$ rpki-client -vvvf rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft File: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft (raw, json) Hash identifier: kUjzC56yXBZgkBhEEJXjwU7Xd2JmkW62TOjC8rCM2Wg= Subject key identifier: 7F:23:2E:0A:AC:FF:69:2A:B9:F7:0A:4F:76:FE:28:BA:49:91:B0:EE Authority key identifier: CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 Certificate issuer: /CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Certificate serial: 1C7B14535EE6D733725D85EDC8CF8769F712E4EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 03:43:34 +0000 Manifest this update: Sun 25 Oct 2026 03:38:34 +0000 Manifest next update: Mon 26 Oct 2026 06:39:34 +0000 Files and hashes: 1: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: pbFqtdrF857Bo284a6tYg8zQs+U7i5koym7amsZuX/8=) 2: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: MlsPGYjwxcTUokzk7qgJtZJ0zjAyD3pAbTHc5VBWDJ4=) 3: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl (hash: +KPD79lw2B/gAOBqnZ2tG5khUUrXBuci+mA8eWvf3OE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7b:14:53:5e:e6:d7:33:72:5d:85:ed:c8:cf:87:69:f7:12:e4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Validity Not Before: Oct 25 03:38:34 2026 GMT Not After : Oct 26 06:39:34 2026 GMT Subject: CN=7F232E0AACFF692AB9F70A4F76FE28BA4991B0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:60:dc:24:eb:97:96:c9:9e:30:c1:ea:cd: 2f:7b:a3:b8:2e:e8:75:17:77:8e:69:e9:1d:c0:a6: e3:85:1c:40:f3:20:09:66:ff:df:aa:4c:b4:39:14: f8:84:88:9b:54:a7:99:8f:db:98:28:7c:69:be:0b: 39:aa:c3:9f:19:3a:30:09:47:a8:e8:a3:57:9a:5d: 8b:5a:57:db:98:46:2b:b0:95:3e:d7:02:05:94:f5: 47:8a:71:95:de:2d:bf:69:7c:09:07:ae:de:cc:f4: 69:20:29:2c:89:0b:0c:45:df:3a:d5:f3:88:05:e5: 1c:b9:f7:59:fb:7a:2a:c3:b1:93:4c:94:0b:24:b3: 9f:a0:2c:c3:a2:ae:34:2a:ff:ec:3a:e9:aa:43:b3: 29:24:d1:29:24:9d:c4:8c:aa:1a:81:af:4d:eb:a7: 32:35:40:b0:72:4c:6e:ff:1c:07:58:b0:41:8c:3e: 84:7c:3c:44:4e:f7:7a:82:0f:55:5b:bc:90:4a:c9: ed:34:97:2b:00:7a:6d:83:27:80:86:dc:6a:ef:d8: f8:cb:a5:12:f6:9b:3c:9b:99:6e:3a:4c:a1:62:38: da:04:b7:ce:d2:14:e9:07:d4:49:ba:47:00:d8:4e: 7c:b5:54:db:00:c7:f7:ab:9a:46:df:49:7a:7a:ef: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:23:2E:0A:AC:FF:69:2A:B9:F7:0A:4F:76:FE:28:BA:49:91:B0:EE X509v3 Authority Key Identifier: keyid:CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:42:b7:31:34:bf:60:8f:9a:6e:7c:b5:3c:8f:3d:f6:ec:40: b7:a7:a7:5e:ee:10:9a:95:73:b8:d8:0f:b6:88:e9:34:31:c5: fc:13:6e:b9:5d:ed:d1:47:76:3a:57:96:b5:17:c6:a4:00:ae: 66:3d:01:2f:a2:85:5b:d5:dc:c8:03:72:bb:9b:8b:ef:b4:a9: 3d:be:75:da:70:91:82:8e:6a:8b:5b:8a:3b:d9:a0:b5:b8:b6: 47:16:7b:dc:3f:e7:bb:3e:7b:ce:50:50:7f:af:5c:ca:fd:08: 0d:57:fb:01:e0:92:2b:9b:bd:3b:88:cf:44:ba:6e:f3:ef:c2: 8e:0c:59:26:64:90:61:91:b1:a4:b1:56:f6:65:60:c1:ce:4d: 05:18:4b:f5:2a:ec:72:fc:6b:53:48:85:37:22:ac:64:15:05: 7c:4f:32:07:bd:32:a9:52:54:66:6c:28:b5:14:d5:b7:bc:47: 7f:2f:10:e1:42:86:4a:69:3f:47:0d:58:a0:46:1e:d2:09:85: 54:14:84:57:7b:87:7f:b4:5d:e4:9c:7f:75:45:9e:d3:02:57: 2d:e7:62:50:7d:95:55:ac:72:1f:8b:10:4d:9e:49:59:aa:48: 25:39:da:63:5c:63:60:50:da:20:bf:0e:c9:13:53:30:b2:23: 18:8b:1b:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHsUU17m1zNyXYXtyM+HafcS5O8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4 NjJDMTAzNDAeFw0yNjEwMjUwMzM4MzRaFw0yNjEwMjYwNjM5MzRaMDMxMTAvBgNV BAMTKDdGMjMyRTBBQUNGRjY5MkFCOUY3MEE0Rjc2RkUyOEJBNDk5MUIwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXmGDcJOuXlsmeMMHqzS97o7gu 6HUXd45p6R3ApuOFHEDzIAlm/9+qTLQ5FPiEiJtUp5mP25gofGm+Czmqw58ZOjAJ R6joo1eaXYtaV9uYRiuwlT7XAgWU9UeKcZXeLb9pfAkHrt7M9GkgKSyJCwxF3zrV 84gF5Ry591n7eirDsZNMlAsks5+gLMOirjQq/+w66apDsykk0SkkncSMqhqBr03r pzI1QLByTG7/HAdYsEGMPoR8PERO93qCD1VbvJBKye00lysAem2DJ4CG3Grv2PjL pRL2mzybmW46TKFiONoEt87SFOkH1Em6RwDYTny1VNsAx/ermkbfSXp67y6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfyMuCqz/aSq59wpPdv4oukmRsO4wHwYDVR0j BBgwFoAUy6d7XfABs5sroN7K3bfT7YYsEDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODYyZDRkNzQtNjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURG MDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4NjJDMTAzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkE3N0I1REYwMDFCMzlCMkJBMERFQ0FEREI3RDNFRDg2MkMx MDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0Qz RUQ4NjJDMTAzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtCtzE0v2CPmm58tTyPPfbsQLenp17uEJqV c7jYD7aI6TQxxfwTbrld7dFHdjpXlrUXxqQArmY9AS+ihVvV3MgDcrubi++0qT2+ ddpwkYKOaotbijvZoLW4tkcWe9w/57s+e85QUH+vXMr9CA1X+wHgkiubvTuIz0S6 bvPvwo4MWSZkkGGRsaSxVvZlYMHOTQUYS/Uq7HL8a1NIhTcirGQVBXxPMge9MqlS VGZsKLUU1be8R38vEOFChkppP0cNWKBGHtIJhVQUhFd7h3+0XeScf3VFntMCVy3n YlB9lVWsch+LEE2eSVmqSCU52mNcY2BQ2iC/DskTUzCyIxiLGzU= -----END CERTIFICATE-----Generated at Sun Oct 25 20:52:58 2026 by rpki-client