$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft (raw, json) Hash identifier: 2uJ1hW8iFgL8mm+BAnGbnzZjdFqjenbva8SWKhcMPDY= Subject key identifier: CC:12:96:80:80:1F:7A:22:9D:C0:76:AE:F5:4C:CB:4B:53:A3:47:BF Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Certificate serial: 3F766BB6363BB61CEB3B98EEF86E5C1D0CF161E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 15:33:57 +0000 Manifest this update: Thu 23 Jul 2026 15:28:57 +0000 Manifest next update: Fri 24 Jul 2026 18:40:57 +0000 Files and hashes: 1: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=) 2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=) 3: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl (hash: sJ8wHpVo9Xq9vVPzPKYP3iaqPDooXHDbnvf5AgQzeU0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:76:6b:b6:36:3b:b6:1c:eb:3b:98:ee:f8:6e:5c:1d:0c:f1:61:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Validity Not Before: Jul 23 15:28:57 2026 GMT Not After : Jul 24 18:40:57 2026 GMT Subject: CN=CC129680801F7A229DC076AEF54CCB4B53A347BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:6d:f6:ca:db:60:35:44:ea:63:7f:a6:2b: 0e:dc:9d:14:13:d3:9e:81:f1:ee:d6:f1:c8:04:d4: b0:0c:d5:11:35:c0:4b:58:fa:56:8e:c5:ff:42:3a: 61:29:c4:11:e9:1b:33:f9:38:b8:0c:dc:ae:77:e1: f7:f5:f5:9d:08:a0:26:6c:1b:b5:28:ee:0c:35:bd: 6d:4e:1c:56:82:6d:c5:11:96:f3:ff:90:cc:83:09: 47:ad:f3:72:32:90:7c:10:b0:24:a7:5c:5d:a1:33: aa:90:ec:fc:57:b7:49:45:a9:73:dc:c8:4f:fb:a8: 46:20:7a:db:4b:3f:ad:21:71:f1:ab:9d:76:c1:3e: 0e:c6:7c:66:91:83:ba:85:a1:0b:6d:e9:92:e7:b6: 73:bd:d9:b8:44:ff:47:f3:14:fc:0c:24:80:0d:73: 13:48:d6:05:dd:3a:5d:6c:2a:57:ee:57:9b:b0:a1: 9f:85:f1:2e:aa:1d:e4:a4:c9:68:e1:11:47:d0:00: 57:fb:cc:5c:ab:45:20:dd:89:14:1d:6c:f2:57:f6: 79:6d:bd:c5:16:52:f2:62:46:d1:04:11:31:8d:63: 29:62:22:71:79:fa:57:5e:bf:33:2c:2a:58:c0:7f: 79:ec:b4:c4:10:46:c1:14:83:64:cf:e8:9b:fb:3e: 23:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:96:80:80:1F:7A:22:9D:C0:76:AE:F5:4C:CB:4B:53:A3:47:BF X509v3 Authority Key Identifier: keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:90:ea:e5:d4:30:21:c7:5b:7b:56:a4:75:dd:2e:74:a7:39: 8d:58:77:1e:a0:b6:ff:ee:9a:6e:70:2a:41:65:01:7c:c3:ab: e7:a8:12:b0:83:7a:61:21:c5:4f:e2:b4:4c:99:9c:82:f6:69: 1e:cc:bb:91:de:9a:a6:0a:ad:fc:ca:d7:3e:96:3a:d8:1f:a7: 06:29:e0:8c:6b:d0:34:7f:05:cb:9d:e4:02:4f:4a:47:0e:af: 05:e7:81:64:82:a9:dc:a5:aa:7a:9d:e3:8f:cc:60:54:59:9b: ad:50:ca:24:9f:c4:aa:2c:97:9a:bb:c4:e0:5d:d5:12:cd:a1: ed:63:df:5b:d5:67:e7:a8:77:5f:e3:eb:eb:bb:db:42:e8:6f: d9:29:79:7c:b8:5c:fe:ee:ef:1e:ca:be:de:49:dd:42:87:d5: 63:ef:d0:cd:30:db:70:61:0f:71:7d:8a:b9:e2:f3:cc:f3:a0: 2c:54:ec:4f:c2:24:ad:83:ea:73:f7:a7:ed:a7:fa:5a:fe:87: 89:03:51:de:81:43:bd:2c:a3:be:7c:b5:da:a1:6b:01:76:58: 50:4b:cc:4d:28:bd:a9:83:16:69:78:6f:40:fc:88:30:ae:fa: 95:3e:f5:61:79:a6:1b:df:6e:80:bf:b9:c9:ef:b9:0c:54:2d: d5:0a:0b:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3ZrtjY7thzrO5ju+G5cHQzxYekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYyQkYy ODBGM0JBODAeFw0yNjA3MjMxNTI4NTdaFw0yNjA3MjQxODQwNTdaMDMxMTAvBgNV BAMTKENDMTI5NjgwODAxRjdBMjI5REMwNzZBRUY1NENDQjRCNTNBMzQ3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgm32yttgNUTqY3+mKw7cnRQT 056B8e7W8cgE1LAM1RE1wEtY+laOxf9COmEpxBHpGzP5OLgM3K534ff19Z0IoCZs G7Uo7gw1vW1OHFaCbcURlvP/kMyDCUet83IykHwQsCSnXF2hM6qQ7PxXt0lFqXPc yE/7qEYgettLP60hcfGrnXbBPg7GfGaRg7qFoQtt6ZLntnO92bhE/0fzFPwMJIAN cxNI1gXdOl1sKlfuV5uwoZ+F8S6qHeSkyWjhEUfQAFf7zFyrRSDdiRQdbPJX9nlt vcUWUvJiRtEEETGNYyliInF5+ldevzMsKljAf3nstMQQRsEUg2TP6Jv7PiO/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzBKWgIAfeiKdwHau9UzLS1OjR78wHwYDVR0j BBgwFoAUHkBK9s/wheIL7kx74qXyvygPO6gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwMDIyOGYtNmUyNS00Yzk2LTljZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZD RkYwODVFMjBCRUU0QzdCRTJBNUYyQkYyODBGM0JBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTQwNEFGNkNGRjA4NUUyMEJFRTRDN0JFMkE1RjJCRjI4MEYz QkE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYy QkYyODBGM0JBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGQ6uXUMCHHW3tWpHXdLnSnOY1Ydx6gtv/u mm5wKkFlAXzDq+eoErCDemEhxU/itEyZnIL2aR7Mu5HemqYKrfzK1z6WOtgfpwYp 4Ixr0DR/Bcud5AJPSkcOrwXngWSCqdylqnqd44/MYFRZm61QyiSfxKosl5q7xOBd 1RLNoe1j31vVZ+eod1/j6+u720Lob9kpeXy4XP7u7x7Kvt5J3UKH1WPv0M0w23Bh D3F9irni88zzoCxU7E/CJK2D6nP3p+2n+lr+h4kDUd6BQ70so758tdqhawF2WFBL zE0ovamDFml4b0D8iDCu+pU+9WF5phvfboC/ucnvuQxULdUKC6k= -----END CERTIFICATE-----Generated at Fri Jul 24 01:27:18 2026 by rpki-client