$ rpki-client -vvf rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft File: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft (raw, json) Hash identifier: Cw/9ZzjQpHlIDKcd8zEH9y2994zz1GayaEDssqTLwt0= Subject key identifier: EC:BD:DF:A4:05:8A:34:36:45:B2:FB:A7:07:E3:9C:4C:4D:BF:EB:2B Authority key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Certificate issuer: /CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Certificate serial: 07955B14405A1C3A46B93FD3AFB3ED11AC6D5813 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:22:20 +0000 Manifest this update: Tue 12 May 2026 23:17:20 +0000 Manifest next update: Thu 14 May 2026 03:14:20 +0000 Files and hashes: 1: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: GT1/9A1T1IHuKtVAU+XRFXaTDB7gCJgDb4j3AFpErYA=) 2: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: thh4X2NPWP82XDrx73Jv5IezHaIkq/gXqvOxSLdwylI=) 3: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: bT5Uw393iqcafpbbgDNkyN2J0K45Ob4q+8CX5o4YsWs=) 4: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl (hash: SQWd4HhFZsHKgcCfPf+MSnMA9jUAk6syBfSISe48tEo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:95:5b:14:40:5a:1c:3a:46:b9:3f:d3:af:b3:ed:11:ac:6d:58:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Validity Not Before: May 12 23:17:20 2026 GMT Not After : May 14 03:14:20 2026 GMT Subject: CN=ECBDDFA4058A343645B2FBA707E39C4C4DBFEB2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:bc:5a:8c:f2:42:83:cc:fa:f4:a5:1e:b8: 3c:0d:83:78:83:07:43:2e:57:14:1e:44:6f:e6:9a: e0:89:82:a9:98:bb:9b:65:09:00:62:47:01:de:48: fc:a0:39:78:86:aa:a9:45:43:83:17:4d:4f:39:5f: ac:73:c4:4b:31:2e:12:bd:5f:8a:9f:70:e4:1b:62: 29:6f:0c:a6:81:d7:27:6e:07:16:34:86:69:43:ba: b8:6c:d9:12:c4:03:ba:ef:94:b6:e4:e1:1a:3b:2b: 49:51:d7:24:ae:55:04:00:ba:8d:99:b4:db:a4:5b: ac:6f:25:6c:54:1b:3e:a7:d2:55:a2:5c:b4:70:30: ca:e0:45:72:65:cb:ca:bc:0b:b0:2e:b6:98:c0:a1: 4b:f8:de:90:c0:11:76:48:5e:7e:29:02:f6:9f:b9: f1:98:cd:63:65:c6:c0:5c:24:80:29:d9:f0:0f:b6: ef:9c:f1:4e:73:fa:c9:9c:46:83:31:54:12:43:89: 73:b1:48:83:86:7b:42:53:39:ba:c7:0f:ca:ec:52: c0:fd:ff:6f:77:a5:da:cf:04:6c:16:14:93:aa:c3: 2d:ed:7c:a2:57:8a:e8:20:13:e3:56:8b:3f:b5:c7: 86:fa:bd:c6:0b:c5:69:da:d8:2d:7b:0f:cf:aa:e4: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BD:DF:A4:05:8A:34:36:45:B2:FB:A7:07:E3:9C:4C:4D:BF:EB:2B X509v3 Authority Key Identifier: keyid:1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:49:48:e4:af:a4:80:8c:a8:75:14:b2:3b:0a:6c:be:7e:58: 13:4d:e5:24:82:e1:76:11:1f:51:41:6e:39:c9:77:3b:40:af: 2f:91:d5:a8:69:15:d5:5c:03:71:fc:01:9a:ae:c2:ab:ed:ad: fd:53:03:f7:1e:73:ca:dd:d8:85:4d:10:55:be:c1:5a:10:8b: d3:0a:94:a7:4e:79:d0:95:19:a0:84:01:c5:10:20:aa:ed:27: 33:f6:ad:4f:13:29:3d:07:e2:e3:06:53:79:54:5b:04:5a:8a: 4f:e8:6c:f7:75:a8:c6:14:2d:ef:9b:ab:21:c2:fb:ee:ca:e5: a7:69:4f:b3:cc:63:eb:e7:4a:76:b4:7c:28:30:9d:2a:4a:5c: 0d:77:4c:0f:fb:fa:a2:dd:78:e4:67:25:ef:b3:6e:05:48:e6: 0f:bc:df:86:d3:32:b6:63:93:56:42:1c:b2:48:56:a4:b7:de: 99:c3:15:20:ea:6a:6e:e7:ed:ef:07:19:99:bf:c9:cf:29:c1: 54:df:d2:f6:75:32:dc:54:d1:7c:b4:85:55:c7:0a:c4:04:c8: 4c:63:1f:d1:e2:5f:21:f5:6e:55:95:2a:a4:13:db:f2:a7:85: e1:41:07:d7:64:30:13:3f:92:84:ff:a8:d7:01:34:ed:b9:6b: 72:ed:d2:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5VbFEBaHDpGuT/Tr7PtEaxtWBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEz Rjg4MURFNTAeFw0yNjA1MTIyMzE3MjBaFw0yNjA1MTQwMzE0MjBaMDMxMTAvBgNV BAMTKEVDQkRERkE0MDU4QTM0MzY0NUIyRkJBNzA3RTM5QzRDNERCRkVCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkfbxajPJCg8z69KUeuDwNg3iD B0MuVxQeRG/mmuCJgqmYu5tlCQBiRwHeSPygOXiGqqlFQ4MXTU85X6xzxEsxLhK9 X4qfcOQbYilvDKaB1yduBxY0hmlDurhs2RLEA7rvlLbk4Ro7K0lR1ySuVQQAuo2Z tNukW6xvJWxUGz6n0lWiXLRwMMrgRXJly8q8C7AutpjAoUv43pDAEXZIXn4pAvaf ufGYzWNlxsBcJIAp2fAPtu+c8U5z+smcRoMxVBJDiXOxSIOGe0JTObrHD8rsUsD9 /293pdrPBGwWFJOqwy3tfKJXiuggE+NWiz+1x4b6vcYLxWna2C17D8+q5HMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7L3fpAWKNDZFsvunB+OcTE2/6yswHwYDVR0j BBgwFoAUG2WQnBQEsPB/jzZ84+5u+j+IHeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM1MDQ4YzYtOGNjZC00NjNkLWFkMzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMx NDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEzRjg4MURFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjY1OTA5QzE0MDRCMEYwN0Y4RjM2N0NFM0VFNkVGQTNGODgx REU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZF RkEzRjg4MURFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENJSOSvpICMqHUUsjsKbL5+WBNN5SSC4XYR H1FBbjnJdztAry+R1ahpFdVcA3H8AZquwqvtrf1TA/cec8rd2IVNEFW+wVoQi9MK lKdOedCVGaCEAcUQIKrtJzP2rU8TKT0H4uMGU3lUWwRaik/obPd1qMYULe+bqyHC ++7K5adpT7PMY+vnSna0fCgwnSpKXA13TA/7+qLdeORnJe+zbgVI5g+834bTMrZj k1ZCHLJIVqS33pnDFSDqam7n7e8HGZm/yc8pwVTf0vZ1MtxU0Xy0hVXHCsQEyExj H9HiXyH1blWVKqQT2/KnheFBB9dkMBM/koT/qNcBNO25a3Lt0vo= -----END CERTIFICATE-----Generated at Wed May 13 04:03:21 2026 by rpki-client