$ rpki-client -vvf rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft File: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft (raw, json) Hash identifier: G/eZUTqc1xpS89n9vp2rZcwdzZeLLz75Q9lCI4tkmwg= Subject key identifier: 26:D0:90:ED:AC:43:21:FF:41:AF:A3:9D:DC:D6:B9:82:FE:1B:48:9C Authority key identifier: 1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 Certificate issuer: /CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Certificate serial: 09EAB0F989C254AFDB613A0AB0D567174DCDE8E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:52:52 +0000 Manifest this update: Tue 12 May 2026 17:47:52 +0000 Manifest next update: Wed 13 May 2026 18:58:52 +0000 Files and hashes: 1: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl (hash: XvHrQrKSQhO+0noy4gQVrI8VNFRFojHU60J8k2LJuqE=) 2: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: u/1jDxUqM/7ncceawRPeB2DW2rEBNRQs2Nl3FA3lKkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ea:b0:f9:89:c2:54:af:db:61:3a:0a:b0:d5:67:17:4d:cd:e8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Validity Not Before: May 12 17:47:52 2026 GMT Not After : May 13 18:58:52 2026 GMT Subject: CN=26D090EDAC4321FF41AFA39DDCD6B982FE1B489C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7c:e0:e0:07:ac:04:4c:63:f6:9f:cd:47:b5: 05:0d:1e:f2:16:5e:a6:f8:4a:06:ed:d8:30:97:4f: 35:ec:e3:eb:fc:c4:99:bb:e5:24:69:87:36:c9:b4: 23:0b:ec:76:1c:c7:6b:cb:59:7d:24:e0:fe:8e:8a: e6:ce:01:7b:bc:e8:57:29:f3:a5:94:ff:53:0f:20: 0a:94:52:ba:87:ab:79:83:7d:c9:56:8c:a0:c4:3c: 28:b7:83:7d:50:95:fe:eb:4d:4f:25:54:88:4b:48: d8:28:f5:2e:29:87:d8:fc:92:b3:a2:10:03:b5:e8: cf:cc:3d:33:93:b8:4f:99:0b:30:2f:08:41:6e:6a: 46:ad:a9:aa:0b:ea:c9:c7:60:b6:b8:63:dc:99:f7: 31:da:cb:81:bc:67:7e:d4:1d:61:8d:b1:fc:d4:73: 18:24:e7:a9:27:10:26:da:59:40:a9:37:61:d6:a6: 73:65:c4:a4:ac:c1:ab:3d:f0:3c:04:30:2b:c9:0a: ea:02:4f:01:5e:9a:b3:d6:2e:0f:57:77:ba:14:3e: ac:cd:b6:cd:a8:bf:68:c8:b3:31:1c:4a:3c:6e:7e: 29:99:f5:b9:90:50:1a:4d:bc:b3:00:88:0a:42:bc: 7e:dc:a8:3e:bb:c5:7f:ea:38:d8:9c:ab:8c:ca:a5: 37:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D0:90:ED:AC:43:21:FF:41:AF:A3:9D:DC:D6:B9:82:FE:1B:48:9C X509v3 Authority Key Identifier: keyid:1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:64:43:65:d9:81:1e:01:79:89:db:55:34:14:7a:82:ff:46: 60:4d:c0:93:fb:38:31:ee:85:5a:8e:30:3b:a5:40:6e:56:4c: f4:e5:45:3a:f1:32:93:6a:9a:df:08:46:2f:bc:0f:89:23:bd: 9b:10:dc:07:6b:d0:2c:0a:a7:9d:d6:a0:8d:eb:37:2c:5a:40: 57:ba:ef:15:38:05:7a:b8:d6:8f:0c:a5:24:4d:08:be:12:ab: ba:3c:62:53:1e:25:bf:54:29:85:58:ce:85:e2:2c:35:3b:07: 68:22:f1:c9:88:2b:ea:cf:59:bf:8d:07:0e:8e:8c:34:e0:28: 3b:b3:fa:06:68:85:5c:f6:19:31:b7:ea:1d:d5:91:d9:ab:46: 7c:55:96:0f:45:0e:2e:7e:5e:ff:7e:f7:35:43:fc:f4:64:1c: 0f:b1:cf:c8:e9:8f:91:1b:33:c7:15:af:c9:17:41:93:43:1a: ae:b2:ee:d0:be:60:fc:e7:d2:76:9f:34:b9:c5:cd:98:46:49: a8:49:51:1e:4e:73:58:b6:81:40:cd:78:8e:a8:6d:1e:24:d2: 0c:a3:8f:7a:44:6a:5f:09:51:25:72:37:04:0a:dc:a8:f4:2c: 56:0b:ed:90:b2:c1:8c:86:5e:c0:f1:fe:bf:9a:a3:5e:a9:08: e6:c2:ed:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeqw+YnCVK/bYToKsNVnF03N6OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1 OTJDOUFGMDAeFw0yNjA1MTIxNzQ3NTJaFw0yNjA1MTMxODU4NTJaMDMxMTAvBgNV BAMTKDI2RDA5MEVEQUM0MzIxRkY0MUFGQTM5RERDRDZCOTgyRkUxQjQ4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqfODgB6wETGP2n81HtQUNHvIW Xqb4Sgbt2DCXTzXs4+v8xJm75SRphzbJtCML7HYcx2vLWX0k4P6OiubOAXu86Fcp 86WU/1MPIAqUUrqHq3mDfclWjKDEPCi3g31Qlf7rTU8lVIhLSNgo9S4ph9j8krOi EAO16M/MPTOTuE+ZCzAvCEFuakatqaoL6snHYLa4Y9yZ9zHay4G8Z37UHWGNsfzU cxgk56knECbaWUCpN2HWpnNlxKSswas98DwEMCvJCuoCTwFemrPWLg9Xd7oUPqzN ts2ov2jIszEcSjxufimZ9bmQUBpNvLMAiApCvH7cqD67xX/qONicq4zKpTefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJtCQ7axDIf9Br6Od3Na5gv4bSJwwHwYDVR0j BBgwFoAUHE/UJzGjBp6xHrsaHQjW5FksmvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAxZGJhZmMtYzBjYy00OTZhLWI1ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0Mjcz MUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1OTJDOUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzRGRDQyNzMxQTMwNjlFQjExRUJCMUExRDA4RDZFNDU5MkM5 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2 RTQ1OTJDOUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFkQ2XZgR4BeYnbVTQUeoL/RmBNwJP7ODHu hVqOMDulQG5WTPTlRTrxMpNqmt8IRi+8D4kjvZsQ3Adr0CwKp53WoI3rNyxaQFe6 7xU4BXq41o8MpSRNCL4Sq7o8YlMeJb9UKYVYzoXiLDU7B2gi8cmIK+rPWb+NBw6O jDTgKDuz+gZohVz2GTG36h3VkdmrRnxVlg9FDi5+Xv9+9zVD/PRkHA+xz8jpj5Eb M8cVr8kXQZNDGq6y7tC+YPzn0nafNLnFzZhGSahJUR5Oc1i2gUDNeI6obR4k0gyj j3pEal8JUSVyNwQK3Kj0LFYL7ZCywYyGXsDx/r+ao16pCObC7bA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:33 2026 by rpki-client