$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft (raw, json) Hash identifier: yuejetz4MWq8F1M8yhcUmZ341LPjQmfA53AznAboLWA= Subject key identifier: BA:35:A2:44:64:82:16:BB:50:AE:3F:50:C7:07:80:5D:4C:5A:14:F7 Authority key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Certificate issuer: /CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Certificate serial: 61A0192FA04687A443D3DE34F046830CEAD85211 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 21:49:02 +0000 Manifest this update: Wed 17 Jun 2026 21:44:02 +0000 Manifest next update: Fri 19 Jun 2026 01:22:02 +0000 Files and hashes: 1: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: TPW+wzv6R4csOJ2PImY52pnN2yFzhEnBxHBg+BSEr/8=) 2: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl (hash: DKqmkqRepcHxjKBZCho0OH1tqFR8pcZZg5oGtf8ZH4I=) 3: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: 6Blg52P9e/HwBiYQRbP9wbb5pGbKe2j4KTH7g3oz4ZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a0:19:2f:a0:46:87:a4:43:d3:de:34:f0:46:83:0c:ea:d8:52:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Validity Not Before: Jun 17 21:44:02 2026 GMT Not After : Jun 19 01:22:02 2026 GMT Subject: CN=BA35A244648216BB50AE3F50C707805D4C5A14F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a1:92:ac:28:a2:84:c6:7d:84:55:c6:31:9a: 81:1c:e4:25:d2:df:b3:fd:a7:30:a6:05:39:44:41: be:e1:8a:53:07:9d:a2:d1:3d:f9:ba:f9:9b:e3:16: 8b:69:ad:67:84:7e:5c:7b:b8:80:54:84:81:a5:46: 5b:af:8f:52:a7:46:1a:b1:59:17:d3:1f:42:31:64: 76:57:4f:91:e6:ad:e7:d3:ce:1a:61:e6:ff:28:bc: 17:32:fc:7c:3c:4f:5e:d5:33:f9:42:5b:bb:54:b5: b8:7c:2a:6a:07:48:7f:93:ca:a0:09:8a:37:94:ac: 2c:4c:c5:ba:6f:2b:64:8e:de:76:36:f0:70:c4:47: ad:d7:5f:d5:11:67:98:82:48:96:86:9f:aa:29:c7: 6b:95:e4:06:01:86:2d:e3:2c:28:2e:2b:64:2b:20: b2:3d:77:ea:4f:f8:fe:f9:d9:54:54:f9:15:d4:76: f0:33:dd:ca:16:70:74:90:46:29:0c:67:1f:27:f3: dd:3a:7f:15:f6:eb:5f:bf:12:0e:65:12:4b:00:f9: 2f:cf:18:85:51:b3:04:82:ca:14:38:36:c5:80:61: c8:57:5c:3e:6f:9b:0e:6e:0c:e9:42:db:e4:4d:cd: b1:81:96:d3:2b:c8:54:4e:f3:aa:a7:e3:20:96:77: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:35:A2:44:64:82:16:BB:50:AE:3F:50:C7:07:80:5D:4C:5A:14:F7 X509v3 Authority Key Identifier: keyid:CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c8:bb:78:49:95:f9:e7:99:93:ea:27:d2:1a:e6:a8:09:5a: e9:11:22:ca:10:62:f7:c3:8f:de:9f:bf:3e:51:37:7b:6b:f5: 02:1a:45:84:51:df:b6:57:32:69:8f:e7:1f:05:2a:cf:64:ca: 8b:3c:4c:ab:0b:76:0c:58:4e:bf:e1:2e:35:9c:6c:97:b9:78: 57:9e:44:b6:d0:cc:25:75:99:0c:87:30:04:91:f3:51:5a:ae: 63:b6:05:d6:95:d9:a4:1c:25:f5:ad:86:df:2c:42:68:8f:0f: 0b:ca:32:5f:f4:49:3c:58:4c:ee:07:48:0e:4f:cf:60:15:11: 4b:00:d9:19:b1:65:be:3c:48:e9:7b:9d:3d:fd:52:83:68:9e: b8:e1:dd:a0:44:bc:11:51:51:35:a0:61:2f:20:15:41:f1:a6: eb:59:ad:d3:4f:44:9d:f6:c4:c6:70:83:48:bc:9d:93:8b:df: 3f:90:63:1f:a1:4e:6a:c0:54:54:22:82:6d:87:8b:c3:80:b2: f9:0e:c4:eb:23:08:83:cd:18:2b:21:ae:db:fb:32:72:30:76: c0:43:3c:fd:cd:28:ca:f3:0c:80:19:0c:1d:8f:ac:8e:56:c8: 14:13:9e:32:58:2d:d5:d7:8e:40:6f:00:c6:2c:d2:19:7b:3e: 2c:e1:e2:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaAZL6BGh6RD09408EaDDOrYUhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJEQUZF RDhBMTUwNTAeFw0yNjA2MTcyMTQ0MDJaFw0yNjA2MTkwMTIyMDJaMDMxMTAvBgNV BAMTKEJBMzVBMjQ0NjQ4MjE2QkI1MEFFM0Y1MEM3MDc4MDVENEM1QTE0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpoZKsKKKExn2EVcYxmoEc5CXS 37P9pzCmBTlEQb7hilMHnaLRPfm6+ZvjFotprWeEflx7uIBUhIGlRluvj1KnRhqx WRfTH0IxZHZXT5HmrefTzhph5v8ovBcy/Hw8T17VM/lCW7tUtbh8KmoHSH+TyqAJ ijeUrCxMxbpvK2SO3nY28HDER63XX9URZ5iCSJaGn6opx2uV5AYBhi3jLCguK2Qr ILI9d+pP+P752VRU+RXUdvAz3coWcHSQRikMZx8n8906fxX261+/Eg5lEksA+S/P GIVRswSCyhQ4NsWAYchXXD5vmw5uDOlC2+RNzbGBltMryFRO86qn4yCWd2hdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUujWiRGSCFrtQrj9QxweAXUxaFPcwHwYDVR0j BBgwFoAUy2PVcBjMT+nKigCbLou9r+2KFQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiOGU2MGYtZjk5My00NTM0LTlkYTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAx OENDNEZFOUNBOEEwMDlCMkU4QkJEQUZFRDhBMTUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjYzRDU3MDE4Q0M0RkU5Q0E4QTAwOUIyRThCQkRBRkVEOEEx NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvQ0I2M0Q1NzAxOENDNEZFOUNBOEEwMDlCMkU4QkJE QUZFRDhBMTUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3Iu3hJlfnnmZPqJ9Ia5qgJWukRIsoQYvfD j96fvz5RN3tr9QIaRYRR37ZXMmmP5x8FKs9kyos8TKsLdgxYTr/hLjWcbJe5eFee RLbQzCV1mQyHMASR81FarmO2BdaV2aQcJfWtht8sQmiPDwvKMl/0STxYTO4HSA5P z2AVEUsA2RmxZb48SOl7nT39UoNonrjh3aBEvBFRUTWgYS8gFUHxputZrdNPRJ32 xMZwg0i8nZOL3z+QYx+hTmrAVFQigm2Hi8OAsvkOxOsjCIPNGCshrtv7MnIwdsBD PP3NKMrzDIAZDB2PrI5WyBQTnjJYLdXXjkBvAMYs0hl7Pizh4s0= -----END CERTIFICATE-----Generated at Thu Jun 18 19:22:18 2026 by rpki-client