$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft (raw, json) Hash identifier: ue1lmzXzaUkgw1MjUgRMnywvsN34/FgRgt/sLquiI6w= Subject key identifier: 42:6F:91:BE:4F:45:4A:86:E9:2B:72:C4:96:BB:D5:AC:AA:C1:24:30 Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Certificate serial: 25D37961EE420422ABDE74CA1E5D3C425A9092FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft Manifest number: EE Signing time: Sun 25 Oct 2026 12:16:55 +0000 Manifest this update: Sun 25 Oct 2026 12:11:55 +0000 Manifest next update: Mon 26 Oct 2026 15:37:55 +0000 Files and hashes: 1: 3130332e3138352e34342e302f32342d3234203d3e20313339343536.roa (hash: 6ZJ53yDSZZbhA3HLWOJtQJ5qYulxYXvBHN4NhIRy3dM=) 2: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl (hash: +JA7bnOd7E/4GNzyVH9tqKP5NO6feVj5k6p6fsuSHFk=) 3: 3130332e3138352e34342e302f32332d3233203d3e203538383230.roa (hash: AtTReWoHalW1jTCt7si9vqdmAaRn+woGu9bysUat+zE=) 4: 3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa (hash: 5P1W95x+b+VcAeWv+Uihp1cvRwss8nuTjkrW2k6u0F4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d3:79:61:ee:42:04:22:ab:de:74:ca:1e:5d:3c:42:5a:90:92:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Validity Not Before: Oct 25 12:11:55 2026 GMT Not After : Oct 26 15:37:55 2026 GMT Subject: CN=426F91BE4F454A86E92B72C496BBD5ACAAC12430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:6b:d2:76:45:0c:55:0e:bc:7b:cb:1a:58: e5:bb:d4:23:b9:12:4b:98:f4:27:00:6b:d6:15:37: c0:f2:6a:05:95:2b:f3:13:3b:4f:38:e4:79:17:5e: 3a:da:24:2d:11:dd:2e:4c:5d:ed:46:20:46:ce:0e: b0:04:36:7c:51:1f:85:0c:56:a2:91:c1:3a:01:39: fd:e1:56:32:c5:a1:5c:ae:4e:09:67:a6:12:e4:f5: 25:0a:1a:8e:3d:d9:65:f8:d2:d4:10:04:92:3e:d6: 83:7a:21:75:77:b6:d1:b7:31:f3:79:1a:cd:4a:23: 7b:13:43:aa:a9:51:6b:48:a5:93:85:94:fe:14:90: ba:e9:36:2f:d8:fb:03:f0:6c:4f:87:39:0a:c4:82: ef:cb:64:73:03:2d:3a:8a:6d:8b:56:f4:61:9d:53: 81:00:3d:6b:68:fe:44:f5:93:57:e6:38:0e:fb:b4: 31:96:1c:d0:72:5f:82:32:ef:aa:ba:05:c3:d4:4b: 55:ca:bc:dc:a2:01:0e:61:52:fd:b9:50:0e:05:b9: e9:cd:c8:32:3b:1e:c4:d8:c2:2b:b7:82:b6:d2:c8: 86:70:86:83:5b:19:ab:31:f7:76:69:89:ee:cd:c9: 9f:71:dc:32:6d:c4:09:1b:6f:7d:5f:90:ea:89:eb: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:91:BE:4F:45:4A:86:E9:2B:72:C4:96:BB:D5:AC:AA:C1:24:30 X509v3 Authority Key Identifier: keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2f:ce:8d:c0:28:ce:4f:88:04:a6:1d:4a:31:dc:fa:97:c0: 