$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: 3LQK7HYk+3PMcEQOy/68BAi0MYOjrt0MOVXmV0VFBj4= Subject key identifier: 08:C0:9F:5B:6B:D2:56:4C:48:C8:E1:51:88:1F:21:02:02:3C:E4:E2 Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 60DC53AA1C23AC74093D3AF532A65A2F2C679B93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 14:26:58 +0000 Manifest this update: Wed 16 Sep 2026 14:21:58 +0000 Manifest next update: Thu 17 Sep 2026 18:03:58 +0000 Files and hashes: 1: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: gqL9zyFwnyznR4cEehtTJvCP+l/jBmyk4vC7uozP1r8=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dc:53:aa:1c:23:ac:74:09:3d:3a:f5:32:a6:5a:2f:2c:67:9b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: Sep 16 14:21:58 2026 GMT Not After : Sep 17 18:03:58 2026 GMT Subject: CN=08C09F5B6BD2564C48C8E151881F2102023CE4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:32:9a:3a:5d:47:9e:69:33:0d:e0:1c:f4: 34:7b:dc:11:f2:f1:57:f3:a0:18:fc:e4:af:87:a0: e4:31:12:59:55:51:49:7e:50:ca:ad:f9:85:6d:a8: c8:d2:33:05:62:89:6f:32:24:d6:77:82:bd:33:4f: 4a:c2:46:b5:9e:22:63:c2:19:99:e6:f3:f8:1a:6b: 36:bd:d0:2d:5b:68:83:9a:28:16:15:e1:84:52:63: 6b:9f:a7:8c:42:44:ce:56:8b:31:96:8d:1a:af:55: 9a:94:98:c2:0b:a7:67:f1:f6:59:e4:d4:69:24:22: fc:8d:c1:53:fe:0f:dc:b7:cd:02:95:3e:71:f9:27: 67:d3:db:fb:05:ed:18:50:f8:dd:cb:a7:2a:3f:ec: 11:65:a5:aa:ff:1f:59:5c:ed:a8:8d:85:91:b8:56: 8a:9e:64:ce:32:5f:24:ce:08:be:4d:79:03:6c:a7: 0b:18:c2:2a:28:73:da:3c:2a:1f:5c:90:5d:2a:bd: 28:9d:ae:3e:b3:7f:b8:ce:3e:c8:aa:d1:57:72:f3: 35:b9:8b:e0:24:5e:c5:0b:c8:74:5a:47:64:70:b3: a3:b2:5f:21:49:9a:4d:e6:3d:d7:66:bb:fe:8b:ca: f4:b3:1b:8d:e5:14:f6:da:e8:52:3f:2a:f7:9f:0f: 24:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C0:9F:5B:6B:D2:56:4C:48:C8:E1:51:88:1F:21:02:02:3C:E4:E2 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ac:cf:37:41:f1:27:a3:22:13:ff:16:85:2a:33:a8:59:97: 80:1e:59:9f:57:56:c6:9d:bd:72:1d:02:cd:8b:7f:13:d8:ef: be:61:c1:49:7d:5f:76:89:85:30:dc:5a:d8:33:a4:50:02:fa: 2e:3c:e0:96:2d:13:cb:ef:8c:97:eb:3a:27:21:ca:5d:a7:03: 05:40:85:4a:59:ba:e5:aa:65:5a:24:63:a5:e6:63:39:f0:4a: f0:0b:8c:b7:b3:b5:82:89:80:18:32:b3:36:28:b3:ca:c0:07: 3d:d5:80:ff:d7:95:57:11:81:3f:39:1b:13:39:7e:d3:cd:81: 72:7b:f9:c3:9d:0e:c3:8b:a3:72:f3:61:d7:66:61:94:de:40: 20:7f:c6:6f:4a:a0:af:ec:5a:04:67:74:4a:cb:da:2b:cd:c2: 11:b0:47:e6:48:a9:ed:5a:32:3e:f5:20:d4:e4:c2:30:3f:45: 11:73:37:17:c2:06:69:bc:c1:72:26:d7:29:97:de:ba:cf:74: 66:dd:79:ab:a7:91:0e:79:99:1c:b9:83:19:c1:22:42:30:59: f4:03:77:02:4b:e9:13:ed:30:a5:0e:96:1e:df:8a:ae:91:1a: 02:aa:5e:ba:51:ef:44:0b:ec:fd:e5:d1:21:ed:6e:99:b7:3d: 39:5a:86:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNxTqhwjrHQJPTr1MqZaLyxnm5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjA5MTYxNDIxNThaFw0yNjA5MTcxODAzNThaMDMxMTAvBgNV BAMTKDA4QzA5RjVCNkJEMjU2NEM0OEM4RTE1MTg4MUYyMTAyMDIzQ0U0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0zKaOl1HnmkzDeAc9DR73BHy 8VfzoBj85K+HoOQxEllVUUl+UMqt+YVtqMjSMwViiW8yJNZ3gr0zT0rCRrWeImPC GZnm8/gaaza90C1baIOaKBYV4YRSY2ufp4xCRM5WizGWjRqvVZqUmMILp2fx9lnk 1GkkIvyNwVP+D9y3zQKVPnH5J2fT2/sF7RhQ+N3Lpyo/7BFlpar/H1lc7aiNhZG4 VoqeZM4yXyTOCL5NeQNspwsYwiooc9o8Kh9ckF0qvSidrj6zf7jOPsiq0Vdy8zW5 i+AkXsULyHRaR2Rws6OyXyFJmk3mPddmu/6LyvSzG43lFPba6FI/KvefDyT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCMCfW2vSVkxIyOFRiB8hAgI85OIwHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQw Rjg3OTNFQUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmszzdB8SejIhP/FoUqM6hZl4AeWZ9XVsad vXIdAs2LfxPY775hwUl9X3aJhTDcWtgzpFAC+i484JYtE8vvjJfrOichyl2nAwVA hUpZuuWqZVokY6XmYznwSvALjLeztYKJgBgyszYos8rABz3VgP/XlVcRgT85GxM5 ftPNgXJ7+cOdDsOLo3LzYddmYZTeQCB/xm9KoK/sWgRndErL2ivNwhGwR+ZIqe1a Mj71INTkwjA/RRFzNxfCBmm8wXIm1ymX3rrPdGbdeaunkQ55mRy5gxnBIkIwWfQD dwJL6RPtMKUOlh7fiq6RGgKqXrpR70QL7P3l0SHtbpm3PTlahnU= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:42 2026 by rpki-client