$ rpki-client -vvvf rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft File: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft (raw, json) Hash identifier: yLR3TcMlVacRtCy6UaXnl8TGgg5WTqZWwKOjJgXOzKo= Subject key identifier: A2:D6:8E:87:2D:46:9B:C2:4A:B3:C3:9D:07:83:D0:93:5E:24:2C:13 Authority key identifier: CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 Certificate issuer: /CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Certificate serial: 3E6A49CABD8E36407E0B473ACB4E71B5AE380B86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 14:15:45 +0000 Manifest this update: Wed 02 Sep 2026 14:10:45 +0000 Manifest next update: Thu 03 Sep 2026 17:26:45 +0000 Files and hashes: 1: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: MlsPGYjwxcTUokzk7qgJtZJ0zjAyD3pAbTHc5VBWDJ4=) 2: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl (hash: A35ua+AucXCf3y+qdcrU/D8cN4RVqEM3JN5EyuPvKdE=) 3: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: pbFqtdrF857Bo284a6tYg8zQs+U7i5koym7amsZuX/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6a:49:ca:bd:8e:36:40:7e:0b:47:3a:cb:4e:71:b5:ae:38:0b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Validity Not Before: Sep 2 14:10:45 2026 GMT Not After : Sep 3 17:26:45 2026 GMT Subject: CN=A2D68E872D469BC24AB3C39D0783D0935E242C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:08:89:92:7e:e7:2f:6d:7f:04:97:ef:d0: 33:da:15:b1:08:9e:c4:6d:64:39:27:32:59:a9:5d: 8b:45:21:e6:90:bd:bc:d9:0c:e2:46:26:92:cc:8c: d4:43:f3:67:63:d7:d2:79:39:5e:14:fb:58:71:d4: a6:b1:8a:c6:27:1a:e8:3e:ee:77:e7:9f:ca:41:8e: 9c:af:7e:11:47:84:6b:ea:ac:b6:24:32:2f:d2:1b: e9:b4:2c:80:4c:db:66:be:58:70:ed:7a:eb:c2:34: c3:e3:69:a5:b5:74:e0:7f:9e:f0:a3:32:49:11:54: 1f:50:e6:5c:f1:c6:c9:0f:26:fb:ce:ad:71:b3:34: 30:6d:7f:d9:1b:1e:59:04:1d:25:af:ac:47:72:98: 58:7c:6c:c6:0c:1d:2e:68:fc:4d:d5:d3:4c:a9:f9: e1:1d:20:e7:22:9a:04:36:80:34:95:1c:3e:27:a4: d9:97:5f:7c:7a:10:43:2c:ab:7e:77:07:cf:5f:cd: 4c:d1:4b:07:ad:76:38:15:31:5d:27:d8:f9:36:75: 7b:7b:3e:2a:dd:de:c6:12:04:e3:1c:45:5e:e4:eb: e1:0e:97:bc:cb:62:14:2c:a5:a6:82:78:9c:1f:07: 35:89:f3:9b:2c:16:b7:5d:5a:d4:86:74:42:e1:47: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D6:8E:87:2D:46:9B:C2:4A:B3:C3:9D:07:83:D0:93:5E:24:2C:13 X509v3 Authority Key Identifier: keyid:CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e0:9b:f6:b3:c0:eb:d6:ac:17:7b:b7:cb:19:32:f5:0e:df: 10:41:7f:98:2b:e8:24:ef:4b:60:63:42:85:67:18:1b:7a:4e: 6d:9a:0c:05:97:6a:2d:81:64:19:52:4d:e2:21:d9:61:cd:20: af:ef:08:d8:18:98:f1:f5:90:83:46:ff:24:a9:4c:89:d6:bd: 56:c2:47:90:bd:6d:25:36:5b:98:01:e1:09:a2:92:04:72:d8: c3:47:c0:65:15:30:cc:32:4c:6a:fa:83:90:c0:28:62:8f:39: 5a:12:d9:5e:e4:23:2c:ff:6a:44:68:ef:5b:f6:21:fa:7f:61: 5f:69:b4:75:29:05:4a:a4:1d:8c:23:f4:38:01:29:dd:78:d5: 66:3f:97:ae:3f:9d:ef:2f:2d:65:f9:0d:4a:7a:a4:cf:9f:75: 02:67:0a:6b:a6:cc:d8:ed:33:38:3d:31:f2:99:a5:95:28:3c: 28:a9:68:dd:0f:ed:11:f5:36:a3:ae:6b:db:02:57:be:76:15: f7:71:d3:89:e0:9d:05:ad:32:67:82:90:3c:47:9c:fe:ee:3a: d2:61:d0:14:48:97:95:0c:53:91:43:49:d8:1b:e2:e5:f5:78: 0a:04:09:c0:39:78:37:ed:3c:93:9d:50:0f:48:be:87:61:6c: 7b:ec:04:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmpJyr2ONkB+C0c6y05xta44C4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4 NjJDMTAzNDAeFw0yNjA5MDIxNDEwNDVaFw0yNjA5MDMxNzI2NDVaMDMxMTAvBgNV BAMTKEEyRDY4RTg3MkQ0NjlCQzI0QUIzQzM5RDA3ODNEMDkzNUUyNDJDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGgiJkn7nL21/BJfv0DPaFbEI nsRtZDknMlmpXYtFIeaQvbzZDOJGJpLMjNRD82dj19J5OV4U+1hx1KaxisYnGug+ 7nfnn8pBjpyvfhFHhGvqrLYkMi/SG+m0LIBM22a+WHDteuvCNMPjaaW1dOB/nvCj MkkRVB9Q5lzxxskPJvvOrXGzNDBtf9kbHlkEHSWvrEdymFh8bMYMHS5o/E3V00yp +eEdIOcimgQ2gDSVHD4npNmXX3x6EEMsq353B89fzUzRSwetdjgVMV0n2Pk2dXt7 Pird3sYSBOMcRV7k6+EOl7zLYhQspaaCeJwfBzWJ85ssFrddWtSGdELhRyZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUotaOhy1Gm8JKs8OdB4PQk14kLBMwHwYDVR0j BBgwFoAUy6d7XfABs5sroN7K3bfT7YYsEDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODYyZDRkNzQtNjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURG MDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4NjJDMTAzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkE3N0I1REYwMDFCMzlCMkJBMERFQ0FEREI3RDNFRDg2MkMx MDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0Qz RUQ4NjJDMTAzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzgm/azwOvWrBd7t8sZMvUO3xBBf5gr6CTv S2BjQoVnGBt6Tm2aDAWXai2BZBlSTeIh2WHNIK/vCNgYmPH1kING/ySpTInWvVbC R5C9bSU2W5gB4QmikgRy2MNHwGUVMMwyTGr6g5DAKGKPOVoS2V7kIyz/akRo71v2 Ifp/YV9ptHUpBUqkHYwj9DgBKd141WY/l64/ne8vLWX5DUp6pM+fdQJnCmumzNjt Mzg9MfKZpZUoPCipaN0P7RH1NqOua9sCV752Ffdx04ngnQWtMmeCkDxHnP7uOtJh 0BRIl5UMU5FDSdgb4uX1eAoECcA5eDftPJOdUA9IvodhbHvsBEE= -----END CERTIFICATE-----Generated at Thu Sep 3 05:05:47 2026 by rpki-client