$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: qMtSQ/iV6J5RgX3ZEx7oGc71jAyVnbhy1qtqios8grk= Subject key identifier: 66:0E:B2:37:45:75:A2:6A:FA:E5:BB:A9:6F:55:2F:7F:D9:91:80:33 Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 732ED3866E2DC1FF3E2E3F04AC6E3D1A3AEC3ED4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: BA Signing time: Thu 17 Sep 2026 05:20:02 +0000 Manifest this update: Thu 17 Sep 2026 05:15:02 +0000 Manifest next update: Fri 18 Sep 2026 08:27:02 +0000 Files and hashes: 1: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) 2: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: 6qCijZYrBM4yTYX6UBeziDn1yOCai8G1ivcxGvMRIjg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2e:d3:86:6e:2d:c1:ff:3e:2e:3f:04:ac:6e:3d:1a:3a:ec:3e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: Sep 17 05:15:02 2026 GMT Not After : Sep 18 08:27:02 2026 GMT Subject: CN=660EB2374575A26AFAE5BBA96F552F7FD9918033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:bc:b1:d6:4e:d7:b6:b1:d3:a5:1b:c7:56: 04:f0:d7:98:ad:4e:83:ac:a2:90:ea:18:32:2a:a7: 35:3c:bb:21:7b:18:27:ed:2f:b3:61:12:5d:43:8c: dd:e8:cd:3d:af:8a:9e:a1:6a:e6:7b:ed:bd:df:07: 52:7e:15:9c:be:1e:61:0c:ed:90:f1:d8:84:18:7b: dc:a3:84:df:05:36:db:84:8a:46:94:53:39:44:c4: 96:96:d0:67:33:04:d9:e5:1f:e5:3e:78:a9:09:45: 34:99:a9:db:88:22:f5:bd:6c:a0:07:01:01:af:19: 5c:d2:e8:74:a7:e9:4e:80:bd:58:bb:d6:5b:f4:d1: 22:72:8b:dd:27:c6:5b:1a:3a:22:63:d3:c8:01:80: 4c:6f:d8:fd:f4:d3:fc:bf:d4:99:e9:53:87:5f:90: ad:15:7d:15:d7:e4:68:c7:fc:dd:5e:b0:ca:99:02: 59:66:10:f8:d9:90:0a:b0:d9:da:c3:39:d2:1a:73: ed:f0:d8:ec:fa:89:6d:29:58:a4:8c:13:8e:49:90: f5:ab:76:b0:a8:27:d1:8a:ab:6d:66:55:0f:51:d9: b0:e8:fb:91:2f:3e:db:da:44:d6:c1:d0:1e:5d:95: 56:6e:7d:60:92:77:42:03:0a:a7:88:f3:20:f1:e6: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0E:B2:37:45:75:A2:6A:FA:E5:BB:A9:6F:55:2F:7F:D9:91:80:33 X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ba:55:81:86:a7:4b:2d:e0:be:c3:d7:a5:d2:18:93:31:7f: aa:d6:e8:49:6f:0d:b2:50:9a:ec:aa:f0:ae:39:7b:99:e9:ed: d9:f5:eb:39:3e:54:09:53:02:a8:2b:73:62:1e:06:d5:73:48: b2:52:fb:8a:9b:df:d7:43:83:a5:38:f5:d9:5a:20:2a:4d:3d: 60:86:b7:25:d7:d0:8b:75:a7:a3:32:93:53:a3:17:e2:f2:70: 9b:15:d7:72:ca:fe:6b:54:71:e8:49:ce:a3:71:06:cf:92:a7: 5f:fc:9d:8e:34:45:6d:74:b4:93:5f:d6:47:a1:47:31:ed:60: 53:f1:54:fe:79:c8:b5:02:20:6b:fa:da:57:be:89:aa:bc:75: 8d:ab:93:86:9c:81:77:3e:2d:a3:e4:8a:44:2c:92:02:85:fb: 5c:82:0d:a2:a8:53:b7:d9:f7:81:7d:eb:c7:ed:64:bf:e4:03: f7:f5:45:64:42:02:fc:7d:5a:73:74:09:42:cc:c1:18:77:92: f2:c6:af:d9:10:a8:81:58:dc:1d:ae:9e:ba:27:ac:79:64:42: 92:9f:a7:55:7f:bf:89:e0:73:ea:ec:50:c0:ec:a9:98:a1:5f: 87:b3:3a:58:fb:f5:2e:b5:2a:09:16:7f:b1:11:52:39:f4:8b: 62:36:bd:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcy7Thm4twf8+Lj8ErG49GjrsPtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA5MTcwNTE1MDJaFw0yNjA5MTgwODI3MDJaMDMxMTAvBgNV BAMTKDY2MEVCMjM3NDU3NUEyNkFGQUU1QkJBOTZGNTUyRjdGRDk5MTgwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjabyx1k7XtrHTpRvHVgTw15it ToOsopDqGDIqpzU8uyF7GCftL7NhEl1DjN3ozT2vip6hauZ77b3fB1J+FZy+HmEM 7ZDx2IQYe9yjhN8FNtuEikaUUzlExJaW0GczBNnlH+U+eKkJRTSZqduIIvW9bKAH AQGvGVzS6HSn6U6AvVi71lv00SJyi90nxlsaOiJj08gBgExv2P300/y/1JnpU4df kK0VfRXX5GjH/N1esMqZAllmEPjZkAqw2drDOdIac+3w2Oz6iW0pWKSME45JkPWr drCoJ9GKq21mVQ9R2bDo+5EvPtvaRNbB0B5dlVZufWCSd0IDCqeI8yDx5sjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZg6yN0V1omr65bupb1Uvf9mRgDMwHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+6VYGGp0st4L7D16XSGJMxf6rW6ElvDbJQ muyq8K45e5np7dn16zk+VAlTAqgrc2IeBtVzSLJS+4qb39dDg6U49dlaICpNPWCG tyXX0It1p6Myk1OjF+LycJsV13LK/mtUcehJzqNxBs+Sp1/8nY40RW10tJNf1keh RzHtYFPxVP55yLUCIGv62le+iaq8dY2rk4acgXc+LaPkikQskgKF+1yCDaKoU7fZ 94F968ftZL/kA/f1RWRCAvx9WnN0CULMwRh3kvLGr9kQqIFY3B2unronrHlkQpKf p1V/v4ngc+rsUMDsqZihX4ezOlj79S61KgkWf7ERUjn0i2I2vTs= -----END CERTIFICATE-----Generated at Thu Sep 17 13:07:24 2026 by rpki-client