$ rpki-client -vvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft File: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft (raw, json) Hash identifier: gPyC0GhJChbnTlSukXvnmhpUROJXVQA3YpMtxPaODLo= Subject key identifier: 50:BF:E1:48:D1:6A:AF:A3:ED:05:02:79:FF:38:43:72:5C:DD:7F:98 Authority key identifier: 1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 Certificate issuer: /CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Certificate serial: 091B4BC388EC3616E2D599D50033ECEA72E16351 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:16:13 +0000 Manifest this update: Thu 23 Jul 2026 17:11:13 +0000 Manifest next update: Fri 24 Jul 2026 19:58:13 +0000 Files and hashes: 1: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl (hash: 7Wb/1mW3OdJVJBrEbGfcIAKBTEWXtHERbeWMgREIyp8=) 2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: m7In3QfaxfsyuW0qTfRybGAF6wFMxAA9Ta2LCZQCpzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1b:4b:c3:88:ec:36:16:e2:d5:99:d5:00:33:ec:ea:72:e1:63:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Validity Not Before: Jul 23 17:11:13 2026 GMT Not After : Jul 24 19:58:13 2026 GMT Subject: CN=50BFE148D16AAFA3ED050279FF3843725CDD7F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:12:d6:58:33:bf:3a:6a:db:66:21:4f:a5: 31:9d:44:08:53:36:99:2b:a9:30:27:52:df:41:ad: ae:9b:ad:22:46:8e:e1:cb:d1:ee:49:67:f3:3b:2a: 9e:48:39:17:de:9c:04:03:29:fb:87:53:93:c6:ec: 1e:93:00:7c:e6:8e:c8:6b:63:fb:b9:c4:97:9a:18: 51:e3:49:76:e9:af:93:5a:0f:a1:5d:40:27:12:d0: 59:21:e8:5f:42:27:8c:92:5c:62:f3:26:64:26:d0: b9:ad:ea:03:d9:8f:da:02:a6:2d:3a:7d:70:5c:65: 92:79:18:30:b8:ad:9c:6e:8c:af:f9:58:d2:51:52: 42:54:0a:6e:b3:63:d5:ba:a4:28:d9:fd:05:f8:23: 9a:85:f6:71:cb:fa:24:21:e1:ee:a8:d0:3b:a1:ec: 8a:64:fb:f7:04:c6:96:4e:c8:17:7a:0e:59:02:4d: 74:f9:3c:70:66:a2:4c:0c:29:43:fe:32:9c:96:90: e2:e7:05:d6:ee:6c:e8:2e:20:39:ee:bc:fc:bc:4c: fb:38:5f:4c:b1:40:1f:65:b2:9a:b5:2f:be:10:53: 01:7f:a3:c9:8f:f5:f4:12:62:62:5e:8b:37:13:25: ef:6d:cf:24:4c:d7:55:aa:67:60:67:6d:fa:63:1d: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BF:E1:48:D1:6A:AF:A3:ED:05:02:79:FF:38:43:72:5C:DD:7F:98 X509v3 Authority Key Identifier: keyid:1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:be:ba:de:89:5a:bd:04:ce:ec:36:e4:8f:47:d4:55:f4:37: a8:d0:70:1b:d5:08:87:3b:3d:51:6f:d8:04:c9:0f:6f:32:4d: d0:9c:82:e4:08:92:ee:55:ce:07:3b:6a:ff:6f:f8:e3:72:f5: 95:e8:08:19:4b:15:eb:f4:a2:fd:25:4e:7a:57:af:4b:a6:6a: 1e:33:a8:6e:b1:c6:3b:7b:0f:22:06:75:4c:93:e3:af:42:03: 8f:12:1c:d0:93:49:0c:95:d0:3e:c3:c5:37:e2:f1:94:f6:88: 71:f4:87:81:3b:48:d0:0b:0c:d4:b1:75:f9:0a:f2:1a:5d:a0: 8b:5b:d7:de:e8:f5:ab:70:37:70:6d:c4:c3:1b:79:5c:20:91: 00:87:09:c8:df:89:7d:61:07:fa:1a:4d:31:d8:d4:e6:99:ae: 20:f6:e3:2b:d0:68:3e:35:22:b2:a2:35:7a:a8:7f:dd:23:8c: 69:18:24:0f:6f:01:51:b7:80:29:fd:39:8f:16:02:8c:d7:1f: 37:28:cf:58:91:d8:1d:c7:91:d2:72:88:83:38:f8:ef:0a:12: 96:c6:78:28:73:2c:aa:1a:7e:7f:4c:ed:d3:33:f9:2d:7d:c5: e3:43:f9:0e:72:cb:89:a4:3c:f9:29:52:52:c3:13:a2:7b:4a: 0a:17:eb:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRtLw4jsNhbi1ZnVADPs6nLhY1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1 RjRFNUY4ODAeFw0yNjA3MjMxNzExMTNaFw0yNjA3MjQxOTU4MTNaMDMxMTAvBgNV BAMTKDUwQkZFMTQ4RDE2QUFGQTNFRDA1MDI3OUZGMzg0MzcyNUNERDdGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLdxLWWDO/OmrbZiFPpTGdRAhT NpkrqTAnUt9Bra6brSJGjuHL0e5JZ/M7Kp5IORfenAQDKfuHU5PG7B6TAHzmjshr Y/u5xJeaGFHjSXbpr5NaD6FdQCcS0Fkh6F9CJ4ySXGLzJmQm0Lmt6gPZj9oCpi06 fXBcZZJ5GDC4rZxujK/5WNJRUkJUCm6zY9W6pCjZ/QX4I5qF9nHL+iQh4e6o0Duh 7Ipk+/cExpZOyBd6DlkCTXT5PHBmokwMKUP+MpyWkOLnBdbubOguIDnuvPy8TPs4 X0yxQB9lspq1L74QUwF/o8mP9fQSYmJeizcTJe9tzyRM11WqZ2BnbfpjHSEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUL/hSNFqr6PtBQJ5/zhDclzdf5gwHwYDVR0j BBgwFoAUG6ZTqCJqBvugtiW1xLaoRl9OX4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgy MjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1RjRFNUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkE2NTNBODIyNkEwNkZCQTBCNjI1QjVDNEI2QTg0NjVGNEU1 Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4 NDY1RjRFNUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu+ut6JWr0Ezuw25I9H1FX0N6jQcBvVCIc7 PVFv2ATJD28yTdCcguQIku5Vzgc7av9v+ONy9ZXoCBlLFev0ov0lTnpXr0umah4z qG6xxjt7DyIGdUyT469CA48SHNCTSQyV0D7DxTfi8ZT2iHH0h4E7SNALDNSxdfkK 8hpdoItb197o9atwN3BtxMMbeVwgkQCHCcjfiX1hB/oaTTHY1OaZriD24yvQaD41 IrKiNXqof90jjGkYJA9vAVG3gCn9OY8WAozXHzcoz1iR2B3HkdJyiIM4+O8KEpbG eChzLKoafn9M7dMz+S19xeND+Q5yy4mkPPkpUlLDE6J7SgoX6/E= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:41 2026 by rpki-client