$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: o0QPNbxmMp/X7eXd6wIi9tHVcPHArjX/HIW/IgS/sDA= Subject key identifier: E0:5E:E7:F4:53:1C:6A:27:C0:52:4B:3F:15:D5:AD:D6:44:0A:2F:6B Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 33A0020B3C766CA19D01AEE7BD88755D17B5BB89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: 53 Signing time: Sat 04 Jul 2026 03:21:50 +0000 Manifest this update: Sat 04 Jul 2026 03:16:50 +0000 Manifest next update: Sun 05 Jul 2026 04:18:50 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: 3ouLTTMrlORMHlKU1niXf/J5eybW8/1poSHTBw8u7OI=) 2: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: 33grCdLXDewLdpmdfM+ohCJyrhMw+DPKa9aGRoVRc+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 04:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a0:02:0b:3c:76:6c:a1:9d:01:ae:e7:bd:88:75:5d:17:b5:bb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Jul 4 03:16:50 2026 GMT Not After : Jul 5 04:18:50 2026 GMT Subject: CN=E05EE7F4531C6A27C0524B3F15D5ADD6440A2F6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:61:1b:6f:e9:a2:28:9c:f3:7a:ea:41:2a: 4b:ed:1b:87:6c:34:e6:07:68:63:e9:bc:5b:e6:dc: 50:ab:ea:1f:cb:f4:3c:fb:7d:76:ad:f7:8b:06:6f: 2e:e3:1c:f9:93:c6:8b:04:70:b8:ea:df:e1:20:e2: 94:d0:b1:19:09:03:0d:65:8c:97:5b:ff:c2:fc:ed: aa:ce:2d:e0:e5:29:ff:b2:88:c4:97:4e:58:e0:29: 3a:5e:c4:20:d3:b8:e4:ce:c6:ad:59:dc:e5:ef:47: 59:c5:50:3b:3f:38:0a:6c:e6:14:53:6a:17:64:89: 66:c1:21:b6:97:07:d8:21:be:88:2c:68:1d:87:50: 25:b4:ad:bb:e5:6a:fe:f2:fd:37:cf:f0:a3:77:e9: 43:0a:f0:40:ec:b3:3a:16:fc:4f:5a:69:1d:5a:ad: 12:f5:de:d9:37:ff:a4:8d:3e:f8:b7:7e:b2:2e:8e: 7d:63:5d:f6:80:5f:0e:67:ca:ca:47:9a:86:5f:d8: 49:90:b0:d1:df:54:53:50:b8:45:76:78:1e:03:d4: 0e:96:a6:c3:00:4d:e4:42:46:f2:d1:6b:b2:f6:58: 4f:e6:56:9e:72:9e:b0:55:d3:ed:59:4c:56:05:76: 24:3b:28:3a:ec:71:82:7e:03:8a:b0:fd:48:2d:45: b6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5E:E7:F4:53:1C:6A:27:C0:52:4B:3F:15:D5:AD:D6:44:0A:2F:6B X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:26:6d:34:08:c5:e6:f5:8a:94:30:42:33:eb:c6:6d:be:a1: db:a3:b6:0d:7c:cf:d4:2a:36:ff:36:4d:fe:0e:11:25:5a:19: 07:5f:da:f3:14:4c:c1:1d:f9:08:0f:01:1a:2c:10:8b:1d:b2: 27:05:6b:8e:90:84:4c:a7:5d:9c:6b:c6:7e:34:1e:b2:da:d9: 6b:89:12:91:61:16:c8:e3:04:86:a2:c2:15:5d:67:50:41:ec: 59:e7:26:98:9c:79:54:63:ee:b3:21:bf:57:ed:b4:d8:ba:5f: d9:12:d6:65:96:7e:d2:f9:3f:14:2b:17:fc:24:0b:61:c6:82: 57:40:a2:2f:4d:11:7b:2c:8f:0a:22:b9:14:4f:17:ea:dd:12: 67:68:a7:70:62:41:42:e1:db:59:67:06:9d:12:39:85:ef:fc: a7:28:18:e7:ba:73:71:58:2d:73:bc:49:1d:37:a3:85:8c:43: 7d:2d:27:76:3b:7c:45:48:0d:8c:11:38:ae:ec:03:be:4b:83: d7:03:54:56:e9:e9:33:df:26:1b:46:c0:1d:b9:b1:3a:ee:3c: e3:0c:6c:93:f6:41:e8:72:03:14:92:95:21:51:3e:02:b8:2a: c9:d9:1c:98:51:7b:d1:fb:04:2b:47:3c:30:04:16:b0:77:ef: 67:52:8b:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6ACCzx2bKGdAa7nvYh1XRe1u4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA3MDQwMzE2NTBaFw0yNjA3MDUwNDE4NTBaMDMxMTAvBgNV BAMTKEUwNUVFN0Y0NTMxQzZBMjdDMDUyNEIzRjE1RDVBREQ2NDQwQTJGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4B2Ebb+miKJzzeupBKkvtG4ds NOYHaGPpvFvm3FCr6h/L9Dz7fXat94sGby7jHPmTxosEcLjq3+Eg4pTQsRkJAw1l jJdb/8L87arOLeDlKf+yiMSXTljgKTpexCDTuOTOxq1Z3OXvR1nFUDs/OAps5hRT ahdkiWbBIbaXB9ghvogsaB2HUCW0rbvlav7y/TfP8KN36UMK8EDsszoW/E9aaR1a rRL13tk3/6SNPvi3frIujn1jXfaAXw5nyspHmoZf2EmQsNHfVFNQuEV2eB4D1A6W psMATeRCRvLRa7L2WE/mVp5ynrBV0+1ZTFYFdiQ7KDrscYJ+A4qw/UgtRbaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4F7n9FMcaifAUks/FdWt1kQKL2swHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsmbTQIxeb1ipQwQjPrxm2+odujtg18z9Qq Nv82Tf4OESVaGQdf2vMUTMEd+QgPARosEIsdsicFa46QhEynXZxrxn40HrLa2WuJ EpFhFsjjBIaiwhVdZ1BB7FnnJpiceVRj7rMhv1fttNi6X9kS1mWWftL5PxQrF/wk C2HGgldAoi9NEXssjwoiuRRPF+rdEmdop3BiQULh21lnBp0SOYXv/KcoGOe6c3FY LXO8SR03o4WMQ30tJ3Y7fEVIDYwROK7sA75Lg9cDVFbp6TPfJhtGwB25sTruPOMM bJP2QehyAxSSlSFRPgK4KsnZHJhRe9H7BCtHPDAEFrB372dSi6E= -----END CERTIFICATE-----Generated at Sat Jul 4 15:00:11 2026 by rpki-client