$ rpki-client -vvf rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft File: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft (raw, json) Hash identifier: 9X255BF64d2SJrcS3DZLMggzDajPmL9VblWtRth2iAU= Subject key identifier: D5:2F:35:FD:91:77:FD:C9:0D:43:97:0A:30:82:91:D9:72:70:70:C7 Authority key identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C Certificate issuer: /CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Certificate serial: 5BC256C904738C545185BD782674A9190ACD5590 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:24:46 +0000 Manifest this update: Tue 02 Jun 2026 16:19:46 +0000 Manifest next update: Wed 03 Jun 2026 20:11:46 +0000 Files and hashes: 1: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: h0mDQReAke//6pXCcFZT8G6lJ584gGzjmeVUQYfewjg=) 2: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl (hash: PIho598dx65/PqHENqkNrc1zyyps5cDlVvcYvXm8MsA=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: NIsy4Wi5ij/ahJgBOU7wDjfzvEs3Vq8uKids33t9Pj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c2:56:c9:04:73:8c:54:51:85:bd:78:26:74:a9:19:0a:cd:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Validity Not Before: Jun 2 16:19:46 2026 GMT Not After : Jun 3 20:11:46 2026 GMT Subject: CN=D52F35FD9177FDC90D43970A308291D9727070C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:dc:46:f0:56:a7:d5:9a:4c:a8:9c:af:6d: e3:76:74:9d:a7:55:f5:ce:48:18:75:56:8f:1d:c2: 6b:08:05:94:d8:22:43:92:51:18:37:fd:e2:fc:f5: 68:71:6d:d3:ab:3f:8a:9f:51:3d:9b:0d:5e:1d:c4: 93:8d:76:7b:a1:f0:b2:10:05:8c:0e:63:2f:55:02: 76:c9:32:45:6e:f3:d8:07:5b:0c:78:20:b4:3d:a0: 60:db:dc:d6:f7:f4:10:b1:97:36:49:37:d2:c4:c3: 5a:ad:e1:4b:9b:8c:66:de:ed:a4:b6:b7:48:a1:c2: a2:40:93:2e:fa:2e:88:23:86:2f:a3:5e:23:ec:b7: 68:4b:b8:e3:33:24:27:76:2f:57:f6:02:f2:fe:46: 94:fe:0f:cb:67:84:c7:db:85:0b:9f:12:e9:fc:76: 46:c2:1b:cf:2e:33:3e:d0:f6:72:8a:7a:1a:02:11: ec:44:ad:b2:ae:9f:9a:67:81:cb:e6:6b:1f:6c:00: 0a:dc:4e:63:d8:a9:01:d6:56:1f:e1:78:6f:b1:43: b7:d3:60:99:22:2f:08:00:0b:c7:c1:18:08:55:b5: 4a:80:de:31:ad:2b:ae:0b:9b:73:de:0f:95:d2:e7: 31:86:b4:db:d1:73:9a:41:56:f8:69:d9:1e:20:c4: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2F:35:FD:91:77:FD:C9:0D:43:97:0A:30:82:91:D9:72:70:70:C7 X509v3 Authority Key Identifier: keyid:1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c4:cc:3c:a1:74:80:7e:28:e5:af:e9:f0:a9:be:82:c7:18: d9:dc:60:41:3b:30:6c:d6:e1:35:0e:83:ef:84:e8:b6:0f:59: 8d:60:28:12:d8:2c:9f:ae:86:a0:58:8e:8a:a7:ef:ad:c9:a2: 38:bb:bd:31:cd:0b:5d:bc:8c:b6:27:a8:4f:37:d1:45:41:a4: 2c:ef:28:c4:28:fa:f8:96:85:91:e0:d9:3d:05:d6:3d:3e:41: 68:42:0b:53:b5:bf:fe:99:ff:21:34:b1:19:2c:f9:8c:66:fd: b6:02:77:54:38:8c:ca:b4:c7:e3:fa:bb:91:6d:3b:89:04:9d: 77:60:bf:dd:e2:bf:57:dd:a9:1c:fb:85:3e:2a:72:fd:f4:aa: ff:7c:62:6e:1e:80:d5:35:e7:c2:87:46:a0:12:7c:ba:ee:0e: d7:eb:80:7c:b9:8d:57:8b:38:5f:9f:e6:fe:e0:2a:1a:aa:e9: 27:46:32:8e:a9:b2:39:e9:aa:67:c7:3d:0d:d6:1c:16:3a:d8: ea:76:1c:dd:e8:66:be:9f:11:0f:64:a8:b0:c8:6c:e4:1e:07: 23:46:b0:63:1a:8a:71:0f:55:ca:14:0d:f9:69:c0:5a:6d:db: 11:4a:14:02:6d:2a:d6:f5:37:37:6d:e3:48:e5:65:78:07:1a: a0:a1:a4:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8JWyQRzjFRRhb14JnSpGQrNVZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3 RTAzRDk1QzAeFw0yNjA2MDIxNjE5NDZaFw0yNjA2MDMyMDExNDZaMDMxMTAvBgNV BAMTKEQ1MkYzNUZEOTE3N0ZEQzkwRDQzOTcwQTMwODI5MUQ5NzI3MDcwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOdxG8Fan1ZpMqJyvbeN2dJ2n VfXOSBh1Vo8dwmsIBZTYIkOSURg3/eL89WhxbdOrP4qfUT2bDV4dxJONdnuh8LIQ BYwOYy9VAnbJMkVu89gHWwx4ILQ9oGDb3Nb39BCxlzZJN9LEw1qt4UubjGbe7aS2 t0ihwqJAky76Logjhi+jXiPst2hLuOMzJCd2L1f2AvL+RpT+D8tnhMfbhQufEun8 dkbCG88uMz7Q9nKKehoCEexErbKun5pngcvmax9sAArcTmPYqQHWVh/heG+xQ7fT YJkiLwgAC8fBGAhVtUqA3jGtK64Lm3PeD5XS5zGGtNvRc5pBVvhp2R4gxK9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1S81/ZF3/ckNQ5cKMIKR2XJwcMcwHwYDVR0j BBgwFoAUG2GhGgp2YqH7oiCxoA/ti34D2VwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdlZTZiZjMtMmJkYS00Y2E0LWE1ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEw QTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3RTAzRDk1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjYxQTExQTBBNzY2MkExRkJBMjIwQjFBMDBGRUQ4QjdFMDNE OTVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVE OEI3RTAzRDk1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTEzDyhdIB+KOWv6fCpvoLHGNncYEE7MGzW 4TUOg++E6LYPWY1gKBLYLJ+uhqBYjoqn763Joji7vTHNC128jLYnqE830UVBpCzv KMQo+viWhZHg2T0F1j0+QWhCC1O1v/6Z/yE0sRks+Yxm/bYCd1Q4jMq0x+P6u5Ft O4kEnXdgv93iv1fdqRz7hT4qcv30qv98Ym4egNU158KHRqASfLruDtfrgHy5jVeL OF+f5v7gKhqq6SdGMo6psjnpqmfHPQ3WHBY62Op2HN3oZr6fEQ9kqLDIbOQeByNG sGMainEPVcoUDflpwFpt2xFKFAJtKtb1Nzdt40jlZXgHGqChpCI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:49 2026 by rpki-client