$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft File: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft (raw, json) Hash identifier: zCVEXkzhaLCdZGKl/XwGJ4ebfHuaKmcMkPWZzmWtfPs= Subject key identifier: 1F:8B:88:29:F2:1A:3A:E2:53:6C:E3:1D:66:BD:23:34:B2:53:FB:A5 Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 7F68AC0A168A9CAF4143EC5E17AE13F92304EC43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:00:07 +0000 Manifest this update: Tue 12 May 2026 21:55:07 +0000 Manifest next update: Wed 13 May 2026 22:27:07 +0000 Files and hashes: 1: 1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl (hash: XibaACcaBLV1X2Bni6BfCQLiq0/MtwM1jv0pxxKNNEQ=) 2: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=) 3: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:ac:0a:16:8a:9c:af:41:43:ec:5e:17:ae:13:f9:23:04:ec:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: May 12 21:55:07 2026 GMT Not After : May 13 22:27:07 2026 GMT Subject: CN=1F8B8829F21A3AE2536CE31D66BD2334B253FBA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6a:9e:9b:e5:b3:6a:84:48:c9:10:4d:0d:48: 5f:cd:4e:67:fd:48:4d:31:c9:74:46:36:f2:26:5b: a4:b5:4e:6f:61:0b:ae:59:c2:34:68:cb:c0:ac:c0: ab:bf:86:74:68:77:13:e3:ff:6b:4a:3b:6f:3b:0e: 83:e7:bb:06:a7:f3:79:d0:c7:52:5d:9e:b3:e1:87: 92:d1:89:7d:3f:aa:37:a3:6f:95:b4:3d:c8:4e:c5: 82:aa:ca:30:62:d3:ee:83:d1:2f:d7:e1:a4:27:d3: df:5c:35:5c:b5:18:f0:87:cf:32:24:22:86:46:14: 31:3f:85:a1:c4:8a:6b:58:ce:1f:d9:93:35:ac:c9: ef:fb:ea:14:ca:77:58:f3:ee:b1:2d:70:d3:17:49: 2f:bd:d7:a7:3e:1e:3f:c9:16:3a:82:eb:70:e5:96: 72:bd:1a:47:d9:dd:5e:96:66:a2:df:93:4c:28:d9: 1d:54:ce:ac:e5:cd:ac:e7:75:95:f6:31:b7:18:b5: 52:19:e8:62:f3:24:ad:32:ff:ae:18:7e:e6:31:62: 1e:53:55:4e:9d:4d:1d:a2:99:1d:81:41:1b:dc:33: ac:97:b1:d3:db:5d:1f:dd:8b:f3:24:b2:0e:27:01: 3b:cf:0e:d1:e7:6c:17:8b:93:f8:56:59:5b:dc:64: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8B:88:29:F2:1A:3A:E2:53:6C:E3:1D:66:BD:23:34:B2:53:FB:A5 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fb:15:31:b5:04:eb:77:26:1d:7f:31:5c:0a:4d:3a:b6:a3: d4:22:c0:b0:eb:44:68:12:8e:49:82:f7:9f:0c:04:47:05:47: 56:df:28:37:f0:4e:96:b1:b0:e9:39:f7:73:62:10:14:48:da: 88:ca:9c:be:74:a3:c5:f9:c8:50:c5:64:c4:20:5c:0c:e1:69: 83:3f:34:56:47:0d:a9:e5:49:74:0b:8b:f3:2b:e0:c7:65:21: 76:d0:98:4b:e4:dc:63:04:9c:69:c6:10:76:17:08:5e:ae:5b: f6:8b:68:b1:fa:10:f6:68:6f:36:d4:e6:6b:f6:91:0a:05:29: 05:61:94:fa:16:01:95:62:f1:fa:7f:ef:60:e3:45:45:a1:f8: 84:f1:00:1f:7f:b2:b8:e3:3f:6c:57:ef:07:26:09:cf:44:da: 25:1b:ad:8c:b6:08:e7:2d:df:62:1c:6d:a4:46:c6:3b:6f:f7: 81:e7:4f:22:fa:ef:6b:99:19:5a:1d:f8:ba:ab:ac:a6:95:72: c2:ae:5d:2e:64:a2:30:33:c2:40:bc:37:54:4e:50:0a:63:b1: a9:5a:6e:35:7d:e5:9b:28:cb:ed:6c:49:6b:93:11:9f:05:39: 97:eb:35:7a:ca:ee:ff:9c:0e:c6:90:0b:ba:2f:56:10:75:7c: de:05:0a:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2isChaKnK9BQ+xeF64T+SME7EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjA1MTIyMTU1MDdaFw0yNjA1MTMyMjI3MDdaMDMxMTAvBgNV BAMTKDFGOEI4ODI5RjIxQTNBRTI1MzZDRTMxRDY2QkQyMzM0QjI1M0ZCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzap6b5bNqhEjJEE0NSF/NTmf9 SE0xyXRGNvImW6S1Tm9hC65ZwjRoy8CswKu/hnRodxPj/2tKO287DoPnuwan83nQ x1JdnrPhh5LRiX0/qjejb5W0PchOxYKqyjBi0+6D0S/X4aQn099cNVy1GPCHzzIk IoZGFDE/haHEimtYzh/ZkzWsye/76hTKd1jz7rEtcNMXSS+916c+Hj/JFjqC63Dl lnK9GkfZ3V6WZqLfk0wo2R1UzqzlzazndZX2MbcYtVIZ6GLzJK0y/64YfuYxYh5T VU6dTR2imR2BQRvcM6yXsdPbXR/di/Mksg4nATvPDtHnbBeLk/hWWVvcZGJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4uIKfIaOuJTbOMdZr0jNLJT+6UwHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQw Rjg3OTNFQUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr7FTG1BOt3Jh1/MVwKTTq2o9QiwLDrRGgS jkmC958MBEcFR1bfKDfwTpaxsOk593NiEBRI2ojKnL50o8X5yFDFZMQgXAzhaYM/ NFZHDanlSXQLi/Mr4MdlIXbQmEvk3GMEnGnGEHYXCF6uW/aLaLH6EPZobzbU5mv2 kQoFKQVhlPoWAZVi8fp/72DjRUWh+ITxAB9/srjjP2xX7wcmCc9E2iUbrYy2COct 32IcbaRGxjtv94HnTyL672uZGVod+LqrrKaVcsKuXS5kojAzwkC8N1ROUApjsala bjV95Zsoy+1sSWuTEZ8FOZfrNXrK7v+cDsaQC7ovVhB1fN4FCu4= -----END CERTIFICATE-----Generated at Wed May 13 00:45:15 2026 by rpki-client