$ rpki-client -vvf rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft File: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft (raw, json) Hash identifier: ilMRdge1RQFI1Dz46g9CwWh/oDhWeQRUgEcOaIu/u6I= Subject key identifier: FC:B8:40:0C:0E:4A:B0:C5:79:10:91:33:91:2B:36:2C:9D:B1:AB:CE Authority key identifier: CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 Certificate issuer: /CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Certificate serial: 7C5117833F2DFED10BC6CE18CB6DC03581211210 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 23:49:48 +0000 Manifest this update: Fri 19 Jun 2026 23:44:48 +0000 Manifest next update: Sun 21 Jun 2026 00:11:48 +0000 Files and hashes: 1: CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl (hash: eZU1ht/Px4pHUxpjjpPM5zPg1qHwWUAC1rReey1p+hA=) 2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: pbFqtdrF857Bo284a6tYg8zQs+U7i5koym7amsZuX/8=) 3: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: MlsPGYjwxcTUokzk7qgJtZJ0zjAyD3pAbTHc5VBWDJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:51:17:83:3f:2d:fe:d1:0b:c6:ce:18:cb:6d:c0:35:81:21:12:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034 Validity Not Before: Jun 19 23:44:48 2026 GMT Not After : Jun 21 00:11:48 2026 GMT Subject: CN=FCB8400C0E4AB0C579109133912B362C9DB1ABCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:14:32:a2:cb:4e:8b:fd:58:6f:8a:bf:a6: d2:33:34:50:1e:8a:7a:60:6e:e0:d5:b7:b3:4d:6d: 5c:71:17:49:ab:71:34:3f:12:64:47:c9:c0:cc:5a: b9:c4:d7:f0:17:cd:7f:c5:f0:96:bf:96:6b:73:eb: 9f:77:fe:78:8d:27:13:02:39:e9:91:98:6f:cf:f1: ab:30:2c:5a:10:5b:e3:46:64:0e:fc:0f:f1:51:58: 56:f3:0b:9c:fd:44:49:9e:5c:14:ec:f0:aa:6a:a5: 18:26:2a:f3:9b:57:c8:0c:b1:1f:ed:6a:9d:c2:bb: e5:5d:3f:3c:c0:ca:e5:0c:35:52:5b:ca:d8:23:a9: c6:8d:0d:2c:07:9f:d8:76:6f:5c:43:20:8b:c3:6b: f9:93:71:a3:ac:f6:09:dd:64:33:18:fc:c3:fc:fa: e5:fa:7d:c8:3e:d6:14:52:40:04:c3:56:b0:1a:f5: 47:40:2a:17:80:32:f1:d4:c9:f0:08:30:95:60:04: e8:45:af:ed:01:39:84:70:09:ea:6d:b1:51:c4:8d: 20:b9:49:e9:42:e9:f0:de:31:75:3f:9c:b0:29:11: a2:c7:6a:93:48:ca:22:e2:51:80:27:c5:ef:73:66: 0a:49:d9:7b:4e:84:b5:18:29:46:6c:3d:27:f3:6d: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:40:0C:0E:4A:B0:C5:79:10:91:33:91:2B:36:2C:9D:B1:AB:CE X509v3 Authority Key Identifier: keyid:CB:A7:7B:5D:F0:01:B3:9B:2B:A0:DE:CA:DD:B7:D3:ED:86:2C:10:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/CBA77B5DF001B39B2BA0DECADDB7D3ED862C1034.