$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft File: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft (raw, json) Hash identifier: ez2IvCAIYH73weNdR9273NvntMsrCcfNbgN5dSEgtGc= Subject key identifier: 12:B7:3B:4C:5A:67:8B:3B:F4:11:BE:66:08:B3:6A:51:AA:DE:02:30 Authority key identifier: 1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 Certificate issuer: /CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Certificate serial: 28D10EBB4D47A95E51632087D58601CA01E4F76F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft Manifest number: BF Signing time: Mon 21 Sep 2026 07:56:31 +0000 Manifest this update: Mon 21 Sep 2026 07:51:31 +0000 Manifest next update: Tue 22 Sep 2026 11:15:31 +0000 Files and hashes: 1: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl (hash: wPf+jnS7svrYFM97TyOQZnJRXFfLyETuhypPNCi190M=) 2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: m7In3QfaxfsyuW0qTfRybGAF6wFMxAA9Ta2LCZQCpzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d1:0e:bb:4d:47:a9:5e:51:63:20:87:d5:86:01:ca:01:e4:f7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Validity Not Before: Sep 21 07:51:31 2026 GMT Not After : Sep 22 11:15:31 2026 GMT Subject: CN=12B73B4C5A678B3BF411BE6608B36A51AADE0230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:76:f0:23:5c:bd:fa:e4:99:71:05:f0:ac: 98:06:5f:7f:d2:f1:49:30:72:10:89:e5:bf:7e:3f: b6:10:65:ac:12:0b:29:57:d1:1a:9c:6e:d0:bc:ed: 2f:fd:84:4b:51:80:89:15:88:ba:1d:eb:38:c4:0f: 40:87:52:93:52:f6:fd:db:9a:d9:73:fe:8f:69:cf: 5b:7e:51:f0:f4:8b:28:0e:37:69:bf:c9:6f:99:94: 1c:24:84:ca:9b:fc:88:c8:b4:03:c0:87:9d:fb:35: 0f:d3:9d:1a:8e:04:ca:a0:62:1f:b3:dc:3b:62:e9: 7d:a3:3f:b7:67:87:79:26:11:ae:bc:67:72:6b:ec: 24:e6:d7:74:91:cc:0c:b7:1c:81:d8:c6:3b:9f:6e: 46:9a:76:41:22:f2:85:8d:3f:71:d0:94:e3:41:4a: 11:49:07:2a:00:b2:5a:72:22:c7:d8:d3:83:98:d4: e8:6c:6c:6e:f4:18:b4:dc:ce:ad:64:5b:5b:98:56: 35:d8:c7:36:ae:6d:b2:c1:da:98:f2:d2:ac:b7:c4: 63:95:41:82:73:fc:7d:3b:ff:b8:d1:db:19:79:f5: 95:f2:b6:01:12:b5:85:07:ab:f5:35:e9:51:b3:48: 66:89:ea:80:3a:1a:e7:a9:30:d5:6f:54:b9:95:49: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B7:3B:4C:5A:67:8B:3B:F4:11:BE:66:08:B3:6A:51:AA:DE:02:30 X509v3 Authority Key Identifier: keyid:1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6a:88:1a:69:f1:69:a6:c4:6c:08:ee:c1:cd:f6:af:73:20: f3:7b:11:a3:47:e2:51:d1:34:4f:a0:ee:bc:da:ec:2b:1b:be: 78:ef:30:b8:a9:a6:38:30:99:bc:41:25:db:79:d5:c8:92:4e: 48:94:a0:75:ef:35:6a:a5:7b:52:82:0c:2a:4b:ef:d7:bf:66: a4:c9:81:b4:b0:24:6a:6d:6d:7a:eb:fd:51:f9:6c:4c:0d:c8: 49:08:f9:55:d4:a5:0f:4a:c9:3a:9c:38:ff:ed:c5:a0:37:0e: b0:a0:a2:eb:5d:de:e1:b7:2a:bf:db:3f:b3:e1:8e:85:6f:65: 80:98:6e:99:54:a8:1d:82:da:3b:42:71:67:29:a6:ec:e0:9d: d0:00:d5:65:6e:33:e3:15:42:c4:c8:96:b1:0c:7e:7f:cb:e3: 39:f4:df:de:42:78:e5:2a:31:5e:4a:2d:92:9f:52:e4:01:c9: 48:2d:77:e7:9d:bf:0b:fd:af:fe:02:ee:70:81:f1:9e:39:b3: f1:ac:ca:e5:5e:86:64:14:8e:0e:46:c4:d9:f6:b3:59:cc:3d: 10:76:e0:1b:b6:7a:8e:7b:dc:00:a2:1b:e5:8e:c7:64:c5:e2: 00:1b:71:b1:85:04:5e:fd:08:ca:63:e4:c5:58:f7:e2:c5:33: ca:50:a3:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKNEOu01HqV5RYyCH1YYBygHk928wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1 RjRFNUY4ODAeFw0yNjA5MjEwNzUxMzFaFw0yNjA5MjIxMTE1MzFaMDMxMTAvBgNV BAMTKDEyQjczQjRDNUE2NzhCM0JGNDExQkU2NjA4QjM2QTUxQUFERTAyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaXbwI1y9+uSZcQXwrJgGX3/S 8UkwchCJ5b9+P7YQZawSCylX0RqcbtC87S/9hEtRgIkViLod6zjED0CHUpNS9v3b mtlz/o9pz1t+UfD0iygON2m/yW+ZlBwkhMqb/IjItAPAh537NQ/TnRqOBMqgYh+z 3Dti6X2jP7dnh3kmEa68Z3Jr7CTm13SRzAy3HIHYxjufbkaadkEi8oWNP3HQlONB ShFJByoAslpyIsfY04OY1OhsbG70GLTczq1kW1uYVjXYxzaubbLB2pjy0qy3xGOV QYJz/H07/7jR2xl59ZXytgEStYUHq/U16VGzSGaJ6oA6GuepMNVvVLmVSeZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUErc7TFpnizv0Eb5mCLNqUareAjAwHwYDVR0j BBgwFoAUG6ZTqCJqBvugtiW1xLaoRl9OX4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgy MjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1RjRFNUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkE2NTNBODIyNkEwNkZCQTBCNjI1QjVDNEI2QTg0NjVGNEU1 Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4 NDY1RjRFNUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtqiBpp8WmmxGwI7sHN9q9zIPN7EaNH4lHR NE+g7rza7CsbvnjvMLippjgwmbxBJdt51ciSTkiUoHXvNWqle1KCDCpL79e/ZqTJ gbSwJGptbXrr/VH5bEwNyEkI+VXUpQ9KyTqcOP/txaA3DrCgoutd3uG3Kr/bP7Ph joVvZYCYbplUqB2C2jtCcWcppuzgndAA1WVuM+MVQsTIlrEMfn/L4zn0395CeOUq MV5KLZKfUuQByUgtd+edvwv9r/4C7nCB8Z45s/GsyuVehmQUjg5GxNn2s1nMPRB2 4Bu2eo573ACiG+WOx2TF4gAbcbGFBF79CMpj5MVY9+LFM8pQo8s= -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:00 2026 by rpki-client