$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: gq29opQo3w+KpPZGgEYw2zXWwAKb0NvMZBX0sSUJdCI= Subject key identifier: 73:76:C3:EE:A4:26:66:AA:8D:F1:3A:0B:60:46:37:51:E0:A8:23:00 Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 3010B66E7B55E100FD10962CC363218464EBD3B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:28:26 +0000 Manifest this update: Mon 21 Sep 2026 05:23:26 +0000 Manifest next update: Tue 22 Sep 2026 05:32:26 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) 2: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: nr6KgZBIlf1X2mByIpnp3v3wMkEZ9xUl35+hEykCUcE=) 3: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:10:b6:6e:7b:55:e1:00:fd:10:96:2c:c3:63:21:84:64:eb:d3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: Sep 21 05:23:26 2026 GMT Not After : Sep 22 05:32:26 2026 GMT Subject: CN=7376C3EEA42666AA8DF13A0B60463751E0A82300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:68:30:22:5e:d6:fd:89:80:30:e1:b0:5e: 87:1c:11:b2:76:6f:c8:46:f8:c0:22:da:40:4a:ee: 68:fa:93:bb:4e:06:d3:5f:3d:46:24:35:f3:ae:d7: bd:8e:ea:15:24:33:50:b0:3c:0e:14:a0:64:1c:55: f9:f7:19:99:44:04:15:aa:8f:8e:54:32:83:52:aa: f1:ec:56:42:57:9a:ef:c7:b6:b5:06:7a:78:92:a6: 53:af:3c:4e:88:f6:21:96:ee:91:5c:ca:1f:0b:88: 10:a8:ca:9c:cf:9c:4e:f1:da:37:38:5e:70:c8:0a: 26:62:aa:df:80:5b:a1:0b:8a:db:e2:c4:17:cf:c4: bb:4e:fb:80:2a:3b:a2:e4:60:34:df:49:22:11:a9: c5:16:e9:6e:c0:5e:dc:38:71:4e:2f:2e:86:e2:78: 49:fd:e0:03:f0:47:40:b9:d5:ea:77:4e:0b:7f:a4: 17:c3:a3:56:18:f6:82:5a:63:72:c1:f2:a4:e4:22: 4a:8f:50:7d:bd:43:a5:55:1e:d9:af:cb:48:6d:b2: 4c:9e:c7:c7:2d:84:90:75:73:a0:cc:fc:02:29:35: 80:11:e9:ea:60:75:2f:1b:bb:7b:c7:7b:b2:95:00: 8a:99:f1:a2:54:18:d8:33:eb:85:93:bd:3b:50:90: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:C3:EE:A4:26:66:AA:8D:F1:3A:0B:60:46:37:51:E0:A8:23:00 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:05:fb:64:aa:9b:3f:b8:fe:8d:10:b8:6b:55:d5:96:54:1b: a6:01:b4:fd:02:0d:5c:cb:ae:e4:46:65:b8:ef:3b:c2:18:c8: 6b:5e:87:6c:6b:ae:55:4e:14:30:12:f9:e3:09:8c:5f:8a:0f: a4:d7:d1:62:40:8c:ae:3c:a0:ae:fe:6a:a3:e5:21:b5:f1:64: 82:61:43:a2:d5:d9:51:30:54:e3:21:78:24:84:8f:91:ae:e0: 00:9f:52:7e:2e:d7:36:2a:9a:7e:c8:8e:08:e2:5d:1f:3f:44: 00:ca:f7:dc:56:32:bc:12:f9:c8:e9:3a:f9:b1:0f:16:c6:43: da:dd:29:58:b7:61:e8:cc:a1:d5:7b:46:42:77:a2:16:da:49: de:49:2d:9e:29:df:a5:10:d8:d6:52:9e:0f:9c:eb:c7:59:87: ea:ab:b2:64:72:45:46:95:56:48:1b:3c:7d:9a:76:bb:46:11: 6e:66:80:c1:94:f8:7b:bf:34:c4:c8:5a:c9:e4:8a:af:60:84: 2d:22:82:1b:aa:17:fb:43:44:9a:9f:3a:2b:32:c3:18:fb:a7: c8:07:39:5a:46:ea:1a:18:b6:76:78:27:52:f2:9c:fc:83:53: 79:bf:08:ee:f3:47:6d:29:a9:1d:e0:a2:2d:2c:07:91:bd:7d: 8e:fd:a3:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBC2bntV4QD9EJYsw2MhhGTr07EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjA5MjEwNTIzMjZaFw0yNjA5MjIwNTMyMjZaMDMxMTAvBgNV BAMTKDczNzZDM0VFQTQyNjY2QUE4REYxM0EwQjYwNDYzNzUxRTBBODIzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8GgwIl7W/YmAMOGwXoccEbJ2 b8hG+MAi2kBK7mj6k7tOBtNfPUYkNfOu172O6hUkM1CwPA4UoGQcVfn3GZlEBBWq j45UMoNSqvHsVkJXmu/HtrUGeniSplOvPE6I9iGW7pFcyh8LiBCoypzPnE7x2jc4 XnDICiZiqt+AW6ELitvixBfPxLtO+4AqO6LkYDTfSSIRqcUW6W7AXtw4cU4vLobi eEn94APwR0C51ep3Tgt/pBfDo1YY9oJaY3LB8qTkIkqPUH29Q6VVHtmvy0htskye x8cthJB1c6DM/AIpNYAR6epgdS8bu3vHe7KVAIqZ8aJUGNgz64WTvTtQkBKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3bD7qQmZqqN8ToLYEY3UeCoIwAwHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQw Rjg3OTNFQUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcF+2Sqmz+4/o0QuGtV1ZZUG6YBtP0CDVzL ruRGZbjvO8IYyGteh2xrrlVOFDAS+eMJjF+KD6TX0WJAjK48oK7+aqPlIbXxZIJh Q6LV2VEwVOMheCSEj5Gu4ACfUn4u1zYqmn7IjgjiXR8/RADK99xWMrwS+cjpOvmx DxbGQ9rdKVi3YejModV7RkJ3ohbaSd5JLZ4p36UQ2NZSng+c68dZh+qrsmRyRUaV VkgbPH2adrtGEW5mgMGU+Hu/NMTIWsnkiq9ghC0ighuqF/tDRJqfOisywxj7p8gH OVpG6hoYtnZ4J1LynPyDU3m/CO7zR20pqR3goi0sB5G9fY79o/8= -----END CERTIFICATE-----Generated at Mon Sep 21 23:26:13 2026 by rpki-client