$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: 73QQzdDJibAujg5Mm3KLoakZk+LSMUIq36zeOEV4eeI= Subject key identifier: A9:67:5B:89:EE:99:75:23:07:3D:4A:84:5A:5B:E2:11:79:2F:21:35 Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 5B058C27D45DFC5C9AA6D36373D3148C44EC5145 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: BF Signing time: Sun 20 Sep 2026 23:20:44 +0000 Manifest this update: Sun 20 Sep 2026 23:15:44 +0000 Manifest next update: Tue 22 Sep 2026 00:00:44 +0000 Files and hashes: 1: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: a3xSTsPaBcNRAX1w9JrfD02RuWhvkcqhYmx+auejwYg=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:05:8c:27:d4:5d:fc:5c:9a:a6:d3:63:73:d3:14:8c:44:ec:51:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: Sep 20 23:15:44 2026 GMT Not After : Sep 22 00:00:44 2026 GMT Subject: CN=A9675B89EE997523073D4A845A5BE211792F2135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:05:b1:33:59:f4:fd:27:6c:8b:a5:c0:b5: d7:c7:ef:a2:2a:fa:89:6a:b1:d0:b5:74:11:5e:84: 0d:10:63:b7:6a:41:35:08:7c:69:3e:d0:92:d7:58: f0:4c:80:8f:f6:d9:b9:42:fe:9d:bb:8c:a7:54:95: 4d:ad:2a:95:fa:16:7b:16:f4:68:a6:b2:f0:4c:13: be:17:d7:21:4b:cb:b7:55:26:40:04:21:7f:a7:e7: 76:0d:4d:4f:e0:d2:60:11:67:ab:fe:bd:d8:68:f1: 9a:2d:43:d2:89:24:54:61:db:38:7a:56:90:15:4c: c4:a4:ea:0b:75:ad:16:df:f2:53:29:4b:9f:ca:89: 44:11:0a:b5:aa:bf:3f:3f:26:28:7d:28:d5:bd:8b: d8:af:5c:8d:94:fd:e6:d8:f2:36:c3:7d:c9:aa:39: aa:3d:15:98:63:57:f8:5b:ff:b5:3c:71:6b:d7:bc: f0:81:41:f5:ae:ef:19:0e:8d:0e:db:ab:dc:e1:2f: e9:12:b5:0e:b8:66:49:ef:99:1d:24:a0:99:57:38: ac:21:1f:9f:87:3f:20:e5:e0:11:91:2c:fc:68:3f: 69:8f:1a:1d:91:b7:17:f1:1e:d8:4e:60:95:c8:a3: b0:ba:a8:4a:29:b6:90:23:c3:69:c5:08:27:8d:ae: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:67:5B:89:EE:99:75:23:07:3D:4A:84:5A:5B:E2:11:79:2F:21:35 X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:44:bd:e9:8b:17:dd:fa:f1:15:e8:76:58:29:35:65:fc:23: bd:d5:20:26:65:59:06:92:3c:b8:84:5c:1a:55:77:9d:7c:c5: 43:a1:7e:9b:e4:be:6b:5a:6f:07:58:74:6e:85:1b:35:b0:73: ac:3d:bc:1d:85:11:3d:85:02:ed:c9:ce:e8:8a:c6:d8:40:a1: a9:06:85:51:8b:ca:92:3c:8d:bb:f3:8c:84:0f:36:e8:02:d2: 45:5f:9c:a8:eb:7f:f3:86:b0:ba:bd:8c:67:15:c0:09:88:59: 50:21:ff:17:b7:a6:e8:27:63:b3:a3:ea:64:81:ed:bf:b8:02: 70:e3:67:4c:c5:6b:78:79:f1:8d:c4:69:27:80:c0:0a:28:ce: 7a:5d:47:58:13:c1:69:e4:3b:a8:c4:d0:6f:77:9c:40:cf:5c: 5f:05:70:6f:a8:4f:7a:82:c1:c9:2c:bb:f0:9e:ff:f0:91:73: e8:98:00:76:cd:11:3d:a8:a0:58:d4:1c:d6:ff:cb:9b:d6:ed: a2:5b:52:ac:3e:f5:98:24:6f:ab:06:ec:be:79:55:d7:6a:03: ea:a4:16:7b:42:f3:d6:0f:d1:67:19:64:e3:37:6f:cd:2b:f4: 68:82:82:2f:bb:0b:c1:50:ee:05:f4:fb:7a:97:c8:dd:84:29: 44:ad:ee:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwWMJ9Rd/FyaptNjc9MUjETsUUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA5MjAyMzE1NDRaFw0yNjA5MjIwMDAwNDRaMDMxMTAvBgNV BAMTKEE5Njc1Qjg5RUU5OTc1MjMwNzNENEE4NDVBNUJFMjExNzkyRjIxMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0wWxM1n0/Sdsi6XAtdfH76Iq +olqsdC1dBFehA0QY7dqQTUIfGk+0JLXWPBMgI/22blC/p27jKdUlU2tKpX6FnsW 9GimsvBME74X1yFLy7dVJkAEIX+n53YNTU/g0mARZ6v+vdho8ZotQ9KJJFRh2zh6 VpAVTMSk6gt1rRbf8lMpS5/KiUQRCrWqvz8/Jih9KNW9i9ivXI2U/ebY8jbDfcmq Oao9FZhjV/hb/7U8cWvXvPCBQfWu7xkOjQ7bq9zhL+kStQ64ZknvmR0koJlXOKwh H5+HPyDl4BGRLPxoP2mPGh2RtxfxHthOYJXIo7C6qEoptpAjw2nFCCeNrkC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqWdbie6ZdSMHPUqEWlviEXkvITUwHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlEvemLF9368RXodlgpNWX8I73VICZlWQaS PLiEXBpVd518xUOhfpvkvmtabwdYdG6FGzWwc6w9vB2FET2FAu3JzuiKxthAoakG hVGLypI8jbvzjIQPNugC0kVfnKjrf/OGsLq9jGcVwAmIWVAh/xe3pugnY7Oj6mSB 7b+4AnDjZ0zFa3h58Y3EaSeAwAooznpdR1gTwWnkO6jE0G93nEDPXF8FcG+oT3qC wcksu/Ce//CRc+iYAHbNET2ooFjUHNb/y5vW7aJbUqw+9Zgkb6sG7L55VddqA+qk FntC89YP0WcZZOM3b80r9GiCgi+7C8FQ7gX0+3qXyN2EKUSt7sQ= -----END CERTIFICATE-----Generated at Mon Sep 21 09:55:18 2026 by rpki-client