$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: Bc80ubCjLd2tiYpAGYn4cFGuKShex2d2c3oClK93a9o= Subject key identifier: D9:CB:6F:69:22:BC:1E:B9:3C:83:FA:F2:69:48:4C:E7:B8:AE:12:58 Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 4D3A50E38E4BBF598109B006D67D656473644FED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:31:29 +0000 Manifest this update: Tue 16 Jun 2026 18:26:29 +0000 Manifest next update: Wed 17 Jun 2026 19:20:29 +0000 Files and hashes: 1: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: siODJejCBLvAxJqM6JefvABNnTmo9qwvwHWp5lfsx7o=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3a:50:e3:8e:4b:bf:59:81:09:b0:06:d6:7d:65:64:73:64:4f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: Jun 16 18:26:29 2026 GMT Not After : Jun 17 19:20:29 2026 GMT Subject: CN=D9CB6F6922BC1EB93C83FAF269484CE7B8AE1258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:da:91:2c:a9:5e:de:32:fa:ad:7a:8c:5c: 37:68:38:1a:3d:bf:33:6c:ea:ed:7e:5f:95:b6:20: a0:04:71:89:50:70:f1:f8:3b:b6:51:0c:6b:70:47: df:8b:51:3f:3c:a4:30:b8:20:5c:fc:65:24:48:c5: ed:62:ce:d5:1a:45:02:0f:0c:53:10:f3:e6:27:80: 02:e2:e2:28:b7:6e:2b:41:cc:79:8d:94:4f:62:5e: e7:22:ca:c1:c8:26:5b:b1:e8:e4:6d:f8:9f:3c:8a: 64:1d:61:41:67:cc:5d:51:40:e3:af:61:b6:05:74: 18:14:05:db:a5:d4:5c:59:11:39:e4:c3:56:89:db: 79:42:19:b2:05:e0:a1:f6:33:e3:67:68:d6:3a:52: 37:d9:79:22:90:6c:2e:1c:50:a2:e1:3b:fa:73:06: 60:9a:13:bd:c8:41:69:85:b6:34:27:56:63:a6:0d: c1:e7:9f:fd:b4:a1:a6:46:23:84:83:d5:ef:d1:5d: 08:cd:9a:10:12:1f:b2:04:11:0b:7d:63:3c:7c:c9: eb:21:c6:f0:bf:da:2d:15:2a:14:8c:8d:b4:cd:28: 34:39:c4:48:bd:a4:4f:d4:ef:0b:38:96:cc:04:7a: 4f:84:19:7c:93:8c:40:8f:00:f8:68:02:e2:4b:54: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:6F:69:22:BC:1E:B9:3C:83:FA:F2:69:48:4C:E7:B8:AE:12:58 X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6a:ef:9b:a0:2b:5d:b2:02:90:0e:d0:30:61:50:7c:95:92: 17:b9:76:6d:1b:5a:7a:39:06:07:8d:99:ae:20:68:8d:af:0b: 44:e2:2f:88:2b:f1:c0:09:4d:b0:99:a5:5e:18:bb:dc:19:da: ad:40:36:ef:93:65:d7:39:fe:5f:83:fb:4e:7d:86:ef:5e:3e: 5e:d8:b2:55:86:21:6c:b1:6c:6e:25:5a:0e:6b:4d:08:dd:53: a5:85:ba:9a:cf:84:ef:d3:96:93:19:b2:c4:b6:ef:e1:fe:54: d8:b8:dd:67:83:fc:6f:00:1e:93:92:9d:e4:b3:c4:44:f3:cc: 3f:f2:04:36:46:8d:bd:25:c9:cc:4a:b3:bd:9b:29:51:df:54: d9:66:fd:fd:93:48:82:3a:14:01:36:ff:60:cc:8b:27:0b:64: 71:a7:fe:1d:90:b1:58:99:28:c6:05:30:dc:1b:14:05:6b:4d: 80:02:67:b2:5d:b8:88:bf:96:6c:92:5f:30:fb:31:6b:d5:7a: 51:a3:f1:de:81:cb:06:c2:76:22:cc:1a:4d:a1:68:6e:a6:42: f6:14:47:40:91:60:55:ed:bf:7d:d2:6b:27:0c:96:8d:7c:85: c8:28:de:48:54:5e:bc:fe:f7:cd:13:48:d5:a2:d0:eb:1e:c2: 59:2d:c4:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTpQ445Lv1mBCbAG1n1lZHNkT+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA2MTYxODI2MjlaFw0yNjA2MTcxOTIwMjlaMDMxMTAvBgNV BAMTKEQ5Q0I2RjY5MjJCQzFFQjkzQzgzRkFGMjY5NDg0Q0U3QjhBRTEyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcdqRLKle3jL6rXqMXDdoOBo9 vzNs6u1+X5W2IKAEcYlQcPH4O7ZRDGtwR9+LUT88pDC4IFz8ZSRIxe1iztUaRQIP DFMQ8+YngALi4ii3bitBzHmNlE9iXuciysHIJlux6ORt+J88imQdYUFnzF1RQOOv YbYFdBgUBdul1FxZETnkw1aJ23lCGbIF4KH2M+NnaNY6UjfZeSKQbC4cUKLhO/pz BmCaE73IQWmFtjQnVmOmDcHnn/20oaZGI4SD1e/RXQjNmhASH7IEEQt9Yzx8yesh xvC/2i0VKhSMjbTNKDQ5xEi9pE/U7ws4lswEek+EGXyTjECPAPhoAuJLVNmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ctvaSK8Hrk8g/ryaUhM57iuElgwHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFq75ugK12yApAO0DBhUHyVkhe5dm0bWno5 BgeNma4gaI2vC0TiL4gr8cAJTbCZpV4Yu9wZ2q1ANu+TZdc5/l+D+059hu9ePl7Y slWGIWyxbG4lWg5rTQjdU6WFuprPhO/TlpMZssS27+H+VNi43WeD/G8AHpOSneSz xETzzD/yBDZGjb0lycxKs72bKVHfVNlm/f2TSII6FAE2/2DMiycLZHGn/h2QsViZ KMYFMNwbFAVrTYACZ7JduIi/lmySXzD7MWvVelGj8d6BywbCdiLMGk2haG6mQvYU R0CRYFXtv33SaycMlo18hcgo3khUXrz+980TSNWi0OsewlktxPI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:25:30 2026 by rpki-client