$ rpki-client -vvf rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft File: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft (raw, json) Hash identifier: WEIgiCGaR7pE4NGGDemYdj+XLfXIkdEZBjmLJvmS0vE= Subject key identifier: B3:23:12:BE:2A:44:DB:EA:1D:40:B4:BE:F3:17:A9:69:D7:47:B8:41 Authority key identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C Certificate issuer: /CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Certificate serial: 06E58CBD3336BDA8F8965E4238B6D24C9109B0F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 18:12:15 +0000 Manifest this update: Thu 23 Jul 2026 18:07:15 +0000 Manifest next update: Fri 24 Jul 2026 21:24:15 +0000 Files and hashes: 1: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl (hash: 9PIbtWu+MCV1f/s0VZN7JOCwcgBh8dJx/RYU7hyFC7g=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: h0mDQReAke//6pXCcFZT8G6lJ584gGzjmeVUQYfewjg=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: NIsy4Wi5ij/ahJgBOU7wDjfzvEs3Vq8uKids33t9Pj0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e5:8c:bd:33:36:bd:a8:f8:96:5e:42:38:b6:d2:4c:91:09:b0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Validity Not Before: Jul 23 18:07:15 2026 GMT Not After : Jul 24 21:24:15 2026 GMT Subject: CN=B32312BE2A44DBEA1D40B4BEF317A969D747B841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:c0:3a:64:22:f3:53:6e:0e:84:ee:07:ab: 2f:d4:cb:a5:51:fd:f7:b1:ce:15:25:c6:2a:e5:39: b1:e3:fb:d4:03:ab:7a:9f:6b:1f:86:1f:4a:e0:2b: 95:6e:2e:e0:05:22:34:6a:ac:d2:cf:69:40:96:63: ae:26:28:36:1a:f0:c0:df:0c:32:f9:d6:f2:a1:55: 65:e3:1b:3b:60:79:c2:eb:0b:f6:79:e2:e0:84:4a: 6e:63:7b:81:33:82:da:b2:bb:de:90:b8:06:7f:58: a8:5b:da:6d:da:6b:21:dc:99:b2:87:07:3f:da:42: e1:f1:b8:9f:85:58:0f:ce:a9:ab:2d:f2:9f:41:47: ae:1f:f2:e9:ad:66:5e:c8:f2:6f:af:66:da:6c:f5: e3:c3:e5:0d:1d:9f:95:76:08:d6:ae:26:29:db:a3: 46:2f:44:c7:06:d5:dc:9c:53:5d:7d:b6:66:63:32: 80:dd:7a:68:05:a0:8d:19:7e:4b:f6:7a:13:6b:33: 85:ad:aa:a5:30:9b:a4:18:b2:6c:f1:68:96:4a:e2: 1a:ef:a3:78:38:56:c2:c0:b1:84:fb:4c:58:03:e6: 87:1d:34:90:52:3b:c4:37:27:52:27:97:9e:2f:e8: dd:38:ef:98:a1:71:b1:8f:8a:c7:f1:e1:d3:79:d1: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:23:12:BE:2A:44:DB:EA:1D:40:B4:BE:F3:17:A9:69:D7:47:B8:41 X509v3 Authority Key Identifier: keyid:1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ed:89:71:02:7a:6b:39:fb:58:3f:a5:78:ee:50:c7:2f:59: d0:45:eb:52:d4:da:81:cc:b0:7b:4c:48:d5:31:42:81:a9:f4: 77:36:7e:71:6c:ad:0b:42:13:c6:a9:dc:f1:84:ac:90:27:2b: 66:dc:f3:3c:a7:de:f0:76:56:7e:62:71:c3:83:ab:14:e4:55: 3a:48:c2:96:6f:3a:6f:7c:0f:33:5c:66:f4:ab:f8:a6:dd:1b: ba:83:14:c7:4c:9a:71:c9:ac:47:2b:c6:62:53:96:da:a4:63: fc:28:e3:5c:a9:ae:1b:b0:19:50:fa:76:11:0e:15:02:5c:4f: 1e:0d:a4:50:16:f4:66:26:b1:29:a2:90:c1:47:ac:54:95:e8: 9a:f7:50:f2:74:40:32:5f:f6:36:76:57:67:e9:e0:7e:23:45: c3:37:83:01:e8:4d:26:02:6e:1c:2b:cb:fb:62:64:2d:85:62: d4:4b:48:f6:45:30:ed:48:fe:21:b6:0d:8f:14:88:ae:17:ee: 32:7d:d6:04:4b:58:d3:ca:3f:ed:44:76:bd:4c:58:6e:54:19: 7e:7a:51:39:2c:ef:85:95:24:c5:09:af:3d:9f:68:e7:db:e9: 92:14:e0:5b:98:5a:70:b1:1b:6f:ad:08:ac:07:91:35:4e:a5: a5:33:40:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuWMvTM2vaj4ll5COLbSTJEJsPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3 RTAzRDk1QzAeFw0yNjA3MjMxODA3MTVaFw0yNjA3MjQyMTI0MTVaMDMxMTAvBgNV BAMTKEIzMjMxMkJFMkE0NERCRUExRDQwQjRCRUYzMTdBOTY5RDc0N0I4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MsA6ZCLzU24OhO4Hqy/Uy6VR /fexzhUlxirlObHj+9QDq3qfax+GH0rgK5VuLuAFIjRqrNLPaUCWY64mKDYa8MDf DDL51vKhVWXjGztgecLrC/Z54uCESm5je4Ezgtqyu96QuAZ/WKhb2m3aayHcmbKH Bz/aQuHxuJ+FWA/Oqast8p9BR64f8umtZl7I8m+vZtps9ePD5Q0dn5V2CNauJinb o0YvRMcG1dycU119tmZjMoDdemgFoI0Zfkv2ehNrM4WtqqUwm6QYsmzxaJZK4hrv o3g4VsLAsYT7TFgD5ocdNJBSO8Q3J1Inl54v6N0475ihcbGPisfx4dN50XfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyMSvipE2+odQLS+8xepaddHuEEwHwYDVR0j BBgwFoAUG2GhGgp2YqH7oiCxoA/ti34D2VwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdlZTZiZjMtMmJkYS00Y2E0LWE1ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEw QTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3RTAzRDk1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjYxQTExQTBBNzY2MkExRkJBMjIwQjFBMDBGRUQ4QjdFMDNE OTVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVE OEI3RTAzRDk1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/tiXECems5+1g/pXjuUMcvWdBF61LU2oHM sHtMSNUxQoGp9Hc2fnFsrQtCE8ap3PGErJAnK2bc8zyn3vB2Vn5iccODqxTkVTpI wpZvOm98DzNcZvSr+KbdG7qDFMdMmnHJrEcrxmJTltqkY/wo41yprhuwGVD6dhEO FQJcTx4NpFAW9GYmsSmikMFHrFSV6Jr3UPJ0QDJf9jZ2V2fp4H4jRcM3gwHoTSYC bhwry/tiZC2FYtRLSPZFMO1I/iG2DY8UiK4X7jJ91gRLWNPKP+1Edr1MWG5UGX56 UTks74WVJMUJrz2faOfb6ZIU4FuYWnCxG2+tCKwHkTVOpaUzQJU= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:52 2026 by rpki-client