$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft File: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft (raw, json) Hash identifier: 4R6HJBalfxwZQ0TWWoUMY7JYTbuP9Wq8pNnS9CuYsEc= Subject key identifier: 66:BF:45:26:4F:4F:17:F7:8E:C8:31:6D:FD:FB:8C:51:50:18:B4:0E Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 3139072779EB06A6C798C2CD8C9A29E375199BB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:39:33 +0000 Manifest this update: Tue 12 May 2026 04:34:33 +0000 Manifest next update: Wed 13 May 2026 07:36:33 +0000 Files and hashes: 1: 1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl (hash: SzsCOPf/Cd90Dm7KdZhijBbWNRIs165OUGVqIDKoUtU=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:39:07:27:79:eb:06:a6:c7:98:c2:cd:8c:9a:29:e3:75:19:9b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: May 12 04:34:33 2026 GMT Not After : May 13 07:36:33 2026 GMT Subject: CN=66BF45264F4F17F78EC8316DFDFB8C515018B40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:77:d3:22:58:1a:13:59:f9:63:38:f2:a5: d4:34:83:4d:50:5d:a5:f2:5e:9e:b2:96:9e:20:c4: 63:34:9e:1f:dd:bd:1f:b5:5d:1d:fa:a0:1e:09:f3: eb:11:1e:c0:7e:5b:f4:52:db:b6:6a:a1:32:7f:ef: 4b:10:36:eb:ae:b8:15:98:26:39:8e:fc:4c:d5:36: 81:67:a2:12:24:3a:7d:9c:da:2e:12:f2:f3:89:c0: 54:c9:25:15:54:30:56:9c:4a:68:3f:d3:20:58:11: d0:be:fc:73:bb:82:d7:7f:54:bc:13:23:58:17:b8: 95:fa:dc:ee:61:e5:77:70:dd:a4:cf:06:34:8f:db: b7:01:a8:fc:6e:6d:93:1f:80:c0:26:9a:5f:1a:3a: b8:46:0a:0e:59:62:91:52:4f:80:31:2e:f3:3b:89: 1b:03:98:46:55:ef:7d:7f:1a:a6:57:77:27:c0:b7: da:aa:7d:ed:42:ab:b4:c9:40:ea:c1:77:ba:5c:90: ce:b7:d5:79:48:84:15:a2:f8:5c:72:dc:b3:db:b4: dc:02:5b:b9:6a:4c:b5:1f:71:70:dc:c6:09:36:c7: 8b:d5:9d:91:9a:88:d7:e1:99:ab:55:8f:f5:15:a3: 4e:ae:21:a2:cf:d1:7a:bc:e3:02:80:41:b5:50:03: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BF:45:26:4F:4F:17:F7:8E:C8:31:6D:FD:FB:8C:51:50:18:B4:0E X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5c:9d:c6:bd:ca:73:d1:a0:2f:8e:04:ac:01:2c:c9:d8:e5: 73:b8:cc:f7:da:01:74:db:ce:1c:84:f5:9d:cf:ef:b9:cc:42: 20:41:cd:9b:2f:12:5b:1d:5b:9d:fc:b2:ee:54:d3:96:24:50: 07:b0:c3:8b:ca:48:c3:23:68:fb:57:19:e2:8b:87:5b:78:66: 2c:74:79:7b:ea:0e:9d:b4:b0:d9:ce:21:8e:fc:82:bb:ec:ca: 85:c1:7a:0b:27:d3:26:13:c7:e7:75:3d:57:f1:03:cd:a5:73: f7:8e:dd:28:cf:af:20:0c:7d:38:7a:d1:d1:31:59:bc:15:9f: ce:5c:bd:ad:78:c2:e2:38:06:6f:72:bb:a5:e6:61:ae:d6:c4: 35:8c:e3:ac:64:d3:74:a9:6b:87:e7:0f:dc:fe:14:c7:56:d5: 65:c2:95:13:d3:64:c3:96:99:8e:9d:6a:ca:3b:3a:87:63:de: de:82:08:b6:8c:f5:ad:4b:6b:5c:fa:a1:8e:a4:b8:b3:a9:73: 43:94:69:fb:cb:88:f7:57:48:5b:99:7a:36:3b:96:63:55:81: fd:34:f5:a5:b9:f4:69:47:57:2f:0a:94:98:55:96:93:c2:47: 1c:53:b3:92:66:b0:69:8a:ce:d9:8f:20:b4:34:a3:d9:09:88: f8:a3:a7:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTkHJ3nrBqbHmMLNjJop43UZm7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA1MTIwNDM0MzNaFw0yNjA1MTMwNzM2MzNaMDMxMTAvBgNV BAMTKDY2QkY0NTI2NEY0RjE3Rjc4RUM4MzE2REZERkI4QzUxNTAxOEI0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXXfTIlgaE1n5YzjypdQ0g01Q XaXyXp6ylp4gxGM0nh/dvR+1XR36oB4J8+sRHsB+W/RS27ZqoTJ/70sQNuuuuBWY JjmO/EzVNoFnohIkOn2c2i4S8vOJwFTJJRVUMFacSmg/0yBYEdC+/HO7gtd/VLwT I1gXuJX63O5h5Xdw3aTPBjSP27cBqPxubZMfgMAmml8aOrhGCg5ZYpFST4AxLvM7 iRsDmEZV731/GqZXdyfAt9qqfe1Cq7TJQOrBd7pckM631XlIhBWi+Fxy3LPbtNwC W7lqTLUfcXDcxgk2x4vVnZGaiNfhmatVj/UVo06uIaLP0Xq84wKAQbVQA1NFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZr9FJk9PF/eOyDFt/fuMUVAYtA4wHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3 ODhEOEZDRTI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpcnca9ynPRoC+OBKwBLMnY5XO4zPfaAXTb zhyE9Z3P77nMQiBBzZsvElsdW538su5U05YkUAeww4vKSMMjaPtXGeKLh1t4Zix0 eXvqDp20sNnOIY78grvsyoXBegsn0yYTx+d1PVfxA82lc/eO3SjPryAMfTh60dEx WbwVn85cva14wuI4Bm9yu6XmYa7WxDWM46xk03Spa4fnD9z+FMdW1WXClRPTZMOW mY6daso7Oodj3t6CCLaM9a1La1z6oY6kuLOpc0OUafvLiPdXSFuZejY7lmNVgf00 9aW59GlHVy8KlJhVlpPCRxxTs5JmsGmKztmPILQ0o9kJiPijp3E= -----END CERTIFICATE-----Generated at Tue May 12 22:13:21 2026 by rpki-client