:b6: 1a:4a:88:89:fe:27:30:e9:c9:07:94:93:5d:20:83:bf:4a:05: 44:9b:1b:ff:36:ee:46:82:26:6c:38:a5:5a:10:37:87:64:6d: d9:2e:f5:67:7c:65:67:d8:00:91:9e:30:bb:a3:a6:b8:dc:6e: 86:3c:b3:4b:f5:b4:9a:9c:6f:24:f0:cc:2e:63:9c:32:ff:b3: 34:66:65:10:38:23:d7:f6:e8:d9:06:56:83:67:98:41:0f:1e: 0f:db:1d:61:18:7b:30:41:b0:49:a7:7a:14:d0:7d:7c:90:ec: 64:aa:83:0b:51:b4:4e:e3:5c:3d:24:da:8e:b6:ff:60:4d:d1: 63:77:54:38:95:a7:50:09:f5:49:66:08:5a:36:84:9e:e7:f6: ea:83:43:cd:63:ed:2e:10:db:ea:ad:16:e8:cb:09:1e:74:c4: 20:10:15:00:c4:43:52:aa:21:9d:24:e5:ef:5b:b5:13:bf:c7: 59:71:21:19:c9:1f:cc:d2:b1:78:fc:7f:53:b7:59:d2:54:fb: 14:b0:a2:d5:27:5f:16:6d:a0:9f:a7:9a:eb:c2:58:bf:34:9b: f9:10:0c:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQYiPbMXAqDaIkGshGKPKsQ5kcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3 NzM4NzM1RDAeFw0yNjExMDQxNTIyMzRaFw0yNjExMDUxNzU5MzRaMDMxMTAvBgNV BAMTKDYzODg5MTI5ODc5RDI3QkI3NEUyNjAzNzI5QjI3Nzg4QUFEMjA2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbU4Iw10KzNq2/38L7kdAAut3 ZzSyglOCjxVYM2suQ0YUK2mnkwys8OBVbZApERXThJUVKb1/PlgfHFHsJGJrplSs Reyzwnx4DtGqoO/M5AdM4ZKyAyV52/PL/UFcYOZOerhJBsrVZQIJbJT210D0CpVE 2I5+XMQKiI+l0f7t4YzDF6HT6CmM10Q+yhAG2r6bN7xKyxJIEvmoYMLbZ6gs6vQK nGeh0bKMcFgU9spYEMbzz4do52ebCQhgLVNNfE+Y2+kIdsVexKkmEZKE6jLy7zyt tyLGbbdyKfzU0Xa8qrdqQmjgigxefHiq0syTmlhs79E3npmUTUopBKrddcijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4iRKYedJ7t04mA3KbJ3iKrSBuMwHwYDVR0j BBgwFoAUyzuKeHM3KMixr6SO78bh93c4c10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyMDQxZjEtNGNlNi00OWI0LTgzYTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3 MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3NzM4NzM1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjNCOEE3ODczMzcyOEM4QjFBRkE0OEVFRkM2RTFGNzc3Mzg3 MzVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUx Rjc3NzM4NzM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmcBFC2KxvkGUVJ4/P5l9pIE1qwj1YgbQIx wv4gaBQ7lKaUthpKiIn+JzDpyQeUk10gg79KBUSbG/827kaCJmw4pVoQN4dkbdku 9Wd8ZWfYAJGeMLujprjcboY8s0v1tJqcbyTwzC5jnDL/szRmZRA4I9f26NkGVoNn mEEPHg/bHWEYezBBsEmnehTQfXyQ7GSqgwtRtE7jXD0k2o62/2BN0WN3VDiVp1AJ 9UlmCFo2hJ7n9uqDQ81j7S4Q2+qtFujLCR50xCAQFQDEQ1KqIZ0k5e9btRO/x1lx IRnJH8zSsXj8f1O3WdJU+xSwotUnXxZtoJ+nmuvCWL80m/kQDCs= -----END CERTIFICATE-----Generated at Wed Nov 4 19:12:11 2026 by rpki-client