$ rpki-client -vvvf rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft File: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft (raw, json) Hash identifier: mrkJOVI7uGqVO28uLdxYxRjOHcO15MUkxzd58sQ0p3Y= Subject key identifier: 0E:EA:D9:94:58:02:34:3B:59:05:C9:BE:74:36:41:AD:9C:B0:26:9D Authority key identifier: CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 Certificate issuer: /CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Certificate serial: 0D7CF705E7554A5DBD3A798E4D5CC6EA8C172D32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft Manifest number: BA Signing time: Thu 17 Sep 2026 11:22:37 +0000 Manifest this update: Thu 17 Sep 2026 11:17:37 +0000 Manifest next update: Fri 18 Sep 2026 12:04:37 +0000 Files and hashes: 1: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: shzN9V44H6sJbyc7XtBZ0Ia8BJHs5w38s6/XgarDDV4=) 2: CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl (hash: QJyyEU+A7fTV+3t1NLq7NF6FNYHusOY4Id401LqmXKg=) 3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: kp5yEvA04MPtCYbrno7JgwGY6J9dneDRmDS5pzuyNcQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7c:f7:05:e7:55:4a:5d:bd:3a:79:8e:4d:5c:c6:ea:8c:17:2d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81 Validity Not Before: Sep 17 11:17:37 2026 GMT Not After : Sep 18 12:04:37 2026 GMT Subject: CN=0EEAD9945802343B5905C9BE743641AD9CB0269D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:96:8a:52:e6:5a:c0:1a:11:8f:b9:97:9d: f0:0d:10:c6:31:a1:69:1f:8f:a5:4d:1a:86:9c:c0: 41:fd:38:d1:de:02:d0:0b:47:4b:e6:01:b5:5b:83: fe:c7:34:72:f4:91:dc:cd:af:d9:56:3f:13:09:b9: 05:23:6c:4c:f0:c4:67:7f:05:2e:9b:b2:a7:81:da: 8e:5d:8e:b7:01:76:62:0d:71:ec:36:b8:bf:65:e0: 51:b6:9f:c5:bc:d5:d2:9d:9b:b2:ed:e9:c6:09:cd: 23:7b:65:a8:27:e8:1e:9a:3f:54:f2:f6:40:0f:e8: 19:2a:3d:54:73:7b:d6:10:dc:c1:17:b1:3f:18:a2: 66:6d:7a:3e:cf:8d:f3:bf:b0:be:80:5d:02:a9:1f: df:f4:90:1a:6f:3f:41:18:27:c5:89:ae:07:ec:6d: ac:8a:b8:8f:74:41:4a:be:b2:01:27:6e:c3:71:3c: 9c:4b:b8:16:80:9f:f1:d0:81:20:69:b0:88:2d:b8: 29:8a:69:e0:b9:e9:da:56:d7:59:30:a6:91:16:66: 27:fc:94:62:94:68:5d:ec:09:18:e2:df:d0:67:5a: 57:16:f2:94:01:ae:f3:ab:0d:99:a8:45:92:72:0c: 08:48:0d:ac:ee:2f:6f:31:ca:d5:ad:76:b1:f5:85: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EA:D9:94:58:02:34:3B:59:05:C9:BE:74:36:41:AD:9C:B0:26:9D X509v3 Authority Key Identifier: keyid:CB:B9:DE:42:7E:71:26:B3:62:4E:6F:F8:F0:AC:1D:AC:5E:2B:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/CBB9DE427E7126B3624E6FF8F0AC1DAC5E2BCD81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d8:19:c4:63:53:67:ea:ec:5a:3c:67:33:5c:f9:43:0c:8d: