$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft File: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft (raw, json) Hash identifier: ZeRpXAcQiFD1CT4hMOZQ8W0VvFWYFTrQc3h5KwdpBo4= Subject key identifier: 84:17:63:C1:D1:83:A2:16:7F:5F:8F:08:F7:F6:23:F2:FE:3A:30:74 Authority key identifier: 1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 Certificate issuer: /CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Certificate serial: 1EA0525474B6E3939BF6F1731FA764AC058EB91B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 15:20:06 +0000 Manifest this update: Wed 23 Sep 2026 15:15:06 +0000 Manifest next update: Thu 24 Sep 2026 15:28:06 +0000 Files and hashes: 1: 1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl (hash: 9nbHBJu/fUeYUnJC8nAmCUSr6Dnojg7ekx/Roj6EEls=) 2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: m7In3QfaxfsyuW0qTfRybGAF6wFMxAA9Ta2LCZQCpzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a0:52:54:74:b6:e3:93:9b:f6:f1:73:1f:a7:64:ac:05:8e:b9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88 Validity Not Before: Sep 23 15:15:06 2026 GMT Not After : Sep 24 15:28:06 2026 GMT Subject: CN=841763C1D183A2167F5F8F08F7F623F2FE3A3074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d3:44:59:9c:e6:39:15:ac:2e:da:76:19:dd: d7:54:7d:2b:2c:8e:da:5d:2b:80:df:5b:67:bb:0f: 21:24:40:da:a3:c3:f2:11:fc:9c:0a:51:d5:9e:71: 0b:32:5c:08:34:42:92:8f:b5:e9:bf:38:4c:68:cd: a0:42:3e:03:2d:ed:55:6a:94:d4:99:4a:23:47:28: ce:4e:18:43:dd:fe:57:1c:69:5f:f0:e6:b4:98:96: 34:d2:9b:52:21:3c:e2:07:3f:8f:c5:a3:cd:d0:38: 9e:f9:78:ed:01:dd:fd:0c:f2:99:f5:e6:8c:8d:98: 9f:ad:fe:1f:01:63:e4:a1:75:0b:ed:c5:c2:bc:8a: 8f:aa:57:2d:bb:93:13:c5:a4:81:4d:54:0e:fc:9f: 3b:5e:bc:67:d9:ce:4a:0d:25:df:e3:65:12:5c:fc: a6:58:bc:ea:54:af:31:1c:c4:64:3a:4e:72:0c:77: 84:89:39:d6:b7:22:f4:91:62:d1:51:31:50:b3:9b: f4:0e:75:eb:aa:41:78:f0:27:99:6a:a8:3b:2a:41: a9:79:72:dd:32:b3:7e:db:b0:75:bc:15:02:10:e6: aa:2e:5d:ee:a7:4e:30:fc:e6:27:c8:ed:e0:ed:bb: cd:c3:e7:ed:fb:7d:1d:8b:17:a1:3c:8d:7e:84:29: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:17:63:C1:D1:83:A2:16:7F:5F:8F:08:F7:F6:23:F2:FE:3A:30:74 X509v3 Authority Key Identifier: keyid:1B:A6:53:A8:22:6A:06:FB:A0:B6:25:B5:C4:B6:A8:46:5F:4E:5F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/1BA653A8226A06FBA0B625B5C4B6A8465F4E5F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a5:89:2c:8c:42:aa:96:24:71:6c:55:51:db:57:3b:a7:42: 