$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: w/NeaKliaSGX6YVcxqGiA5yKuAFo+Fr9XjAzsYDStR8= Subject key identifier: FF:29:9C:B0:D4:F1:EB:DF:1D:74:C9:A0:35:0E:CF:DC:F7:60:C6:22 Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 79FB5F584586A47D3DD1FA444EA5CF1EEA14E0A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:12:52 +0000 Manifest this update: Mon 21 Sep 2026 13:07:52 +0000 Manifest next update: Tue 22 Sep 2026 14:28:52 +0000 Files and hashes: 1: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: JOlG+pjvcxZ0LnbBHF5iMoqNYuHbw3zJE/UB0LNUYzY=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fb:5f:58:45:86:a4:7d:3d:d1:fa:44:4e:a5:cf:1e:ea:14:e0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Sep 21 13:07:52 2026 GMT Not After : Sep 22 14:28:52 2026 GMT Subject: CN=FF299CB0D4F1EBDF1D74C9A0350ECFDCF760C622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:5a:2b:af:f9:9b:9f:42:6a:99:52:f5:3f: 24:21:82:b4:8f:04:7a:9f:6d:ed:d6:ff:34:e9:fb: 0f:8e:81:9c:d8:38:e1:d7:80:1e:b1:64:5a:75:d8: 7e:5f:c5:b0:a7:ea:4b:5e:09:3e:b3:70:a0:9f:7e: 3b:6f:c8:61:23:e4:60:27:e1:51:f6:09:39:3f:01: 3b:3b:9e:86:92:20:b6:50:71:20:7a:84:92:8f:b2: 71:40:00:12:6b:f0:ef:b8:ab:0a:f8:af:14:5f:ab: f3:a5:7d:93:6f:d1:99:b1:73:e8:5b:e3:ea:69:cd: cf:ee:fa:2b:9f:7d:31:59:2e:01:b3:06:c9:9f:e0: 3f:b2:cf:05:02:c8:58:a2:88:18:e2:a5:86:3d:47: f1:ce:7d:aa:56:6e:f7:57:f8:bf:54:7d:dd:4e:c8: a5:49:bf:ae:69:91:ab:8f:17:4e:f1:8d:ba:c0:b7: 46:5f:52:f1:72:62:62:f9:36:97:d6:71:a6:9d:ca: b9:5a:52:3e:ba:13:a5:b0:63:d3:a0:dc:c1:29:66: be:65:66:73:bd:97:6c:16:a2:42:53:bd:4b:c4:8d: 69:22:d4:4d:93:dc:31:4d:a2:37:66:12:fb:69:e0: 47:3f:16:0d:ee:f5:ae:df:8b:b6:ec:72:78:79:1b: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:29:9C:B0:D4:F1:EB:DF:1D:74:C9:A0:35:0E:CF:DC:F7:60:C6:22 X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bf:9b:31:32:bd:0c:ea:03:40:46:c6:81:76:15:6e:15:55: 77:37:16:24:fa:5a:90:14:ad:07:72:a8:7b:60:bd:45:d7:ae: fb:b4:62:d2:a7:44:64:d8:1a:74:d4:58:ca:f2:9c:a8:9e:58: 5a:80:15:10:5b:86:47:15:f8:d4:1b:86:fc:5d:8d:a2:2d:9a: 40:e7:b1:7c:a8:3b:ac:f1:1d:50:0f:84:f1:06:10:ae:9c:7a: 54:76:7e:68:90:9f:62:f5:8d:6c:32:1c:ef:9c:1e:af:c8:c0: e9:7b:6a:c2:33:c0:d6:01:81:36:e4:67:f6:13:22:f2:8b:a8: bd:f7:8a:04:0a:17:eb:ce:20:1a:97:55:16:3b:72:28:0a:4e: 30:a5:3e:2d:0f:89:88:3e:0f:d7:73:b4:98:6d:ec:12:3c:73: f4:d1:ce:47:bd:0f:1a:4d:9c:94:22:08:8a:12:cd:6a:66:4e: 23:5f:04:48:34:9e:61:0c:98:0c:ae:e8:21:d7:29:b8:c5:4e: a3:0e:e0:17:0a:12:41:28:3f:52:73:60:64:86:2c:4c:10:6d: 37:16:92:03:d2:35:c1:20:33:75:00:f2:81:45:5e:f0:c3:3f: b9:ce:82:3b:c0:a9:57:3b:a4:13:a4:21:40:5c:90:a6:b0:38: ed:20:eb:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeftfWEWGpH090fpETqXPHuoU4KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjA5MjExMzA3NTJaFw0yNjA5MjIxNDI4NTJaMDMxMTAvBgNV BAMTKEZGMjk5Q0IwRDRGMUVCREYxRDc0QzlBMDM1MEVDRkRDRjc2MEM2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSw1orr/mbn0JqmVL1PyQhgrSP BHqfbe3W/zTp+w+OgZzYOOHXgB6xZFp12H5fxbCn6kteCT6zcKCffjtvyGEj5GAn 4VH2CTk/ATs7noaSILZQcSB6hJKPsnFAABJr8O+4qwr4rxRfq/OlfZNv0Zmxc+hb 4+ppzc/u+iuffTFZLgGzBsmf4D+yzwUCyFiiiBjipYY9R/HOfapWbvdX+L9Ufd1O yKVJv65pkauPF07xjbrAt0ZfUvFyYmL5NpfWcaadyrlaUj66E6WwY9Og3MEpZr5l ZnO9l2wWokJTvUvEjWki1E2T3DFNojdmEvtp4Ec/Fg3u9a7fi7bscnh5Gz/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ymcsNTx698ddMmgNQ7P3PdgxiIwHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC/mzEyvQzqA0BGxoF2FW4VVXc3FiT6WpAU rQdyqHtgvUXXrvu0YtKnRGTYGnTUWMrynKieWFqAFRBbhkcV+NQbhvxdjaItmkDn sXyoO6zxHVAPhPEGEK6celR2fmiQn2L1jWwyHO+cHq/IwOl7asIzwNYBgTbkZ/YT IvKLqL33igQKF+vOIBqXVRY7cigKTjClPi0PiYg+D9dztJht7BI8c/TRzke9DxpN nJQiCIoSzWpmTiNfBEg0nmEMmAyu6CHXKbjFTqMO4BcKEkEoP1JzYGSGLEwQbTcW kgPSNcEgM3UA8oFFXvDDP7nOgjvAqVc7pBOkIUBckKawOO0g610= -----END CERTIFICATE-----Generated at Tue Sep 22 00:19:08 2026 by rpki-client