$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: Vmog3yjoVlloeKYfmzmQCJozL4NMCdD8n4/jL9E7jl4= Subject key identifier: 3A:EA:3F:A3:24:20:5C:2B:D5:F0:A1:B1:70:93:BA:90:0F:D0:08:25 Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 43AC3CE892A7C69B0FDC2BD7355FE7601B343E15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 13:44:14 +0000 Manifest this update: Sun 02 Aug 2026 13:39:14 +0000 Manifest next update: Mon 03 Aug 2026 16:54:14 +0000 Files and hashes: 1: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) 2: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) 3: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: 0t2ZED2a6x2HLjZxq2k4uv1kt5QUrXfalcmWkKb6hok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ac:3c:e8:92:a7:c6:9b:0f:dc:2b:d7:35:5f:e7:60:1b:34:3e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: Aug 2 13:39:14 2026 GMT Not After : Aug 3 16:54:14 2026 GMT Subject: CN=3AEA3FA324205C2BD5F0A1B17093BA900FD00825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:51:a0:00:33:bf:f2:20:c7:85:50:72:d8: c2:81:31:cd:bc:7f:b5:9d:b0:c5:05:bd:e3:89:10: b5:d4:ed:26:11:0d:4b:58:14:15:70:87:ab:6c:c7: 56:95:70:b8:9e:94:1d:f7:bd:e4:04:d8:c3:90:51: 70:19:a9:d3:6a:2b:64:0d:7a:f9:83:3f:9c:22:78: 4f:e6:79:62:fe:b4:44:f8:24:99:b1:25:20:2d:9f: b4:39:f3:f4:ce:c2:2d:34:72:71:2e:c0:95:d9:43: 40:36:5a:83:fe:b1:19:14:b0:4b:e6:82:b7:b5:2b: b9:4a:cd:ee:a3:95:e9:cc:da:49:6d:53:e2:ee:a3: 47:aa:09:1a:1e:0c:d1:13:65:c9:b5:b0:4e:fe:ac: a6:04:84:0a:8f:58:83:18:01:83:7b:8d:84:93:9e: 31:1c:82:ac:b0:64:ba:a0:d4:e8:e2:6d:07:ee:2a: 18:ae:b2:55:cd:58:05:69:cf:d3:a0:2e:19:46:39: db:48:3f:d1:4b:58:f3:ad:73:bf:fd:db:b4:ae:4e: ee:ba:5c:08:b7:6d:0e:fc:08:c4:59:be:74:f2:b2: 08:d5:44:5e:a8:1b:5e:e4:6b:a4:0f:14:93:5a:5a: c6:7d:13:29:e0:ba:30:93:a7:c6:6a:71:ba:d8:8c: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:3F:A3:24:20:5C:2B:D5:F0:A1:B1:70:93:BA:90:0F:D0:08:25 X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0b:d7:01:29:74:13:de:a9:35:99:be:6b:56:59:98:8f:a9: 2c:23:b7:90:0c:07:eb:fa:8a:66:18:6b:1c:8c:85:0f:59:c3: 62:70:42:24:33:4a:8d:4d:e7:ba:ec:cf:3b:27:c0:6f:11:9b: 0d:88:47:ed:61:cb:12:e2:f3:e2:6e:16:a4:0c:7a:0f:e7:d1: 7e:39:64:33:29:6f:ee:60:68:26:c6:83:d0:dc:28:f3:ab:32: 10:c6:46:9a:93:71:46:41:a1:cd:15:5d:1c:68:31:d4:05:a2: 30:03:71:55:d5:73:f3:d7:e7:a1:83:25:5e:27:25:10:81:0e: 04:42:c7:cd:6c:48:95:8c:d1:88:38:d5:57:52:29:dd:fe:02: 5b:43:cf:ed:d5:93:93:88:8d:d7:ec:84:b1:8d:63:ec:24:6d: 36:18:f5:4d:03:53:4d:e2:0c:a8:13:73:31:8d:66:79:90:8b: 14:7e:c6:69:1a:38:f9:0c:97:66:ea:39:35:72:9c:e1:e6:4e: 52:f2:9b:ce:4d:28:58:fd:01:4f:54:62:88:8a:2b:f7:26:db: 72:2f:22:38:a3:b3:64:f5:70:44:4f:73:4d:62:1d:fb:ae:fc: 2d:f0:db:05:23:ff:cb:65:d8:a1:1a:18:b4:33:83:80:fd:9b: fe:33:d0:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6w86JKnxpsP3CvXNV/nYBs0PhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjA4MDIxMzM5MTRaFw0yNjA4MDMxNjU0MTRaMDMxMTAvBgNV BAMTKDNBRUEzRkEzMjQyMDVDMkJENUYwQTFCMTcwOTNCQTkwMEZEMDA4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCux1GgADO/8iDHhVBy2MKBMc28 f7WdsMUFveOJELXU7SYRDUtYFBVwh6tsx1aVcLielB33veQE2MOQUXAZqdNqK2QN evmDP5wieE/meWL+tET4JJmxJSAtn7Q58/TOwi00cnEuwJXZQ0A2WoP+sRkUsEvm gre1K7lKze6jlenM2kltU+Luo0eqCRoeDNETZcm1sE7+rKYEhAqPWIMYAYN7jYST njEcgqywZLqg1OjibQfuKhiuslXNWAVpz9OgLhlGOdtIP9FLWPOtc7/927SuTu66 XAi3bQ78CMRZvnTysgjVRF6oG17ka6QPFJNaWsZ9EyngujCTp8ZqcbrYjKtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOuo/oyQgXCvV8KGxcJO6kA/QCCUwHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcL1wEpdBPeqTWZvmtWWZiPqSwjt5AMB+v6 imYYaxyMhQ9Zw2JwQiQzSo1N57rszzsnwG8Rmw2IR+1hyxLi8+JuFqQMeg/n0X45 ZDMpb+5gaCbGg9DcKPOrMhDGRpqTcUZBoc0VXRxoMdQFojADcVXVc/PX56GDJV4n JRCBDgRCx81sSJWM0Yg41VdSKd3+AltDz+3Vk5OIjdfshLGNY+wkbTYY9U0DU03i DKgTczGNZnmQixR+xmkaOPkMl2bqOTVynOHmTlLym85NKFj9AU9UYoiKK/cm23Iv Ijijs2T1cERPc01iHfuu/C3w2wUj/8tl2KEaGLQzg4D9m/4z0JE= -----END CERTIFICATE-----Generated at Sun Aug 2 22:58:34 2026 by rpki-client