$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: q9Mpxde7n8uQEPvSOIMc5WHiVsgNM9lBOJxuTjp6c3c= Subject key identifier: 52:49:27:5D:98:D9:E5:E7:D6:F4:47:2D:EA:8F:52:8D:26:7B:47:C2 Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 4A2029E2F814A89A379ABCA8960DF1104D0293AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:22:50 +0000 Manifest this update: Tue 16 Jun 2026 15:17:50 +0000 Manifest next update: Wed 17 Jun 2026 16:09:50 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) 3: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: VYmVDcIz/dDEiJu6SsysbonCn+9c4+C6avJSWOuHSXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:20:29:e2:f8:14:a8:9a:37:9a:bc:a8:96:0d:f1:10:4d:02:93:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: Jun 16 15:17:50 2026 GMT Not After : Jun 17 16:09:50 2026 GMT Subject: CN=5249275D98D9E5E7D6F4472DEA8F528D267B47C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:f7:2e:27:0e:75:67:78:fe:0a:7c:cf:fb: 4f:0d:3f:64:da:ce:bf:8b:62:23:ab:5d:3b:b9:07: 34:b3:7c:7b:bf:02:80:89:dd:59:77:be:7e:3c:af: ca:98:10:d3:bb:0d:58:d1:f8:94:c5:e6:ec:f1:6d: fe:07:7c:47:03:94:b8:a1:af:71:4e:11:a5:8f:e7: 76:7a:17:78:14:4d:49:d3:c4:5b:b2:cc:2d:7d:44: 2a:84:87:4f:9f:a6:10:b8:8c:cc:02:f1:c1:b7:30: 44:f8:c1:e9:b9:3f:1b:d7:2a:fd:ac:f8:c1:29:e7: 62:d7:5e:5b:ab:f9:a8:e9:e8:f9:44:de:b6:fb:73: 08:0a:d1:a2:73:ea:ef:9f:60:1e:ae:3d:28:53:5b: a2:5a:2e:cf:c1:f5:a8:ed:02:14:69:03:8b:07:2e: 34:d1:ee:de:a5:bb:9c:c0:34:45:1f:84:25:9d:ed: 50:c5:9f:31:52:63:dc:d4:95:94:c2:74:fd:fb:0f: 70:50:0c:8a:06:b3:f8:2f:b5:0e:d7:69:e4:27:49: a5:58:3f:70:c2:45:23:28:a8:f0:d6:e1:99:06:ae: bb:86:fb:4e:b0:56:5d:30:e2:d6:54:6f:53:ce:7d: 3f:4e:eb:a6:10:b0:34:8d:2e:57:c9:f8:fa:2c:44: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:49:27:5D:98:D9:E5:E7:D6:F4:47:2D:EA:8F:52:8D:26:7B:47:C2 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ca:12:e2:f5:48:d9:9d:e7:0e:cc:66:e4:bf:1e:df:85:ce: 71:4b:e1:23:13:25:0c:b8:c6:8f:f6:31:cb:1d:cc:58:58:80: e1:67:15:bb:91:c1:f1:a9:f9:67:34:37:5f:42:aa:b7:f5:3b: c1:96:b1:fd:fb:dc:8c:28:e7:ba:e3:ac:aa:ef:61:0a:5c:be: 5d:21:63:34:ec:de:61:55:15:67:f9:6c:bf:a6:ac:63:c8:e1: a8:46:5e:92:fb:a5:06:d4:5c:34:b7:ae:16:87:3e:cf:27:f7: 69:1e:ab:fc:f9:d0:0d:7d:aa:18:d9:9c:fe:5a:65:d6:24:cb: db:e1:ba:67:af:9b:3c:0d:b8:17:63:29:83:05:67:55:72:f8: 5b:1c:b9:ac:d3:ef:91:32:ac:99:f5:58:b8:69:1c:08:05:33: b8:06:cf:25:81:ec:6c:aa:c8:d3:ab:d2:de:d2:9c:82:46:81: d3:08:d4:a3:51:c6:b1:67:ec:f7:a0:f4:b1:90:3d:63:5d:dc: 4f:07:0a:2e:4a:ce:17:2f:34:80:3e:5a:ec:a2:e4:13:92:33: d6:85:20:81:51:d5:89:63:b1:8d:2e:f6:fb:1c:2b:bf:11:2e: ab:93:68:5b:00:d8:28:01:fd:cf:d8:1b:cb:73:09:3b:d8:67: 0e:f7:14:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiAp4vgUqJo3mryolg3xEE0Ck64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjA2MTYxNTE3NTBaFw0yNjA2MTcxNjA5NTBaMDMxMTAvBgNV BAMTKDUyNDkyNzVEOThEOUU1RTdENkY0NDcyREVBOEY1MjhEMjY3QjQ3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14fcuJw51Z3j+CnzP+08NP2Ta zr+LYiOrXTu5BzSzfHu/AoCJ3Vl3vn48r8qYENO7DVjR+JTF5uzxbf4HfEcDlLih r3FOEaWP53Z6F3gUTUnTxFuyzC19RCqEh0+fphC4jMwC8cG3MET4wem5PxvXKv2s +MEp52LXXlur+ajp6PlE3rb7cwgK0aJz6u+fYB6uPShTW6JaLs/B9ajtAhRpA4sH LjTR7t6lu5zANEUfhCWd7VDFnzFSY9zUlZTCdP37D3BQDIoGs/gvtQ7XaeQnSaVY P3DCRSMoqPDW4ZkGrruG+06wVl0w4tZUb1POfT9O66YQsDSNLlfJ+PosRPxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUkknXZjZ5efW9Ect6o9SjSZ7R8IwHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQw Rjg3OTNFQUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrKEuL1SNmd5w7MZuS/Ht+FznFL4SMTJQy4 xo/2McsdzFhYgOFnFbuRwfGp+Wc0N19Cqrf1O8GWsf373Iwo57rjrKrvYQpcvl0h YzTs3mFVFWf5bL+mrGPI4ahGXpL7pQbUXDS3rhaHPs8n92keq/z50A19qhjZnP5a ZdYky9vhumevmzwNuBdjKYMFZ1Vy+FscuazT75EyrJn1WLhpHAgFM7gGzyWB7Gyq yNOr0t7SnIJGgdMI1KNRxrFn7Peg9LGQPWNd3E8HCi5KzhcvNIA+Wuyi5BOSM9aF IIFR1YljsY0u9vscK78RLquTaFsA2CgB/c/YG8tzCTvYZw73FIU= -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:12 2026 by rpki-client