$ rpki-client -vvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: MwTC2G2KK71MGNmaCXIx9FQISAlywa/DlqDp9CpDd2w= Subject key identifier: C2:85:6E:FF:30:06:A5:32:0D:85:E6:5C:6F:E3:8F:8C:43:0F:C5:14 Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 72B8B1E20876ED2A3A3011DA3EAB99238671B1DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: 47 Signing time: Wed 24 Jun 2026 02:13:10 +0000 Manifest this update: Wed 24 Jun 2026 02:08:10 +0000 Manifest next update: Thu 25 Jun 2026 04:51:10 +0000 Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) 2: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: rWfqke6ONFWojGsqKuH8kDo90nElzg2lklx+OpNYZl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 04:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b8:b1:e2:08:76:ed:2a:3a:30:11:da:3e:ab:99:23:86:71:b1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: Jun 24 02:08:10 2026 GMT Not After : Jun 25 04:51:10 2026 GMT Subject: CN=C2856EFF3006A5320D85E65C6FE38F8C430FC514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:51:2b:49:77:d8:71:5d:3c:99:40:13:d2: 43:45:0d:94:56:f7:9c:e0:a0:8b:69:ed:05:ec:59: c3:7d:af:a8:a5:5f:3f:f6:f4:60:e1:13:b7:7b:b8: 33:c4:b0:0a:d1:74:e2:1d:1f:4c:16:f1:0b:de:76: 31:c8:cd:ea:cc:58:15:31:3b:c5:72:54:26:a2:90: 4e:2c:c3:37:82:ac:a4:e0:63:0d:c0:ca:dd:37:9c: 61:e3:9e:8d:d8:e2:91:a4:7b:f1:e0:26:28:d6:93: 5b:36:04:8f:be:63:2e:62:d8:3d:65:40:5c:0c:bc: 09:4f:81:8a:58:b9:a7:36:2a:c9:93:fc:0b:e8:80: 0f:23:14:d6:8a:9c:69:02:99:cf:a3:da:49:7b:68: 17:39:f6:9f:bd:d9:f7:ff:00:aa:14:2a:6f:b7:8c: 0d:a4:45:af:46:4d:7a:91:63:86:fb:0e:ff:ab:a5: 7a:7c:8b:d4:e8:76:a7:fb:52:a0:8d:63:a7:ba:c6: 2d:ad:0e:fa:2e:6d:6f:bd:06:24:a9:d1:b5:e7:91: c1:fd:bf:47:65:f7:9f:bb:1b:f1:65:76:ce:ad:56: f0:1d:12:30:fc:7a:85:15:81:58:a3:e3:ac:18:3e: 8d:38:f7:c3:11:a6:72:b9:66:22:6b:4f:03:ef:45: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:85:6E:FF:30:06:A5:32:0D:85:E6:5C:6F:E3:8F:8C:43:0F:C5:14 X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:86:70:32:47:ed:af:c6:bb:ed:50:01:e7:69:7b:85:32:ae: 6a:90:8b:0c:b0:ec:e7:fb:a2:49:fe:1e:bc:ce:8c:34:3f:e6: 96:02:99:8d:3c:39:93:a6:dd:98:a4:58:23:29:8d:83:58:31: 94:76:0e:9c:8d:23:a7:81:04:ec:e0:6a:dd:f9:0a:72:02:fc: 7b:44:6f:2c:aa:7a:0e:c1:58:cd:f5:1f:41:5a:b5:4b:4e:0b: 46:e2:c6:54:31:13:d5:5a:fe:ed:7e:49:86:96:3e:fe:3c:02: 79:0a:b8:fa:85:61:82:57:87:ec:90:a5:06:49:27:38:68:e6: 72:56:2e:b2:d2:72:cb:62:ea:da:1f:bd:bd:ed:74:57:42:de: af:8e:75:24:ac:dc:25:62:d9:7b:34:c5:bd:cd:0c:b1:6d:1d: 68:a6:e8:a3:ed:79:f7:d8:07:56:5a:6c:06:e4:69:bc:76:56: d7:88:a2:b6:cb:21:47:ce:1c:ad:7c:e2:4a:97:99:e5:46:32: 59:ed:73:20:d7:4f:aa:d2:a0:a1:de:e2:65:db:76:fa:12:bc: 1b:60:e3:0f:05:61:35:aa:a3:bd:dd:10:ec:c9:59:a5:65:7c: 86:31:bd:7a:37:6b:1c:b4:a6:88:9d:ae:da:69:2e:c2:a0:44: 19:1b:a1:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrix4gh27So6MBHaPquZI4Zxsd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjA2MjQwMjA4MTBaFw0yNjA2MjUwNDUxMTBaMDMxMTAvBgNV BAMTKEMyODU2RUZGMzAwNkE1MzIwRDg1RTY1QzZGRTM4RjhDNDMwRkM1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK61ErSXfYcV08mUAT0kNFDZRW 95zgoItp7QXsWcN9r6ilXz/29GDhE7d7uDPEsArRdOIdH0wW8QvedjHIzerMWBUx O8VyVCaikE4swzeCrKTgYw3Ayt03nGHjno3Y4pGke/HgJijWk1s2BI++Yy5i2D1l QFwMvAlPgYpYuac2KsmT/AvogA8jFNaKnGkCmc+j2kl7aBc59p+92ff/AKoUKm+3 jA2kRa9GTXqRY4b7Dv+rpXp8i9Todqf7UqCNY6e6xi2tDvoubW+9BiSp0bXnkcH9 v0dl95+7G/Flds6tVvAdEjD8eoUVgVij46wYPo0498MRpnK5ZiJrTwPvRWfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwoVu/zAGpTINheZcb+OPjEMPxRQwHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2GcDJH7a/Gu+1QAedpe4UyrmqQiwyw7Of7 okn+HrzOjDQ/5pYCmY08OZOm3ZikWCMpjYNYMZR2DpyNI6eBBOzgat35CnIC/HtE byyqeg7BWM31H0FatUtOC0bixlQxE9Va/u1+SYaWPv48AnkKuPqFYYJXh+yQpQZJ Jzho5nJWLrLScsti6tofvb3tdFdC3q+OdSSs3CVi2Xs0xb3NDLFtHWim6KPteffY B1ZabAbkabx2VteIorbLIUfOHK184kqXmeVGMlntcyDXT6rSoKHe4mXbdvoSvBtg 4w8FYTWqo73dEOzJWaVlfIYxvXo3axy0poidrtppLsKgRBkboY4= -----END CERTIFICATE-----Generated at Wed Jun 24 15:41:36 2026 by rpki-client