$ rpki-client -vvf rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft File: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft (raw, json) Hash identifier: PjeZFxPO8mRXSLra+18TUvWXihchSYbWvnxrMOLF9jI= Subject key identifier: DD:EA:DA:0B:C6:39:E6:50:5C:FA:FC:A5:CE:9E:4D:52:88:31:FB:23 Authority key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Certificate issuer: /CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Certificate serial: 313C5F6612CE97A1ED73DE959692EFED28073AF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 10:00:02 +0000 Manifest this update: Wed 17 Jun 2026 09:55:02 +0000 Manifest next update: Thu 18 Jun 2026 11:05:02 +0000 Files and hashes: 1: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: GT1/9A1T1IHuKtVAU+XRFXaTDB7gCJgDb4j3AFpErYA=) 2: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl (hash: 681AANeB+p0Z7qJUu58gg8tf821hrAUyBngW4L99faw=) 3: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: bT5Uw393iqcafpbbgDNkyN2J0K45Ob4q+8CX5o4YsWs=) 4: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: thh4X2NPWP82XDrx73Jv5IezHaIkq/gXqvOxSLdwylI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3c:5f:66:12:ce:97:a1:ed:73:de:95:96:92:ef:ed:28:07:3a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Validity Not Before: Jun 17 09:55:02 2026 GMT Not After : Jun 18 11:05:02 2026 GMT Subject: CN=DDEADA0BC639E6505CFAFCA5CE9E4D528831FB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e5:3b:31:71:66:f2:c9:3c:2a:3a:f5:eb:d9: 51:5d:ae:8b:81:89:25:1b:4d:15:c4:dc:65:72:d5: 62:1e:92:35:93:5a:32:2e:f7:93:49:37:2a:97:2f: de:74:f9:76:f9:e8:9a:32:3e:22:cd:19:d5:34:ca: 4d:83:3e:f6:2d:59:91:ee:be:77:b4:17:06:5d:7f: 04:fb:e1:78:b4:66:d4:13:27:cc:f7:d3:48:dc:d8: f0:fe:a9:2a:f2:21:37:70:e3:0e:6b:34:8f:36:95: b4:fe:12:05:b7:df:e5:55:13:18:28:4f:21:89:b8: 5e:2c:91:48:3d:f2:33:49:24:d6:d4:ed:1f:b0:06: 2e:77:13:14:6e:a8:11:aa:dc:2d:90:49:17:1c:7f: 5e:f8:e5:16:40:bc:e7:82:6e:2e:66:ef:4f:e4:c6: ad:4b:75:4b:14:3d:2c:a0:10:f0:ea:02:e4:a5:ee: 0c:23:ff:a3:3b:a5:a3:16:37:8b:ae:fc:e4:96:84: 85:a0:6e:80:d3:1e:a4:f0:d2:48:bd:75:91:cf:6d: f1:41:85:80:42:cc:c8:cf:56:13:88:12:7a:e9:4e: fa:b9:cc:36:fa:1f:bb:b3:17:d3:1b:b8:de:75:14: 06:69:3b:a3:aa:f1:80:3c:c6:fe:bd:0a:ce:1c:70: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EA:DA:0B:C6:39:E6:50:5C:FA:FC:A5:CE:9E:4D:52:88:31:FB:23 X509v3 Authority Key Identifier: keyid:1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ef:63:df:9a:3a:97:1f:97:49:55:77:ac:dd:9f:8d:3d:f2: 3a:b2:d0:8c:a7:8c:3c:09:26:95:1c:58:dc:5a:0a:25:0c:ba: 7f:29:4a:05:71:88:5d:db:9f:75:ad:c5:e5:c9:92:7e:9b:fb: 4e:fc:cb:71:28:f4:42:f6:71:fb:4e:8a:8e:8f:62:9b:05:f3: 28:48:e3:99:81:72:f9:c4:25:5e:09:eb:0f:61:c2:0c:dc:ea: 5e:c4:47:24:91:2c:e6:38:aa:0d:55:1d:e2:98:e5:a1:bc:ce: ba:22:10:e1:dd:f8:52:fb:b3:2e:90:2c:00:a8:6d:67:ef:43: d2:df:49:fd:a3:fa:91:c0:da:d2:af:92:9c:c4:ad:ba:2b:d7: 39:91:36:ae:bc:60:af:b5:0b:9e:b6:79:15:de:b6:3f:2e:79: 25:93:6c:4a:36:fe:d8:ae:25:3b:29:73:19:a1:09:0a:f4:4e: 92:2f:1f:a6:a4:73:a8:fd:cf:d1:c9:df:03:e6:f9:72:bb:74: 4a:77:2e:3c:d3:52:ae:cb:88:ba:05:92:96:16:3d:ac:a4:46: 5e:bc:0d:49:ff:3f:c7:82:ee:fe:2a:67:d7:f5:01:a0:80:38: 6c:c4:5b:09:d5:6e:3e:37:6b:96:4e:33:9d:b9:fc:ae:e2:01: 19:04:9d:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTxfZhLOl6Htc96VlpLv7SgHOvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEz Rjg4MURFNTAeFw0yNjA2MTcwOTU1MDJaFw0yNjA2MTgxMTA1MDJaMDMxMTAvBgNV BAMTKERERUFEQTBCQzYzOUU2NTA1Q0ZBRkNBNUNFOUU0RDUyODgzMUZCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE5TsxcWbyyTwqOvXr2VFdrouB iSUbTRXE3GVy1WIekjWTWjIu95NJNyqXL950+Xb56JoyPiLNGdU0yk2DPvYtWZHu vne0FwZdfwT74Xi0ZtQTJ8z300jc2PD+qSryITdw4w5rNI82lbT+EgW33+VVExgo TyGJuF4skUg98jNJJNbU7R+wBi53ExRuqBGq3C2QSRccf1745RZAvOeCbi5m70/k xq1LdUsUPSygEPDqAuSl7gwj/6M7paMWN4uu/OSWhIWgboDTHqTw0ki9dZHPbfFB hYBCzMjPVhOIEnrpTvq5zDb6H7uzF9MbuN51FAZpO6Oq8YA8xv69Cs4ccFjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3eraC8Y55lBc+vylzp5NUogx+yMwHwYDVR0j BBgwFoAUG2WQnBQEsPB/jzZ84+5u+j+IHeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM1MDQ4YzYtOGNjZC00NjNkLWFkMzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMx NDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEzRjg4MURFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjY1OTA5QzE0MDRCMEYwN0Y4RjM2N0NFM0VFNkVGQTNGODgx REU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZF RkEzRjg4MURFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjvY9+aOpcfl0lVd6zdn4098jqy0IynjDwJ JpUcWNxaCiUMun8pSgVxiF3bn3WtxeXJkn6b+078y3Eo9EL2cftOio6PYpsF8yhI 45mBcvnEJV4J6w9hwgzc6l7ERySRLOY4qg1VHeKY5aG8zroiEOHd+FL7sy6QLACo bWfvQ9LfSf2j+pHA2tKvkpzErbor1zmRNq68YK+1C562eRXetj8ueSWTbEo2/tiu JTspcxmhCQr0TpIvH6akc6j9z9HJ3wPm+XK7dEp3LjzTUq7LiLoFkpYWPaykRl68 DUn/P8eC7v4qZ9f1AaCAOGzEWwnVbj43a5ZOM525/K7iARkEnfw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:56 2026 by rpki-client