20:0e:ea:c5:00:a0:24:5f:5f:dc:13:36:af:ef:82:6a:7e:90: d1:47:bb:fb:c3:f3:13:26:79:f4:ac:bb:c2:33:50:1a:88:86: ff:f0:d7:7b:38:15:3b:e8:fc:0f:dc:0b:97:89:4f:69:d3:92: ed:c4:6d:0f:09:51:76:8f:15:d9:1f:1a:19:d4:77:d8:94:70: fc:45:4b:39:a2:ff:ee:2f:55:17:4d:cb:9d:60:44:7b:b9:d6: 69:9e:9e:eb:51:29:f9:87:bc:58:42:9c:30:60:95:5b:a2:a9: b5:af:e4:71:c2:11:d5:ff:6f:7f:4d:d2:ed:30:3f:7d:38:6a: e5:bb:c4:9e:14:84:1e:f7:d7:93:56:3c:99:b9:3c:16:8c:e1: ec:49:e6:d8:93:5d:2e:3d:3a:c2:51:02:af:f9:d6:d4:38:e8: 60:82:d0:3a:ea:ed:9b:2b:6e:bf:71:58:09:f7:d0:89:e2:b7: 55:39:df:f1:84:01:78:ce:91:d7:87:07:14:7b:b7:3f:3d:8b: 5c:17:4e:b7:fd:fc:d6:0a:6b:75:75:b9:1e:2a:3b:de:f9:cc: a9:fc:24:20:37:77:c1:e7:3c:bc:65:62:2c:ab:1f:bb:e0:20: a9:90:99:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqBSVHS245Ob9vFzH6dkrAWOuRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1 RjRFNUY4ODAeFw0yNjA5MjMxNTE1MDZaFw0yNjA5MjQxNTI4MDZaMDMxMTAvBgNV BAMTKDg0MTc2M0MxRDE4M0EyMTY3RjVGOEYwOEY3RjYyM0YyRkUzQTMwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL00RZnOY5Fawu2nYZ3ddUfSss jtpdK4DfW2e7DyEkQNqjw/IR/JwKUdWecQsyXAg0QpKPtem/OExozaBCPgMt7VVq lNSZSiNHKM5OGEPd/lccaV/w5rSYljTSm1IhPOIHP4/Fo83QOJ75eO0B3f0M8pn1 5oyNmJ+t/h8BY+ShdQvtxcK8io+qVy27kxPFpIFNVA78nztevGfZzkoNJd/jZRJc /KZYvOpUrzEcxGQ6TnIMd4SJOda3IvSRYtFRMVCzm/QOdeuqQXjwJ5lqqDsqQal5 ct0ys37bsHW8FQIQ5qouXe6nTjD85ifI7eDtu83D5+37fR2LF6E8jX6EKR/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBdjwdGDohZ/X48I9/Yj8v46MHQwHwYDVR0j BBgwFoAUG6ZTqCJqBvugtiW1xLaoRl9OX4gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTliMDdhOWUtNjJkZi00ODA4LTlkMmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgy MjZBMDZGQkEwQjYyNUI1QzRCNkE4NDY1RjRFNUY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkE2NTNBODIyNkEwNkZCQTBCNjI1QjVDNEI2QTg0NjVGNEU1 Rjg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvMUJBNjUzQTgyMjZBMDZGQkEwQjYyNUI1QzRCNkE4 NDY1RjRFNUY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaliSyMQqqWJHFsVVHbVzunQiAO6sUAoCRf X9wTNq/vgmp+kNFHu/vD8xMmefSsu8IzUBqIhv/w13s4FTvo/A/cC5eJT2nTku3E bQ8JUXaPFdkfGhnUd9iUcPxFSzmi/+4vVRdNy51gRHu51mmenutRKfmHvFhCnDBg lVuiqbWv5HHCEdX/b39N0u0wP304auW7xJ4UhB7315NWPJm5PBaM4exJ5tiTXS49 OsJRAq/51tQ46GCC0Drq7Zsrbr9xWAn30Init1U53/GEAXjOkdeHBxR7tz89i1wX Trf9/NYKa3V1uR4qO975zKn8JCA3d8HnPLxlYiyrH7vgIKmQmeQ= -----END CERTIFICATE-----Generated at Wed Sep 23 23:16:50 2026 by rpki-client