$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: 8g39OCzojnizuOHgbmzqTxn55zuMD3nROu0XOU8b6tM= Subject key identifier: 63:35:86:6F:A3:28:5A:67:F8:9D:C2:30:EE:A0:EF:06:9B:05:DA:C5 Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 1305998AD4FBEFB47151EFE8FD4A3319C04AD98E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:14:30 +0000 Manifest this update: Thu 24 Sep 2026 11:09:30 +0000 Manifest next update: Fri 25 Sep 2026 14:14:30 +0000 Files and hashes: 1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 2: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: npd4aiQ8U04+FPmgLq3qOP+sIWMyzdDBX7EFTrkFOaA=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:05:99:8a:d4:fb:ef:b4:71:51:ef:e8:fd:4a:33:19:c0:4a:d9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Sep 24 11:09:30 2026 GMT Not After : Sep 25 14:14:30 2026 GMT Subject: CN=6335866FA3285A67F89DC230EEA0EF069B05DAC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:09:31:c8:91:fe:11:76:65:5e:32:7d:d4: 7e:5d:1e:f7:b0:40:ae:54:27:a6:1f:39:6e:bc:dc: 66:79:71:a4:4a:27:dd:60:59:fb:a5:4f:85:a8:c5: 41:1a:05:88:0f:f3:c3:54:24:a0:ce:d3:c6:37:39: 49:40:16:64:74:e5:a5:e6:d2:e8:7a:e0:38:f1:49: 45:50:44:64:8c:73:d9:e0:28:42:b5:14:a4:75:21: 02:99:18:13:7c:21:66:2d:01:f8:20:e3:ec:47:a8: 49:b1:a2:e0:dd:29:f1:bb:9c:f1:7d:cd:fd:f0:4e: c0:2f:5f:fa:83:21:a7:55:f8:48:d3:24:4d:da:0d: 51:db:88:1a:e7:4f:f8:7d:33:b2:57:54:58:a8:df: 53:99:bc:cd:9d:d7:aa:61:46:54:d6:44:6b:93:d4: 87:c9:97:78:97:70:01:29:22:59:a7:d1:40:80:37: d2:76:9c:88:14:51:d7:1d:a1:51:ed:cf:ef:56:e6: 8f:d2:7f:c9:b7:1c:aa:99:c5:aa:51:ca:91:11:52: 72:6c:7a:5d:66:af:1e:e0:4e:b4:99:b1:21:d8:84: 63:83:d9:31:f7:99:6b:a6:9b:c9:be:4c:83:71:e3: 5f:44:2e:a2:db:2f:74:d4:76:03:00:16:fc:42:6b: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:35:86:6F:A3:28:5A:67:F8:9D:C2:30:EE:A0:EF:06:9B:05:DA:C5 X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ea:c0:93:28:d0:d8:66:06:36:e2:e2:e3:39:6e:43:6e:89: 00:ad:b0:c6:5d:7d:65:bf:47:ed:87:9f:f7:e4:91:e2:0e:31: 45:18:b6:28:50:b9:74:a7:76:7a:ad:bc:cd:c1:96:bb:52:0d: 63:09:7d:9d:33:53:0f:0a:03:5d:63:41:a7:59:b9:c6:62:af: d0:9d:f5:86:92:9d:03:f5:f9:bd:28:73:95:77:0d:ca:1d:e9: 52:94:22:3d:2e:05:71:08:24:8e:63:51:7e:1e:0f:46:7c:34: bd:c6:98:d6:04:b8:21:fd:4c:32:5a:de:04:75:4f:49:a3:17: dc:f2:26:8f:34:b8:b0:c0:b3:c4:b9:65:c2:31:88:85:2a:d5: f2:d3:82:f1:57:dc:66:4b:bf:4b:0e:12:10:ca:f2:e2:ef:fd: b5:8a:a9:02:a3:19:2e:c5:22:1f:31:5c:73:bd:8b:78:b2:9c: fe:1a:25:f6:67:b9:f8:87:ad:68:0f:21:03:ab:5d:23:68:5e: 48:e7:fd:86:35:7b:ca:aa:64:e4:ef:80:a4:5e:cc:26:26:f8: 1e:b7:c4:e1:f2:05:a4:93:23:5e:da:35:58:62:75:b0:c2:70: 4d:4f:02:67:6d:e1:5e:b9:c6:81:d8:fd:2e:78:94:80:8a:4e: d7:d5:99:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwWZitT777RxUe/o/UozGcBK2Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjA5MjQxMTA5MzBaFw0yNjA5MjUxNDE0MzBaMDMxMTAvBgNV BAMTKDYzMzU4NjZGQTMyODVBNjdGODlEQzIzMEVFQTBFRjA2OUIwNURBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIgkxyJH+EXZlXjJ91H5dHvew QK5UJ6YfOW683GZ5caRKJ91gWfulT4WoxUEaBYgP88NUJKDO08Y3OUlAFmR05aXm 0uh64DjxSUVQRGSMc9ngKEK1FKR1IQKZGBN8IWYtAfgg4+xHqEmxouDdKfG7nPF9 zf3wTsAvX/qDIadV+EjTJE3aDVHbiBrnT/h9M7JXVFio31OZvM2d16phRlTWRGuT 1IfJl3iXcAEpIlmn0UCAN9J2nIgUUdcdoVHtz+9W5o/Sf8m3HKqZxapRypERUnJs el1mrx7gTrSZsSHYhGOD2TH3mWumm8m+TINx419ELqLbL3TUdgMAFvxCa6rDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzWGb6MoWmf4ncIw7qDvBpsF2sUwHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvqwJMo0NhmBjbi4uM5bkNuiQCtsMZdfWW/ R+2Hn/fkkeIOMUUYtihQuXSndnqtvM3BlrtSDWMJfZ0zUw8KA11jQadZucZir9Cd 9YaSnQP1+b0oc5V3Dcod6VKUIj0uBXEIJI5jUX4eD0Z8NL3GmNYEuCH9TDJa3gR1 T0mjF9zyJo80uLDAs8S5ZcIxiIUq1fLTgvFX3GZLv0sOEhDK8uLv/bWKqQKjGS7F Ih8xXHO9i3iynP4aJfZnufiHrWgPIQOrXSNoXkjn/YY1e8qqZOTvgKRezCYm+B63 xOHyBaSTI17aNVhidbDCcE1PAmdt4V65xoHY/S54lICKTtfVmcY= -----END CERTIFICATE-----Generated at Fri Sep 25 08:48:35 2026 by rpki-client