$ rpki-client -vvvf rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft File: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft (raw, json) Hash identifier: y/7q+U7tD/xTUoGcPGl4LU81CeUVkE+d53878y40bE8= Subject key identifier: 9E:D7:DF:0E:FC:C6:DA:56:4A:EE:CC:5E:BD:CB:A8:81:F3:7F:9E:BA Authority key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Certificate issuer: /CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Certificate serial: 411EF15EEF3ABAFDACB0722CBB042D8F9127CEC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 03:30:25 +0000 Manifest this update: Wed 23 Sep 2026 03:25:25 +0000 Manifest next update: Thu 24 Sep 2026 07:25:25 +0000 Files and hashes: 1: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: thh4X2NPWP82XDrx73Jv5IezHaIkq/gXqvOxSLdwylI=) 2: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: bT5Uw393iqcafpbbgDNkyN2J0K45Ob4q+8CX5o4YsWs=) 3: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl (hash: iXwfY/qFWyasByR+czU9pUndOERpCf1ul+NzhMSmFcM=) 4: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: GT1/9A1T1IHuKtVAU+XRFXaTDB7gCJgDb4j3AFpErYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1e:f1:5e:ef:3a:ba:fd:ac:b0:72:2c:bb:04:2d:8f:91:27:ce:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Validity Not Before: Sep 23 03:25:25 2026 GMT Not After : Sep 24 07:25:25 2026 GMT Subject: CN=9ED7DF0EFCC6DA564AEECC5EBDCBA881F37F9EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:b9:32:18:78:22:a5:93:c5:1c:0c:7a:0f: 5e:16:60:e0:39:a5:d2:73:a7:32:50:89:fc:f3:db: e5:63:f4:68:10:c0:d3:81:68:24:c2:8a:cb:8d:91: 80:de:07:b7:a1:a6:24:fa:42:2c:5d:4a:f2:9c:d5: f5:2d:ff:6f:af:51:88:59:93:a8:61:f5:97:db:1a: 23:0c:be:20:60:89:97:d0:06:b6:bd:c7:84:b8:87: ff:60:6b:d2:82:f8:04:13:bb:34:cc:4c:d8:00:e5: 8c:f5:00:fc:53:5c:34:e8:3e:ca:fc:d6:22:04:5c: 57:45:0f:00:c9:8e:75:17:86:d5:c2:85:b6:94:c5: 3d:e0:5c:5c:20:8d:63:56:87:ad:89:e2:29:51:05: 2c:75:8e:1d:43:0c:7e:94:9b:19:12:c4:60:84:c8: 27:d7:8a:d3:6e:42:e0:6b:49:98:43:a2:1c:48:2f: 47:0f:33:e9:5f:69:71:6b:0a:e7:42:61:fe:11:4e: 6d:9a:4a:8b:39:51:7c:1d:52:63:7e:bd:db:60:a4: c4:76:56:b0:69:08:e0:4e:7e:72:bc:c5:ac:bf:0b: 37:88:4b:aa:46:ce:bd:bb:88:63:a7:b7:07:f3:e5: 04:ae:1e:58:91:f0:36:14:33:5c:0a:0a:5a:5d:48: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D7:DF:0E:FC:C6:DA:56:4A:EE:CC:5E:BD:CB:A8:81:F3:7F:9E:BA X509v3 Authority Key Identifier: keyid:1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4a:30:da:5d:bd:a4:15:48:c9:09:50:c8:a6:b5:61:d4:c7: