$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft File: CBEB849658A6B8983666B1EA2518B5608A591AD8.mft (raw, json) Hash identifier: cMkyja+PZgidUQaA8NhkH8oNBLH5udRjXap9GVBU4Gg= Subject key identifier: 8D:CD:AF:68:1A:4A:FE:A7:56:63:47:36:5D:D3:47:43:11:8D:96:EC Authority key identifier: CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 Certificate issuer: /CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Certificate serial: 36B3617E9A616D1F9B99DCD920C2506C828E0FCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft Manifest number: D8 Signing time: Sat 10 Oct 2026 16:22:54 +0000 Manifest this update: Sat 10 Oct 2026 16:17:54 +0000 Manifest next update: Sun 11 Oct 2026 18:40:54 +0000 Files and hashes: 1: CBEB849658A6B8983666B1EA2518B5608A591AD8.crl (hash: OVyPwwynidS7HO14gYciUBZW1igCFp/8CPA0jsl3l4s=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: OQo3zpkJfNFwloJE5sK8Hg/XYpqL1j4buZq64xsDXvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b3:61:7e:9a:61:6d:1f:9b:99:dc:d9:20:c2:50:6c:82:8e:0f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBEB849658A6B8983666B1EA2518B5608A591AD8 Validity Not Before: Oct 10 16:17:54 2026 GMT Not After : Oct 11 18:40:54 2026 GMT Subject: CN=8DCDAF681A4AFEA7566347365DD34743118D96EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:d7:a4:2d:f0:9d:12:1b:2d:94:dc:a3:54: 02:76:c9:80:49:d0:69:07:67:d9:4b:d5:73:97:66: 83:85:ef:1d:0c:0c:57:f5:15:c1:38:4e:25:c0:e3: c7:11:ee:62:72:ad:ba:eb:a7:03:b5:5e:e8:de:89: e5:2a:8a:60:e4:7f:ce:61:3a:3e:e8:9b:f2:0e:2e: a7:52:6a:a3:41:02:77:8a:75:64:06:bd:eb:87:b2: 25:3b:a8:e9:67:a7:2b:4d:8e:37:f6:2a:c9:9d:26: 04:ed:68:89:2a:53:9a:28:8a:a9:50:8e:ae:7b:f5: 40:7d:c8:3c:10:31:b5:8f:4b:d9:87:ef:b9:ac:07: 52:87:c0:1d:f9:ab:2b:3d:c4:04:db:d4:25:09:cc: 20:77:ed:93:df:18:68:c8:3b:34:2e:77:a5:aa:96: 4d:b8:35:29:3b:e6:0b:31:d1:68:26:ba:10:30:e2: 98:06:17:cd:2b:39:6e:b8:59:d2:93:ba:c6:02:38: 3b:f4:d0:46:b8:37:7e:08:20:03:63:4b:7d:fa:f6: 0a:44:45:67:ab:ad:28:94:29:51:8d:7b:3f:fe:ae: a4:b8:2d:56:b1:82:23:bf:b9:17:6b:d0:e0:21:3b: a3:00:8a:58:05:1d:3b:5a:b0:da:12:72:9a:81:10: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:AF:68:1A:4A:FE:A7:56:63:47:36:5D:D3:47:43:11:8D:96:EC X509v3 Authority Key Identifier: keyid:CB:EB:84:96:58:A6:B8:98:36:66:B1:EA:25:18:B5:60:8A:59:1A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBEB849658A6B8983666B1EA2518B5608A591AD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/CBEB849658A6B8983666B1EA2518B5608A591AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3f:0a:7f:f3:ed:2a:f0:42:9e:fa:c5:03:14:c1:5a:85:0f: