$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft File: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft (raw, json) Hash identifier: gFHfasO/987hkcAfTHhQoW2Y8+9Lvk2mVcVGYunUcMY= Subject key identifier: 5F:81:9B:C1:4D:56:E8:00:CC:6E:C6:EA:1A:0A:38:6A:AC:9D:F4:29 Authority key identifier: 1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC Certificate issuer: /CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Certificate serial: 07D50900A1FD325CBB76E843B8CAD27411F1D075 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 04:21:24 +0000 Manifest this update: Wed 23 Sep 2026 04:16:24 +0000 Manifest next update: Thu 24 Sep 2026 07:34:24 +0000 Files and hashes: 1: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: X1BuffyPqZatWKWcf+HC9BxedbehRoziiAknm7XowP4=) 2: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: 7FE61Zc3WU63aXcyhhG+2SBAGWSpraBvNcEGom2PNzw=) 3: 1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl (hash: TvqL/CQ5s4DFXu/KHGClQtf9TxEYeECO7hAe5qKlQHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d5:09:00:a1:fd:32:5c:bb:76:e8:43:b8:ca:d2:74:11:f1:d0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B13598E3DC3A8D5F01EE86947B74951E81266FC Validity Not Before: Sep 23 04:16:24 2026 GMT Not After : Sep 24 07:34:24 2026 GMT Subject: CN=5F819BC14D56E800CC6EC6EA1A0A386AAC9DF429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:6f:d8:37:5f:a4:99:76:fb:3c:76:fd:56: 4c:8a:3d:f4:3a:75:1a:63:c7:8b:cb:07:89:f0:24: 6c:33:dc:e6:1f:61:62:13:b0:17:e4:8e:18:7c:69: 40:e2:29:24:45:10:0a:ff:13:d5:a9:64:aa:d8:d1: f5:07:d2:fd:ed:d4:e6:6c:8e:40:61:2d:06:77:66: b7:a1:94:23:c9:90:d5:ef:d6:0a:b4:bd:80:1d:55: fa:4b:e2:20:d7:f1:9f:70:b7:e3:4a:9b:6f:eb:eb: 69:c4:9d:fb:a9:e1:9a:01:e5:28:d6:c7:4f:74:b4: 6c:2c:06:08:7c:7f:fd:54:c9:98:a5:8f:66:15:d7: 1e:5a:a8:db:ea:8b:7c:8f:4c:6a:38:2f:e8:37:44: f8:dc:7e:17:d8:9f:7c:48:3a:c7:86:fb:8c:e3:64: 68:e0:9d:c0:43:b3:49:7f:ce:4c:d7:ce:f9:78:16: 84:b1:6a:99:3a:b2:5a:24:c1:3f:db:4e:0a:30:d6: 57:85:4c:70:76:e7:53:1a:36:8b:10:0f:d0:56:04: f3:d6:08:46:d9:03:94:6d:d0:d4:48:54:da:57:aa: b2:da:1a:fd:f0:5a:c9:1b:21:ad:2f:ef:07:b9:35: 6b:40:70:45:1f:2f:c5:48:96:72:3a:3f:74:fb:7a: 30:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:81:9B:C1:4D:56:E8:00:CC:6E:C6:EA:1A:0A:38:6A:AC:9D:F4:29 X509v3 Authority Key Identifier: keyid:1B:13:59:8E:3D:C3:A8:D5:F0:1E:E8:69:47:B7:49:51:E8:12:66:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B13598E3DC3A8D5F01EE86947B74951E81266FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/1B13598E3DC3A8D5F01EE86947B74951E81266FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:29:1e:7c:42:2b:90:14:94:b3:b0:f6:9b:21:fe:07:c3:0c: 