$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: AfXV2uPivpfQTlqwBx4m0rv00s7pocnfpXlB2efogBE= Subject key identifier: DE:67:AC:24:33:4B:FE:7F:08:2F:22:8E:2E:0C:B5:AE:05:47:5F:29 Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 57ED483DB064568E08B9E87FDF468761D94A79BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 10:08:41 +0000 Manifest this update: Wed 23 Sep 2026 10:03:41 +0000 Manifest next update: Thu 24 Sep 2026 10:49:41 +0000 Files and hashes: 1: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) 2: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: jlUCco6Sz/VKQnmhFegmcsOViHfB4EhzzQZDd98FijM=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ed:48:3d:b0:64:56:8e:08:b9:e8:7f:df:46:87:61:d9:4a:79:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: Sep 23 10:03:41 2026 GMT Not After : Sep 24 10:49:41 2026 GMT Subject: CN=DE67AC24334BFE7F082F228E2E0CB5AE05475F29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:ac:31:09:cc:b4:8a:37:f8:c5:7d:24:31: ba:60:23:ca:bb:dc:ed:79:8b:90:8c:26:98:8d:e4: 06:db:31:df:4f:bf:b5:ab:c5:9c:9c:84:01:04:1c: e9:82:24:6c:49:a8:4e:bf:ac:24:9c:96:b4:1e:75: 99:69:be:54:9f:09:30:4c:d4:88:d4:0e:68:c6:69: ec:10:71:01:d9:17:a9:79:aa:81:23:9f:b9:1e:fc: 62:27:b7:59:0f:eb:f6:fe:a0:87:c3:2c:b0:68:f4: 34:03:17:32:c0:61:0c:28:53:28:a9:87:fa:01:a6: 91:d5:92:ee:a0:29:0a:49:47:54:a5:d7:5b:48:92: b3:f1:6e:b3:43:98:ed:16:ab:cb:d5:72:c0:6e:06: c7:ef:30:41:40:54:c0:02:20:67:a8:6b:30:7c:40: 50:df:a9:54:58:88:68:f9:75:49:09:90:c2:d8:91: a0:3d:bc:e2:4c:43:18:95:06:c1:5e:c2:ac:f1:c8: 30:c0:d8:71:51:b0:03:95:a6:b6:98:6c:bc:17:9e: 64:a4:fb:29:99:8c:d5:90:c3:f5:1a:66:2b:6e:7c: 6e:d2:ec:36:a2:b9:e9:8b:b2:fd:c1:b2:4f:30:c6: de:70:88:a1:bb:38:01:e6:52:5f:e5:62:f0:5e:58: ae:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:67:AC:24:33:4B:FE:7F:08:2F:22:8E:2E:0C:B5:AE:05:47:5F:29 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5e:5a:f8:6f:b4:3d:17:8c:73:5a:65:f6:f9:88:13:f7:b9: c3:13:3e:94:d0:cf:4e:83:34:86:bd:c9:49:3a:f5:c3:7b:54: bd:da:48:0c:92:20:10:85:8f:10:2c:77:16:2f:ea:f6:45:f8: 93:25:3c:a6:4c:76:b8:43:c7:14:27:04:2c:c2:6a:48:e8:0b: 2b:f0:5d:cc:91:91:57:04:37:07:56:11:ee:0b:b9:18:de:94: 04:ca:4c:e5:e6:23:36:2c:d3:45:66:db:ee:f7:61:d9:70:74: 4c:a7:8d:03:6a:b3:58:e2:4c:ef:00:4f:0f:ba:67:f3:86:dc: 41:fa:27:d0:a2:b3:10:14:ae:a0:12:be:fe:4d:37:bf:d3:47: 62:eb:de:10:84:75:ff:75:6a:c3:5a:4f:8f:ab:3e:99:6a:2a: c1:6f:c3:a9:de:2f:60:fb:a1:aa:4c:9e:32:87:67:c0:e5:77: b9:aa:9a:a3:2a:63:1f:63:6c:37:37:e1:87:cc:04:de:75:88: 1b:e2:64:50:fe:2c:fd:e8:49:38:ff:1f:fe:3e:3b:4b:b7:18: 89:7e:10:83:8b:2c:1d:73:24:f3:28:16:81:97:f8:b9:1d:9a: da:25:15:c5:01:b5:ad:c5:9e:6e:e4:62:e3:e1:4b:8f:08:2c: 30:de:30:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+1IPbBkVo4Iueh/30aHYdlKebwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjA5MjMxMDAzNDFaFw0yNjA5MjQxMDQ5NDFaMDMxMTAvBgNV BAMTKERFNjdBQzI0MzM0QkZFN0YwODJGMjI4RTJFMENCNUFFMDU0NzVGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPawxCcy0ijf4xX0kMbpgI8q7 3O15i5CMJpiN5AbbMd9Pv7WrxZychAEEHOmCJGxJqE6/rCSclrQedZlpvlSfCTBM 1IjUDmjGaewQcQHZF6l5qoEjn7ke/GInt1kP6/b+oIfDLLBo9DQDFzLAYQwoUyip h/oBppHVku6gKQpJR1Sl11tIkrPxbrNDmO0Wq8vVcsBuBsfvMEFAVMACIGeoazB8 QFDfqVRYiGj5dUkJkMLYkaA9vOJMQxiVBsFewqzxyDDA2HFRsAOVpraYbLwXnmSk +ymZjNWQw/UaZitufG7S7DaiuemLsv3Bsk8wxt5wiKG7OAHmUl/lYvBeWK5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3mesJDNL/n8ILyKOLgy1rgVHXykwHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQw Rjg3OTNFQUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJeWvhvtD0XjHNaZfb5iBP3ucMTPpTQz06D NIa9yUk69cN7VL3aSAySIBCFjxAsdxYv6vZF+JMlPKZMdrhDxxQnBCzCakjoCyvw XcyRkVcENwdWEe4LuRjelATKTOXmIzYs00Vm2+73YdlwdEynjQNqs1jiTO8ATw+6 Z/OG3EH6J9CisxAUrqASvv5NN7/TR2Lr3hCEdf91asNaT4+rPplqKsFvw6neL2D7 oapMnjKHZ8Dld7mqmqMqYx9jbDc34YfMBN51iBviZFD+LP3oSTj/H/4+O0u3GIl+ EIOLLB1zJPMoFoGX+LkdmtolFcUBta3Fnm7kYuPhS48ILDDeMGc= -----END CERTIFICATE-----Generated at Wed Sep 23 21:03:32 2026 by rpki-client