a4:32:ec:34:50:34:d8:4f:c2:bb:ad:0d:ef:e0:0c:cf:77:2e: 11:e1:c8:60:8c:e8:6b:1c:50:7b:c7:09:55:28:b8:1d:5e:8c: 8e:ff:5c:b8:cb:54:9b:ec:d7:cd:85:73:eb:58:a8:9c:ae:07: ac:e0:f0:79:cd:91:d0:e3:5e:12:01:60:c9:e3:28:cc:d9:81: 09:52:0d:2d:99:c1:58:7f:01:a6:97:6d:85:9c:cd:35:8a:87: b8:47:53:55:cd:8e:6c:03:a3:99:13:d8:f7:eb:25:36:21:69: 9f:2b:7e:c0:01:56:d9:37:5e:39:24:17:b8:85:a7:a9:06:69: 66:d4:ae:9e:8b:0d:bd:bb:94:b3:14:15:79:d0:49:6a:ec:26: 88:ac:c6:97:27:ce:8f:73:9c:e6:22:fe:64:2e:2f:92:ef:e8: 37:11:e7:68:30:31:33:d7:8c:03:d0:65:56:c7:49:f5:37:b8: 65:a4:eb:66:f8:51:eb:2a:93:98:81:02:a6:ce:90:5b:f3:db: 57:0e:4d:65:b2:9a:8e:1a:b2:2f:ea:63:c9:47:7d:d9:19:bf: 38:b4:e9:27:8b:e6:9b:ce:71:32:b1:5b:23:ff:65:02:d2:dd: 9c:a8:90:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQR7xXu86uv2ssHIsuwQtj5EnzsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEz Rjg4MURFNTAeFw0yNjA5MjMwMzI1MjVaFw0yNjA5MjQwNzI1MjVaMDMxMTAvBgNV BAMTKDlFRDdERjBFRkNDNkRBNTY0QUVFQ0M1RUJEQ0JBODgxRjM3RjlFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+f7kyGHgipZPFHAx6D14WYOA5 pdJzpzJQifzz2+Vj9GgQwNOBaCTCisuNkYDeB7ehpiT6QixdSvKc1fUt/2+vUYhZ k6hh9ZfbGiMMviBgiZfQBra9x4S4h/9ga9KC+AQTuzTMTNgA5Yz1APxTXDToPsr8 1iIEXFdFDwDJjnUXhtXChbaUxT3gXFwgjWNWh62J4ilRBSx1jh1DDH6UmxkSxGCE yCfXitNuQuBrSZhDohxIL0cPM+lfaXFrCudCYf4RTm2aSos5UXwdUmN+vdtgpMR2 VrBpCOBOfnK8xay/CzeIS6pGzr27iGOntwfz5QSuHliR8DYUM1wKClpdSCATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUntffDvzG2lZK7sxevcuogfN/nrowHwYDVR0j BBgwFoAUG2WQnBQEsPB/jzZ84+5u+j+IHeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM1MDQ4YzYtOGNjZC00NjNkLWFkMzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMx NDA0QjBGMDdGOEYzNjdDRTNFRTZFRkEzRjg4MURFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjY1OTA5QzE0MDRCMEYwN0Y4RjM2N0NFM0VFNkVGQTNGODgx REU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvMUI2NTkwOUMxNDA0QjBGMDdGOEYzNjdDRTNFRTZF RkEzRjg4MURFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpKMNpdvaQVSMkJUMimtWHUx6Qy7DRQNNhP wrutDe/gDM93LhHhyGCM6GscUHvHCVUouB1ejI7/XLjLVJvs182Fc+tYqJyuB6zg 8HnNkdDjXhIBYMnjKMzZgQlSDS2ZwVh/AaaXbYWczTWKh7hHU1XNjmwDo5kT2Pfr JTYhaZ8rfsABVtk3XjkkF7iFp6kGaWbUrp6LDb27lLMUFXnQSWrsJoisxpcnzo9z nOYi/mQuL5Lv6DcR52gwMTPXjAPQZVbHSfU3uGWk62b4Uesqk5iBAqbOkFvz21cO TWWymo4asi/qY8lHfdkZvzi06SeL5pvOcTKxWyP/ZQLS3ZyokFE= -----END CERTIFICATE-----Generated at Thu Sep 24 01:06:11 2026 by rpki-client