$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: MDKuYGfPxdtxI3/CIGyFVQI5t3XvoYeGSjUhbCCucoQ= Subject key identifier: C8:94:46:62:F0:9A:EA:6B:59:E0:B3:38:02:08:7E:B4:27:EE:4C:48 Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 431F2C40D77903935E33F758DA9C61F0AF5993D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 13:58:40 +0000 Manifest this update: Tue 28 Jul 2026 13:53:40 +0000 Manifest next update: Wed 29 Jul 2026 15:16:40 +0000 Files and hashes: 1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 4: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: KfvFhYBawYM0KNq9CJLdkjcaiO7CPkcg/0whJRPjvbs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1f:2c:40:d7:79:03:93:5e:33:f7:58:da:9c:61:f0:af:59:93:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Jul 28 13:53:40 2026 GMT Not After : Jul 29 15:16:40 2026 GMT Subject: CN=C8944662F09AEA6B59E0B33802087EB427EE4C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:fc:ce:30:b7:18:70:63:7f:bb:d3:8f:cb: af:dd:58:df:b8:4a:51:36:16:17:42:ae:f6:91:ec: 84:14:92:6b:5c:9d:39:ed:4b:4a:57:eb:3f:08:76: db:97:33:4d:28:69:b4:c7:f6:2d:e3:93:27:ac:77: 7b:50:cf:eb:6a:85:96:7f:9f:ad:44:2d:41:7c:d0: 74:a5:f3:10:c8:fc:df:d7:c2:8c:db:d7:8d:45:e7: 8a:3f:ad:b3:8e:aa:3a:b9:31:e5:d2:ac:26:a0:0a: 6a:5c:ea:24:53:f2:68:bf:0e:02:d2:32:64:5c:9b: 85:c5:56:e1:ac:56:ce:e4:e7:82:32:d1:12:90:95: 68:7d:64:53:86:01:60:6e:d4:64:18:39:5a:18:b7: 9d:a6:43:fb:c1:94:2b:0f:c7:74:f9:dc:5a:02:d8: 54:1b:54:37:2a:72:bf:93:75:84:cc:cb:cf:63:6f: 67:28:d9:26:c4:c7:19:f5:b3:04:19:61:90:f4:be: 8f:9e:df:c9:54:93:7f:f5:a3:fd:9f:12:cf:a8:9c: 91:be:e8:7a:7e:37:c0:e2:bc:67:21:90:53:fe:4d: 40:26:9b:af:39:d0:1d:b6:12:ea:65:52:8f:45:26: 61:e3:7a:4c:99:f2:ca:5b:f2:23:47:1b:1d:3e:76: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:94:46:62:F0:9A:EA:6B:59:E0:B3:38:02:08:7E:B4:27:EE:4C:48 X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:35:91:42:11:b4:bf:e8:8c:4a:e0:5e:af:a9:7a:52:60:f8: db:b1:df:1e:87:b0:dc:67:bb:d3:ce:af:f9:23:0e:ce:4c:84: f9:69:6b:a1:16:89:cb:b3:23:7e:f6:66:b2:59:f8:f5:48:a7: 0a:9e:6e:72:34:f8:84:35:23:19:9f:ef:6a:90:7e:14:5a:d4: 8d:30:dd:20:40:1c:32:74:58:82:6a:d2:62:8f:62:66:b8:e4: c4:1a:7f:7d:be:18:44:07:d8:8d:3c:8a:c7:7b:96:c7:fa:86: 1b:94:30:36:42:43:41:40:1a:5e:12:79:bd:87:a2:c0:de:5a: e9:36:3a:d5:e5:61:12:3c:c9:c4:bd:f2:51:bd:07:75:96:e2: d6:e8:3a:a4:a8:9c:e0:db:56:a6:c8:3b:09:e0:0b:5b:a5:ff: 4a:24:13:0c:5a:a4:69:47:ed:1d:25:d2:42:3f:62:72:da:98: af:e6:56:7b:a2:24:b5:26:a9:0d:63:8c:2d:52:1e:48:75:08: 9b:2d:14:8b:cc:33:10:19:d4:db:24:74:95:e3:6e:13:b8:13: b0:e1:d8:cd:ea:4b:95:30:1c:e9:d2:16:17:c4:ea:27:40:64: 51:33:a3:50:a7:f3:f9:74:c8:39:f8:73:a9:c4:cb:28:66:5f: 0c:e9:b9:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQx8sQNd5A5NeM/dY2pxh8K9Zk9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjA3MjgxMzUzNDBaFw0yNjA3MjkxNTE2NDBaMDMxMTAvBgNV BAMTKEM4OTQ0NjYyRjA5QUVBNkI1OUUwQjMzODAyMDg3RUI0MjdFRTRDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uPzOMLcYcGN/u9OPy6/dWN+4 SlE2FhdCrvaR7IQUkmtcnTntS0pX6z8IdtuXM00oabTH9i3jkyesd3tQz+tqhZZ/ n61ELUF80HSl8xDI/N/Xwozb141F54o/rbOOqjq5MeXSrCagCmpc6iRT8mi/DgLS MmRcm4XFVuGsVs7k54Iy0RKQlWh9ZFOGAWBu1GQYOVoYt52mQ/vBlCsPx3T53FoC 2FQbVDcqcr+TdYTMy89jb2co2SbExxn1swQZYZD0vo+e38lUk3/1o/2fEs+onJG+ 6Hp+N8DivGchkFP+TUAmm6850B22EuplUo9FJmHjekyZ8spb8iNHGx0+dlfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyJRGYvCa6mtZ4LM4Agh+tCfuTEgwHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs1kUIRtL/ojErgXq+pelJg+Nux3x6HsNxn u9POr/kjDs5MhPlpa6EWicuzI372ZrJZ+PVIpwqebnI0+IQ1Ixmf72qQfhRa1I0w 3SBAHDJ0WIJq0mKPYma45MQaf32+GEQH2I08isd7lsf6hhuUMDZCQ0FAGl4Seb2H osDeWuk2OtXlYRI8ycS98lG9B3WW4tboOqSonODbVqbIOwngC1ul/0okEwxapGlH 7R0l0kI/YnLamK/mVnuiJLUmqQ1jjC1SHkh1CJstFIvMMxAZ1NskdJXjbhO4E7Dh 2M3qS5UwHOnSFhfE6idAZFEzo1Cn8/l0yDn4c6nEyyhmXwzpuYQ= -----END CERTIFICATE-----Generated at Wed Jul 29 01:41:51 2026 by rpki-client