$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: L0bQoYEv2eYLaeRMILY2apdu56Vcjb25URQ25L7e1YQ= Subject key identifier: D0:D8:7C:71:1C:0E:89:EE:BF:24:FC:2C:50:09:E3:14:21:05:CD:0B Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 4D92449FF3275511AB8D2122817F29581EF6CD5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:57:32 +0000 Manifest this update: Tue 12 May 2026 11:52:32 +0000 Manifest next update: Wed 13 May 2026 14:03:32 +0000 Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) 2: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 4: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: z6j0A+/63YFED4Crfead2gkuz75SHM9iyogLOvj3P4U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:92:44:9f:f3:27:55:11:ab:8d:21:22:81:7f:29:58:1e:f6:cd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: May 12 11:52:32 2026 GMT Not After : May 13 14:03:32 2026 GMT Subject: CN=D0D87C711C0E89EEBF24FC2C5009E3142105CD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:f6:09:51:70:a6:22:87:75:68:1f:ef:d8: ff:36:e1:22:79:5b:4d:46:b7:5b:ac:54:41:38:e8: cd:d9:e1:d5:ed:39:11:8f:c8:de:3e:18:54:57:ee: b3:01:c9:21:14:e1:2e:8f:80:42:e7:41:c5:28:f6: 23:39:9f:d0:78:9c:d7:7b:4f:17:68:83:4b:02:58: 7b:c2:27:18:f4:b6:f1:d3:dc:32:b9:08:8c:31:15: 0c:91:92:0a:fa:a9:1a:38:6e:9b:a6:6a:80:00:9e: bf:05:95:3e:27:33:d9:38:d2:ce:1b:51:10:f8:86: 92:d9:d2:9c:fe:3c:60:4b:8d:91:d6:65:87:c7:db: 44:c9:65:4e:6a:1b:37:c4:65:a2:c0:75:a1:3d:ae: 32:3d:f6:50:22:19:28:1c:5a:94:e8:f4:d2:90:41: f5:f7:23:c9:93:1c:25:43:2e:b5:de:47:9f:a9:fc: c5:82:c5:08:ef:75:66:11:9e:ed:b3:dc:8d:d6:1e: e7:7f:b0:2e:56:34:89:b5:c5:4c:f4:72:bf:7a:7a: a4:f6:a5:03:08:3d:aa:03:a8:ce:cb:f6:3d:d5:8e: e4:50:ce:e5:b7:a0:84:9d:10:67:1d:00:89:fa:fd: 12:de:cd:54:08:44:81:20:65:f7:8d:8e:d1:ad:b0: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:7C:71:1C:0E:89:EE:BF:24:FC:2C:50:09:E3:14:21:05:CD:0B X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e9:88:f7:4a:0d:b8:e4:b5:a7:87:59:a8:6f:30:e8:36:07: 2c:4a:c2:6c:99:3c:a5:72:82:1d:43:60:65:7e:8b:f5:0a:3c: c0:ee:7a:fc:bb:d0:5a:c8:fd:28:07:55:68:3a:0b:8f:91:e6: fa:4f:5f:52:9f:af:b9:ff:44:4e:08:b9:2f:db:68:71:0d:32: 83:94:e4:18:cb:73:92:97:e8:d8:fc:cd:e5:7d:ee:66:57:7a: 7b:c9:27:36:1a:51:ea:b5:46:54:9b:d6:66:c4:e8:93:19:6a: 7d:94:e4:78:cb:4a:da:9d:75:bf:5c:ea:73:31:57:2e:a9:7e: ba:c2:10:f7:ea:61:fd:3a:2f:9a:c9:6a:63:1a:2b:48:be:9f: 87:df:d0:99:76:3a:59:81:3d:6d:d6:4a:41:a7:ec:76:01:5e: c2:71:c5:7a:3d:30:5b:4e:14:69:1c:c6:15:93:db:e0:75:ad: 51:ef:1b:56:33:b0:a6:4b:7c:54:22:af:24:00:8c:46:4b:36: e3:9f:82:7c:05:04:02:9c:47:9c:d2:76:c9:47:74:34:61:b4: 14:1e:b2:5f:22:05:51:47:57:e9:07:50:82:c0:62:98:81:77: eb:0c:40:b2:57:b7:d1:8a:bb:0e:4d:c1:e5:64:cf:56:4f:43: 1a:93:5a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZJEn/MnVRGrjSEigX8pWB72zVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjA1MTIxMTUyMzJaFw0yNjA1MTMxNDAzMzJaMDMxMTAvBgNV BAMTKEQwRDg3QzcxMUMwRTg5RUVCRjI0RkMyQzUwMDlFMzE0MjEwNUNEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTfYJUXCmIod1aB/v2P824SJ5 W01Gt1usVEE46M3Z4dXtORGPyN4+GFRX7rMBySEU4S6PgELnQcUo9iM5n9B4nNd7 Txdog0sCWHvCJxj0tvHT3DK5CIwxFQyRkgr6qRo4bpumaoAAnr8FlT4nM9k40s4b URD4hpLZ0pz+PGBLjZHWZYfH20TJZU5qGzfEZaLAdaE9rjI99lAiGSgcWpTo9NKQ QfX3I8mTHCVDLrXeR5+p/MWCxQjvdWYRnu2z3I3WHud/sC5WNIm1xUz0cr96eqT2 pQMIPaoDqM7L9j3VjuRQzuW3oISdEGcdAIn6/RLezVQIRIEgZfeNjtGtsOMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Nh8cRwOie6/JPwsUAnjFCEFzQswHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfpiPdKDbjktaeHWahvMOg2ByxKwmyZPKVy gh1DYGV+i/UKPMDuevy70FrI/SgHVWg6C4+R5vpPX1Kfr7n/RE4IuS/baHENMoOU 5BjLc5KX6Nj8zeV97mZXenvJJzYaUeq1RlSb1mbE6JMZan2U5HjLStqddb9c6nMx Vy6pfrrCEPfqYf06L5rJamMaK0i+n4ff0Jl2OlmBPW3WSkGn7HYBXsJxxXo9MFtO FGkcxhWT2+B1rVHvG1YzsKZLfFQiryQAjEZLNuOfgnwFBAKcR5zSdslHdDRhtBQe sl8iBVFHV+kHUILAYpiBd+sMQLJXt9GKuw5NweVkz1ZPQxqTWik= -----END CERTIFICATE-----Generated at Tue May 12 22:33:04 2026 by rpki-client