35:7a:fc:5c:57:ca:8b:4d:7b:5b:ad:f8:1f:cc:52:ff:25:33: d5:21:e9:e7:fb:95:b3:11:3d:ea:09:24:7b:68:10:c5:f6:51: 66:02:45:eb:cf:c9:ad:1e:5f:93:af:d3:38:b3:50:9e:54:73: 6e:8d:ae:a0:99:3c:d7:52:6f:39:69:22:ad:92:cd:4b:cb:58: 48:13:22:9d:59:3d:65:0a:ec:48:d5:de:c1:a6:94:80:0e:66: d9:0d:a1:5d:1b:9c:df:2f:a0:4c:f0:49:ed:0b:33:56:94:28: fb:f5:3f:47:7c:fd:77:4f:a1:45:82:39:bf:3b:b6:f7:73:55: 55:85:78:fd:1e:2c:b9:76:57:d6:1b:ae:6f:98:d8:51:c5:e6: bc:19:a0:a2:56:0b:a3:05:e5:1e:1b:a2:d0:c7:48:09:ee:27: c4:c2:41:d0:ba:68:32:43:5a:29:95:3e:77:1d:d0:95:b5:bc: f3:a5:aa:08:d1:1f:e5:30:3f:0d:b0:cf:94:72:1d:0e:c8:78: bd:f7:31:12:3b:9c:da:39:6a:e6:b7:72:80:03:0b:fe:cd:bc: b2:bc:93:fc:40:51:4f:b8:ad:67:03:98:c5:27:31:da:aa:f0: 2a:07:af:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9UJAKH9Mly7duhDuMrSdBHx0HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5NTFF ODEyNjZGQzAeFw0yNjA5MjMwNDE2MjRaFw0yNjA5MjQwNzM0MjRaMDMxMTAvBgNV BAMTKDVGODE5QkMxNEQ1NkU4MDBDQzZFQzZFQTFBMEEzODZBQUM5REY0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cG/YN1+kmXb7PHb9VkyKPfQ6 dRpjx4vLB4nwJGwz3OYfYWITsBfkjhh8aUDiKSRFEAr/E9WpZKrY0fUH0v3t1OZs jkBhLQZ3ZrehlCPJkNXv1gq0vYAdVfpL4iDX8Z9wt+NKm2/r62nEnfup4ZoB5SjW x090tGwsBgh8f/1UyZilj2YV1x5aqNvqi3yPTGo4L+g3RPjcfhfYn3xIOseG+4zj ZGjgncBDs0l/zkzXzvl4FoSxapk6slokwT/bTgow1leFTHB251MaNosQD9BWBPPW CEbZA5Rt0NRIVNpXqrLaGv3wWskbIa0v7we5NWtAcEUfL8VIlnI6P3T7ejDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX4GbwU1W6ADMbsbqGgo4aqyd9CkwHwYDVR0j BBgwFoAUGxNZjj3DqNXwHuhpR7dJUegSZvwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2NTI5ZGItOTMzMC00ZTk3LWFkZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUz REMzQThENUYwMUVFODY5NDdCNzQ5NTFFODEyNjZGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjEzNTk4RTNEQzNBOEQ1RjAxRUU4Njk0N0I3NDk1MUU4MTI2 NkZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvMUIxMzU5OEUzREMzQThENUYwMUVFODY5NDdCNzQ5 NTFFODEyNjZGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEpHnxCK5AUlLOw9psh/gfDDDV6/FxXyotN e1ut+B/MUv8lM9Uh6ef7lbMRPeoJJHtoEMX2UWYCRevPya0eX5Ov0zizUJ5Uc26N rqCZPNdSbzlpIq2SzUvLWEgTIp1ZPWUK7EjV3sGmlIAOZtkNoV0bnN8voEzwSe0L M1aUKPv1P0d8/XdPoUWCOb87tvdzVVWFeP0eLLl2V9Ybrm+Y2FHF5rwZoKJWC6MF 5R4botDHSAnuJ8TCQdC6aDJDWimVPncd0JW1vPOlqgjRH+UwPw2wz5RyHQ7IeL33 MRI7nNo5aua3coADC/7NvLK8k/xAUU+4rWcDmMUnMdqq8CoHrzA= -----END CERTIFICATE-----Generated at Thu Sep 24 00:02:14 2026 by rpki-client