$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: SC7h/F5RxFyectQrmHx69Ys/oZa7wVyn8FOUDtrtxL8= Subject key identifier: 28:FE:60:33:34:4C:20:84:0E:1B:18:1A:BE:4E:C4:05:A2:08:3B:34 Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 0D12FDB293279C44E428C9743781C6CC6AF8E58F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 19:31:43 +0000 Manifest this update: Wed 02 Sep 2026 19:26:43 +0000 Manifest next update: Thu 03 Sep 2026 20:18:43 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) 3: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: Y++oKIBttu8GONY9yw1C8RpwqnhfyF3jFP3iNZ6FgVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:12:fd:b2:93:27:9c:44:e4:28:c9:74:37:81:c6:cc:6a:f8:e5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: Sep 2 19:26:43 2026 GMT Not After : Sep 3 20:18:43 2026 GMT Subject: CN=28FE6033344C20840E1B181ABE4EC405A2083B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:9c:2d:8b:0b:d8:16:bf:33:c8:78:6e:81: 75:da:be:5e:ea:2e:cc:59:97:3c:8f:7e:38:23:37: 77:41:46:67:de:70:2d:55:6b:55:cd:1f:68:1f:e2: 95:1e:90:03:92:71:40:97:ae:39:25:0f:12:9e:54: c7:86:6e:a4:55:47:b9:55:2c:5c:c4:4a:21:fa:b6: 95:6e:c7:8d:06:d3:0b:39:28:b9:bb:cf:e7:4d:3e: 57:fd:8c:2f:58:0c:1f:35:2b:3a:e9:5f:77:c2:78: 81:3f:cf:83:84:75:6f:bd:d5:80:cb:a4:db:08:05: 44:9a:ef:0d:00:e0:a0:aa:10:6e:e2:dd:98:7a:d2: ee:43:83:e8:d0:97:93:0c:ab:65:78:d5:68:1b:1e: a1:38:a7:c8:02:c5:33:35:5e:7d:1e:bd:dc:d5:4a: ef:b4:8c:b2:1a:56:16:41:86:22:de:81:b0:ba:59: 27:7e:43:16:70:49:83:b8:e8:8a:00:69:55:bb:61: 9b:56:99:31:72:49:d3:e5:af:ab:bb:fb:d3:83:c3: 81:f8:59:1a:8f:05:03:f9:65:80:c6:14:ab:a1:60: 2c:e2:9c:5b:90:90:fb:55:79:2e:5c:9e:e6:c2:aa: 48:ac:5c:49:6e:c4:db:72:f1:15:ce:41:8e:ec:bf: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:60:33:34:4C:20:84:0E:1B:18:1A:BE:4E:C4:05:A2:08:3B:34 X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d7:05:54:5a:da:84:10:ee:6f:db:01:d1:11:be:0b:79:b0: d7:0b:ef:5a:8a:51:d6:0d:c6:ac:25:be:0a:1b:e7:23:0b:09: ed:8c:11:af:a0:b5:58:6a:37:f6:03:0f:b7:8e:cc:21:15:48: 72:b1:6f:37:94:8f:d5:66:a1:55:a4:fe:fd:4c:ca:c2:24:70: 08:29:6f:8b:22:cd:df:77:f4:77:1c:92:9d:48:88:ca:4d:46: 11:03:d7:55:d5:33:2a:05:11:ec:7e:0c:04:99:6d:78:b8:8e: 86:d3:07:9e:15:b8:d6:9c:4e:b1:d2:5f:8b:82:10:31:92:65: 4f:30:42:b2:64:48:f1:0d:58:da:30:52:b0:89:4c:12:a0:f5: 6f:1a:65:ec:d8:fc:b6:18:56:be:ab:8a:33:e8:e1:c0:6d:97: b9:24:03:45:e9:c7:71:f4:89:ff:96:46:1d:d8:d8:16:3c:6f: 33:03:cc:f3:08:af:5e:55:fa:71:e2:10:aa:e4:cd:a3:8e:05: 9c:60:65:98:09:9d:dd:dd:c5:3b:40:15:b9:e6:ac:81:07:e1: dd:20:6e:db:49:1d:c4:3b:fe:f6:b1:eb:49:b1:a5:fe:77:b8: 40:ab:76:4b:15:18:3b:60:9b:d8:5b:6c:a5:e0:5a:2f:29:17: d3:8a:82:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRL9spMnnETkKMl0N4HGzGr45Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA5MDIxOTI2NDNaFw0yNjA5MDMyMDE4NDNaMDMxMTAvBgNV BAMTKDI4RkU2MDMzMzQ0QzIwODQwRTFCMTgxQUJFNEVDNDA1QTIwODNCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYDZwtiwvYFr8zyHhugXXavl7q LsxZlzyPfjgjN3dBRmfecC1Va1XNH2gf4pUekAOScUCXrjklDxKeVMeGbqRVR7lV LFzESiH6tpVux40G0ws5KLm7z+dNPlf9jC9YDB81KzrpX3fCeIE/z4OEdW+91YDL pNsIBUSa7w0A4KCqEG7i3Zh60u5Dg+jQl5MMq2V41WgbHqE4p8gCxTM1Xn0evdzV Su+0jLIaVhZBhiLegbC6WSd+QxZwSYO46IoAaVW7YZtWmTFySdPlr6u7+9ODw4H4 WRqPBQP5ZYDGFKuhYCzinFuQkPtVeS5cnubCqkisXEluxNty8RXOQY7sv/trAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKP5gMzRMIIQOGxgavk7EBaIIOzQwHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHXBVRa2oQQ7m/bAdERvgt5sNcL71qKUdYN xqwlvgob5yMLCe2MEa+gtVhqN/YDD7eOzCEVSHKxbzeUj9VmoVWk/v1MysIkcAgp b4sizd939Hcckp1IiMpNRhED11XVMyoFEex+DASZbXi4jobTB54VuNacTrHSX4uC EDGSZU8wQrJkSPENWNowUrCJTBKg9W8aZezY/LYYVr6rijPo4cBtl7kkA0Xpx3H0 if+WRh3Y2BY8bzMDzPMIr15V+nHiEKrkzaOOBZxgZZgJnd3dxTtAFbnmrIEH4d0g bttJHcQ7/vax60mxpf53uECrdksVGDtgm9hbbKXgWi8pF9OKgic= -----END CERTIFICATE-----Generated at Thu Sep 3 13:00:57 2026 by rpki-client