$ rpki-client -vvf rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft File: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft (raw, json) Hash identifier: K13LEATBbEVhhJcaqCS21i31c5ks8xzL2n/KSQ8d80M= Subject key identifier: 51:B8:E5:CE:67:C8:EB:E0:56:BF:14:D3:2B:87:34:05:B1:CB:EB:44 Authority key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Certificate issuer: /CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Certificate serial: 1B383BB98C1D0B8ECF05E6D9DCE87B2CD49986F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:27:38 +0000 Manifest this update: Tue 21 Jul 2026 01:22:38 +0000 Manifest next update: Wed 22 Jul 2026 05:14:38 +0000 Files and hashes: 1: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl (hash: 50Tqbv5Rn593qtxdEKgQaiK4/v9P6T9IPJb8qr+DWNk=) 2: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: thh4X2NPWP82XDrx73Jv5IezHaIkq/gXqvOxSLdwylI=) 3: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: bT5Uw393iqcafpbbgDNkyN2J0K45Ob4q+8CX5o4YsWs=) 4: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: GT1/9A1T1IHuKtVAU+XRFXaTDB7gCJgDb4j3AFpErYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:38:3b:b9:8c:1d:0b:8e:cf:05:e6:d9:dc:e8:7b:2c:d4:99:86:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Validity Not Before: Jul 21 01:22:38 2026 GMT Not After : Jul 22 05:14:38 2026 GMT Subject: CN=51B8E5CE67C8EBE056BF14D32B873405B1CBEB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:45:7a:a1:f9:59:52:4a:41:43:8f:99:d0: 19:dd:26:aa:81:b1:14:d8:d4:e3:16:f8:cc:8a:da: 99:ee:48:f5:fa:55:65:ee:f8:65:07:e9:44:75:31: e7:d3:4f:42:73:51:12:9d:e5:4b:9d:dd:2c:f6:b8: 2e:ac:28:87:10:05:8d:49:fb:a7:93:a4:6b:dd:dd: fc:b4:40:5d:06:0a:a1:00:5d:12:38:63:b1:aa:61: 05:64:27:bb:6c:0d:8b:82:fe:fa:d2:5a:e4:bd:61: 6a:84:46:2a:06:5c:e2:7a:0e:48:a4:73:92:dc:b6: 2c:3c:53:4e:d8:a1:c7:80:9b:21:44:82:a0:39:cb: 0a:a1:6f:a8:d2:d7:2b:14:0b:a1:9e:14:bd:7e:18: ef:9f:fe:db:57:3c:01:af:0b:55:7c:73:28:1d:ba: 4d:f1:9f:3a:7e:3b:f4:98:f2:70:34:7a:e8:db:02: 43:4b:00:06:0d:3a:a1:d3:17:5b:bb:58:3b:94:dc: 51:68:c2:4c:d6:e3:a1:bf:c9:8d:a7:71:93:ce:54: 2a:d3:c5:f3:f0:bc:19:0f:1d:d9:31:f1:45:59:99: 0e:ae:7f:e4:c6:d6:01:ee:91:8b:2a:67:6d:6f:70: 4d:f9:28:88:75:c5:ef:42:98:c4:6d:10:d7:60:be: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B8:E5:CE:67:C8:EB:E0:56:BF:14:D3:2B:87:34:05:B1:CB:EB:44 X509v3 Authority Key Identifier: keyid:1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7e:21:2b:74:d8:60:62:28:d2:cf:79:9c:b1:f7:c0:c8:d4: 35:ca:90:d1:09:46:50:b2:7c:ad:83:49:b2:a8:cb:e1:76:80: 0c:bf:2e:e7:9b:0a:cc:ff:84:47:b3:4f:74:81:45:d7:09:31: 2b:d4:c1:dc:07:7b:54:96:7a:a7:b6:92:a8:56:82:18:66:c2: f3:aa:13:1b:1f:95:5b:64:68:04:bd:be:01:91:0f:5b:50:64: 14:a5:b3:5b:a6:b8:02:91:6c:48:86:d5:25:2c:02:dd:43:2c: d8:f8:0b:63:96:ab:f1:44:fe:46:88:ac:4d:cc:43:4a:b7:dc: d0:f4:1e:48:d8:1d:4e:cc:08:8a:0b:65:11:8e:56:da:0b:2b: 28:23:a7:d5:54:ef:82:77:43:f8:d6:e5:cb:f6:98:b0:96:df: e3:c8:01:74:4e:94:90:7f:fb:3e:59:bb:85:c0:f2:c7:33:0b: 38:25:19:6f:2a:67:e7:c3:d4:fa:fb:45:14:26:40:2c:2a:62: 86:7a:7b:ea:4b:86:f1:23:64:92:fa:00:ce:be:e6:89:fc:6e: 5c:f0:15:10:b7:ea:12:29:c6:0f:81:2f:84:18:05:c6:92:d2: 8b:cc:30:3f:99:29:27:99:cd:bf:4c:78:a7:1f:b3:d2:a9:7a: 85:f7:f1:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzg7uYwdC47PBebZ3Oh7LNSZhvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEz Rjg4MURFNTAeFw0yNjA3MjEwMTIyMzhaFw0yNjA3MjIwNTE0MzhaMDMxMTAvBgNV BAMTKDUxQjhFNUNFNjdDOEVCRTA1NkJGMTREMzJCODczNDA1QjFDQkVCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAEV6oflZUkpBQ4+Z0BndJqqB sRTY1OMW+MyK2pnuSPX6VWXu+GUH6UR1MefTT0JzURKd5Uud3Sz2uC6sKIcQBY1J +6eTpGvd3fy0QF0GCqEAXRI4Y7GqYQVkJ7tsDYuC/vrSWuS9YWqERioGXOJ6Dkik c5Lctiw8U07YoceAmyFEgqA5ywqhb6jS1ysUC6GeFL1+GO+f/ttXPAGvC1V8cygd uk3xnzp+O/SY8nA0eujbAkNLAAYNOqHTF1u7WDuU3FFowkzW46G/yY2ncZPOVCrT xfPwvBkPHdkx8UVZmQ6uf+TG1gHukYsqZ21vcE35KIh1xe9CmMRtENdgvh/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUbjlzmfI6+BWvxTTK4c0BbHL60QwHwYDVR0j BBgwFoAUG2WQnBQEsPB/jzZ84+5u+j+IHeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM1MDQ4YzYtOGNjZC00NjNkLWFkMzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMx NDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEzRjg4MURFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjY1OTA5QzE0MDRCMEYwN0Y4RjM2N0NFM0VFNkVGQTNGODgx REU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZF RkEzRjg4MURFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ+ISt02GBiKNLPeZyx98DI1DXKkNEJRlCy fK2DSbKoy+F2gAy/LuebCsz/hEezT3SBRdcJMSvUwdwHe1SWeqe2kqhWghhmwvOq ExsflVtkaAS9vgGRD1tQZBSls1umuAKRbEiG1SUsAt1DLNj4C2OWq/FE/kaIrE3M Q0q33ND0HkjYHU7MCIoLZRGOVtoLKygjp9VU74J3Q/jW5cv2mLCW3+PIAXROlJB/ +z5Zu4XA8sczCzglGW8qZ+fD1Pr7RRQmQCwqYoZ6e+pLhvEjZJL6AM6+5on8blzw FRC36hIpxg+BL4QYBcaS0ovMMD+ZKSeZzb9MeKcfs9KpeoX38bw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:52 2026 by rpki-client