$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft File: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft (raw, json) Hash identifier: vRpPtdGdoWm4DMX5lN6LuXHQNCmZ3ykGzotv7/p7aNs= Subject key identifier: E6:FA:F9:B4:8A:4C:ED:E0:3F:3A:0F:F2:61:6E:5B:CA:89:9A:6E:0C Authority key identifier: CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D Certificate issuer: /CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Certificate serial: 0E8D9BD9FB87537C8E5A3A5348038ADE8ABF8FAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 19:07:49 +0000 Manifest this update: Wed 16 Sep 2026 19:02:49 +0000 Manifest next update: Thu 17 Sep 2026 21:55:49 +0000 Files and hashes: 1: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: x+d57o1s3Lbg7LZYcyJzqZr5jsNBMksxksKUmCvZjfA=) 2: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: uLmIeQ2k8rCrLaWqYXUCyu46HdG2z+aP2gfmGAZojFg=) 3: CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl (hash: YFV3qNA/UgyUF6h4TRRZ7IrVrcrH3bg1YyXoTicsLis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8d:9b:d9:fb:87:53:7c:8e:5a:3a:53:48:03:8a:de:8a:bf:8f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB3B8A78733728C8B1AFA48EEFC6E1F77738735D Validity Not Before: Sep 16 19:02:49 2026 GMT Not After : Sep 17 21:55:49 2026 GMT Subject: CN=E6FAF9B48A4CEDE03F3A0FF2616E5BCA899A6E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:73:23:2a:2a:87:4f:33:e7:e9:55:e7:51: 69:65:24:43:d7:86:95:72:be:6b:0f:73:c4:ab:39: 8f:37:51:a2:eb:a9:24:a0:4d:b7:17:9c:43:4a:fb: 7a:18:46:6e:24:93:97:3f:a9:5d:b8:4b:d2:f4:ee: c6:91:97:77:93:57:bc:d3:21:30:dd:3a:52:02:58: 76:fb:0d:60:e8:43:59:59:09:e9:bb:83:98:d5:7d: 34:03:22:53:b4:17:37:13:c2:d0:d2:e6:81:be:e1: 95:39:0e:9e:05:3c:97:df:de:66:bb:63:03:b2:ec: 17:0e:89:bf:51:2f:e6:d9:27:7c:6c:4f:c3:d4:36: ec:ae:a8:1c:89:5e:99:cd:48:2e:10:d4:c6:40:da: e0:35:06:d5:f6:28:e1:7f:99:7b:af:6e:21:e7:1a: b6:bf:e1:af:32:00:c3:c8:b2:6f:6a:53:b7:34:40: a4:93:37:97:c1:1d:4a:00:e9:cb:78:fb:56:11:40: eb:28:66:41:a1:2f:4f:e3:f2:d9:38:1f:1b:5b:52: 93:86:9f:37:a2:c7:99:94:90:37:d5:ba:dd:71:7e: 75:96:a9:67:93:63:d1:83:fd:a0:d9:b7:bb:10:fe: d8:c8:4c:5a:bb:ce:39:45:02:85:c2:9b:9e:88:9d: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FA:F9:B4:8A:4C:ED:E0:3F:3A:0F:F2:61:6E:5B:CA:89:9A:6E:0C X509v3 Authority Key Identifier: keyid:CB:3B:8A:78:73:37:28:C8:B1:AF:A4:8E:EF:C6:E1:F7:77:38:73:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/CB3B8A78733728C8B1AFA48EEFC6E1F77738735D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:33:8e:44:48:70:f8:d0:f5:ff:ff:24:84:97:41:c6:18:7f: 