$ rpki-client -vvf rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft File: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft (raw, json) Hash identifier: tj96A8jAlo/a+KiAeK/sWD1bXcqim498e/v5eBuiQfg= Subject key identifier: DC:03:63:F2:4B:96:17:7C:ED:5B:B3:06:6E:58:22:92:F5:1B:5B:A7 Authority key identifier: 1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 Certificate issuer: /CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Certificate serial: 438FBE972D9F836CE9702AE2FA590F13C95F84B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:32:23 +0000 Manifest this update: Thu 23 Jul 2026 22:27:23 +0000 Manifest next update: Fri 24 Jul 2026 22:46:23 +0000 Files and hashes: 1: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl (hash: +5hvTntquQblVfhyxOzX3PvRVCSpSZSocJuRNC38sEA=) 2: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: u/1jDxUqM/7ncceawRPeB2DW2rEBNRQs2Nl3FA3lKkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8f:be:97:2d:9f:83:6c:e9:70:2a:e2:fa:59:0f:13:c9:5f:84:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Validity Not Before: Jul 23 22:27:23 2026 GMT Not After : Jul 24 22:46:23 2026 GMT Subject: CN=DC0363F24B96177CED5BB3066E582292F51B5BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:4a:91:40:8e:17:29:42:77:da:0c:98:28: 0f:3a:54:7b:6a:bc:48:84:30:2d:61:1d:74:0f:d3: da:e4:d9:bc:30:7e:0c:db:60:7b:54:49:b6:d3:da: c0:c5:63:06:26:58:02:e6:06:d7:52:27:2d:bf:3a: 2e:db:4d:cd:75:25:04:2d:6d:37:33:b1:46:ab:ea: 3b:d8:3d:cf:72:06:11:13:cb:e9:6e:d3:1a:f7:5d: a9:0e:24:39:3c:15:0c:22:3a:03:b7:74:3e:a0:f5: 6e:e6:a5:c7:9c:3b:3c:62:90:38:ce:a3:73:46:8d: a7:07:2e:81:8c:6c:e5:de:d1:04:34:7c:6a:45:8b: a7:f6:dd:cf:7e:ca:dc:02:8f:f1:76:76:85:6d:63: bf:f9:4c:eb:03:3a:0b:e6:c0:8f:20:d1:16:4c:2d: 1f:5f:a8:d3:8a:ce:92:36:a6:ca:9c:38:9d:67:c0: cb:7f:b4:c7:a7:cc:06:1a:b1:e2:72:8f:02:ae:7d: 36:88:3b:3b:2c:00:bb:06:24:31:74:35:0e:04:54: 3c:49:71:21:3a:0b:1f:9f:4f:58:86:9e:90:70:63: ab:d5:3d:eb:17:47:1c:0b:35:56:2b:da:00:cd:ef: b2:6d:4a:99:97:e8:69:e0:43:25:7a:50:95:ba:54: 4a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:03:63:F2:4B:96:17:7C:ED:5B:B3:06:6E:58:22:92:F5:1B:5B:A7 X509v3 Authority Key Identifier: keyid:1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7a:10:df:2b:3a:77:3f:e9:42:21:d1:30:46:26:a7:0d:a3: f4:9d:7c:e7:3a:f2:0a:54:2d:3a:2d:8a:35:67:6e:3c:3c:83: dc:e0:3c:5a:00:1f:cf:a3:e3:93:db:b7:e2:bc:76:6d:42:1f: e2:0d:54:6e:9a:1b:27:10:a1:4e:b2:3d:a0:c6:32:56:de:45: c2:ed:96:40:61:b5:f5:c0:e5:30:2d:3b:b2:f3:8f:a7:7e:f3: 99:0c:f7:5d:47:79:5a:ae:31:27:81:4c:43:a1:7e:ed:88:a7: f9:85:64:e2:87:e7:77:c2:52:7d:35:81:5a:42:7f:3e:67:a4: 86:92:f6:b9:ed:e8:97:67:cd:f6:74:13:82:f2:2d:83:6b:5e: ad:6c:58:6e:96:38:a4:fe:18:6e:18:c5:d1:6e:a2:89:99:3b: d9:cd:2c:dd:6d:fd:74:ea:a3:1f:11:a2:e7:59:d9:1d:34:d6: 99:fe:94:54:f2:fb:bf:17:cf:61:c0:f5:44:56:65:a3:60:6d: 12:e9:3b:75:b2:94:cc:3c:a4:e0:df:af:5f:be:48:bd:c8:40: 87:ad:ee:53:32:bf:b4:fb:f0:75:52:02:3d:74:ef:35:5b:3b: 08:4e:9d:a5:23:6a:58:31:8a:06:36:69:30:5f:b5:8e:c7:61: 5f:ce:cc:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4++ly2fg2zpcCri+lkPE8lfhLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1 OTJDOUFGMDAeFw0yNjA3MjMyMjI3MjNaFw0yNjA3MjQyMjQ2MjNaMDMxMTAvBgNV BAMTKERDMDM2M0YyNEI5NjE3N0NFRDVCQjMwNjZFNTgyMjkyRjUxQjVCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTREqRQI4XKUJ32gyYKA86VHtq vEiEMC1hHXQP09rk2bwwfgzbYHtUSbbT2sDFYwYmWALmBtdSJy2/Oi7bTc11JQQt bTczsUar6jvYPc9yBhETy+lu0xr3XakOJDk8FQwiOgO3dD6g9W7mpcecOzxikDjO o3NGjacHLoGMbOXe0QQ0fGpFi6f23c9+ytwCj/F2doVtY7/5TOsDOgvmwI8g0RZM LR9fqNOKzpI2psqcOJ1nwMt/tMenzAYaseJyjwKufTaIOzssALsGJDF0NQ4EVDxJ cSE6Cx+fT1iGnpBwY6vVPesXRxwLNVYr2gDN77JtSpmX6GngQyV6UJW6VEqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ANj8kuWF3ztW7MGblgikvUbW6cwHwYDVR0j BBgwFoAUHE/UJzGjBp6xHrsaHQjW5FksmvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAxZGJhZmMtYzBjYy00OTZhLWI1ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0Mjcz MUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1OTJDOUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzRGRDQyNzMxQTMwNjlFQjExRUJCMUExRDA4RDZFNDU5MkM5 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2 RTQ1OTJDOUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGl6EN8rOnc/6UIh0TBGJqcNo/SdfOc68gpU LTotijVnbjw8g9zgPFoAH8+j45Pbt+K8dm1CH+INVG6aGycQoU6yPaDGMlbeRcLt lkBhtfXA5TAtO7Lzj6d+85kM911HeVquMSeBTEOhfu2Ip/mFZOKH53fCUn01gVpC fz5npIaS9rnt6JdnzfZ0E4LyLYNrXq1sWG6WOKT+GG4YxdFuoomZO9nNLN1t/XTq ox8RoudZ2R001pn+lFTy+78Xz2HA9URWZaNgbRLpO3WylMw8pODfr1++SL3IQIet 7lMyv7T78HVSAj107zVbOwhOnaUjalgxigY2aTBftY7HYV/OzHs= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:03 2026 by rpki-client