$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft File: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft (raw, json) Hash identifier: Dv7uicO/sYKkvblA6BFXT7nP3ZfUziRB9UGNYFDrnRc= Subject key identifier: 5C:4C:DB:82:12:CB:CA:FC:3B:A8:83:E7:96:41:C8:12:FF:3C:78:4D Authority key identifier: 1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 Certificate issuer: /CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Certificate serial: 1ED3FB169C58D7FC14FFC76984E6652FDFACBCE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 17:51:17 +0000 Manifest this update: Wed 16 Sep 2026 17:46:17 +0000 Manifest next update: Thu 17 Sep 2026 21:43:17 +0000 Files and hashes: 1: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl (hash: m144ZowG6OuXA/IA3dq2RFvy1ANXAi3UA/jLTnJKRoo=) 2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: m7In3QfaxfsyuW0qTfRybGAF6wFMxAA9Ta2LCZQCpzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d3:fb:16:9c:58:d7:fc:14:ff:c7:69:84:e6:65:2f:df:ac:bc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Validity Not Before: Sep 16 17:46:17 2026 GMT Not After : Sep 17 21:43:17 2026 GMT Subject: CN=5C4CDB8212CBCAFC3BA883E79641C812FF3C784D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:f3:1a:3c:9e:66:4a:2e:40:a5:b3:d7:6f: b3:4a:9b:ca:ca:01:38:ec:2f:c5:94:0f:64:65:6f: 16:ef:36:16:44:d3:d7:8c:49:ea:02:3d:94:35:db: d0:69:20:3f:56:dd:2b:33:fe:93:a3:ce:5f:b2:07: e6:f6:e3:8e:8c:71:ce:db:c1:57:67:1b:a4:2d:d0: 7e:e8:a6:38:d7:59:95:52:46:bf:a0:9f:50:f7:3f: 5e:57:76:39:3f:87:a9:98:48:1b:42:78:71:74:e9: 37:8f:31:d2:9a:51:a8:bb:7b:c6:da:96:3a:ec:a0: f4:6e:30:71:9a:2c:6e:70:08:f7:f3:bc:72:d8:bd: cb:d0:e4:76:49:6b:71:05:1c:22:82:07:ec:9d:ba: 7e:6c:f6:33:c3:82:1a:03:f1:66:cb:52:44:9e:17: 88:a2:44:f4:f2:6f:89:f7:ab:e2:f0:6a:3c:51:e1: e1:04:17:38:2b:ad:b1:c0:d1:ce:47:3a:49:63:97: 32:2e:2d:cd:31:39:6c:23:7f:40:ff:c6:3c:0d:dc: ea:89:98:3c:4c:ca:4a:a8:35:e1:e3:a9:a3:74:07: e4:c5:1a:de:46:75:e9:31:44:aa:f3:67:45:e2:a7: 4f:06:34:08:a5:5c:9f:ac:ae:88:57:5b:1b:9d:05: ea:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4C:DB:82:12:CB:CA:FC:3B:A8:83:E7:96:41:C8:12:FF:3C:78:4D X509v3 Authority Key Identifier: keyid:1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b3:d0:9b:0a:7f:fb:fb:23:f3:b3:15:f2:79:1f:29:a8:7f: 50:00:ce:b0:d5:ce:e0:8b:4d:42:2e:6f:10:d0:2a:ce:b0:dd: af:8e:c4:6f:22:2a:f8:6c:07:76:3e:31:01:ee:fb:93:fc:c6: 15:e5:09:5a:81:9b:b6:53:a2:cb:d3:a9:2a:6a:a1:05:62:0e: 55:64:b2:b8:86:24:36:76:64:63:13:bf:4e:4d:9d:7c:c6:b9: cf:d1:69:71:0e:95:07:27:57:a3:f0:85:06:81:13:4a:58:aa: d2:96:1f:4c:d7:1d:74:4b:90:9e:be:80:d7:68:27:78:e7:51: b3:10:14:02:3f:63:36:bc:2f:e9:52:9f:da:45:6c:50:23:a7: 2e:04:69:8b:4f:c9:c9:33:37:69:96:d9:75:ed:61:41:f3:72: 97:84:88:25:f1:1f:50:a4:24:b3:4d:a2:db:81:d7:25:cf:b6: fe:c9:b6:02:17:3c:54:31:eb:34:ed:7b:18:18:2f:b3:fe:59: 69:e9:bb:19:58:b3:da:21:05:08:af:9e:0a:b2:16:2b:f5:33: 1f:42:f9:0b:10:0c:0b:b2:2e:6c:a6:0a:ad:4a:60:97:4a:9d: 93:2b:35:9a:56:7c:16:15:aa:99:fc:17:b4:22:e5:6c:38:b9: 91:03:de:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtP7FpxY1/wU/8dphOZlL9+svOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1 RjRFNUY4ODAeFw0yNjA5MTYxNzQ2MTdaFw0yNjA5MTcyMTQzMTdaMDMxMTAvBgNV BAMTKDVDNENEQjgyMTJDQkNBRkMzQkE4ODNFNzk2NDFDODEyRkYzQzc4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8vMaPJ5mSi5ApbPXb7NKm8rK ATjsL8WUD2RlbxbvNhZE09eMSeoCPZQ129BpID9W3Ssz/pOjzl+yB+b2446Mcc7b wVdnG6Qt0H7opjjXWZVSRr+gn1D3P15Xdjk/h6mYSBtCeHF06TePMdKaUai7e8ba ljrsoPRuMHGaLG5wCPfzvHLYvcvQ5HZJa3EFHCKCB+ydun5s9jPDghoD8WbLUkSe F4iiRPTyb4n3q+LwajxR4eEEFzgrrbHA0c5HOkljlzIuLc0xOWwjf0D/xjwN3OqJ mDxMykqoNeHjqaN0B+TFGt5GdekxRKrzZ0Xip08GNAilXJ+srohXWxudBepVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXEzbghLLyvw7qIPnlkHIEv88eE0wHwYDVR0j BBgwFoAUG6ZTqCJqBvugtiW1xLaoRl9OX4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgy MjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1RjRFNUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkE2NTNBODIyNkEwNkZCQTBCNjI1QjVDNEI2QTg0NjVGNEU1 Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4 NDY1RjRFNUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWz0JsKf/v7I/OzFfJ5Hymof1AAzrDVzuCL TUIubxDQKs6w3a+OxG8iKvhsB3Y+MQHu+5P8xhXlCVqBm7ZTosvTqSpqoQViDlVk sriGJDZ2ZGMTv05NnXzGuc/RaXEOlQcnV6PwhQaBE0pYqtKWH0zXHXRLkJ6+gNdo J3jnUbMQFAI/Yza8L+lSn9pFbFAjpy4EaYtPyckzN2mW2XXtYUHzcpeEiCXxH1Ck JLNNotuB1yXPtv7JtgIXPFQx6zTtexgYL7P+WWnpuxlYs9ohBQivngqyFiv1Mx9C +QsQDAuyLmymCq1KYJdKnZMrNZpWfBYVqpn8F7Qi5Ww4uZED3uw= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:59 2026 by rpki-client