$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft (raw, json) Hash identifier: D9RTowhW0GrhkPSbaAJMi7V0xv5ScPOMc4/uDSUQj7Y= Subject key identifier: AD:4F:77:A4:4E:E8:F9:0E:1A:4B:52:95:32:37:DD:FB:0E:25:05:9C Authority key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Certificate issuer: /CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Certificate serial: 04955174B41AF1C47CB09E0D20F46D3AB34CF69D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft Manifest number: EC Signing time: Sun 25 Oct 2026 07:30:45 +0000 Manifest this update: Sun 25 Oct 2026 07:25:45 +0000 Manifest next update: Mon 26 Oct 2026 10:40:45 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: +KI9lluNblEh0OS/xQ9qvin+Rvp0BPbAFEdcf5tYUSM=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: c9DFVN+o2aNjQuCYgXR2NO5FyQq4sLAkfVGSHlmuEtY=) 3: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl (hash: gCJWZFy1k5TbKceeibJM9S5YF8amekiCvWYFNLvuyjw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 10:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:95:51:74:b4:1a:f1:c4:7c:b0:9e:0d:20:f4:6d:3a:b3:4c:f6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Validity Not Before: Oct 25 07:25:45 2026 GMT Not After : Oct 26 10:40:45 2026 GMT Subject: CN=AD4F77A44EE8F90E1A4B52953237DDFB0E25059C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:77:09:e2:6c:1f:7f:d8:0b:d0:08:e9:31: 98:cc:c6:ac:b0:18:e0:0f:81:4c:14:a6:6c:bd:93: c4:54:47:93:ac:3d:f1:97:2c:d1:2b:a4:c8:2b:1b: e9:b9:cd:b6:2c:b3:10:21:a4:00:bd:b8:6a:f8:3c: 70:e3:6d:0a:54:43:e5:11:ae:12:5c:09:7c:69:bd: 89:aa:b2:2b:85:ad:c5:68:59:ed:ff:f3:15:1d:c1: 8a:57:fe:c5:f5:94:39:d6:34:2d:d2:d6:5b:5e:11: 5c:99:2b:15:d8:4c:f9:66:c9:9a:23:16:26:ff:39: 94:e0:b8:b9:35:c8:46:5e:48:70:59:eb:54:ab:8c: 8f:6c:e6:38:a8:43:ab:94:b1:a4:2f:86:95:8f:d9: b6:9f:71:c5:76:f2:b0:3e:a5:56:a5:bd:14:90:55: 08:08:25:cf:bd:80:b4:90:0e:05:01:51:05:4e:61: e4:76:0d:d4:42:22:d3:a5:86:a8:76:48:7e:0e:2e: 5a:8f:24:64:cc:38:2b:53:3d:b6:70:7c:e6:cf:ce: 38:97:4b:3c:93:c2:bc:0b:52:c5:56:3e:be:8c:72: 56:95:e8:13:d9:06:71:d0:7c:8e:d3:cf:c5:9c:32: 41:b0:7f:ab:c8:97:34:11:bf:6d:f0:f3:9c:5d:91: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4F:77:A4:4E:E8:F9:0E:1A:4B:52:95:32:37:DD:FB:0E:25:05:9C X509v3 Authority Key Identifier: keyid:CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b8:3b:94:33:3d:41:33:00:5c:dc:24:71:a3:1f:c9:06:eb: de:75:7f:93:ec:a0:45:ad:aa:b9:1b:e7:9f:f1:4c:78:2f:b3: 1c:02:9b:00:f5:5e:40:cc:3a:ff:12:62:37:d1:8a:29:18:c5: 85:26:41:83:18:be:4c:e0:99:e2:98:2c:44:0c:3d:a5:8e:ec: ef:dc:59:ec:5a:61:59:85:bb:9a:1d:ea:86:1b:4e:de:ba:ce: 30:3d:52:d0:d1:6e:7a:26:4a:60:c5:5f:c0:65:fb:5a:9b:e0: 01:ea:df:43:44:2b:2e:0e:8b:24:80:0b:ec:50:9c:ae:6c:67: 22:83:53:ee:d9:73:df:f2:25:46:d6:6d:3c:60:c0:80:9b:57: 8f:e1:01:ca:77:0d:18:9e:b5:94:2a:18:ce:a2:46:3f:ab:08: 1a:15:a7:0a:b4:20:37:78:ce:44:22:13:65:43:36:94:0c:a1: 45:96:89:15:21:0d:47:21:56:9f:76:eb:a7:85:09:07:da:5e: 44:68:1f:85:74:b0:17:4e:6a:b3:18:81:1e:8c:42:da:98:fd: 60:0e:32:e5:ba:cb:8e:65:cb:24:f9:35:5b:2d:b4:87:83:d0: 0a:16:67:f5:e2:3f:66:0c:ca:d5:07:8b:69:5a:a2:3c:ba:b4: 3d:40:9f:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJVRdLQa8cR8sJ4NIPRtOrNM9p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1NDM4 RjUxNkU0NTAeFw0yNjEwMjUwNzI1NDVaFw0yNjEwMjYxMDQwNDVaMDMxMTAvBgNV BAMTKEFENEY3N0E0NEVFOEY5MEUxQTRCNTI5NTMyMzdEREZCMEUyNTA1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B3cJ4mwff9gL0AjpMZjMxqyw GOAPgUwUpmy9k8RUR5OsPfGXLNErpMgrG+m5zbYssxAhpAC9uGr4PHDjbQpUQ+UR rhJcCXxpvYmqsiuFrcVoWe3/8xUdwYpX/sX1lDnWNC3S1lteEVyZKxXYTPlmyZoj Fib/OZTguLk1yEZeSHBZ61SrjI9s5jioQ6uUsaQvhpWP2bafccV28rA+pValvRSQ VQgIJc+9gLSQDgUBUQVOYeR2DdRCItOlhqh2SH4OLlqPJGTMOCtTPbZwfObPzjiX SzyTwrwLUsVWPr6MclaV6BPZBnHQfI7Tz8WcMkGwf6vIlzQRv23w85xdkVFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrU93pE7o+Q4aS1KVMjfd+w4lBZwwHwYDVR0j BBgwFoAUy8s14jwHcCtN3h4enoAVQ49RbkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFkYzcxY2QtYWNjYS00MTVjLWIyODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIz QzA3NzAyQjREREUxRTFFOUU4MDE1NDM4RjUxNkU0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkNCMzVFMjNDMDc3MDJCNERERTFFMUU5RTgwMTU0MzhGNTE2 RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvQ0JDQjM1RTIzQzA3NzAyQjREREUxRTFFOUU4MDE1 NDM4RjUxNkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALS4O5QzPUEzAFzcJHGjH8kG6951f5PsoEWt qrkb55/xTHgvsxwCmwD1XkDMOv8SYjfRiikYxYUmQYMYvkzgmeKYLEQMPaWO7O/c WexaYVmFu5od6oYbTt66zjA9UtDRbnomSmDFX8Bl+1qb4AHq30NEKy4OiySAC+xQ nK5sZyKDU+7Zc9/yJUbWbTxgwICbV4/hAcp3DRietZQqGM6iRj+rCBoVpwq0IDd4 zkQiE2VDNpQMoUWWiRUhDUchVp9266eFCQfaXkRoH4V0sBdOarMYgR6MQtqY/WAO MuW6y45lyyT5NVsttIeD0AoWZ/XiP2YMytUHi2laojy6tD1An2A= -----END CERTIFICATE-----Generated at Mon Oct 26 02:23:03 2026 by rpki-client