65:8d:eb:57:30:01:84:2a:62:5d:da:53:b1:d6:a3:e4:b7:d9: 00:10:af:87:a0:c0:75:84:83:7d:ce:5e:17:c1:25:f4:c6:cd: b9:09:89:e5:6f:63:d5:b5:ac:2a:33:fb:72:ea:44:76:df:d3: 46:2e:10:3e:a5:54:c9:df:a5:04:33:90:46:28:17:63:16:28: 9b:96:b0:40:e5:06:b6:61:0b:87:27:97:08:03:d3:1c:06:35: a3:7e:9f:7f:a9:da:be:03:92:1e:88:b0:27:03:d3:88:0d:49: da:ce:61:54:f2:ea:95:30:cc:f3:40:46:72:3e:96:5e:bf:3b: e0:53:c4:a0:b4:5e:88:74:c0:cb:db:06:88:50:2c:f5:9d:49: 57:76:f6:c7:13:58:34:a1:2d:56:57:7c:f6:98:3e:e4:52:5f: 66:a4:89:a6:76:fd:76:f1:77:0b:15:b4:79:c1:d3:d4:7d:d3: 5b:8f:0d:b7:ef:ba:27:1e:ad:86:ce:3e:e8:2d:8d:12:0d:8a: 5f:f4:c2:88:09:bb:3e:77:8f:86:3a:3c:f1:de:1d:bb:63:e3: e4:2a:3c:d9:d8:70:67:a9:e1:e0:9e:27:ca:95:70:02:99:46: 03:65:2f:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDo2b2fuHU3yOWjpTSAOK3oq/j64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3 NzM4NzM1RDAeFw0yNjA5MTYxOTAyNDlaFw0yNjA5MTcyMTU1NDlaMDMxMTAvBgNV BAMTKEU2RkFGOUI0OEE0Q0VERTAzRjNBMEZGMjYxNkU1QkNBODk5QTZFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwHMjKiqHTzPn6VXnUWllJEPX hpVyvmsPc8SrOY83UaLrqSSgTbcXnENK+3oYRm4kk5c/qV24S9L07saRl3eTV7zT ITDdOlICWHb7DWDoQ1lZCem7g5jVfTQDIlO0FzcTwtDS5oG+4ZU5Dp4FPJff3ma7 YwOy7BcOib9RL+bZJ3xsT8PUNuyuqByJXpnNSC4Q1MZA2uA1BtX2KOF/mXuvbiHn Gra/4a8yAMPIsm9qU7c0QKSTN5fBHUoA6ct4+1YRQOsoZkGhL0/j8tk4HxtbUpOG nzeix5mUkDfVut1xfnWWqWeTY9GD/aDZt7sQ/tjITFq7zjlFAoXCm56InYR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vr5tIpM7eA/Og/yYW5byomabgwwHwYDVR0j BBgwFoAUyzuKeHM3KMixr6SO78bh93c4c10wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyMDQxZjEtNGNlNi00OWI0LTgzYTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3 MzM3MjhDOEIxQUZBNDhFRUZDNkUxRjc3NzM4NzM1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjNCOEE3ODczMzcyOEM4QjFBRkE0OEVFRkM2RTFGNzc3Mzg3 MzVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvQ0IzQjhBNzg3MzM3MjhDOEIxQUZBNDhFRUZDNkUx Rjc3NzM4NzM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGszjkRIcPjQ9f//JISXQcYYf2WN61cwAYQq Yl3aU7HWo+S32QAQr4egwHWEg33OXhfBJfTGzbkJieVvY9W1rCoz+3LqRHbf00Yu ED6lVMnfpQQzkEYoF2MWKJuWsEDlBrZhC4cnlwgD0xwGNaN+n3+p2r4Dkh6IsCcD 04gNSdrOYVTy6pUwzPNARnI+ll6/O+BTxKC0Xoh0wMvbBohQLPWdSVd29scTWDSh LVZXfPaYPuRSX2akiaZ2/XbxdwsVtHnB09R901uPDbfvuicerYbOPugtjRINil/0 wogJuz53j4Y6PPHeHbtj4+QqPNnYcGep4eCeJ8qVcAKZRgNlL8Q= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:46 2026 by rpki-client