$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft File: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft (raw, json) Hash identifier: nWpx5mqW7OQW4qjB6S6H2Tsvu9dft2fztTCH0ETuBl8= Subject key identifier: 69:D4:7D:92:D3:ED:87:7E:3B:70:EE:84:3C:CC:95:33:10:18:16:DC Authority key identifier: 1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC Certificate issuer: /CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Certificate serial: 2D240CBF9D3F6C19139C4380948159ABA386674F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:17:47 +0000 Manifest this update: Tue 02 Jun 2026 22:12:47 +0000 Manifest next update: Wed 03 Jun 2026 23:25:47 +0000 Files and hashes: 1: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: X1BuffyPqZatWKWcf+HC9BxedbehRoziiAknm7XowP4=) 2: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl (hash: YpaLPwfZGWXPlaUXh40sZAPaDuiCI3gCdVjhPbt5kCw=) 3: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: 7FE61Zc3WU63aXcyhhG+2SBAGWSpraBvNcEGom2PNzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:24:0c:bf:9d:3f:6c:19:13:9c:43:80:94:81:59:ab:a3:86:67:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Validity Not Before: Jun 2 22:12:47 2026 GMT Not After : Jun 3 23:25:47 2026 GMT Subject: CN=69D47D92D3ED877E3B70EE843CCC9533101816DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:43:e6:e9:c5:21:f4:2a:5e:f2:99:c1:e6: e0:df:35:30:a7:5c:12:d8:3b:d4:c6:92:68:01:af: 80:14:14:48:51:a2:49:bc:70:ee:0a:98:c8:a9:97: 4a:86:77:da:23:d7:57:f5:37:79:71:d5:45:88:0d: 14:de:65:59:1a:dd:22:0d:c3:f5:ba:55:32:5c:9b: 08:c6:ae:a7:02:31:c7:57:da:72:a3:79:39:ac:93: 1e:06:5c:6f:ee:5a:0b:96:f4:29:31:72:e2:18:8e: 1b:88:81:c0:36:7c:ef:cb:48:b1:0e:8e:9b:2b:a0: 72:f4:5d:1b:f4:c1:ea:f9:20:e7:ae:96:8a:c8:18: b4:8c:91:7d:cc:aa:5e:ea:70:69:da:da:93:ec:c8: 20:0f:c4:ac:a1:f0:5c:3f:0c:fa:83:6e:4c:c7:30: 5f:5e:dd:fe:fe:05:7d:b0:15:d9:6c:c4:2d:7d:70: 20:24:1e:e1:36:42:0d:ac:ee:69:1e:47:1c:37:08: 60:e6:58:36:14:05:9e:50:25:5f:65:59:fa:95:d6: 38:05:0e:1e:38:29:05:d5:58:d6:82:7f:e1:e8:aa: d5:96:59:5c:8d:af:0c:b5:89:36:e9:b9:92:6e:4e: fe:16:04:1a:c1:cc:b3:7f:75:1a:33:2d:49:5a:c2: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:7D:92:D3:ED:87:7E:3B:70:EE:84:3C:CC:95:33:10:18:16:DC X509v3 Authority Key Identifier: keyid:1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:dd:64:c5:71:26:fa:d3:34:8f:0b:7c:86:aa:62:e3:7f:a3: 14:f8:f7:a8:6f:97:58:6f:2c:0c:8c:a9:95:06:06:f7:d5:ee: 55:8d:5f:10:28:33:fb:bd:82:01:b3:f7:ff:c5:36:77:cd:7f: 20:57:60:09:5f:27:73:89:c8:f9:7d:49:ed:ae:f0:70:e8:f2: 15:41:d2:52:44:73:40:54:75:e9:96:24:41:82:68:1b:63:2a: a1:1b:7a:2f:90:32:d7:9d:43:1d:5d:13:e3:1f:e1:ed:04:33: 59:eb:78:09:e1:77:42:0c:77:57:8c:c6:56:ea:f5:2e:fe:16: 4b:d4:7e:e4:73:d0:80:75:9b:a8:6a:28:9c:26:4a:65:df:e8: 22:ff:79:84:17:d9:a7:ec:26:07:5f:c1:52:75:dd:32:68:2b: 86:3a:bf:d2:ea:f4:5b:d8:cb:0a:35:d8:0d:fa:fb:db:eb:a7: fa:f6:ac:ab:e6:42:e2:8a:86:e6:d9:f8:cb:44:3b:26:e2:ee: 47:1d:fb:da:b7:8d:09:dc:0e:1e:6f:0d:98:2e:15:e3:c7:de: 8f:5a:02:7d:96:41:0e:69:06:3a:bf:97:40:50:08:2a:c9:0d: 11:00:cb:f0:45:f6:a2:33:b4:61:df:57:07:58:39:7a:fd:7e: cc:8a:71:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSQMv50/bBkTnEOAlIFZq6OGZ08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5NTFF ODEyNjZGQzAeFw0yNjA2MDIyMjEyNDdaFw0yNjA2MDMyMzI1NDdaMDMxMTAvBgNV BAMTKDY5RDQ3RDkyRDNFRDg3N0UzQjcwRUU4NDNDQ0M5NTMzMTAxODE2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFk0Pm6cUh9Cpe8pnB5uDfNTCn XBLYO9TGkmgBr4AUFEhRokm8cO4KmMipl0qGd9oj11f1N3lx1UWIDRTeZVka3SIN w/W6VTJcmwjGrqcCMcdX2nKjeTmskx4GXG/uWguW9CkxcuIYjhuIgcA2fO/LSLEO jpsroHL0XRv0wer5IOeulorIGLSMkX3Mql7qcGna2pPsyCAPxKyh8Fw/DPqDbkzH MF9e3f7+BX2wFdlsxC19cCAkHuE2Qg2s7mkeRxw3CGDmWDYUBZ5QJV9lWfqV1jgF Dh44KQXVWNaCf+HoqtWWWVyNrwy1iTbpuZJuTv4WBBrBzLN/dRozLUlawmoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadR9ktPth347cO6EPMyVMxAYFtwwHwYDVR0j BBgwFoAUGxNZjj3DqNXwHuhpR7dJUegSZvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2NTI5ZGItOTMzMC00ZTk3LWFkZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUz REMzQThENUYwMUVFODY5NDdCNzQ5NTFFODEyNjZGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjEzNTk4RTNEQzNBOEQ1RjAxRUU4Njk0N0I3NDk1MUU4MTI2 NkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5 NTFFODEyNjZGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHdZMVxJvrTNI8LfIaqYuN/oxT496hvl1hv LAyMqZUGBvfV7lWNXxAoM/u9ggGz9//FNnfNfyBXYAlfJ3OJyPl9Se2u8HDo8hVB 0lJEc0BUdemWJEGCaBtjKqEbei+QMtedQx1dE+Mf4e0EM1nreAnhd0IMd1eMxlbq 9S7+FkvUfuRz0IB1m6hqKJwmSmXf6CL/eYQX2afsJgdfwVJ13TJoK4Y6v9Lq9FvY ywo12A36+9vrp/r2rKvmQuKKhubZ+MtEOybi7kcd+9q3jQncDh5vDZguFePH3o9a An2WQQ5pBjq/l0BQCCrJDREAy/BF9qIztGHfVwdYOXr9fsyKcTc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:32 2026 by rpki-client