$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: grAwhYxHF7r15OfZULqYTvSSxTmWDFxPZC38nXOe1+8= Subject key identifier: E5:5B:98:E6:46:EF:2E:3B:ED:C5:CB:A0:7C:0B:B8:27:13:AE:C4:26 Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 412260896851B8F516D8AC5211AC9CA7777FE63B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: 15 Signing time: Sun 17 May 2026 09:04:47 +0000 Manifest this update: Sun 17 May 2026 08:59:47 +0000 Manifest next update: Mon 18 May 2026 12:01:47 +0000 Files and hashes: 1: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: yhWCoGMFkkgphb/o4UZ4vax4YT5grKEjOfwqnGRTRQ4=) 2: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: 3ouLTTMrlORMHlKU1niXf/J5eybW8/1poSHTBw8u7OI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:22:60:89:68:51:b8:f5:16:d8:ac:52:11:ac:9c:a7:77:7f:e6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: May 17 08:59:47 2026 GMT Not After : May 18 12:01:47 2026 GMT Subject: CN=E55B98E646EF2E3BEDC5CBA07C0BB82713AEC426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fa:aa:41:43:7e:5e:bf:d1:98:fe:3a:99:70: b1:21:7e:a4:98:6d:0c:a3:93:0c:a2:8d:65:05:42: 7e:ba:f7:4d:f2:92:98:5c:a2:b5:5d:c6:78:3c:96: 62:e2:80:89:65:7c:ee:8f:7b:59:73:fa:07:06:59: bc:33:cb:8e:7f:71:5a:1e:50:d7:fd:0a:a3:44:9f: 62:25:fc:a6:82:ff:54:e9:e3:aa:88:b1:1d:1f:1a: 5d:e1:8f:37:1e:e7:73:31:f9:b4:3d:01:cd:53:57: 21:c9:91:9c:81:e6:36:e9:0d:c6:f3:e4:86:d8:d4: 55:5e:ab:57:51:1e:40:f4:21:1e:17:45:a8:51:7d: bf:20:a6:35:96:02:1b:b9:c3:30:ab:6b:fc:ff:51: ac:02:7b:ea:8e:7f:d5:94:6b:22:a8:f4:c3:43:2b: c5:8c:a6:1f:73:4d:ef:46:7d:dd:99:ed:00:4e:ca: 67:27:88:8b:28:7e:84:8e:63:cf:a9:2e:93:48:e4: fd:0f:20:d1:99:a3:4f:8f:03:8d:b0:b1:91:95:c6: 92:03:6f:67:f1:13:82:fe:4f:f4:c4:bb:47:6b:1f: 5a:7c:67:08:a5:4d:eb:6e:02:b7:8c:01:9b:50:ad: de:b0:be:db:5f:34:7e:71:0e:5b:1e:f7:22:99:dc: f6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5B:98:E6:46:EF:2E:3B:ED:C5:CB:A0:7C:0B:B8:27:13:AE:C4:26 X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:44:43:68:01:66:af:e9:31:be:2f:a5:82:02:3b:5c:b8:7f: af:04:98:1d:78:68:62:8b:6e:45:8c:ae:65:9c:9c:54:47:c5: 47:eb:4e:a7:cd:07:b1:01:a4:43:72:22:cf:1b:fc:51:8a:c5: f8:26:23:e2:8f:38:1f:65:07:d0:2a:c7:d4:21:fd:0b:3b:42: 64:6d:4a:12:80:e1:46:34:a3:06:44:9c:b0:b1:f9:3f:6b:c2: ab:a3:16:e0:1f:14:22:cb:af:19:3b:cc:6c:7f:dc:c3:0f:3e: d3:75:d5:d0:29:be:3f:03:ef:b4:18:c2:cf:66:fc:c5:43:c7: cf:62:77:1a:3f:7d:4a:24:b6:03:b3:13:39:44:d8:be:87:ac: c0:ca:ba:6a:e3:4c:67:9f:9c:b9:12:8a:41:e6:e5:52:37:49: 70:1b:ad:58:a6:04:2c:98:b8:b1:3c:75:9a:31:09:e1:d0:1e: bf:38:68:40:21:b2:ed:29:92:65:c9:62:b7:5f:b9:ac:83:14: c8:5f:7f:9c:f0:52:fd:7f:6b:3a:de:38:3e:b4:e0:cb:79:b6: a4:05:31:40:a8:35:3c:bf:2a:a6:52:09:b0:65:a4:69:d4:8f: aa:98:a3:57:da:dc:61:f8:79:1e:8d:4f:f0:4d:4d:32:ef:bc: 28:aa:ee:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSJgiWhRuPUW2KxSEaycp3d/5jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjA1MTcwODU5NDdaFw0yNjA1MTgxMjAxNDdaMDMxMTAvBgNV BAMTKEU1NUI5OEU2NDZFRjJFM0JFREM1Q0JBMDdDMEJCODI3MTNBRUM0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr+qpBQ35ev9GY/jqZcLEhfqSY bQyjkwyijWUFQn66903ykphcorVdxng8lmLigIllfO6Pe1lz+gcGWbwzy45/cVoe UNf9CqNEn2Il/KaC/1Tp46qIsR0fGl3hjzce53Mx+bQ9Ac1TVyHJkZyB5jbpDcbz 5IbY1FVeq1dRHkD0IR4XRahRfb8gpjWWAhu5wzCra/z/UawCe+qOf9WUayKo9MND K8WMph9zTe9Gfd2Z7QBOymcniIsofoSOY8+pLpNI5P0PINGZo0+PA42wsZGVxpID b2fxE4L+T/TEu0drH1p8ZwilTetuAreMAZtQrd6wvttfNH5xDlse9yKZ3PYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5VuY5kbvLjvtxcugfAu4JxOuxCYwHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5EQ2gBZq/pMb4vpYICO1y4f68EmB14aGKL bkWMrmWcnFRHxUfrTqfNB7EBpENyIs8b/FGKxfgmI+KPOB9lB9Aqx9Qh/Qs7QmRt ShKA4UY0owZEnLCx+T9rwqujFuAfFCLLrxk7zGx/3MMPPtN11dApvj8D77QYws9m /MVDx89idxo/fUoktgOzEzlE2L6HrMDKumrjTGefnLkSikHm5VI3SXAbrVimBCyY uLE8dZoxCeHQHr84aEAhsu0pkmXJYrdfuayDFMhff5zwUv1/azreOD604Mt5tqQF MUCoNTy/KqZSCbBlpGnUj6qYo1fa3GH4eR6NT/BNTTLvvCiq7t0= -----END CERTIFICATE-----Generated at Sun May 17 13:46:13 2026 by rpki-client