$ rpki-client -vvf rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft File: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft (raw, json) Hash identifier: sGl54V2OKwRa643DyhW6TJGHlStLPthD8aT4FD86bMQ= Subject key identifier: CF:F2:19:6B:9B:F9:5C:D0:9A:67:C7:2E:56:09:14:94:29:8C:7E:82 Authority key identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C Certificate issuer: /CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Certificate serial: 2FA90AD8F36365907EADA674C9768972D978158B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 15:00:05 +0000 Manifest this update: Mon 20 Jul 2026 14:55:05 +0000 Manifest next update: Tue 21 Jul 2026 17:19:05 +0000 Files and hashes: 1: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: h0mDQReAke//6pXCcFZT8G6lJ584gGzjmeVUQYfewjg=) 2: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: NIsy4Wi5ij/ahJgBOU7wDjfzvEs3Vq8uKids33t9Pj0=) 3: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl (hash: IMmfQLxcmY7mewMkSMVMgEs5V9UrnnBxnuIwGrKSgBk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a9:0a:d8:f3:63:65:90:7e:ad:a6:74:c9:76:89:72:d9:78:15:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Validity Not Before: Jul 20 14:55:05 2026 GMT Not After : Jul 21 17:19:05 2026 GMT Subject: CN=CFF2196B9BF95CD09A67C72E56091494298C7E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:c0:25:8e:0c:c7:15:ba:8b:d0:e7:f6:b0: 96:cc:cd:73:24:4f:77:0f:8a:cc:4e:a5:11:de:0f: 7d:e0:9c:f5:84:a9:cb:6f:a1:4f:dc:92:a4:0f:a2: ac:b2:d1:b0:a9:36:35:56:7e:95:dd:a7:c3:18:74: 2a:2b:31:28:f7:37:aa:50:68:34:0c:97:10:d6:ca: 27:e0:8b:cd:4d:bd:bd:a0:8a:3a:2e:74:4e:34:d4: b9:98:de:c3:37:4c:05:d8:1b:91:ef:f8:53:9c:79: 34:15:9b:3c:84:5d:ea:a7:62:b6:80:dd:b6:d2:3c: 52:1c:66:b4:40:02:8c:2d:a5:ad:a3:2a:f6:09:02: b3:cd:da:f4:30:77:80:ae:55:d2:c5:2a:67:c1:28: 83:75:cc:8f:05:2f:06:aa:f6:22:b9:11:c1:0a:c9: 23:21:8a:e9:a6:91:ee:ab:89:59:4f:d4:45:40:1b: a5:90:b9:a7:20:16:d3:80:d7:95:50:9f:9c:2d:6f: b6:88:34:4f:fd:65:0e:9a:e4:29:ff:61:c0:f9:16: 65:57:72:e9:32:01:1b:e4:ec:55:78:29:7f:e1:5c: a3:e5:d7:57:00:c4:15:72:3e:01:ef:3f:f5:96:e9: ac:52:a2:2a:e7:7d:99:e2:0c:bb:4a:1f:34:86:08: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F2:19:6B:9B:F9:5C:D0:9A:67:C7:2E:56:09:14:94:29:8C:7E:82 X509v3 Authority Key Identifier: keyid:1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7e:4c:64:9a:84:03:7f:97:55:e5:26:21:d6:04:51:3d:8c: b2:58:d9:f4:9c:c2:5a:6e:17:b1:6e:f9:44:87:e9:28:85:b3: 03:d9:97:8f:f6:9a:83:d1:ea:5f:82:67:bb:86:56:d2:df:47: 09:d4:fd:d0:10:55:09:ec:0d:da:7f:d3:78:28:63:f2:37:cd: 6a:f2:ed:36:64:65:97:bd:71:d1:ad:45:68:6e:f7:91:16:dd: d1:a5:fe:22:a1:cc:4c:1e:cb:fc:e9:46:e0:a0:14:f4:d0:6c: 43:8c:52:da:c9:fd:05:02:b4:a2:8f:06:dc:16:f5:c5:43:71: 29:87:52:bb:dc:eb:e7:59:b4:4a:2e:66:34:3c:14:34:f0:dd: 01:3d:4e:38:e1:a0:b3:5f:c1:6c:32:b4:47:e4:af:d3:72:9f: 1f:ea:53:db:dc:a1:72:53:7b:e3:c2:1e:51:e1:81:0b:29:69: bf:b0:60:8d:5e:95:b1:30:26:d0:ff:5a:f4:7f:82:5b:3d:9e: d1:fe:ec:8d:87:76:3b:87:fe:c9:7c:1b:a6:bc:df:1d:55:b4: 50:db:eb:9a:ad:6e:09:07:52:d4:15:a6:68:86:ae:e0:0d:c2: d9:3f:7b:53:50:5e:80:2e:6a:33:06:15:df:e1:e5:95:34:b9: 39:09:93:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6kK2PNjZZB+raZ0yXaJctl4FYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3 RTAzRDk1QzAeFw0yNjA3MjAxNDU1MDVaFw0yNjA3MjExNzE5MDVaMDMxMTAvBgNV BAMTKENGRjIxOTZCOUJGOTVDRDA5QTY3QzcyRTU2MDkxNDk0Mjk4QzdFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNsAljgzHFbqL0Of2sJbMzXMk T3cPisxOpRHeD33gnPWEqctvoU/ckqQPoqyy0bCpNjVWfpXdp8MYdCorMSj3N6pQ aDQMlxDWyifgi81Nvb2gijoudE401LmY3sM3TAXYG5Hv+FOceTQVmzyEXeqnYraA 3bbSPFIcZrRAAowtpa2jKvYJArPN2vQwd4CuVdLFKmfBKIN1zI8FLwaq9iK5EcEK ySMhiummke6riVlP1EVAG6WQuacgFtOA15VQn5wtb7aINE/9ZQ6a5Cn/YcD5FmVX cukyARvk7FV4KX/hXKPl11cAxBVyPgHvP/WW6axSoirnfZniDLtKHzSGCM9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/IZa5v5XNCaZ8cuVgkUlCmMfoIwHwYDVR0j BBgwFoAUG2GhGgp2YqH7oiCxoA/ti34D2VwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdlZTZiZjMtMmJkYS00Y2E0LWE1ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEw QTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3RTAzRDk1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjYxQTExQTBBNzY2MkExRkJBMjIwQjFBMDBGRUQ4QjdFMDNE OTVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVE OEI3RTAzRDk1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV+TGSahAN/l1XlJiHWBFE9jLJY2fScwlpu F7Fu+USH6SiFswPZl4/2moPR6l+CZ7uGVtLfRwnU/dAQVQnsDdp/03goY/I3zWry 7TZkZZe9cdGtRWhu95EW3dGl/iKhzEwey/zpRuCgFPTQbEOMUtrJ/QUCtKKPBtwW 9cVDcSmHUrvc6+dZtEouZjQ8FDTw3QE9TjjhoLNfwWwytEfkr9Nynx/qU9vcoXJT e+PCHlHhgQspab+wYI1elbEwJtD/WvR/gls9ntH+7I2HdjuH/sl8G6a83x1VtFDb 65qtbgkHUtQVpmiGruANwtk/e1NQXoAuajMGFd/h5ZU0uTkJk6A= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:38 2026 by rpki-client