79:ee:7a:ac:0e:cc:ed:d5:25:be:03:ec:3f:32:47:38:5a:f9: 33:7e:6d:9a:63:20:6c:6e:df:b0:5b:2f:6a:a4:6d:bb:fa:20: a0:ca:60:80:77:24:cf:a9:f8:6a:b2:56:19:e3:9c:c4:d3:77: bb:9d:e0:2a:72:76:3e:63:af:47:08:79:eb:06:a0:ab:f3:b9: 25:5e:b7:35:b4:26:1d:b9:98:30:06:dd:4d:1c:85:a0:99:4d: 4d:b2:6b:b0:9c:42:ca:fe:93:9e:34:76:ef:1e:14:bb:a6:cd: 9b:3b:77:98:e1:bd:e3:e7:c9:33:db:c1:5c:5e:9c:f1:33:1a: 2e:5a:f8:e8:26:b6:86:20:63:29:bb:bc:bd:4f:67:06:00:43: 56:9e:42:58:26:82:fe:ce:d7:f9:e5:77:27:06:bd:4e:59:6c: b5:18:4c:d2:8b:a3:01:3a:eb:e6:35:44:5f:41:0c:47:80:69: 75:c9:3c:75:4a:54:ee:1e:44:08:8d:91:6b:03:97:5b:fe:8f: 5a:d3:9d:ea:a7:7d:39:1a:84:0a:21:4e:5a:da:a4:59:65:be: d1:4c:47:5e:78:04:62:f2:2e:a6:28:22:cf:18:53:a1:22:bf: 7b:90:bf:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdN5Ye5CBCKr3nTKHl08QlqQkvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIw QTFCNEEzNTAeFw0yNjEwMjUxMjExNTVaFw0yNjEwMjYxNTM3NTVaMDMxMTAvBgNV BAMTKDQyNkY5MUJFNEY0NTRBODZFOTJCNzJDNDk2QkJENUFDQUFDMTI0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzcGvSdkUMVQ68e8saWOW71CO5 EkuY9CcAa9YVN8DyagWVK/MTO0845HkXXjraJC0R3S5MXe1GIEbODrAENnxRH4UM VqKRwToBOf3hVjLFoVyuTglnphLk9SUKGo492WX40tQQBJI+1oN6IXV3ttG3MfN5 Gs1KI3sTQ6qpUWtIpZOFlP4UkLrpNi/Y+wPwbE+HOQrEgu/LZHMDLTqKbYtW9GGd U4EAPWto/kT1k1fmOA77tDGWHNByX4Iy76q6BcPUS1XKvNyiAQ5hUv25UA4FuenN yDI7HsTYwiu3grbSyIZwhoNbGasx93Zpie7NyZ9x3DJtxAkbb31fkOqJ62o3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQm+Rvk9FSobpK3LElrvVrKrBJDAwHwYDVR0j BBgwFoAUy+hyx/fogec4+7mD/12EogobSjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM1ZjJlNGYtNDVkNC00ZDYyLTkyY2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdG N0U4ODFFNzM4RkJCOTgzRkY1RDg0QTIwQTFCNEEzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQkU4NzJDN0Y3RTg4MUU3MzhGQkI5ODNGRjVEODRBMjBBMUI0 QTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky Y2YtZDc4YjVjNTQxYTFjLzAvQ0JFODcyQzdGN0U4ODFFNzM4RkJCOTgzRkY1RDg0 QTIwQTFCNEEzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4vzo3AKM5PiASmHUox3PqXwHnueqwOzO3V Jb4D7D8yRzha+TN+bZpjIGxu37BbL2qkbbv6IKDKYIB3JM+p+GqyVhnjnMTTd7ud 4Cpydj5jr0cIeesGoKvzuSVetzW0Jh25mDAG3U0chaCZTU2ya7CcQsr+k540du8e FLumzZs7d5jhvePnyTPbwVxenPEzGi5a+OgmtoYgYym7vL1PZwYAQ1aeQlgmgv7O 1/nldycGvU5ZbLUYTNKLowE66+Y1RF9BDEeAaXXJPHVKVO4eRAiNkWsDl1v+j1rT neqnfTkahAohTlrapFllvtFMR154BGLyLqYoIs8YU6Eiv3uQv4w= -----END CERTIFICATE-----Generated at Sun Oct 25 14:28:56 2026 by rpki-client