$ rpki-client -vvf rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft File: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft (raw, json) Hash identifier: GBLTCMLNN4quzeGE56aGwbSulI69atN+JCINIiJirvQ= Subject key identifier: 2E:14:A7:90:C3:9C:38:E8:2A:74:E2:58:C7:7F:2F:27:4B:85:49:BF Authority key identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C Certificate issuer: /CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Certificate serial: 31DDB2962B9FD7216B6FB55C689382275966997A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:07 +0000 Manifest this update: Tue 12 May 2026 21:24:07 +0000 Manifest next update: Wed 13 May 2026 23:11:07 +0000 Files and hashes: 1: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl (hash: nySNnlROJexXTgwXyHyucFDIJrIkTCDQcfvEAeT1lYk=) 2: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: NIsy4Wi5ij/ahJgBOU7wDjfzvEs3Vq8uKids33t9Pj0=) 3: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: h0mDQReAke//6pXCcFZT8G6lJ584gGzjmeVUQYfewjg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:dd:b2:96:2b:9f:d7:21:6b:6f:b5:5c:68:93:82:27:59:66:99:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Validity Not Before: May 12 21:24:07 2026 GMT Not After : May 13 23:11:07 2026 GMT Subject: CN=2E14A790C39C38E82A74E258C77F2F274B8549BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:ed:fb:f7:50:2f:34:4a:c9:cc:da:a0:3b: bf:0f:e9:4c:77:3f:06:d6:39:58:a1:e8:72:2f:70: 31:86:ed:e3:c4:12:86:77:05:fe:21:ae:e2:13:76: 65:dc:c6:a7:76:62:1b:88:d6:fe:ba:a4:19:3e:79: 60:2e:d8:70:29:86:fc:f2:14:6f:96:cd:ac:ef:df: 2f:c6:f0:ed:ef:fb:b5:0c:92:20:e1:7e:9e:4e:3a: 66:c8:e2:d6:f7:d6:0b:ae:49:f5:8c:81:8a:2a:71: 11:0e:5f:56:4e:7a:5b:72:5b:28:eb:f1:e8:d2:80: aa:a8:0d:04:69:b2:cd:4a:57:53:71:91:b1:48:94: bb:56:9d:06:04:9b:5c:03:f1:61:3a:d7:5b:1b:85: 54:d0:0a:dc:a3:5e:3b:ca:61:f2:af:e0:64:e4:fb: a3:a5:1a:4e:7d:76:6c:f7:b1:37:86:05:3f:51:8f: 16:f2:ac:14:eb:f5:4f:ee:fc:48:3d:85:65:c2:fb: 18:0f:2f:a0:82:02:06:2e:cf:48:a3:ac:f2:dd:08: d2:17:2a:8d:1b:79:97:fe:28:17:2a:ec:66:87:8d: 24:a7:0c:c6:a1:c2:22:58:6d:16:12:2e:dc:c9:22: 9b:0e:fa:d6:27:7b:3c:a9:26:34:58:4a:f7:61:c0: 09:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:14:A7:90:C3:9C:38:E8:2A:74:E2:58:C7:7F:2F:27:4B:85:49:BF X509v3 Authority Key Identifier: keyid:1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:71:af:8e:6c:2c:0c:8e:c1:ca:9c:1a:f9:0c:7d:76:42:fa: 38:7a:da:95:2a:07:ed:43:75:f1:03:73:9e:65:9f:c4:d3:6f: 5e:75:3a:e0:64:66:0f:3e:ad:a7:16:dd:c2:10:80:4c:b1:9c: 1c:42:82:28:9e:e2:1f:1a:7b:dc:af:a3:fb:88:9d:06:5f:4e: 55:d3:b9:40:8b:ce:a5:b1:d8:10:69:47:fd:74:9e:1e:f8:86: 38:b8:ba:a2:38:6d:86:ac:db:1e:1b:34:c5:9a:1c:81:a4:93: 78:12:2c:27:eb:df:47:15:f3:ae:fd:e0:d6:c1:16:a1:15:50: e3:e4:1b:69:d8:29:f3:f4:03:23:2a:db:6c:d2:0c:2a:2c:0d: a2:40:52:92:58:24:f7:fb:f3:87:54:8f:aa:cf:d2:20:42:44: b8:bb:c2:c4:b5:db:56:27:ac:23:9c:3e:ac:cf:4b:1d:71:7c: 03:0a:6a:ec:87:bf:27:b9:4a:6b:7d:6d:7f:eb:d6:b4:bc:5e: 97:a4:67:a1:96:6b:22:6e:8e:5e:13:1c:97:d0:d5:fb:7b:ac: 9c:03:5f:1c:f8:6b:4b:e2:58:90:42:ae:5f:be:2f:16:c2:27: d6:6d:b2:a0:af:57:8c:c4:f7:6f:cc:d4:28:a0:de:f3:23:0b: 59:38:86:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMd2yliuf1yFrb7VcaJOCJ1lmmXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3 RTAzRDk1QzAeFw0yNjA1MTIyMTI0MDdaFw0yNjA1MTMyMzExMDdaMDMxMTAvBgNV BAMTKDJFMTRBNzkwQzM5QzM4RTgyQTc0RTI1OEM3N0YyRjI3NEI4NTQ5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGze3791AvNErJzNqgO78P6Ux3 PwbWOVih6HIvcDGG7ePEEoZ3Bf4hruITdmXcxqd2YhuI1v66pBk+eWAu2HAphvzy FG+Wzazv3y/G8O3v+7UMkiDhfp5OOmbI4tb31guuSfWMgYoqcREOX1ZOeltyWyjr 8ejSgKqoDQRpss1KV1NxkbFIlLtWnQYEm1wD8WE611sbhVTQCtyjXjvKYfKv4GTk +6OlGk59dmz3sTeGBT9RjxbyrBTr9U/u/Eg9hWXC+xgPL6CCAgYuz0ijrPLdCNIX Ko0beZf+KBcq7GaHjSSnDMahwiJYbRYSLtzJIpsO+tYnezypJjRYSvdhwAntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhSnkMOcOOgqdOJYx38vJ0uFSb8wHwYDVR0j BBgwFoAUG2GhGgp2YqH7oiCxoA/ti34D2VwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjdlZTZiZjMtMmJkYS00Y2E0LWE1ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEw QTc2NjJBMUZCQTIyMEIxQTAwRkVEOEI3RTAzRDk1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjYxQTExQTBBNzY2MkExRkJBMjIwQjFBMDBGRUQ4QjdFMDNE OTVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvMUI2MUExMUEwQTc2NjJBMUZCQTIyMEIxQTAwRkVE OEI3RTAzRDk1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBxr45sLAyOwcqcGvkMfXZC+jh62pUqB+1D dfEDc55ln8TTb151OuBkZg8+racW3cIQgEyxnBxCgiie4h8ae9yvo/uInQZfTlXT uUCLzqWx2BBpR/10nh74hji4uqI4bYas2x4bNMWaHIGkk3gSLCfr30cV86794NbB FqEVUOPkG2nYKfP0AyMq22zSDCosDaJAUpJYJPf784dUj6rP0iBCRLi7wsS121Yn rCOcPqzPSx1xfAMKauyHvye5Smt9bX/r1rS8XpekZ6GWayJujl4THJfQ1ft7rJwD Xxz4a0viWJBCrl++LxbCJ9ZtsqCvV4zE92/M1Cig3vMjC1k4hvA= -----END CERTIFICATE-----Generated at Wed May 13 02:47:51 2026 by rpki-client