$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: btIig9wedxtQri8Exm2MZJ0jp8y/+XTlnixLW0gIAY4= Subject key identifier: C7:CB:B5:D8:B9:6A:A4:01:63:FB:F5:07:D4:65:07:A0:86:D4:7A:D6 Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 37E00F017947083A17B77EC931C39D4A7DF6DACE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 03:35:30 +0000 Manifest this update: Wed 23 Sep 2026 03:30:30 +0000 Manifest next update: Thu 24 Sep 2026 04:32:30 +0000 Files and hashes: 1: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: LSiNy+isdqQH2odBGpO+wVdava4UuotbEKoQ6Sc8V4U=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e0:0f:01:79:47:08:3a:17:b7:7e:c9:31:c3:9d:4a:7d:f6:da:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: Sep 23 03:30:30 2026 GMT Not After : Sep 24 04:32:30 2026 GMT Subject: CN=C7CBB5D8B96AA40163FBF507D46507A086D47AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:8a:b3:70:f4:3a:ab:30:8d:5e:3b:8a:ac: 0a:e6:15:7d:4d:21:03:40:5c:fc:d3:13:b8:9d:a1: 94:6c:84:49:c4:67:fd:f4:b7:18:64:f0:4c:60:6a: 65:b8:c3:ae:93:44:2d:33:8e:6c:24:b3:10:f3:4a: 41:4f:b6:85:d5:05:b5:97:2f:d4:37:b2:37:80:54: 75:6c:2c:05:92:b7:b5:62:45:66:bf:fc:aa:65:88: 04:9e:ac:d8:99:c6:e3:6a:79:92:59:27:49:fd:66: 28:51:ff:80:df:7a:f5:8e:25:9d:2f:18:4f:9b:e8: 58:51:dd:9e:b5:78:e6:4d:f4:a6:00:02:30:7a:1e: 1e:1f:23:77:ad:75:db:e4:3c:67:66:4c:2d:9d:14: 7b:7d:5e:bc:35:d1:7d:6b:65:65:cc:50:95:61:a7: 4b:36:8c:85:ea:aa:34:a7:21:ff:3a:d0:2b:28:14: 18:32:7c:3f:71:7b:bb:2f:12:04:c9:de:28:aa:16: 74:e6:7b:ce:a5:de:c9:cf:ad:05:e8:d3:80:b4:92: cc:64:07:7e:26:83:25:40:b5:6d:33:e0:99:bc:35: f2:7a:7a:e5:50:82:dc:5b:81:e1:99:05:71:03:1c: 35:e2:76:25:ad:f7:4d:4a:a8:b9:a0:42:fb:5f:d5: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CB:B5:D8:B9:6A:A4:01:63:FB:F5:07:D4:65:07:A0:86:D4:7A:D6 X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2c:51:6c:a1:8b:6b:0c:2c:49:f1:04:07:d7:ee:22:51:c9: f5:d9:dc:ab:c7:e2:09:1f:0f:d9:35:bb:b9:8b:1d:5d:c1:f9: a9:67:25:3a:16:65:9d:42:d2:7e:94:9e:4f:8b:01:19:8a:96: ba:cd:76:6e:3b:ba:cb:3b:de:1a:1f:e4:2c:e8:cb:37:74:6e: fa:25:1b:57:b5:22:de:6c:82:ea:06:70:b9:a8:91:db:c5:2b: 0f:f3:8f:51:5e:54:27:6d:70:21:ce:ef:1f:e2:91:97:dd:4b: 07:52:71:fb:07:2b:bb:4b:c4:40:ce:0d:2a:bf:10:5c:cd:07: 34:02:c0:ea:88:b7:11:5b:95:03:a5:2d:d3:19:e9:3b:11:56: 38:e2:62:b6:7d:ef:7e:8e:01:74:b0:82:d2:c0:af:be:1d:9b: ab:82:90:d0:2f:ce:a0:3b:6f:43:65:b4:dc:a4:d2:dc:5a:ac: 54:17:91:41:be:c5:58:2e:ec:b9:79:ed:a1:81:4a:3d:8e:c3: 37:f6:8d:1d:db:26:94:93:7c:b9:27:b5:42:bb:f8:30:f0:23: 0e:80:aa:2b:58:af:cb:d7:85:02:b2:06:47:fc:5c:81:fc:7d: c1:22:64:b1:17:66:d1:60:13:c1:93:bf:04:51:50:e4:ae:0e: 30:ae:fe:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+APAXlHCDoXt37JMcOdSn322s4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA5MjMwMzMwMzBaFw0yNjA5MjQwNDMyMzBaMDMxMTAvBgNV BAMTKEM3Q0JCNUQ4Qjk2QUE0MDE2M0ZCRjUwN0Q0NjUwN0EwODZENDdBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uIqzcPQ6qzCNXjuKrArmFX1N IQNAXPzTE7idoZRshEnEZ/30txhk8ExgamW4w66TRC0zjmwksxDzSkFPtoXVBbWX L9Q3sjeAVHVsLAWSt7ViRWa//KpliASerNiZxuNqeZJZJ0n9ZihR/4DfevWOJZ0v GE+b6FhR3Z61eOZN9KYAAjB6Hh4fI3etddvkPGdmTC2dFHt9Xrw10X1rZWXMUJVh p0s2jIXqqjSnIf860CsoFBgyfD9xe7svEgTJ3iiqFnTme86l3snPrQXo04C0ksxk B34mgyVAtW0z4Jm8NfJ6euVQgtxbgeGZBXEDHDXidiWt901KqLmgQvtf1espAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx8u12LlqpAFj+/UH1GUHoIbUetYwHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwsUWyhi2sMLEnxBAfX7iJRyfXZ3KvH4gkf D9k1u7mLHV3B+alnJToWZZ1C0n6Unk+LARmKlrrNdm47uss73hof5Czoyzd0bvol G1e1It5sguoGcLmokdvFKw/zj1FeVCdtcCHO7x/ikZfdSwdScfsHK7tLxEDODSq/ EFzNBzQCwOqItxFblQOlLdMZ6TsRVjjiYrZ9736OAXSwgtLAr74dm6uCkNAvzqA7 b0NltNyk0txarFQXkUG+xVgu7Ll57aGBSj2Owzf2jR3bJpSTfLkntUK7+DDwIw6A qitYr8vXhQKyBkf8XIH8fcEiZLEXZtFgE8GTvwRRUOSuDjCu/tI= -----END CERTIFICATE-----Generated at Wed Sep 23 12:27:56 2026 by rpki-client