$ rpki-client -vvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: W5BThtcHuRaIxxRpBmPvuupKg95zmJ/txHfAwCvr/nU= Subject key identifier: D8:1A:76:14:E3:7B:EC:5E:77:8B:9B:3F:62:C3:9D:1A:05:18:30:8D Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 1D1532DB30E9CFB4F3213B6F29D2DCE2778D2CAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:29:34 +0000 Manifest this update: Wed 17 Jun 2026 05:24:34 +0000 Manifest next update: Thu 18 Jun 2026 07:02:34 +0000 Files and hashes: 1: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: kdJkpMsa6kLjuOY4oombZ3ZcpUebW6jMZhe/o9NAZpY=) 2: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) 3: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:15:32:db:30:e9:cf:b4:f3:21:3b:6f:29:d2:dc:e2:77:8d:2c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Jun 17 05:24:34 2026 GMT Not After : Jun 18 07:02:34 2026 GMT Subject: CN=D81A7614E37BEC5E778B9B3F62C39D1A0518308D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:12:63:c5:ff:97:0e:f6:60:1f:9f:00:33: ce:39:93:13:5d:94:6d:d9:a5:dc:e9:23:93:4c:9e: 97:f4:dc:61:4d:ef:db:dd:16:10:e9:40:84:d5:8d: 07:a5:0b:50:e6:b5:e9:77:a7:1a:13:af:b6:b2:52: 8f:40:a4:da:d7:d8:13:80:e4:92:79:c8:04:c7:7c: 0b:ae:f2:dd:14:0c:89:47:69:75:23:0b:db:ee:8f: 63:07:59:17:84:fd:55:46:7c:2d:a5:df:ea:b9:3e: 1f:70:07:14:24:91:ad:08:29:bb:50:05:05:5f:4d: 29:ae:4c:a9:be:32:0b:00:92:8b:fd:0c:df:f8:7e: 5c:0a:01:87:43:02:bb:8d:ac:7b:d3:a5:fc:9e:1e: bf:a0:ff:7c:64:63:0e:ce:dc:b0:ee:96:32:c1:55: b5:72:90:75:ab:58:22:76:0d:93:10:f6:13:77:8c: 0e:b1:82:36:b3:b8:a4:67:1b:4d:d5:78:b3:4b:12: be:62:b4:a9:42:82:19:2a:f5:51:56:fa:90:3d:4f: f1:02:03:fb:8e:b5:0a:aa:7b:db:e7:ec:b2:e7:33: 23:c9:f8:ee:e4:d9:7b:79:08:81:0e:bb:2a:e6:32: b6:e0:d8:2c:49:c6:9d:6f:dd:33:64:17:b1:06:26: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1A:76:14:E3:7B:EC:5E:77:8B:9B:3F:62:C3:9D:1A:05:18:30:8D X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a6:be:34:20:4b:bb:d7:c5:4d:c0:0b:6b:a5:74:bb:c7:fb: a4:3b:dd:2c:5a:e2:8f:67:6a:35:43:13:ab:09:56:23:f8:51: 11:51:e6:15:98:aa:ee:08:58:a4:6f:46:f1:10:50:c0:ea:fd: 37:a6:4e:a1:c8:4f:ff:66:1c:0d:74:0e:db:52:6b:9f:53:f5: e7:1a:27:aa:a5:86:93:fe:a3:04:d4:17:a8:6e:c3:f1:ce:e0: 93:a8:45:b8:67:7e:c0:93:6f:4b:d5:33:cd:72:be:40:1f:70: c7:e4:eb:a8:ec:5f:07:14:5b:63:6d:2a:60:a3:4b:71:75:6f: f8:d1:3c:34:3a:4e:be:6b:f8:e2:27:95:ac:0f:0e:52:41:85: 05:03:04:d4:bf:f4:61:88:ca:1f:ed:6d:b2:34:56:30:eb:2a: 2a:89:37:dc:2a:b1:d9:5c:63:2c:ea:c2:d1:59:64:f2:fc:22: 26:28:71:93:d7:c7:e2:63:aa:df:01:d7:71:7b:7a:aa:dd:d7: e9:38:2d:f3:ca:e8:50:3f:e0:85:a1:34:f2:b0:5d:90:02:af: 6d:d1:69:6e:74:91:84:b7:e5:ad:73:d6:8b:17:fc:4d:86:97: e8:4a:f2:aa:94:7f:a7:66:5a:63:bd:27:24:c8:af:7e:c2:06: ff:3b:90:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRUy2zDpz7TzITtvKdLc4neNLK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA2MTcwNTI0MzRaFw0yNjA2MTgwNzAyMzRaMDMxMTAvBgNV BAMTKEQ4MUE3NjE0RTM3QkVDNUU3NzhCOUIzRjYyQzM5RDFBMDUxODMwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXJRJjxf+XDvZgH58AM845kxNd lG3ZpdzpI5NMnpf03GFN79vdFhDpQITVjQelC1Dmtel3pxoTr7ayUo9ApNrX2BOA 5JJ5yATHfAuu8t0UDIlHaXUjC9vuj2MHWReE/VVGfC2l3+q5Ph9wBxQkka0IKbtQ BQVfTSmuTKm+MgsAkov9DN/4flwKAYdDAruNrHvTpfyeHr+g/3xkYw7O3LDuljLB VbVykHWrWCJ2DZMQ9hN3jA6xgjazuKRnG03VeLNLEr5itKlCghkq9VFW+pA9T/EC A/uOtQqqe9vn7LLnMyPJ+O7k2Xt5CIEOuyrmMrbg2CxJxp1v3TNkF7EGJtT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Bp2FON77F53i5s/YsOdGgUYMI0wHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqmvjQgS7vXxU3AC2uldLvH+6Q73Sxa4o9n ajVDE6sJViP4URFR5hWYqu4IWKRvRvEQUMDq/TemTqHIT/9mHA10DttSa59T9eca J6qlhpP+owTUF6huw/HO4JOoRbhnfsCTb0vVM81yvkAfcMfk66jsXwcUW2NtKmCj S3F1b/jRPDQ6Tr5r+OInlawPDlJBhQUDBNS/9GGIyh/tbbI0VjDrKiqJN9wqsdlc YyzqwtFZZPL8IiYocZPXx+Jjqt8B13F7eqrd1+k4LfPK6FA/4IWhNPKwXZACr23R aW50kYS35a1z1osX/E2Gl+hK8qqUf6dmWmO9JyTIr37CBv87kDY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:36 2026 by rpki-client