$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft File: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft (raw, json) Hash identifier: QtE9b8N35TB2ncVhSkwbhd2oH04NJuWdQn1jPaB32Hk= Subject key identifier: 52:A8:6E:01:FF:A7:5A:01:06:DE:6D:68:EA:45:A3:D2:77:6A:01:5C Authority key identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C Certificate issuer: /CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Certificate serial: 5AF03BB1B6CB9388644C3971185C93F96294FBE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft Manifest number: BA Signing time: Wed 16 Sep 2026 18:01:25 +0000 Manifest this update: Wed 16 Sep 2026 17:56:25 +0000 Manifest next update: Thu 17 Sep 2026 20:53:25 +0000 Files and hashes: 1: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl (hash: mTKftjAiHkS2ueSndJtWlOgmhRmsgLjH7cArHeX/qTk=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: h0mDQReAke//6pXCcFZT8G6lJ584gGzjmeVUQYfewjg=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: NIsy4Wi5ij/ahJgBOU7wDjfzvEs3Vq8uKids33t9Pj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f0:3b:b1:b6:cb:93:88:64:4c:39:71:18:5c:93:f9:62:94:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Validity Not Before: Sep 16 17:56:25 2026 GMT Not After : Sep 17 20:53:25 2026 GMT Subject: CN=52A86E01FFA75A0106DE6D68EA45A3D2776A015C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:4e:ad:32:90:5e:19:b9:2d:bb:a7:4d:01: ce:26:58:e8:59:0f:fc:d2:70:13:5b:12:4f:9c:6b: 2f:8a:2b:5a:a8:19:84:35:61:23:b9:d2:fe:27:34: 31:9b:94:a0:70:65:86:f7:6d:75:14:f3:08:8e:e3: c2:73:89:5a:fb:00:28:8f:0e:8e:83:8f:16:94:d6: 1d:f3:79:4c:d9:22:f0:74:75:72:54:8a:da:3b:84: 3f:2a:b2:ac:2a:83:c0:4d:58:7b:86:97:f0:72:09: f1:6c:44:88:3a:86:43:7a:22:99:b2:5d:ca:25:e4: ac:60:64:e5:27:0a:35:75:1b:81:4f:bd:a4:7a:80: e1:57:6b:b5:52:03:6a:3e:04:30:51:7b:14:1e:0a: cb:aa:0f:ce:72:6a:d8:8d:84:49:eb:f5:6b:7b:d6: 49:e9:eb:d2:dc:e7:ba:a1:d0:81:56:ca:0a:4a:1b: ec:35:25:fe:25:e4:ca:7d:ae:a0:8d:de:09:a9:16: d8:36:7e:b0:fe:30:a2:29:1f:77:8b:7a:89:d4:3d: e7:76:7e:27:5b:46:93:78:a9:63:72:dc:fb:f5:6b: e6:9c:84:c5:a0:0f:3d:87:78:74:c7:07:a2:4e:cc: c6:ae:86:33:ce:6b:92:53:1f:09:8b:fd:bb:12:ea: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:6E:01:FF:A7:5A:01:06:DE:6D:68:EA:45:A3:D2:77:6A:01:5C X509v3 Authority Key Identifier: keyid:1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1a:3e:1c:2f:72:dd:43:c8:dc:72:60:47:7c:5e:cf:dd:5b: 18:24:6b:cf:03:d6:ea:13:36:25:07:4f:ab:87:90:4e:12:9f: 79:30:39:2f:94:b6:29:e2:df:b3:31:09:f5:6c:5b:f2:d4:35: 50:a4:d1:1d:ac:d6:17:0a:29:f0:bd:c3:1c:ab:fd:58:9f:93: c4:fb:89:e1:3c:41:88:e3:2b:79:bd:95:12:bd:3e:5b:46:0e: cf:33:23:f8:39:5e:79:10:ab:0c:96:d0:71:0f:81:c5:c3:b5: bd:b7:6b:d0:48:7a:24:87:16:e0:fc:e7:75:dd:8c:0f:c4:1d: 5a:b6:d1:fc:bf:4b:fa:68:53:1b:fd:a1:50:6b:fb:5a:0a:1e: e4:4d:93:43:35:3b:3b:cf:ba:89:06:84:c8:64:e3:67:f9:b7: a3:0d:c4:51:54:1a:36:96:a9:6b:1d:20:7c:ea:28:69:f7:76: 7e:09:79:a2:60:f7:05:cd:d4:3e:af:42:84:d5:13:95:3b:9b: 70:73:b5:ec:c7:ff:05:d5:88:a8:9e:a8:b3:20:b4:76:ec:ba: df:44:04:20:90:f2:09:ce:6d:3f:e0:44:f5:04:6e:88:3e:7b: 08:c1:32:dd:33:a1:7e:7b:7c:b8:14:36:e2:e0:08:a9:bc:4e: e3:67:73:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvA7sbbLk4hkTDlxGFyT+WKU++AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3 RTAzRDk1QzAeFw0yNjA5MTYxNzU2MjVaFw0yNjA5MTcyMDUzMjVaMDMxMTAvBgNV BAMTKDUyQTg2RTAxRkZBNzVBMDEwNkRFNkQ2OEVBNDVBM0QyNzc2QTAxNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTJU6tMpBeGbktu6dNAc4mWOhZ D/zScBNbEk+cay+KK1qoGYQ1YSO50v4nNDGblKBwZYb3bXUU8wiO48JziVr7ACiP Do6DjxaU1h3zeUzZIvB0dXJUito7hD8qsqwqg8BNWHuGl/ByCfFsRIg6hkN6Ipmy Xcol5KxgZOUnCjV1G4FPvaR6gOFXa7VSA2o+BDBRexQeCsuqD85yatiNhEnr9Wt7 1knp69Lc57qh0IFWygpKG+w1Jf4l5Mp9rqCN3gmpFtg2frD+MKIpH3eLeonUPed2 fidbRpN4qWNy3Pv1a+achMWgDz2HeHTHB6JOzMauhjPOa5JTHwmL/bsS6kx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUqhuAf+nWgEG3m1o6kWj0ndqAVwwHwYDVR0j BBgwFoAUG2GhGgp2YqH7oiCxoA/ti34D2VwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdlZTZiZjMtMmJkYS00Y2E0LWE1ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEw QTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3RTAzRDk1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjYxQTExQTBBNzY2MkExRkJBMjIwQjFBMDBGRUQ4QjdFMDNE OTVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVE OEI3RTAzRDk1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4aPhwvct1DyNxyYEd8Xs/dWxgka88D1uoT NiUHT6uHkE4Sn3kwOS+Utini37MxCfVsW/LUNVCk0R2s1hcKKfC9wxyr/Vifk8T7 ieE8QYjjK3m9lRK9PltGDs8zI/g5XnkQqwyW0HEPgcXDtb23a9BIeiSHFuD853Xd jA/EHVq20fy/S/poUxv9oVBr+1oKHuRNk0M1OzvPuokGhMhk42f5t6MNxFFUGjaW qWsdIHzqKGn3dn4JeaJg9wXN1D6vQoTVE5U7m3BztezH/wXViKieqLMgtHbsut9E BCCQ8gnObT/gRPUEbog+ewjBMt0zoX57fLgUNuLgCKm8TuNnc1s= -----END CERTIFICATE-----Generated at Thu Sep 17 11:44:47 2026 by rpki-client