$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: IWS0LzxDtD7f+IBKeulh4LoNG8DRDAH73yQR3NC/mWY= Subject key identifier: 95:A4:EA:6F:DC:88:66:E1:DD:99:7C:79:9E:BC:CF:7A:AA:3D:A3:78 Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 043A0CD357524D8156A4DA0C566EB26A49D004CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: BA Signing time: Thu 17 Sep 2026 20:44:06 +0000 Manifest this update: Thu 17 Sep 2026 20:39:06 +0000 Manifest next update: Fri 18 Sep 2026 21:22:06 +0000 Files and hashes: 1: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) 2: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: 9ZyROsY8eWnarRtbhlJHJtTiEQR4s5iCRTprGJqdn9U=) 3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 21:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3a:0c:d3:57:52:4d:81:56:a4:da:0c:56:6e:b2:6a:49:d0:04:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: Sep 17 20:39:06 2026 GMT Not After : Sep 18 21:22:06 2026 GMT Subject: CN=95A4EA6FDC8866E1DD997C799EBCCF7AAA3DA378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:ce:7d:53:29:a4:7f:7b:db:82:72:f6:28: bd:2a:89:a6:07:7b:0f:77:54:7e:c0:aa:de:40:b3: 50:08:33:a6:fa:9e:1c:cd:93:ff:c8:d0:05:9f:bc: 95:9b:43:f5:2a:e1:48:f4:e7:f9:66:a3:6d:ba:b3: d1:b5:e0:06:87:31:ed:c4:d2:17:52:26:d3:06:18: 0c:05:e3:52:9a:af:0b:a0:2f:23:e1:50:f3:eb:fe: c9:00:c3:1d:bc:2c:38:bd:a4:8d:8a:dc:0a:97:9f: 4c:32:58:b6:54:9f:94:b5:2e:36:63:3b:c3:59:1d: 39:63:39:fa:14:64:db:48:e5:4a:ed:b1:53:e9:91: 8c:77:b9:33:8c:e1:b7:b4:dc:cf:2d:46:2b:53:10: 4d:1e:44:a3:61:33:0f:50:35:45:b9:7e:1b:a4:dc: b0:c4:f9:a5:0f:5c:ac:93:db:76:8c:da:60:8a:9a: 60:c8:52:9e:fa:da:aa:36:3a:37:81:dd:26:30:83: 0b:08:14:bf:a7:e7:e6:85:c7:54:df:e9:5d:e2:b3: a3:a7:c3:6a:81:57:69:c3:75:8f:ab:97:76:7a:0b: 20:4e:70:33:a8:68:4f:50:7b:43:93:b9:93:68:c0: 60:97:38:d3:79:81:c0:53:58:11:5f:f1:24:d1:a3: 73:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A4:EA:6F:DC:88:66:E1:DD:99:7C:79:9E:BC:CF:7A:AA:3D:A3:78 X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:b8:d0:a3:c7:a1:18:92:2a:eb:ac:1b:1c:82:ad:a9:58: 5a:e8:16:70:70:f7:82:1e:4f:35:8e:48:74:c2:cd:4a:27:40: 44:b7:9f:74:f9:78:b3:d0:1d:47:da:1d:52:4f:6e:b1:56:3c: 0d:c9:08:5a:ee:24:32:b0:5f:3c:54:51:ce:d0:00:f2:25:5c: f7:cc:80:72:68:b8:c6:cd:91:5b:fb:d9:37:db:5e:4e:40:bd: 9e:ef:e9:bc:f2:82:29:f1:11:b6:b0:b4:04:cc:ff:dd:1e:7b: b1:16:b6:ea:3d:fd:09:3d:f1:b7:f8:9b:00:81:2e:ef:7c:90: 8e:25:cd:3e:12:65:16:00:e4:ea:52:12:14:09:77:a8:3e:37: ad:66:bb:ef:47:1d:85:24:61:30:95:57:a6:a3:f7:65:b8:e5: b5:8a:8c:3b:99:14:d2:f7:26:84:7d:69:c8:fb:52:a8:f2:2d: 52:6e:50:ec:25:84:3f:99:8a:0c:77:d7:3f:b4:cf:14:2e:cb: f7:ac:6f:55:e2:24:b2:a9:b4:53:89:07:80:79:b4:18:1b:0f: a4:b4:a5:ce:81:66:bb:5a:93:12:31:b7:e1:99:69:1c:d0:52: 52:df:bd:94:40:7b:18:0c:38:01:fd:3a:ab:1f:a4:fd:c9:9d: 0e:93:dd:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDoM01dSTYFWpNoMVm6yaknQBMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjA5MTcyMDM5MDZaFw0yNjA5MTgyMTIyMDZaMDMxMTAvBgNV BAMTKDk1QTRFQTZGREM4ODY2RTFERDk5N0M3OTlFQkNDRjdBQUEzREEzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEX859Uymkf3vbgnL2KL0qiaYH ew93VH7Aqt5As1AIM6b6nhzNk//I0AWfvJWbQ/Uq4Uj05/lmo226s9G14AaHMe3E 0hdSJtMGGAwF41KarwugLyPhUPPr/skAwx28LDi9pI2K3AqXn0wyWLZUn5S1LjZj O8NZHTljOfoUZNtI5UrtsVPpkYx3uTOM4be03M8tRitTEE0eRKNhMw9QNUW5fhuk 3LDE+aUPXKyT23aM2mCKmmDIUp762qo2OjeB3SYwgwsIFL+n5+aFx1Tf6V3is6On w2qBV2nDdY+rl3Z6CyBOcDOoaE9Qe0OTuZNowGCXONN5gcBTWBFf8STRo3NzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlaTqb9yIZuHdmXx5nrzPeqo9o3gwHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/BuNCjx6EYkirrrBscgq2pWFroFnBw94Ie TzWOSHTCzUonQES3n3T5eLPQHUfaHVJPbrFWPA3JCFruJDKwXzxUUc7QAPIlXPfM gHJouMbNkVv72TfbXk5AvZ7v6bzyginxEbawtATM/90ee7EWtuo9/Qk98bf4mwCB Lu98kI4lzT4SZRYA5OpSEhQJd6g+N61mu+9HHYUkYTCVV6aj92W45bWKjDuZFNL3 JoR9acj7UqjyLVJuUOwlhD+Zigx31z+0zxQuy/esb1XiJLKptFOJB4B5tBgbD6S0 pc6BZrtakxIxt+GZaRzQUlLfvZRAexgMOAH9OqsfpP3JnQ6T3YI= -----END CERTIFICATE-----Generated at Fri Sep 18 15:11:05 2026 by rpki-client