$ rpki-client -vvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: Xrq+1D27qOCr9kPMwEnmksqYJ1noZa9Oq+l1bDs7XBQ= Subject key identifier: BA:91:0F:EB:26:61:AA:EF:68:0F:5F:37:56:42:83:B0:41:42:A9:C3 Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 3FD840632AA928C556B5E6FA97EF08BB81CFC667 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 17:28:21 +0000 Manifest this update: Sun 19 Jul 2026 17:23:21 +0000 Manifest next update: Mon 20 Jul 2026 20:23:21 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) 2: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: JLg0/HOvx2ldp3kuygYKmpUtR3xT647P/+6Qx0A97aA=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 20:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:40:63:2a:a9:28:c5:56:b5:e6:fa:97:ef:08:bb:81:cf:c6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: Jul 19 17:23:21 2026 GMT Not After : Jul 20 20:23:21 2026 GMT Subject: CN=BA910FEB2661AAEF680F5F37564283B04142A9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:c1:ac:fb:f4:de:72:60:06:ee:89:4a:ff: 7b:8d:5c:b4:0f:65:ab:f3:05:8c:92:ff:55:25:37: 5c:ae:a5:93:26:90:20:be:ea:e6:be:ea:65:b5:7c: 70:f4:df:0f:df:c4:7b:d3:aa:2b:87:2d:e8:39:c8: 34:b4:fd:e0:a6:cb:b5:95:b9:f4:47:a8:7b:c5:7e: 0d:14:de:a3:4a:e2:85:89:c6:fb:4e:97:20:c9:10: 0e:fa:fe:49:4d:3c:fc:da:5f:cb:a8:41:93:5a:52: 08:3b:7b:b9:df:71:b3:b2:84:24:fb:7b:2d:a5:9c: d4:c4:f7:10:05:d0:9f:54:31:67:4f:c2:4b:de:ea: 48:46:53:b3:27:cc:3a:ce:16:3e:36:b0:7c:ab:3c: 6c:42:ae:e8:f8:c5:87:b5:b2:56:1f:41:74:eb:96: 82:08:c3:8d:87:ac:13:75:bc:73:30:65:44:ae:c4: 01:19:82:20:c7:a6:01:39:d6:6f:50:da:6f:4a:90: 3c:6a:96:90:bb:56:cd:eb:9f:ee:74:84:a1:63:bf: 29:54:91:23:ae:88:4f:8f:6b:18:94:31:f5:3d:27: d7:56:9e:f7:09:f3:71:ef:50:29:54:e6:42:99:40: 20:87:89:73:78:44:d5:66:d1:17:0b:db:c3:1f:38: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:0F:EB:26:61:AA:EF:68:0F:5F:37:56:42:83:B0:41:42:A9:C3 X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:64:a9:3d:f8:65:2a:87:ec:72:f8:58:98:1a:30:26:dd:02: a3:69:79:51:09:e6:be:42:11:29:3e:43:12:df:e7:45:9a:7d: 13:5e:57:a0:b2:ce:68:18:b9:18:43:e9:c7:22:31:cb:8f:fc: 3c:60:81:e8:ba:8e:c4:48:32:a8:af:e4:d3:42:fa:e3:2b:a1: dc:9e:2f:f7:de:b4:a1:90:0c:a3:47:2d:94:6c:47:61:cf:73: 3b:28:5b:f3:45:aa:c0:1c:d7:c5:93:3a:a5:45:b4:76:b3:d8: 49:5c:63:19:a1:a9:7a:44:ac:e5:55:2f:85:d7:a0:11:06:45: 7e:45:dd:cb:73:80:06:30:3e:10:aa:05:e0:00:15:72:e2:7e: ec:ea:43:28:55:df:e4:c8:e3:9e:f9:b3:4c:75:56:e9:a1:44: 02:8f:0e:ad:5f:f6:9f:f3:32:80:05:15:dd:15:9e:ab:5f:f8: 1e:77:af:3b:06:92:7e:d7:1d:ac:e5:3d:4b:fc:86:22:37:4f: 65:a8:4b:cc:c6:53:95:b8:43:82:71:1c:62:57:4e:52:f8:13: f1:5e:b9:1c:93:8f:5a:46:cb:f3:83:db:a3:64:d0:57:64:98: e5:1b:5b:d9:41:37:5a:bf:f8:87:45:19:c2:59:63:4d:4c:6d: 09:b8:2e:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9hAYyqpKMVWteb6l+8Iu4HPxmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA3MTkxNzIzMjFaFw0yNjA3MjAyMDIzMjFaMDMxMTAvBgNV BAMTKEJBOTEwRkVCMjY2MUFBRUY2ODBGNUYzNzU2NDI4M0IwNDE0MkE5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjv8Gs+/TecmAG7olK/3uNXLQP ZavzBYyS/1UlN1yupZMmkCC+6ua+6mW1fHD03w/fxHvTqiuHLeg5yDS0/eCmy7WV ufRHqHvFfg0U3qNK4oWJxvtOlyDJEA76/klNPPzaX8uoQZNaUgg7e7nfcbOyhCT7 ey2lnNTE9xAF0J9UMWdPwkve6khGU7MnzDrOFj42sHyrPGxCruj4xYe1slYfQXTr loIIw42HrBN1vHMwZUSuxAEZgiDHpgE51m9Q2m9KkDxqlpC7Vs3rn+50hKFjvylU kSOuiE+PaxiUMfU9J9dWnvcJ83HvUClU5kKZQCCHiXN4RNVm0RcL28MfOF+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUupEP6yZhqu9oD183VkKDsEFCqcMwHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtkqT34ZSqH7HL4WJgaMCbdAqNpeVEJ5r5C ESk+QxLf50WafRNeV6CyzmgYuRhD6cciMcuP/Dxggei6jsRIMqiv5NNC+uMrodye L/fetKGQDKNHLZRsR2HPczsoW/NFqsAc18WTOqVFtHaz2ElcYxmhqXpErOVVL4XX oBEGRX5F3ctzgAYwPhCqBeAAFXLifuzqQyhV3+TI4575s0x1VumhRAKPDq1f9p/z MoAFFd0Vnqtf+B53rzsGkn7XHazlPUv8hiI3T2WoS8zGU5W4Q4JxHGJXTlL4E/Fe uRyTj1pGy/OD26Nk0FdkmOUbW9lBN1q/+IdFGcJZY01MbQm4LmU= -----END CERTIFICATE-----Generated at Mon Jul 20 04:23:54 2026 by rpki-client