$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: BV/tTYpio2jm28+oB6nrU39fprP3SZsT6w4M0GTMegM= Subject key identifier: D2:2C:70:6E:0F:04:77:7F:DA:90:30:79:A7:C8:F6:06:5D:09:08:46 Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 316D71C185091C269B6B818E8175C56481507FCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 05:23:57 +0000 Manifest this update: Sun 02 Aug 2026 05:18:57 +0000 Manifest next update: Mon 03 Aug 2026 05:39:57 +0000 Files and hashes: 1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 3: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: ZZdUUuTQvhJHr/RZp7TDtKTtzsLUWr9/fVUS4NrOmlQ=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6d:71:c1:85:09:1c:26:9b:6b:81:8e:81:75:c5:64:81:50:7f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Aug 2 05:18:57 2026 GMT Not After : Aug 3 05:39:57 2026 GMT Subject: CN=D22C706E0F04777FDA903079A7C8F6065D090846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:63:c0:ff:52:92:fe:7c:d6:89:a3:d9:ce: cb:bb:9f:ba:bb:1c:02:03:62:96:e1:e9:a1:24:37: 21:b9:0e:4f:e4:1c:92:66:e5:d1:a4:1a:60:8d:33: ee:58:fb:93:39:45:d2:e4:28:ef:9b:8b:91:7c:de: 84:86:b6:9c:06:94:39:84:54:50:57:b0:b3:0c:a1: da:e0:2a:45:de:4e:95:14:df:7f:24:db:cd:60:e6: 01:d5:5b:10:27:7c:23:1e:76:60:24:65:c7:a1:69: d2:02:30:0f:3a:96:1c:42:9b:d9:01:55:f1:b2:61: e2:d2:c8:32:79:c3:6f:92:c1:94:a8:f5:62:a5:74: 0d:53:59:ef:44:3e:5b:ab:3d:7a:61:8b:11:04:b8: 68:c6:a1:ee:44:33:33:3a:d0:92:b8:ae:79:4c:05: 2a:04:69:d5:2b:d8:31:9e:ff:46:76:49:f7:7f:72: 85:80:ae:a3:6c:80:16:96:5e:c3:b4:de:ea:57:7f: 67:af:05:92:e0:e1:00:5c:38:ea:17:fe:01:bb:2e: 79:83:db:12:63:e5:f9:2c:58:2a:af:cd:21:12:d1: 59:8f:06:58:73:3f:1c:f8:ed:dc:a4:30:1f:01:59: ac:9b:d7:a2:db:4e:b3:41:ab:5e:0d:ab:6f:fc:39: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:70:6E:0F:04:77:7F:DA:90:30:79:A7:C8:F6:06:5D:09:08:46 X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:45:84:00:2c:cb:cf:39:19:e8:b8:b5:d3:08:09:fe:8f:ef: 5f:94:50:b4:2d:9d:b1:3d:b1:c0:40:8f:13:53:66:8c:f3:b1: 9e:1a:17:23:20:68:03:6f:18:23:23:6b:99:1b:72:58:48:88: 90:8d:14:79:6b:cd:ce:60:70:cc:0e:17:31:e7:40:a4:18:78: 9c:c8:9a:11:88:54:c6:80:b7:d0:37:b2:37:0a:cd:6d:f5:4a: 61:3d:ac:05:c6:e1:5c:3a:27:9d:33:2a:d5:b0:d6:ed:bd:61: 3e:81:c7:99:13:56:67:14:05:a6:04:45:28:45:58:3c:65:0a: 12:07:19:8d:df:80:27:bc:2b:9d:83:91:16:a3:9a:78:a1:9a: b2:e9:fa:64:69:44:84:e1:d1:69:11:92:c3:94:2f:d0:67:92: 12:77:2e:d7:75:ae:fa:73:a1:86:db:d6:dc:ec:ea:76:96:b7: 80:ae:e0:3a:75:af:86:24:17:93:17:2c:5d:12:08:cd:07:cb: be:2c:d1:b1:47:e6:4b:f1:62:4b:92:ef:64:6a:d3:15:4f:a4: 09:21:01:41:a7:64:06:82:2d:ac:12:c7:14:74:c9:07:7d:b6: a5:f6:d7:62:bf:8e:cf:ad:04:fe:60:76:81:6d:ed:22:f8:53: 16:23:c0:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMW1xwYUJHCaba4GOgXXFZIFQf80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjA4MDIwNTE4NTdaFw0yNjA4MDMwNTM5NTdaMDMxMTAvBgNV BAMTKEQyMkM3MDZFMEYwNDc3N0ZEQTkwMzA3OUE3QzhGNjA2NUQwOTA4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD12PA/1KS/nzWiaPZzsu7n7q7 HAIDYpbh6aEkNyG5Dk/kHJJm5dGkGmCNM+5Y+5M5RdLkKO+bi5F83oSGtpwGlDmE VFBXsLMModrgKkXeTpUU338k281g5gHVWxAnfCMedmAkZcehadICMA86lhxCm9kB VfGyYeLSyDJ5w2+SwZSo9WKldA1TWe9EPlurPXphixEEuGjGoe5EMzM60JK4rnlM BSoEadUr2DGe/0Z2Sfd/coWArqNsgBaWXsO03upXf2evBZLg4QBcOOoX/gG7LnmD 2xJj5fksWCqvzSES0VmPBlhzPxz47dykMB8BWayb16LbTrNBq14Nq2/8OfgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ixwbg8Ed3/akDB5p8j2Bl0JCEYwHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9FhAAsy885Gei4tdMICf6P71+UULQtnbE9 scBAjxNTZozzsZ4aFyMgaANvGCMja5kbclhIiJCNFHlrzc5gcMwOFzHnQKQYeJzI mhGIVMaAt9A3sjcKzW31SmE9rAXG4Vw6J50zKtWw1u29YT6Bx5kTVmcUBaYERShF WDxlChIHGY3fgCe8K52DkRajmnihmrLp+mRpRITh0WkRksOUL9BnkhJ3Ltd1rvpz oYbb1tzs6naWt4Cu4Dp1r4YkF5MXLF0SCM0Hy74s0bFH5kvxYkuS72Rq0xVPpAkh AUGnZAaCLawSxxR0yQd9tqX212K/js+tBP5gdoFt7SL4UxYjwFM= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:59 2026 by rpki-client