$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: ziGjOUUz8YQXdmQpSTXKL1e7iidF215+7KBcmZeUBzA= Subject key identifier: 9D:15:22:19:AC:7F:2D:4E:90:EB:5D:4E:47:77:B0:65:72:E1:5B:A1 Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 2872C0884860ACF988FC285AD15A09706461AF62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: A9 Signing time: Thu 03 Sep 2026 16:47:46 +0000 Manifest this update: Thu 03 Sep 2026 16:42:46 +0000 Manifest next update: Fri 04 Sep 2026 18:27:46 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32342d3234203d3e20313339343536.roa (hash: 6ZJ53yDSZZbhA3HLWOJtQJ5qYulxYXvBHN4NhIRy3dM=) 2: 3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa (hash: 5P1W95x+b+VcAeWv+Uihp1cvRwss8nuTjkrW2k6u0F4=) 3: 3130332e3138352e34342e302f32332d3233203d3e203538383230.roa (hash: AtTReWoHalW1jTCt7si9vqdmAaRn+woGu9bysUat+zE=) 4: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: yHZpdiM5lJzSCtUmL/r0VSv9ppEVYnLyM3V5o9CA+sQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:72:c0:88:48:60:ac:f9:88:fc:28:5a:d1:5a:09:70:64:61:af:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Sep 3 16:42:46 2026 GMT Not After : Sep 4 18:27:46 2026 GMT Subject: CN=9D152219AC7F2D4E90EB5D4E4777B06572E15BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:b6:2a:a0:7c:4c:17:bb:a2:26:b5:6a:07: 8a:69:3f:d4:ca:16:c8:bc:62:06:b6:6e:9b:22:22: c1:b4:bf:69:3d:3f:a8:ef:2f:97:02:33:c9:10:81: 13:e2:56:62:3d:67:15:86:7b:8a:f5:a9:da:60:df: 8e:22:07:9c:59:16:53:fb:70:c2:b1:84:b9:6a:cd: f0:b4:93:b2:23:31:0b:93:36:b2:07:b9:8d:24:8e: 72:63:d0:4a:34:fc:4b:e9:0b:44:b7:c3:39:2c:d3: e4:ac:af:c1:02:6e:79:56:bf:4f:e5:91:f3:9f:dd: de:5b:18:29:f4:d6:1e:89:0d:58:10:d7:d9:f7:88: 61:1c:72:20:0d:2d:98:56:bb:79:65:e2:dc:e5:ba: ea:f7:23:82:74:e9:52:f2:4f:28:cd:8e:f2:c6:69: 20:9d:a3:fe:67:64:59:7e:c0:4c:e2:22:6e:c1:0d: c9:53:70:c5:68:7e:40:83:6b:60:8b:ad:0a:7b:6f: cd:dc:f6:12:6b:1e:dc:54:84:72:40:30:0b:c9:18: fc:fb:d8:15:cc:e9:36:7f:86:6a:aa:fe:ab:07:bb: 87:28:9b:9b:21:7d:65:24:93:5d:89:70:1a:dd:78: c0:a9:e5:13:71:6a:3b:fa:86:d1:95:c0:29:4e:98: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:15:22:19:AC:7F:2D:4E:90:EB:5D:4E:47:77:B0:65:72:E1:5B:A1 X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:28:04:e2:d9:90:97:ba:f8:de:31:24:0d:27:43:d1:e3:87: 00:04:54:39:d9:ed:e9:d1:2c:9e:c2:95:6c:d9:37:aa:44:51: 15:a0:e0:8b:1b:e7:d5:1c:dc:5d:1a:7e:0d:73:e8:c9:b6:47: 23:6e:b9:d5:b0:ad:08:80:c3:df:21:7b:80:3e:e2:d1:c3:a1: a4:fb:15:ef:cb:31:41:81:a1:2d:73:a9:03:eb:6f:6c:7e:d9: df:0d:f9:5a:6e:fa:86:7a:4a:7e:8e:ae:4f:61:93:3d:a4:a4: 7a:9d:51:6d:ec:e9:8f:67:e9:55:38:9a:1e:64:5d:14:e2:e0: b8:c7:3d:c7:ae:a4:5c:4f:d3:ee:c0:7a:72:f6:36:72:33:51: b8:00:cb:27:80:93:bd:94:b2:e3:aa:26:b5:b2:fa:86:f4:60: bc:23:fd:d4:e7:f8:ed:fb:c3:17:b3:6c:92:b6:88:3d:49:7d: 22:3d:79:d7:10:ce:68:64:1e:6f:da:45:8d:d4:d1:89:58:d9: c7:db:16:6c:39:a0:71:3a:14:5f:e4:4b:2c:c6:89:d4:ba:cf: 42:77:b6:df:bb:33:64:d5:d3:e7:e6:0e:bf:3a:6a:af:c3:df: 9c:ae:16:6c:d7:3b:c1:b9:eb:29:a6:a8:b9:c2:d7:39:be:4b: b9:92:93:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHLAiEhgrPmI/Cha0VoJcGRhr2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA5MDMxNjQyNDZaFw0yNjA5MDQxODI3NDZaMDMxMTAvBgNV BAMTKDlEMTUyMjE5QUM3RjJENEU5MEVCNUQ0RTQ3NzdCMDY1NzJFMTVCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCffrYqoHxMF7uiJrVqB4ppP9TK Fsi8Yga2bpsiIsG0v2k9P6jvL5cCM8kQgRPiVmI9ZxWGe4r1qdpg344iB5xZFlP7 cMKxhLlqzfC0k7IjMQuTNrIHuY0kjnJj0Eo0/EvpC0S3wzks0+Ssr8ECbnlWv0/l kfOf3d5bGCn01h6JDVgQ19n3iGEcciANLZhWu3ll4tzluur3I4J06VLyTyjNjvLG aSCdo/5nZFl+wEziIm7BDclTcMVofkCDa2CLrQp7b83c9hJrHtxUhHJAMAvJGPz7 2BXM6TZ/hmqq/qsHu4com5shfWUkk12JcBrdeMCp5RNxajv6htGVwClOmC5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnRUiGax/LU6Q611OR3ewZXLhW6EwHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4oBOLZkJe6+N4xJA0nQ9HjhwAEVDnZ7enR LJ7ClWzZN6pEURWg4Isb59Uc3F0afg1z6Mm2RyNuudWwrQiAw98he4A+4tHDoaT7 Fe/LMUGBoS1zqQPrb2x+2d8N+Vpu+oZ6Sn6Ork9hkz2kpHqdUW3s6Y9n6VU4mh5k XRTi4LjHPceupFxP0+7AenL2NnIzUbgAyyeAk72UsuOqJrWy+ob0YLwj/dTn+O37 wxezbJK2iD1JfSI9edcQzmhkHm/aRY3U0YlY2cfbFmw5oHE6FF/kSyzGidS6z0J3 tt+7M2TV0+fmDr86aq/D35yuFmzXO8G56ymmqLnC1zm+S7mSk40= -----END CERTIFICATE-----Generated at Thu Sep 3 23:30:08 2026 by rpki-client