$ rpki-client -vvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: PRIhQRc6uxLJH2LZ5m3Pdc3qPq4b1e7GKsLHlVRYU4k= Subject key identifier: F9:9B:F4:6C:0F:BE:E3:EA:73:62:E4:A1:E5:A8:F2:2A:4F:5D:20:E2 Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 47A90D9F8AB61348640CE32B4BFB14537E4DA2DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: 08 Signing time: Thu 07 May 2026 19:28:31 +0000 Manifest this update: Thu 07 May 2026 19:23:31 +0000 Manifest next update: Fri 08 May 2026 22:34:31 +0000 Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) 2: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: JaC3HT9khcMR3gbLx50W4J42fZL44vEgxx2rPZiirYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 22:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a9:0d:9f:8a:b6:13:48:64:0c:e3:2b:4b:fb:14:53:7e:4d:a2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: May 7 19:23:31 2026 GMT Not After : May 8 22:34:31 2026 GMT Subject: CN=F99BF46C0FBEE3EA7362E4A1E5A8F22A4F5D20E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:df:6e:9f:2b:5f:9a:84:8a:a2:9c:a3:a3: 25:02:66:e6:e2:04:77:44:62:e6:36:60:14:e7:8f: a3:95:35:e3:eb:6c:34:bf:86:9a:a2:15:e1:bd:d3: 86:1a:3a:4a:09:b4:78:e9:d3:df:70:e0:e5:83:5d: 66:1e:8c:a1:83:c7:f2:50:40:6a:63:c2:4a:f1:44: 94:09:ce:74:3d:93:39:63:21:f8:e0:f6:43:3c:d0: 34:b8:42:49:93:e5:e8:f2:e9:14:fd:49:5e:6f:28: 7b:89:0c:23:75:82:e1:38:6b:75:a2:2e:c5:27:c7: 7b:5b:a0:c1:a8:78:13:8c:34:8e:4d:b1:79:33:a8: 19:23:52:d7:60:de:e6:e1:09:35:d7:53:bc:c0:4c: c0:22:a0:1e:57:bd:a4:24:0b:9e:82:be:82:c7:d1: 05:74:bd:32:6a:9d:82:93:3d:b6:6d:03:15:2e:59: 4a:11:09:c5:3d:d1:57:12:85:5c:72:2a:10:46:c1: b2:94:cf:24:38:e1:cf:44:92:09:55:be:d7:d8:aa: 9f:ea:c1:24:c6:c6:bc:5f:dd:0a:8f:64:37:46:95: c6:d5:c9:1c:f0:ed:c3:55:c8:eb:30:2f:de:c7:53: 0b:92:df:d9:30:b8:cf:f1:fe:70:18:04:ea:00:84: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9B:F4:6C:0F:BE:E3:EA:73:62:E4:A1:E5:A8:F2:2A:4F:5D:20:E2 X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:81:56:68:d3:a1:e1:aa:d8:3c:e2:26:a7:ea:c4:79:3b:07: 5f:3f:47:28:29:95:4e:81:b6:40:13:20:31:28:5d:3c:04:ea: b5:22:53:ba:78:c0:60:92:b3:48:e1:fd:3c:ee:b3:e5:c6:7c: 3c:04:7c:3f:78:1d:fd:19:7c:a3:e3:f7:e2:26:49:34:79:60: 46:0f:36:ea:57:99:ba:c9:82:a8:0f:c9:31:42:60:ee:cd:3f: 14:e9:17:16:23:7d:77:7e:c5:4a:27:30:63:c9:9b:97:8f:f9: 9a:95:08:29:d6:c9:6c:6e:71:1f:76:00:03:97:60:dd:6d:35: ee:28:88:7d:24:88:32:69:06:78:b9:da:f2:3c:59:a7:89:af: f5:7b:e1:48:4f:67:f6:14:a4:65:da:14:7d:31:64:83:66:9e: f6:85:7a:b5:65:54:30:c2:82:2f:49:ea:b7:ab:7d:d3:30:56: 0d:21:57:bb:01:fa:03:50:81:02:57:f2:d1:ed:dc:2a:18:65: 02:9b:f9:6d:50:3c:42:98:e3:ad:66:48:0e:64:e6:cb:02:aa: 2d:fa:6a:86:f6:f9:80:d1:17:d5:4e:01:f2:96:7c:2e:09:bf: cf:d2:a5:94:7d:f4:eb:86:34:9c:be:c2:34:0b:1c:14:a9:82: 0a:70:7e:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6kNn4q2E0hkDOMrS/sUU35Not4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjA1MDcxOTIzMzFaFw0yNjA1MDgyMjM0MzFaMDMxMTAvBgNV BAMTKEY5OUJGNDZDMEZCRUUzRUE3MzYyRTRBMUU1QThGMjJBNEY1RDIwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/St9unytfmoSKopyjoyUCZubi BHdEYuY2YBTnj6OVNePrbDS/hpqiFeG904YaOkoJtHjp099w4OWDXWYejKGDx/JQ QGpjwkrxRJQJznQ9kzljIfjg9kM80DS4QkmT5ejy6RT9SV5vKHuJDCN1guE4a3Wi LsUnx3tboMGoeBOMNI5NsXkzqBkjUtdg3ubhCTXXU7zATMAioB5XvaQkC56CvoLH 0QV0vTJqnYKTPbZtAxUuWUoRCcU90VcShVxyKhBGwbKUzyQ44c9EkglVvtfYqp/q wSTGxrxf3QqPZDdGlcbVyRzw7cNVyOswL97HUwuS39kwuM/x/nAYBOoAhGHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Zv0bA++4+pzYuSh5ajyKk9dIOIwHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmBVmjToeGq2DziJqfqxHk7B18/RygplU6B tkATIDEoXTwE6rUiU7p4wGCSs0jh/Tzus+XGfDwEfD94Hf0ZfKPj9+ImSTR5YEYP NupXmbrJgqgPyTFCYO7NPxTpFxYjfXd+xUonMGPJm5eP+ZqVCCnWyWxucR92AAOX YN1tNe4oiH0kiDJpBni52vI8WaeJr/V74UhPZ/YUpGXaFH0xZINmnvaFerVlVDDC gi9J6rerfdMwVg0hV7sB+gNQgQJX8tHt3CoYZQKb+W1QPEKY461mSA5k5ssCqi36 aob2+YDRF9VOAfKWfC4Jv8/SpZR99OuGNJy+wjQLHBSpggpwflU= -----END CERTIFICATE-----Generated at Fri May 8 07:35:02 2026 by rpki-client