e5:26:7b:36:e5:c9:db:72:18:57:d5:f1:8f:54:d6:90:31:4b: bc:67:f5:10:d9:01:88:4a:ac:ca:7d:5a:e7:29:3e:09:b6:57: 51:60:f0:ef:99:7d:7b:55:85:85:e8:3f:1b:60:2b:e7:f2:a7: a2:f5:38:06:b8:53:a3:57:36:2e:e1:50:ba:f1:b9:39:60:dc: b1:46:57:d4:6e:1f:3f:05:92:f2:59:fe:fd:9c:d0:91:e4:fe: 01:ae:63:40:e1:52:3c:2a:02:d7:12:d9:cf:3d:15:9b:d2:ea: 97:33:8b:cb:00:d4:02:d8:25:57:00:2b:ec:67:83:9b:c6:fb: bd:29:78:af:04:ad:59:96:65:82:44:d1:5f:90:d4:fa:f0:58: 7c:be:74:86:83:a4:32:b7:50:64:17:26:4f:f2:d5:85:2b:e1: 1c:df:c4:c8:e2:5a:b4:7e:b6:0d:f2:94:05:b9:2a:c6:fa:3d: 46:a1:9f:6b:a0:91:dc:fa:f3:b4:97:b2:a7:b6:21:d4:8f:94: 73:4f:57:54:f6:e5:7c:c6:3a:6a:0a:62:79:50:68:6d:db:17: c9:f7:48:f1:65:10:db:f0:4d:82:a5:cb:24:fe:a0:f3:46:76: 27:b5:e9:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXz3BedVSl29OnmOTVzG6owXLTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1 RTJCQ0Q4MTAeFw0yNjA5MTcxMTE3MzdaFw0yNjA5MTgxMjA0MzdaMDMxMTAvBgNV BAMTKDBFRUFEOTk0NTgwMjM0M0I1OTA1QzlCRTc0MzY0MUFEOUNCMDI2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXpaKUuZawBoRj7mXnfANEMYx oWkfj6VNGoacwEH9ONHeAtALR0vmAbVbg/7HNHL0kdzNr9lWPxMJuQUjbEzwxGd/ BS6bsqeB2o5djrcBdmINcew2uL9l4FG2n8W81dKdm7Lt6cYJzSN7Zagn6B6aP1Ty 9kAP6BkqPVRze9YQ3MEXsT8YomZtej7PjfO/sL6AXQKpH9/0kBpvP0EYJ8WJrgfs bayKuI90QUq+sgEnbsNxPJxLuBaAn/HQgSBpsIgtuCmKaeC56dpW11kwppEWZif8 lGKUaF3sCRji39BnWlcW8pQBrvOrDZmoRZJyDAhIDazuL28xytWtdrH1hRwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDurZlFgCNDtZBcm+dDZBrZywJp0wHwYDVR0j BBgwFoAUy7neQn5xJrNiTm/48KwdrF4rzYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAzZWJhYmItOTk5Zi00ZjNlLTg0YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3 RTcxMjZCMzYyNEU2RkY4RjBBQzFEQUM1RTJCQ0Q4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkI5REU0MjdFNzEyNkIzNjI0RTZGRjhGMEFDMURBQzVFMkJD RDgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvQ0JCOURFNDI3RTcxMjZCMzYyNEU2RkY4RjBBQzFE QUM1RTJCQ0Q4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbYGcRjU2fq7Fo8ZzNc+UMMjeUmezblydty GFfV8Y9U1pAxS7xn9RDZAYhKrMp9WucpPgm2V1Fg8O+ZfXtVhYXoPxtgK+fyp6L1 OAa4U6NXNi7hULrxuTlg3LFGV9RuHz8FkvJZ/v2c0JHk/gGuY0DhUjwqAtcS2c89 FZvS6pczi8sA1ALYJVcAK+xng5vG+70peK8ErVmWZYJE0V+Q1PrwWHy+dIaDpDK3 UGQXJk/y1YUr4RzfxMjiWrR+tg3ylAW5Ksb6PUahn2ugkdz687SXsqe2IdSPlHNP V1T25XzGOmoKYnlQaG3bF8n3SPFlENvwTYKlyyT+oPNGdie16bg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:04:43 2026 by rpki-client