$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: OLquvCdkmG8rrIAfyW1saAtLdYeEEBVkrCf1gV4Jizc= Subject key identifier: 4C:1E:E2:BF:BA:6B:63:69:D4:5F:DE:3D:C4:6A:7D:D8:A9:76:3A:5B Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 35D8D5B3166F556333CAA6B79FB4C5F59E082324 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 13:13:41 +0000 Manifest this update: Sun 02 Aug 2026 13:08:41 +0000 Manifest next update: Mon 03 Aug 2026 15:26:41 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) 2: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: Ff2whstANIcES1dvtFsPMX281kzwAPKscrsGI2ZE38M=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 15:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d8:d5:b3:16:6f:55:63:33:ca:a6:b7:9f:b4:c5:f5:9e:08:23:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: Aug 2 13:08:41 2026 GMT Not After : Aug 3 15:26:41 2026 GMT Subject: CN=4C1EE2BFBA6B6369D45FDE3DC46A7DD8A9763A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:1a:6b:fa:ae:e5:c8:45:83:66:d4:48:1a: d1:98:f1:1e:73:e5:d6:55:06:63:77:48:75:5f:20: dd:4f:35:8c:c1:7f:24:e3:23:dd:5b:da:93:e1:6d: 61:bc:c0:56:6c:45:1b:89:d5:78:95:22:47:ad:9d: 56:66:0d:4c:5f:83:14:b2:0a:38:f4:15:90:9f:52: 27:2a:3e:95:26:84:f4:6a:d3:1f:60:29:5f:d5:e4: a7:5f:01:90:f3:23:c8:3e:39:57:a0:64:6e:3d:b2: e6:2d:48:55:ed:3c:07:23:cc:ec:b1:53:db:b0:fc: d8:90:18:f7:db:ff:42:ea:7b:77:7a:c2:e1:17:8d: ad:c1:4b:99:de:1c:ca:bd:3d:76:79:31:12:d4:1c: c2:3e:f5:95:70:58:1b:0c:8d:46:69:b5:6f:a4:48: 5a:a0:f9:96:83:61:ab:df:bc:6d:fd:0c:28:0d:d4: 36:06:a3:51:c8:60:ed:c2:7b:f9:5c:9c:a8:00:88: 5c:0b:01:23:a1:78:72:8f:be:08:3a:ba:77:97:76: 52:49:b3:6e:1c:62:12:0d:2f:9e:f8:04:7c:fb:a6: 52:8b:20:6d:ef:d8:29:9b:6b:8b:63:1f:b2:8b:77: e0:88:57:66:ad:dc:cd:75:f7:7a:5c:a4:f7:fc:24: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:E2:BF:BA:6B:63:69:D4:5F:DE:3D:C4:6A:7D:D8:A9:76:3A:5B X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a3:b2:70:f3:31:87:28:56:23:c9:41:12:97:42:a3:8d:1f: f5:a8:7f:5d:69:75:15:05:f8:37:e6:f5:b5:79:a9:b8:88:90: 63:af:43:6b:40:93:ea:32:3a:34:6a:e1:47:76:fc:6c:e9:46: 0e:fb:5e:86:d8:f6:65:0c:57:4d:71:a0:ef:9c:f1:be:7d:84: 20:7e:9d:dd:35:03:d7:5e:d1:d6:7c:5e:28:35:29:37:5e:7a: 5c:ff:ff:6d:66:9b:87:0b:81:7a:4c:08:12:5b:b8:41:6c:fe: 68:7e:3f:82:c4:9a:14:fc:76:0c:7b:71:78:6a:89:db:61:d1: ab:1a:c3:d5:be:f9:d8:34:18:ce:d9:ec:45:0f:4a:cd:23:55: 7c:06:66:53:9b:2f:06:b4:5f:63:e0:6a:d8:56:ac:7c:85:35: 8f:40:59:42:5c:a8:90:44:5b:79:c1:7a:50:a6:01:60:4b:f3: d8:cb:4f:c3:63:27:e1:4b:bf:99:c9:72:a8:b4:d9:2a:6f:c9: 79:08:35:6b:58:01:f9:65:ef:0b:30:4e:58:24:44:0e:ba:fb: a4:10:f8:c7:76:24:9a:72:fc:29:ab:b9:53:26:04:5b:26:a2: 0a:1b:93:11:e7:d2:df:2e:42:62:ea:e6:9a:55:ef:43:4f:85: ac:72:28:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdjVsxZvVWMzyqa3n7TF9Z4IIyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjA4MDIxMzA4NDFaFw0yNjA4MDMxNTI2NDFaMDMxMTAvBgNV BAMTKDRDMUVFMkJGQkE2QjYzNjlENDVGREUzREM0NkE3REQ4QTk3NjNBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgRpr+q7lyEWDZtRIGtGY8R5z 5dZVBmN3SHVfIN1PNYzBfyTjI91b2pPhbWG8wFZsRRuJ1XiVIketnVZmDUxfgxSy Cjj0FZCfUicqPpUmhPRq0x9gKV/V5KdfAZDzI8g+OVegZG49suYtSFXtPAcjzOyx U9uw/NiQGPfb/0Lqe3d6wuEXja3BS5neHMq9PXZ5MRLUHMI+9ZVwWBsMjUZptW+k SFqg+ZaDYavfvG39DCgN1DYGo1HIYO3Ce/lcnKgAiFwLASOheHKPvgg6uneXdlJJ s24cYhINL574BHz7plKLIG3v2Cmba4tjH7KLd+CIV2at3M1193pcpPf8JId7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTB7iv7prY2nUX949xGp92Kl2OlswHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQw Rjg3OTNFQUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKjsnDzMYcoViPJQRKXQqONH/Wof11pdRUF +Dfm9bV5qbiIkGOvQ2tAk+oyOjRq4Ud2/GzpRg77XobY9mUMV01xoO+c8b59hCB+ nd01A9de0dZ8Xig1KTdeelz//21mm4cLgXpMCBJbuEFs/mh+P4LEmhT8dgx7cXhq idth0asaw9W++dg0GM7Z7EUPSs0jVXwGZlObLwa0X2PgathWrHyFNY9AWUJcqJBE W3nBelCmAWBL89jLT8NjJ+FLv5nJcqi02SpvyXkINWtYAfll7wswTlgkRA66+6QQ +Md2JJpy/CmruVMmBFsmogobkxHn0t8uQmLq5ppV70NPhaxyKMA= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:44 2026 by rpki-client