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2f:00:2c:9b:f1:9a:d2:43:5a:c1:7f:5c:71:7d:2c:5b:48: 13:6e:37:4a:e4:c7:5d:73:15:9b:97:54:71:b4:c9:5c:71:b8: a3:bc:16:d6:19:b0:51:fd:bf:5d:6f:8a:e9:56:18:a7:b7:e0: c1:46:78:93:64:e1:69:99:0c:f9:44:2b:49:54:93:01:71:44: 1d:20:c0:6b:93:ab:40:78:fa:15:41:c6:7e:dc:5e:1b:a8:f4: 2b:33:63:3d:d7:d5:e1:11:bc:45:e4:2c:5b:25:e1:df:3e:72: e0:bd:6c:04:36:52:6c:72:e2:29:0e:b2:ab:98:7e:d4:d5:35: 19:58:e2:45:ae:7c:ec:e6:52:46:3e:ba:c5:87:87:12:5c:69: fd:6f:0f:69:59:25:45:4e:22:c5:6b:07:27:16:cc:f3:ff:31: 1d:48:a6:3b:53:81:38:31:97:e2:d0:b7:82:4e:58:e4:f1:56: 7b:b5:aa:a3:15:ae:ea:6a:17:fc:61:17:73:71:e6:b9:d1:23: 05:51:84:d8:0b:1d:0f:1f:0d:69:28:7c:ef:25:db:ff:0d:db: 4c:b2:03:82:a6:ae:20:e5:e7:b0:d9:bf:78:09:fe:ba:45:b4: 27:e9:71:33:dc:9a:c2:5a:8a:f0:f0:5a:ba:4b:28:9c:23:cd: 59:6c:76:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFEXgz8t/tELxs4Yy23ANYEhEhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4 NjJDMTAzNDAeFw0yNjA2MTkyMzQ0NDhaFw0yNjA2MjEwMDExNDhaMDMxMTAvBgNV BAMTKEZDQjg0MDBDMEU0QUIwQzU3OTEwOTEzMzkxMkIzNjJDOURCMUFCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eBQyostOi/1Yb4q/ptIzNFAe inpgbuDVt7NNbVxxF0mrcTQ/EmRHycDMWrnE1/AXzX/F8Ja/lmtz6593/niNJxMC OemRmG/P8aswLFoQW+NGZA78D/FRWFbzC5z9REmeXBTs8KpqpRgmKvObV8gMsR/t ap3Cu+VdPzzAyuUMNVJbytgjqcaNDSwHn9h2b1xDIIvDa/mTcaOs9gndZDMY/MP8 +uX6fcg+1hRSQATDVrAa9UdAKheAMvHUyfAIMJVgBOhFr+0BOYRwCeptsVHEjSC5 SelC6fDeMXU/nLApEaLHapNIyiLiUYAnxe9zZgpJ2XtOhLUYKUZsPSfzbXbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/LhADA5KsMV5EJEzkSs2LJ2xq84wHwYDVR0j BBgwFoAUy6d7XfABs5sroN7K3bfT7YYsEDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODYyZDRkNzQtNjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURG MDAxQjM5QjJCQTBERUNBRERCN0QzRUQ4NjJDMTAzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkE3N0I1REYwMDFCMzlCMkJBMERFQ0FEREI3RDNFRDg2MkMx MDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvQ0JBNzdCNURGMDAxQjM5QjJCQTBERUNBRERCN0Qz RUQ4NjJDMTAzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgvACyb8ZrSQ1rBf1xxfSxbSBNuN0rkx11z FZuXVHG0yVxxuKO8FtYZsFH9v11viulWGKe34MFGeJNk4WmZDPlEK0lUkwFxRB0g wGuTq0B4+hVBxn7cXhuo9CszYz3X1eERvEXkLFsl4d8+cuC9bAQ2Umxy4ikOsquY ftTVNRlY4kWufOzmUkY+usWHhxJcaf1vD2lZJUVOIsVrBycWzPP/MR1IpjtTgTgx l+LQt4JOWOTxVnu1qqMVrupqF/xhF3Nx5rnRIwVRhNgLHQ8fDWkofO8l2/8N20yy A4KmriDl57DZv3gJ/rpFtCfpcTPcmsJaivDwWrpLKJwjzVlsdkY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:13:55 2026 by rpki-client