$ rpki-client -vvvf rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft File: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft (raw, json) Hash identifier: /c5OP9XSRn/Jl/12Uz4xv3bB/Gn4MICLfDZxU3j/Yq4= Subject key identifier: 53:91:64:1E:A0:A8:57:B4:63:58:61:7B:1A:E9:45:23:37:A9:31:2C Authority key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Certificate issuer: /CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Certificate serial: 07DDCA43F47393570A95618BF059C328B311218E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:47:26 +0000 Manifest this update: Wed 16 Sep 2026 18:42:26 +0000 Manifest next update: Thu 17 Sep 2026 21:56:26 +0000 Files and hashes: 1: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: bT5Uw393iqcafpbbgDNkyN2J0K45Ob4q+8CX5o4YsWs=) 2: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl (hash: cKK8umSQThm7XiVhn+mCPL9lHRL9JvnpgbR8eA+HEJU=) 3: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: thh4X2NPWP82XDrx73Jv5IezHaIkq/gXqvOxSLdwylI=) 4: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: GT1/9A1T1IHuKtVAU+XRFXaTDB7gCJgDb4j3AFpErYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:dd:ca:43:f4:73:93:57:0a:95:61:8b:f0:59:c3:28:b3:11:21:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Validity Not Before: Sep 16 18:42:26 2026 GMT Not After : Sep 17 21:56:26 2026 GMT Subject: CN=5391641EA0A857B46358617B1AE9452337A9312C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:0a:60:06:12:1e:60:f9:b2:a4:1d:e6:e6: c4:35:ed:bc:4b:65:a5:72:f2:4a:fa:0c:ea:48:4c: 15:83:b7:25:a8:ec:9f:c9:a5:75:f4:46:2c:08:a0: 55:d3:69:d0:52:95:42:45:59:9b:82:b2:3a:bd:4e: 6e:88:bb:bc:19:43:95:03:e9:a4:11:db:15:c7:6f: 19:d3:eb:48:19:4b:46:8b:56:6e:e0:86:9e:69:cb: f2:e3:ed:ec:fd:14:86:6c:57:64:b8:00:d3:71:a4: 26:30:86:18:21:ae:37:3f:90:79:2b:08:23:6b:49: e7:90:a4:07:9b:5f:e3:26:0b:30:a1:4b:d1:3e:e0: 13:8e:b0:4e:50:e2:1d:68:ea:25:2e:04:15:db:d8: 89:43:a5:70:fb:9b:6e:5d:ba:a0:26:e0:21:69:d8: 30:65:40:bf:aa:d6:9d:3a:32:d2:0a:e5:5e:9c:2c: 5c:46:43:fd:91:9f:6c:3f:25:02:0d:d5:98:26:6f: 4e:68:cf:e4:13:43:2c:3c:7c:29:82:23:c4:7f:ca: 74:11:d7:1c:fc:32:8c:c9:10:eb:eb:11:eb:b4:28: c1:72:ac:3d:ba:85:94:41:44:3d:f6:0f:b9:88:21: c5:bf:c4:2b:73:94:81:b7:7b:4e:62:80:7f:36:03: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:91:64:1E:A0:A8:57:B4:63:58:61:7B:1A:E9:45:23:37:A9:31:2C X509v3 Authority Key Identifier: keyid:1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:57:75:f6:59:71:f2:67:bd:10:94:05:89:b6:a5:27:00:6d: 42:62:93:46:e2:74:3c:85:f9:a3:cb:e9:1c:71:ae:2e:e5:58: ed:2f:8e:8b:cd:c8:45:d4:ed:94:4f:0b:f1:58:64:dd:fb:32: 2f:50:05:ed:f8:a8:ab:1d:c4:ba:ce:d5:54:69:b4:91:d6:34: 58:b3:6d:d8:13:d8:c9:95:c5:d8:e5:7d:f9:fb:90:b1:a3:37: 08:47:e7:14:ca:67:f1:a4:a5:ec:a8:05:d4:aa:6d:4f:72:9c: 5e:55:00:d8:be:0e:a8:93:50:ca:72:0d:5e:0f:58:8f:40:6e: 50:85:5c:94:7c:df:e3:71:ab:81:e7:55:d9:f4:65:70:39:a5: 1b:3c:81:6d:fe:80:34:2b:66:00:37:23:9f:47:0b:bf:dc:a7: fe:7e:73:c6:f7:f0:b9:19:fb:be:1a:ce:d1:db:38:62:55:29: 34:a2:15:bd:c0:a5:a4:85:85:94:26:d8:76:cd:5d:54:20:d1: 72:52:2d:7a:d4:14:0f:ee:a6:fb:10:fe:85:f3:c4:2a:fc:d7: 4a:0f:f3:38:1a:2b:08:49:22:4c:9a:45:cd:43:19:87:4c:70: 12:67:1e:3c:39:05:2c:5d:a8:e7:b0:22:44:4d:a2:77:1a:2d: 94:83:79:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB93KQ/Rzk1cKlWGL8FnDKLMRIY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEz Rjg4MURFNTAeFw0yNjA5MTYxODQyMjZaFw0yNjA5MTcyMTU2MjZaMDMxMTAvBgNV BAMTKDUzOTE2NDFFQTBBODU3QjQ2MzU4NjE3QjFBRTk0NTIzMzdBOTMxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PgpgBhIeYPmypB3m5sQ17bxL ZaVy8kr6DOpITBWDtyWo7J/JpXX0RiwIoFXTadBSlUJFWZuCsjq9Tm6Iu7wZQ5UD 6aQR2xXHbxnT60gZS0aLVm7ghp5py/Lj7ez9FIZsV2S4ANNxpCYwhhghrjc/kHkr CCNrSeeQpAebX+MmCzChS9E+4BOOsE5Q4h1o6iUuBBXb2IlDpXD7m25duqAm4CFp 2DBlQL+q1p06MtIK5V6cLFxGQ/2Rn2w/JQIN1Zgmb05oz+QTQyw8fCmCI8R/ynQR 1xz8MozJEOvrEeu0KMFyrD26hZRBRD32D7mIIcW/xCtzlIG3e05igH82Az47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5FkHqCoV7RjWGF7GulFIzepMSwwHwYDVR0j BBgwFoAUG2WQnBQEsPB/jzZ84+5u+j+IHeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM1MDQ4YzYtOGNjZC00NjNkLWFkMzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMx NDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEzRjg4MURFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjY1OTA5QzE0MDRCMEYwN0Y4RjM2N0NFM0VFNkVGQTNGODgx REU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZF RkEzRjg4MURFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtXdfZZcfJnvRCUBYm2pScAbUJik0bidDyF +aPL6Rxxri7lWO0vjovNyEXU7ZRPC/FYZN37Mi9QBe34qKsdxLrO1VRptJHWNFiz bdgT2MmVxdjlffn7kLGjNwhH5xTKZ/GkpeyoBdSqbU9ynF5VANi+DqiTUMpyDV4P WI9AblCFXJR83+Nxq4HnVdn0ZXA5pRs8gW3+gDQrZgA3I59HC7/cp/5+c8b38LkZ +74aztHbOGJVKTSiFb3ApaSFhZQm2HbNXVQg0XJSLXrUFA/upvsQ/oXzxCr810oP 8zgaKwhJIkyaRc1DGYdMcBJnHjw5BSxdqOewIkRNoncaLZSDeVw= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:10 2026 by rpki-client