$ rpki-client -vvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft File: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft (raw, json) Hash identifier: lLZ+i6sEDEdNhXiZAa1lxBXlzFTKbzZy/HKKSqOBdDs= Subject key identifier: BA:58:06:C9:B5:0A:36:1B:E1:39:BD:1C:F0:40:DA:80:E4:FE:9A:39 Authority key identifier: 1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 Certificate issuer: /CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Certificate serial: 5CFF512221472A2AB3BA9B17224DD63C064C088A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 12:32:15 +0000 Manifest this update: Thu 18 Jun 2026 12:27:15 +0000 Manifest next update: Fri 19 Jun 2026 14:07:15 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: m7In3QfaxfsyuW0qTfRybGAF6wFMxAA9Ta2LCZQCpzQ=) 2: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl (hash: Cm1KgnXYR+jfYHr1Z+xOwwqoTyIWxwqU+43P7efYqtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ff:51:22:21:47:2a:2a:b3:ba:9b:17:22:4d:d6:3c:06:4c:08:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Validity Not Before: Jun 18 12:27:15 2026 GMT Not After : Jun 19 14:07:15 2026 GMT Subject: CN=BA5806C9B50A361BE139BD1CF040DA80E4FE9A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:b8:84:82:80:71:6b:e2:cc:00:91:23:31: fd:d2:c6:c7:94:78:f5:f0:1d:7b:85:01:e0:f1:d2: 73:9c:87:83:b4:79:d4:b3:c8:9d:71:a7:69:2b:36: cf:79:24:7d:60:9c:97:fe:a9:70:af:bf:f7:24:23: 5d:43:bb:17:70:4d:e6:84:33:d7:c9:e4:02:9b:7c: 05:2e:91:38:73:9f:8a:6f:58:09:bb:91:a1:3f:e6: 71:41:fc:06:9d:ea:be:eb:d7:c2:24:c2:7a:6d:2b: 20:5f:83:48:f7:c9:16:0a:5c:04:24:ba:bf:f2:91: 46:94:2c:68:37:7b:22:4f:27:d1:b7:55:ee:24:99: 3c:5a:f9:80:07:56:69:d3:97:07:60:ae:a2:33:cc: 41:b6:e6:af:db:fd:6e:89:11:07:46:b3:67:bb:e3: fc:48:82:c9:6a:4b:07:66:d5:b1:4b:40:b5:ef:3f: f8:ab:44:e5:ba:9d:d4:a5:3c:f5:dd:80:19:ae:0c: 33:5e:a4:ac:d2:6f:50:80:de:42:30:c1:eb:2a:76: 06:49:f9:51:cb:15:65:38:80:78:9e:c8:e4:11:fb: f5:82:31:97:26:66:98:bd:39:2b:72:ff:2b:bd:e8: dd:bc:96:8d:44:30:62:ca:ad:e6:35:69:18:e0:1c: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:58:06:C9:B5:0A:36:1B:E1:39:BD:1C:F0:40:DA:80:E4:FE:9A:39 X509v3 Authority Key Identifier: keyid:1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6e:d9:72:6f:bc:e3:14:f0:32:26:1d:46:15:48:1f:cb:1a: 33:b5:4b:76:46:ad:f5:eb:67:a7:27:29:18:76:a1:d6:50:76: 7a:6b:37:cd:ca:32:17:c3:4d:bc:26:84:58:43:bc:7f:12:bb: ad:2e:3c:f9:e3:6d:e6:de:59:27:e2:fe:22:98:1b:da:0b:32: c3:fc:f1:ed:5e:f7:0d:74:cd:d9:15:6b:95:6a:eb:6c:e5:e5: 0f:5e:0f:2f:97:54:e6:4e:dc:a1:21:1f:59:be:58:89:63:54: 60:c7:2c:4d:44:a9:a6:92:4b:04:b5:d8:d5:7b:71:84:aa:e5: 75:83:6f:77:43:04:34:b4:13:c3:38:07:d8:f1:e9:96:b4:68: e7:48:2a:fd:a7:0d:aa:59:cc:6f:0c:5f:41:95:73:21:61:06: 31:af:46:2e:31:76:3f:7b:42:a3:a6:01:c7:fc:c8:f2:aa:c4: db:7b:4c:62:dd:92:50:70:c7:63:10:e7:6e:f5:0b:b8:29:8f: 42:37:38:f3:08:95:7f:c0:73:62:55:18:48:67:62:ce:25:b2: e4:73:e2:6a:c0:49:57:3f:2a:8c:ac:be:61:ec:fb:50:32:d2: c3:b9:64:70:c0:5c:15:2e:06:8c:5d:e6:a2:df:ab:cc:b1:08: 0b:15:32:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXP9RIiFHKiqzupsXIk3WPAZMCIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1 RjRFNUY4ODAeFw0yNjA2MTgxMjI3MTVaFw0yNjA2MTkxNDA3MTVaMDMxMTAvBgNV BAMTKEJBNTgwNkM5QjUwQTM2MUJFMTM5QkQxQ0YwNDBEQTgwRTRGRTlBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf2riEgoBxa+LMAJEjMf3SxseU ePXwHXuFAeDx0nOch4O0edSzyJ1xp2krNs95JH1gnJf+qXCvv/ckI11DuxdwTeaE M9fJ5AKbfAUukThzn4pvWAm7kaE/5nFB/Aad6r7r18IkwnptKyBfg0j3yRYKXAQk ur/ykUaULGg3eyJPJ9G3Ve4kmTxa+YAHVmnTlwdgrqIzzEG25q/b/W6JEQdGs2e7 4/xIgslqSwdm1bFLQLXvP/irROW6ndSlPPXdgBmuDDNepKzSb1CA3kIwwesqdgZJ +VHLFWU4gHieyOQR+/WCMZcmZpi9OSty/yu96N28lo1EMGLKreY1aRjgHACJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulgGybUKNhvhOb0c8EDagOT+mjkwHwYDVR0j BBgwFoAUG6ZTqCJqBvugtiW1xLaoRl9OX4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgy MjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1RjRFNUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkE2NTNBODIyNkEwNkZCQTBCNjI1QjVDNEI2QTg0NjVGNEU1 Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4 NDY1RjRFNUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJu2XJvvOMU8DImHUYVSB/LGjO1S3ZGrfXr Z6cnKRh2odZQdnprN83KMhfDTbwmhFhDvH8Su60uPPnjbebeWSfi/iKYG9oLMsP8 8e1e9w10zdkVa5Vq62zl5Q9eDy+XVOZO3KEhH1m+WIljVGDHLE1EqaaSSwS12NV7 cYSq5XWDb3dDBDS0E8M4B9jx6Za0aOdIKv2nDapZzG8MX0GVcyFhBjGvRi4xdj97 QqOmAcf8yPKqxNt7TGLdklBwx2MQ5271C7gpj0I3OPMIlX/Ac2JVGEhnYs4lsuRz 4mrASVc/KoysvmHs+1Ay0sO5ZHDAXBUuBoxd5qLfq8yxCAsVMr4= -----END CERTIFICATE-----Generated at Thu Jun 18 20:57:10 2026 by rpki-client