$ rpki-client -vvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: hGSkfT8CES6wQni5/noPMOeBepVdAcd9px2sqGfe7CQ= Subject key identifier: BB:27:81:A9:A1:5B:7B:4D:1C:2B:49:42:EB:23:BF:A2:3B:58:42:E9 Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 3430F832C8C34194B3A4B107AD912F835D508D87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: 1D Signing time: Fri 22 May 2026 22:52:05 +0000 Manifest this update: Fri 22 May 2026 22:47:05 +0000 Manifest next update: Sat 23 May 2026 23:49:05 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) 3: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: Kgmhh9Z1194W4mQcQAjs/0eTDWuoUTi+UoKghxq7YFE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 23:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:30:f8:32:c8:c3:41:94:b3:a4:b1:07:ad:91:2f:83:5d:50:8d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: May 22 22:47:05 2026 GMT Not After : May 23 23:49:05 2026 GMT Subject: CN=BB2781A9A15B7B4D1C2B4942EB23BFA23B5842E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:63:e6:a9:6c:0f:89:1c:e1:54:0a:17:24: f2:3e:7f:64:8e:35:fc:38:be:89:ea:21:98:de:a5: 21:fb:7b:7d:81:fc:ff:24:f6:27:d9:5b:15:5f:7d: be:b0:ac:af:d4:2a:bd:39:d8:4f:96:4f:14:ba:c4: af:08:23:0a:6b:b3:cd:af:ae:57:62:95:c9:25:13: dc:02:a0:42:41:34:b8:e0:1a:a3:e7:6c:b9:2a:3c: 21:c4:61:6f:9c:33:e9:71:20:52:3a:e7:0f:a5:04: ac:9b:f7:91:25:16:a8:20:6e:61:31:89:68:66:d7: d1:e7:3b:3a:fe:58:b9:4d:57:d3:41:8e:1f:d8:d1: ee:4f:1b:f4:9d:e3:73:50:e6:00:58:a2:21:79:f4: b4:4d:31:49:a8:71:58:0f:74:cc:bd:d9:ec:86:98: d1:66:0f:7d:1d:28:10:04:ef:2f:c9:8c:42:74:5e: 2a:7f:7a:08:d3:85:1b:98:ce:99:70:f6:0c:71:98: e9:81:1e:f4:f5:8c:8c:32:4a:43:34:1d:cd:7e:3a: 86:99:1a:9c:2a:a4:68:3f:05:b6:65:33:a5:2c:d8: 11:f8:78:42:dc:da:98:2e:3d:3a:ec:f3:e0:e8:1e: f9:ad:f9:bd:7d:1f:a7:a3:be:84:1a:99:25:65:65: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:27:81:A9:A1:5B:7B:4D:1C:2B:49:42:EB:23:BF:A2:3B:58:42:E9 X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:25:e5:b8:b0:7e:d1:36:a3:c0:cb:29:81:3d:44:17:d8:94: 7f:5e:2a:e2:34:7d:af:41:cf:ee:68:e9:4f:4c:e0:15:6d:33: 07:db:ef:4b:cf:c7:c9:02:c5:14:68:5c:13:ef:48:3d:6e:3b: 01:91:cd:81:53:c5:58:82:00:c6:63:f5:68:5d:b5:b1:9c:8b: a5:fa:82:26:e1:eb:08:85:58:07:42:79:b9:e0:b1:a0:69:c9: 12:11:42:33:50:d3:64:ac:91:95:6f:c9:a1:03:b4:01:40:d8: a4:fc:85:17:08:ee:aa:7e:bd:a6:a5:95:34:42:32:91:be:e5: 56:76:2a:c1:7f:e7:ac:e0:d0:1b:2f:50:82:0a:e5:9e:90:7e: 93:37:f8:04:1c:65:00:fc:84:85:d3:b8:16:41:d4:17:78:4e: a0:b0:b1:66:e1:9a:33:31:d0:c9:80:7d:08:3b:49:8c:6c:08: b3:1d:7b:25:4a:51:aa:9d:a2:ea:44:c5:93:cf:80:b7:ec:46: 35:eb:8a:c6:20:4d:d7:8b:d5:d8:e2:01:a0:23:1c:24:19:91: 5f:d4:05:60:04:18:4b:71:17:14:71:64:f2:d0:48:8a:9a:70: dd:12:72:7c:b9:8b:52:17:f9:cd:cb:14:67:28:fc:ca:e8:b0: a6:40:43:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDD4MsjDQZSzpLEHrZEvg11QjYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjA1MjIyMjQ3MDVaFw0yNjA1MjMyMzQ5MDVaMDMxMTAvBgNV BAMTKEJCMjc4MUE5QTE1QjdCNEQxQzJCNDk0MkVCMjNCRkEyM0I1ODQyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVWPmqWwPiRzhVAoXJPI+f2SO Nfw4vonqIZjepSH7e32B/P8k9ifZWxVffb6wrK/UKr052E+WTxS6xK8IIwprs82v rldilcklE9wCoEJBNLjgGqPnbLkqPCHEYW+cM+lxIFI65w+lBKyb95ElFqggbmEx iWhm19HnOzr+WLlNV9NBjh/Y0e5PG/Sd43NQ5gBYoiF59LRNMUmocVgPdMy92eyG mNFmD30dKBAE7y/JjEJ0Xip/egjThRuYzplw9gxxmOmBHvT1jIwySkM0Hc1+OoaZ GpwqpGg/BbZlM6Us2BH4eELc2pguPTrs8+DoHvmt+b19H6ejvoQamSVlZVjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyeBqaFbe00cK0lC6yO/ojtYQukwHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUl5biwftE2o8DLKYE9RBfYlH9eKuI0fa9B z+5o6U9M4BVtMwfb70vPx8kCxRRoXBPvSD1uOwGRzYFTxViCAMZj9WhdtbGci6X6 gibh6wiFWAdCebngsaBpyRIRQjNQ02SskZVvyaEDtAFA2KT8hRcI7qp+vaallTRC MpG+5VZ2KsF/56zg0BsvUIIK5Z6QfpM3+AQcZQD8hIXTuBZB1Bd4TqCwsWbhmjMx 0MmAfQg7SYxsCLMdeyVKUaqdoupExZPPgLfsRjXrisYgTdeL1djiAaAjHCQZkV/U BWAEGEtxFxRxZPLQSIqacN0Scny5i1IX+c3LFGco/MrosKZAQ9o= -----END CERTIFICATE-----Generated at Sat May 23 06:07:57 2026 by rpki-client