$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft File: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft (raw, json) Hash identifier: sz7r1rLCRfvVhggqEGVvMlOQo9yoK/klU+nqXWKi7ok= Subject key identifier: B2:E6:EC:BA:4B:9E:EF:AC:E1:20:53:CE:EB:F3:3A:AC:BE:DF:7D:6A Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 Certificate issuer: /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Certificate serial: 3AA4F95AE38189DE889E010F94B0E8A9D5A0B0E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:21:04 +0000 Manifest this update: Fri 24 Jul 2026 05:16:04 +0000 Manifest next update: Sat 25 Jul 2026 06:03:04 +0000 Files and hashes: 1: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=) 2: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: 4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=) 3: 1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl (hash: d7a06I4J/WHqSHf4r8QEcSbPXR8U4bWYWlQD8MYJTCs=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: +5oV7AhpEFOH6e1i1bGL47OXx5RfOxdblWKW7OB91Hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a4:f9:5a:e3:81:89:de:88:9e:01:0f:94:b0:e8:a9:d5:a0:b0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1 Validity Not Before: Jul 24 05:16:04 2026 GMT Not After : Jul 25 06:03:04 2026 GMT Subject: CN=B2E6ECBA4B9EEFACE12053CEEBF33AACBEDF7D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:39:dc:16:ba:aa:ef:56:d6:91:b7:7b:21:09: 90:23:31:65:c6:72:1c:db:24:a4:d7:fc:ed:3a:32: 3b:4a:b6:b6:be:e1:9e:20:84:7b:e6:3a:d1:f8:9f: 9f:da:66:ed:89:19:15:79:88:c2:42:84:24:93:03: 38:c8:ba:5c:1f:7d:c7:fc:90:ce:3a:e0:0e:06:81: 87:92:2e:1e:17:ba:fd:e0:1a:26:41:b2:d5:d7:b8: c7:33:26:d9:70:04:d6:69:0c:a0:15:82:d4:a4:22: 39:08:02:95:ac:83:a6:b0:39:ee:25:d1:83:d8:1d: 0d:12:68:b6:8e:7b:61:7a:f8:4f:92:de:68:65:0d: 7d:5e:ab:dd:64:5e:eb:0d:e9:37:14:b4:b8:75:41: 46:b0:9e:9b:53:2b:36:7c:31:81:e8:74:17:a5:ec: 04:aa:db:69:6a:f5:f7:7d:ff:fe:10:bc:d6:0a:a1: 62:02:52:ab:45:e4:54:ce:2a:0c:22:50:6e:87:db: ed:f1:38:63:dc:c7:38:cb:ff:53:76:be:56:5b:88: ac:1e:92:b0:ba:d2:50:bf:49:a6:0c:d5:ed:f1:20: 76:ff:8f:12:05:ce:bd:94:72:f4:a0:d5:3b:21:ce: 7f:30:6e:8f:fb:42:0a:13:16:66:65:da:f0:05:fb: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:EC:BA:4B:9E:EF:AC:E1:20:53:CE:EB:F3:3A:AC:BE:DF:7D:6A X509v3 Authority Key Identifier: keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f2:fc:bc:fb:f9:c6:39:ad:1a:58:d9:01:7b:b2:40:4f:a4: 3c:08:6c:86:0b:a1:9b:34:3d:13:94:36:62:53:1c:6f:7a:9b: 2b:2a:b6:87:02:a4:7e:d1:3c:b4:e1:23:23:d5:39:ff:52:00: 71:88:e6:27:b1:14:f2:d5:54:0b:8d:2c:4a:40:9c:84:81:f5: 58:38:7b:9d:6a:a5:da:c3:1d:5c:10:19:bf:60:d1:eb:0b:55: 7d:4e:c8:d1:16:8c:e3:f1:72:3f:0e:7a:58:00:92:87:3a:df: 70:8e:3e:16:2a:74:8a:32:e6:80:30:39:8e:c6:56:05:6c:10: c6:17:83:60:a2:cf:af:d4:f0:86:5a:93:05:46:be:2c:2c:fc: 9c:ce:6e:78:7e:37:bd:1b:75:a3:6b:41:f4:76:a0:5c:f3:15: cf:60:c5:43:df:d7:cc:a2:50:8f:0d:26:3b:ac:73:4d:2b:ea: 82:2f:b8:3c:e2:a4:2e:71:68:24:de:64:3c:f3:9e:82:b4:ef: 7a:cf:9a:e5:57:6b:06:2d:b4:78:76:20:cd:e1:de:1c:91:95: d0:61:1f:38:5f:ea:00:17:e8:06:0d:23:40:a8:a5:bb:51:e1: 95:e2:51:5d:9b:60:22:ad:0c:b4:09:c3:a9:6f:46:72:84:05: c1:c7:b9:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqT5WuOBid6IngEPlLDoqdWgsOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4 N0I4RjZDMTAeFw0yNjA3MjQwNTE2MDRaFw0yNjA3MjUwNjAzMDRaMDMxMTAvBgNV BAMTKEIyRTZFQ0JBNEI5RUVGQUNFMTIwNTNDRUVCRjMzQUFDQkVERjdENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtOdwWuqrvVtaRt3shCZAjMWXG chzbJKTX/O06MjtKtra+4Z4ghHvmOtH4n5/aZu2JGRV5iMJChCSTAzjIulwffcf8 kM464A4GgYeSLh4Xuv3gGiZBstXXuMczJtlwBNZpDKAVgtSkIjkIApWsg6awOe4l 0YPYHQ0SaLaOe2F6+E+S3mhlDX1eq91kXusN6TcUtLh1QUawnptTKzZ8MYHodBel 7ASq22lq9fd9//4QvNYKoWICUqtF5FTOKgwiUG6H2+3xOGPcxzjL/1N2vlZbiKwe krC60lC/SaYM1e3xIHb/jxIFzr2UcvSg1Tshzn8wbo/7QgoTFmZl2vAF+3HNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsubsukue76zhIFPO6/M6rL7ffWowHwYDVR0j BBgwFoAUG56fI1M9QQmdDFzRcMK1Goe49sEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNmM2Y4YzgtMDQwNi00YjM4LWE3YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1 MzNENDEwOTlEMEM1Q0QxNzBDMkI1MUE4N0I4RjZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjlFOUYyMzUzM0Q0MTA5OUQwQzVDRDE3MEMyQjUxQTg3QjhG NkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvMUI5RTlGMjM1MzNENDEwOTlEMEM1Q0QxNzBDMkI1 MUE4N0I4RjZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDy/Lz7+cY5rRpY2QF7skBPpDwIbIYLoZs0 PROUNmJTHG96mysqtocCpH7RPLThIyPVOf9SAHGI5iexFPLVVAuNLEpAnISB9Vg4 e51qpdrDHVwQGb9g0esLVX1OyNEWjOPxcj8OelgAkoc633COPhYqdIoy5oAwOY7G VgVsEMYXg2Ciz6/U8IZakwVGviws/JzObnh+N70bdaNrQfR2oFzzFc9gxUPf18yi UI8NJjusc00r6oIvuDzipC5xaCTeZDzznoK073rPmuVXawYttHh2IM3h3hyRldBh Hzhf6gAX6AYNI0CopbtR4ZXiUV2bYCKtDLQJw6lvRnKEBcHHubw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:27 2026 by rpki-client