e7:6b:45:60:02:b4:17:0b:22:b9:6c:c8:06:28:bf:3c:51:59: 77:c4:00:77:65:eb:92:97:04:c2:dc:de:b8:42:7f:c4:9f:d1: 47:25:9d:41:63:89:c2:01:81:4a:e4:a5:df:ae:24:fd:fb:62: 0d:99:0a:95:b5:eb:da:f4:7a:43:1b:37:0e:f9:82:77:64:e1: 46:5b:3b:49:01:61:8c:f5:aa:0b:1a:e9:7d:75:2b:36:06:73: 72:76:94:de:ce:59:f9:a4:76:f8:e4:c8:2b:9e:09:17:ce:27: a6:35:27:8c:f6:1d:48:99:d0:ac:ef:b4:e1:ca:61:9f:d2:1b: e3:f1:a0:31:ea:c8:18:16:8d:79:7e:d2:9e:fb:01:ee:6c:fe: 45:44:09:c9:7c:37:b8:df:fb:b4:69:28:d4:4f:9c:8d:92:74: cc:d3:25:b9:58:00:57:0d:ac:ea:b6:23:b7:f3:89:b7:e3:b1: 01:d5:9b:4a:06:67:db:b8:ae:aa:63:a3:76:a1:71:35:ec:42: a7:40:69:36:71:7f:75:ee:41:72:f0:02:11:27:4f:03:ea:24: 2a:58:bb:0e:20:ad:7e:23:96:43:d4:59:ed:68:13:35:68:81: 4f:81:de:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrNhfpphbR+bmdzZIMJQbIKOD8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4 QTU5MUFEODAeFw0yNjEwMTAxNjE3NTRaFw0yNjEwMTExODQwNTRaMDMxMTAvBgNV BAMTKDhEQ0RBRjY4MUE0QUZFQTc1NjYzNDczNjVERDM0NzQzMTE4RDk2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoNekLfCdEhstlNyjVAJ2yYBJ 0GkHZ9lL1XOXZoOF7x0MDFf1FcE4TiXA48cR7mJyrbrrpwO1XujeieUqimDkf85h Oj7om/IOLqdSaqNBAneKdWQGveuHsiU7qOlnpytNjjf2KsmdJgTtaIkqU5ooiqlQ jq579UB9yDwQMbWPS9mH77msB1KHwB35qys9xATb1CUJzCB37ZPfGGjIOzQud6Wq lk24NSk75gsx0WgmuhAw4pgGF80rOW64WdKTusYCODv00Ea4N34IIANjS3369gpE RWerrSiUKVGNez/+rqS4LVaxgiO/uRdr0OAhO6MAilgFHTtasNoScpqBEII/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjc2vaBpK/qdWY0c2XdNHQxGNluwwHwYDVR0j BBgwFoAUy+uEllimuJg2ZrHqJRi1YIpZGtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzNGM4ZGMtODg1My00ZjY1LTgyMDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1 OEE2Qjg5ODM2NjZCMUVBMjUxOEI1NjA4QTU5MUFEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkVCODQ5NjU4QTZCODk4MzY2NkIxRUEyNTE4QjU2MDhBNTkx QUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvQ0JFQjg0OTY1OEE2Qjg5ODM2NjZCMUVBMjUxOEI1 NjA4QTU5MUFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc/Cn/z7SrwQp76xQMUwVqFD+drRWACtBcL IrlsyAYovzxRWXfEAHdl65KXBMLc3rhCf8Sf0UclnUFjicIBgUrkpd+uJP37Yg2Z CpW169r0ekMbNw75gndk4UZbO0kBYYz1qgsa6X11KzYGc3J2lN7OWfmkdvjkyCue CRfOJ6Y1J4z2HUiZ0KzvtOHKYZ/SG+PxoDHqyBgWjXl+0p77Ae5s/kVECcl8N7jf +7RpKNRPnI2SdMzTJblYAFcNrOq2I7fzibfjsQHVm0oGZ9u4rqpjo3ahcTXsQqdA aTZxf3XuQXLwAhEnTwPqJCpYuw4grX4jlkPUWe1oEzVogU+B3uY= -----END CERTIFICATE-----Generated at Sun Oct 11 01:07:49 2026 by rpki-client