$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft File: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft (raw, json) Hash identifier: 91OyjDEvjdqtchVzWZ46ARpG1JqS0HGNZAHWzYF2MY8= Subject key identifier: 33:CC:D3:F5:3C:07:7D:4C:A2:8D:61:5B:CC:93:B6:52:E7:D3:3D:18 Authority key identifier: 1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC Certificate issuer: /CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Certificate serial: 6566910241B0CB6D185881180C639F997681CF68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:44:39 +0000 Manifest this update: Mon 20 Jul 2026 18:39:39 +0000 Manifest next update: Tue 21 Jul 2026 18:54:39 +0000 Files and hashes: 1: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl (hash: 6t00ClyqfdQ/XTBxFSpE37UF73MEIJboFHYec1vLfdM=) 2: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: 7FE61Zc3WU63aXcyhhG+2SBAGWSpraBvNcEGom2PNzw=) 3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: X1BuffyPqZatWKWcf+HC9BxedbehRoziiAknm7XowP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:66:91:02:41:b0:cb:6d:18:58:81:18:0c:63:9f:99:76:81:cf:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Validity Not Before: Jul 20 18:39:39 2026 GMT Not After : Jul 21 18:54:39 2026 GMT Subject: CN=33CCD3F53C077D4CA28D615BCC93B652E7D33D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:f9:ec:8b:e0:8c:58:d3:7f:a7:c3:f9:ba: 8e:a2:e7:3e:40:a3:8b:b8:bf:8e:64:20:55:7b:5d: 76:93:4a:87:e4:49:e5:e2:b5:c7:ee:10:74:70:a3: e9:f7:56:54:0f:2f:a7:e6:33:d5:58:c1:51:4c:f9: 3a:4a:2e:c7:36:26:39:93:cf:c6:d5:e8:06:1b:fc: 3e:58:75:bf:58:06:c8:1b:98:7c:ca:a0:e4:d8:3e: 0b:4a:ba:20:1d:00:fd:70:3c:c0:2f:1b:36:c3:c7: c0:c8:ce:d1:44:75:9e:6a:7a:7b:96:8f:d3:92:60: 8b:72:7b:82:89:2e:7b:fd:0e:43:09:67:83:18:3c: ac:ba:81:b4:75:15:16:d2:c3:1b:89:6e:fa:34:f8: 67:42:7b:74:ad:16:d8:fc:44:5d:0b:8c:5a:61:a8: d8:24:e6:93:59:96:67:37:e3:00:f5:b5:8b:8a:cd: 34:f0:da:86:b7:53:0d:c8:00:2b:48:cd:51:8b:a4: 5c:1e:7f:35:fa:40:7a:c2:fd:43:f8:1d:29:52:c7: 30:d6:5e:30:e1:65:d3:fa:d5:a7:a8:f8:a4:16:6b: 52:b8:0e:30:b4:cd:eb:82:d3:a8:2d:d8:6d:33:65: 2d:43:7f:40:0a:62:66:cc:c9:e6:41:ac:8b:2b:13: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CC:D3:F5:3C:07:7D:4C:A2:8D:61:5B:CC:93:B6:52:E7:D3:3D:18 X509v3 Authority Key Identifier: keyid:1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:21:25:c0:a1:22:9f:5b:c5:ab:bd:56:61:f7:1b:2e:38:4b: 45:4d:e8:b3:50:30:ef:d6:2e:6c:d6:7d:bb:c3:87:54:02:d4: 57:b9:96:6c:2d:7f:32:74:5c:54:bb:3d:a1:4d:00:7f:7e:23: 10:a5:b2:54:5a:cb:6e:f2:14:79:6b:8c:db:b9:b4:89:44:a6: 0d:70:be:fe:d3:9e:02:6d:6b:33:59:2e:73:d7:1f:e1:15:be: b3:9a:c7:4e:84:f9:e6:94:4c:ee:1d:ca:d8:ae:d4:8f:05:de: 5b:53:29:1a:0f:b5:3e:05:61:55:d7:05:0e:7e:75:bd:be:5c: 96:cb:68:4d:8c:20:b8:87:47:c5:16:24:e7:ae:fe:69:de:f7: 5b:d5:13:d4:34:a8:a2:c1:d1:84:1e:9e:64:41:42:f5:71:c1: d2:23:a0:6b:cc:9f:d5:01:b2:ee:52:54:d2:b7:7f:80:9b:ac: ad:ca:f0:85:74:f0:53:d1:e4:9d:98:cc:d9:8c:44:93:21:f8: 6a:ab:d2:6f:9c:89:65:d3:24:f4:d3:00:22:65:35:39:54:31: ff:9a:5c:ac:36:9d:ca:44:8c:ed:8b:e0:0e:fa:2b:bc:1d:68: cc:d7:87:82:09:15:6a:fa:d1:00:7d:10:37:96:a4:76:cf:b3: af:b8:a3:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWaRAkGwy20YWIEYDGOfmXaBz2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5NTFF ODEyNjZGQzAeFw0yNjA3MjAxODM5MzlaFw0yNjA3MjExODU0MzlaMDMxMTAvBgNV BAMTKDMzQ0NEM0Y1M0MwNzdENENBMjhENjE1QkNDOTNCNjUyRTdEMzNEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEfnsi+CMWNN/p8P5uo6i5z5A o4u4v45kIFV7XXaTSofkSeXitcfuEHRwo+n3VlQPL6fmM9VYwVFM+TpKLsc2JjmT z8bV6AYb/D5Ydb9YBsgbmHzKoOTYPgtKuiAdAP1wPMAvGzbDx8DIztFEdZ5qenuW j9OSYItye4KJLnv9DkMJZ4MYPKy6gbR1FRbSwxuJbvo0+GdCe3StFtj8RF0LjFph qNgk5pNZlmc34wD1tYuKzTTw2oa3Uw3IACtIzVGLpFwefzX6QHrC/UP4HSlSxzDW XjDhZdP61aeo+KQWa1K4DjC0zeuC06gt2G0zZS1Df0AKYmbMyeZBrIsrE6vpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM8zT9TwHfUyijWFbzJO2UufTPRgwHwYDVR0j BBgwFoAUGxNZjj3DqNXwHuhpR7dJUegSZvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2NTI5ZGItOTMzMC00ZTk3LWFkZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUz REMzQThENUYwMUVFODY5NDdCNzQ5NTFFODEyNjZGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjEzNTk4RTNEQzNBOEQ1RjAxRUU4Njk0N0I3NDk1MUU4MTI2 NkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5 NTFFODEyNjZGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwhJcChIp9bxau9VmH3Gy44S0VN6LNQMO/W LmzWfbvDh1QC1Fe5lmwtfzJ0XFS7PaFNAH9+IxClslRay27yFHlrjNu5tIlEpg1w vv7TngJtazNZLnPXH+EVvrOax06E+eaUTO4dytiu1I8F3ltTKRoPtT4FYVXXBQ5+ db2+XJbLaE2MILiHR8UWJOeu/mne91vVE9Q0qKLB0YQenmRBQvVxwdIjoGvMn9UB su5SVNK3f4CbrK3K8IV08FPR5J2YzNmMRJMh+Gqr0m+ciWXTJPTTACJlNTlUMf+a XKw2ncpEjO2L4A76K7wdaMzXh4IJFWr60QB9EDeWpHbPs6+4ow8= -----END CERTIFICATE-----Generated at Tue Jul 21 05:41:09 2026 by rpki-client