$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft File: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft (raw, json) Hash identifier: qFj4+WwMzzcK/x311OhFpV3KJejHYqCk/mOxmiDCSvs= Subject key identifier: D1:18:63:2C:7B:26:1D:B0:4E:83:E0:71:7F:28:5C:53:AB:4E:75:F8 Authority key identifier: 1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC Certificate issuer: /CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Certificate serial: 149CBBBB71D577115B35D45C7716F681D410CAAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft Manifest number: BF Signing time: Mon 21 Sep 2026 15:20:36 +0000 Manifest this update: Mon 21 Sep 2026 15:15:36 +0000 Manifest next update: Tue 22 Sep 2026 16:46:36 +0000 Files and hashes: 1: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: 7FE61Zc3WU63aXcyhhG+2SBAGWSpraBvNcEGom2PNzw=) 2: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl (hash: k0/+Mfe2YKdxsV6c5ukdUDeCkL89GyWqV3jA42kLqHM=) 3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: X1BuffyPqZatWKWcf+HC9BxedbehRoziiAknm7XowP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9c:bb:bb:71:d5:77:11:5b:35:d4:5c:77:16:f6:81:d4:10:ca:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Validity Not Before: Sep 21 15:15:36 2026 GMT Not After : Sep 22 16:46:36 2026 GMT Subject: CN=D118632C7B261DB04E83E0717F285C53AB4E75F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:9b:5e:04:41:4f:b1:2b:69:3e:9f:27:98: 20:47:b2:7e:ed:87:13:b5:c9:3f:af:a7:f7:42:56: 65:49:26:9c:7e:8a:9a:34:df:4a:88:9a:a8:97:38: 0a:be:88:10:5f:b6:55:bb:d9:2a:53:13:3a:c2:a1: 1b:cc:f7:f1:c1:bd:aa:6a:90:c5:b7:0b:7a:41:bd: 0e:b4:be:fb:56:39:80:47:be:3b:27:4b:ee:86:a5: af:f0:92:4a:a2:b1:78:e9:c6:b0:cb:70:1d:c4:5b: 60:3f:2a:a5:e3:91:a7:a6:21:ab:9d:c4:04:61:10: 12:52:97:91:d3:20:31:72:d8:2a:a1:0d:cc:73:a5: 23:64:bb:12:be:c3:b9:b6:ed:8b:42:68:a6:d7:5d: ae:5d:84:f7:3c:d8:c2:c9:6b:85:cd:cf:dd:01:87: 14:46:14:56:b9:52:94:96:db:98:29:99:89:dc:06: 71:0d:50:12:b4:28:06:cd:09:1f:e8:ad:41:3d:2e: de:82:0d:ec:9a:10:d6:eb:6a:fe:df:4a:1c:9d:9e: 3f:c4:eb:50:d1:6b:fa:89:79:4c:55:05:93:75:cf: 16:5b:35:4f:89:76:a9:a2:68:33:6b:6a:ac:9d:f0: d4:c7:1f:44:77:f8:7e:34:b2:49:39:1e:a8:54:3c: f8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:18:63:2C:7B:26:1D:B0:4E:83:E0:71:7F:28:5C:53:AB:4E:75:F8 X509v3 Authority Key Identifier: keyid:1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:78:1c:0f:bb:b3:81:08:57:25:e9:f5:7d:ed:f5:b9:a3:00: 3d:fe:83:1c:d1:ba:a5:6b:bd:29:eb:71:ca:f9:30:9d:4e:68: e7:72:af:7b:e3:5f:33:e0:73:5f:13:a9:cd:2f:ae:69:52:f2: 73:6e:72:48:ec:34:93:13:e0:22:03:a8:e5:00:02:85:f2:a0: e1:20:0c:0e:2a:d5:fe:08:be:98:9c:4e:fc:d5:e1:7b:44:ea: 5a:9b:9e:38:ea:5c:df:1e:de:a5:1d:f0:85:e8:1e:e5:53:d2: 24:4e:9e:6b:aa:93:1d:02:60:dc:75:23:18:a0:6b:d7:8a:24: 86:c6:82:bb:5c:1a:99:ef:a5:d4:ba:2d:39:cf:25:39:71:f9: fe:a9:c7:85:6c:d8:31:b0:8a:20:f5:64:88:b8:12:43:24:e0: 16:3d:1c:76:76:55:26:75:b7:f9:e8:f5:c8:ff:05:ce:38:b5: 46:b6:81:13:e7:bb:46:24:1c:12:d7:1f:52:07:14:70:46:db: 62:fd:a4:38:1c:e0:06:a6:54:e1:39:c0:45:18:17:db:f4:6c: 30:16:b6:a4:a1:87:ec:03:e6:3f:3d:3d:c4:6a:1b:ec:92:ad: 69:0d:46:1b:56:1f:fa:6b:5c:05:ab:9b:cd:26:ac:80:88:05: 07:c6:eb:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJy7u3HVdxFbNdRcdxb2gdQQyqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5NTFF ODEyNjZGQzAeFw0yNjA5MjExNTE1MzZaFw0yNjA5MjIxNjQ2MzZaMDMxMTAvBgNV BAMTKEQxMTg2MzJDN0IyNjFEQjA0RTgzRTA3MTdGMjg1QzUzQUI0RTc1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2JteBEFPsStpPp8nmCBHsn7t hxO1yT+vp/dCVmVJJpx+ipo030qImqiXOAq+iBBftlW72SpTEzrCoRvM9/HBvapq kMW3C3pBvQ60vvtWOYBHvjsnS+6Gpa/wkkqisXjpxrDLcB3EW2A/KqXjkaemIaud xARhEBJSl5HTIDFy2CqhDcxzpSNkuxK+w7m27YtCaKbXXa5dhPc82MLJa4XNz90B hxRGFFa5UpSW25gpmYncBnENUBK0KAbNCR/orUE9Lt6CDeyaENbrav7fShydnj/E 61DRa/qJeUxVBZN1zxZbNU+JdqmiaDNraqyd8NTHH0R3+H40skk5HqhUPPh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0RhjLHsmHbBOg+BxfyhcU6tOdfgwHwYDVR0j BBgwFoAUGxNZjj3DqNXwHuhpR7dJUegSZvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2NTI5ZGItOTMzMC00ZTk3LWFkZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUz REMzQThENUYwMUVFODY5NDdCNzQ5NTFFODEyNjZGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjEzNTk4RTNEQzNBOEQ1RjAxRUU4Njk0N0I3NDk1MUU4MTI2 NkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5 NTFFODEyNjZGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC54HA+7s4EIVyXp9X3t9bmjAD3+gxzRuqVr vSnrccr5MJ1OaOdyr3vjXzPgc18Tqc0vrmlS8nNuckjsNJMT4CIDqOUAAoXyoOEg DA4q1f4IvpicTvzV4XtE6lqbnjjqXN8e3qUd8IXoHuVT0iROnmuqkx0CYNx1Ixig a9eKJIbGgrtcGpnvpdS6LTnPJTlx+f6px4Vs2DGwiiD1ZIi4EkMk4BY9HHZ2VSZ1 t/no9cj/Bc44tUa2gRPnu0YkHBLXH1IHFHBG22L9pDgc4AamVOE5wEUYF9v0bDAW tqShh+wD5j89PcRqG+ySrWkNRhtWH/prXAWrm80mrICIBQfG61A= -----END CERTIFICATE-----Generated at Tue Sep 22 01:08:20 2026 by rpki-client