$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: kCxT6Y2R5heVlhwaBESkBknFjRHDEzJFRwX6oDCBOnE= Subject key identifier: EC:B9:40:CA:E7:65:D0:14:CD:C2:94:6D:57:59:1C:01:EF:42:9C:E2 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 28AAA2D50069508F5FE53A7A3E3754160F0C6398 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:33:32 +0000 Manifest this update: Tue 12 May 2026 13:28:32 +0000 Manifest next update: Wed 13 May 2026 14:43:32 +0000 Files and hashes: 1: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 2: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: XyLB5SyhzVZuQxIAzyUqgIwejNflHJmM2HlMi0Z5lGo=) 3: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) 4: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:a2:d5:00:69:50:8f:5f:e5:3a:7a:3e:37:54:16:0f:0c:63:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: May 12 13:28:32 2026 GMT Not After : May 13 14:43:32 2026 GMT Subject: CN=ECB940CAE765D014CDC2946D57591C01EF429CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:ce:0f:f4:d6:fd:e0:6c:6f:ac:9f:6b:b9: 11:fe:77:a8:5f:92:95:d7:1f:b4:f7:c9:96:d0:89: e2:2d:5b:f0:30:48:8d:ef:84:bc:10:4f:32:40:5e: 89:7f:f9:1e:84:d1:e5:38:dd:0a:64:12:8a:16:77: fb:c8:2a:b7:0f:6e:4b:d0:a6:5c:d3:0c:19:23:f1: 3d:b0:46:01:57:be:1b:7c:77:45:82:b6:96:bd:c9: f0:81:8e:11:42:7e:4c:0c:fc:75:c7:75:d2:6b:dd: 22:a1:c3:08:e1:fe:aa:1d:c1:ad:27:e1:22:25:db: ae:1c:48:0a:b8:04:18:7b:11:2d:0d:be:1b:1c:6c: be:c3:1f:24:e0:6c:18:44:e2:3a:42:00:cc:12:c8: 64:44:e9:cd:d3:0d:14:5a:9c:50:7f:d6:e1:8e:59: c7:14:ed:88:b8:79:ae:1a:a1:b4:df:ab:5a:45:5c: c4:cd:3a:bd:30:82:10:22:3e:1a:02:c4:f8:db:74: f7:db:69:2b:4a:d9:0c:0f:c8:5d:0d:8a:5f:51:f7: 33:39:0e:0a:65:34:f3:5a:de:67:53:3b:1c:a3:73: ff:9d:ef:7d:df:40:f7:5a:c4:2e:74:79:82:c2:5a: a3:ee:01:2f:d0:66:2f:52:83:0d:70:1e:f0:81:21: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B9:40:CA:E7:65:D0:14:CD:C2:94:6D:57:59:1C:01:EF:42:9C:E2 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b7:49:08:c5:6a:92:5b:41:a3:74:11:e1:b4:2f:12:3a:02: 86:7a:07:8c:80:02:ac:11:c1:d7:60:bf:25:2b:ca:86:82:d9: e9:d2:47:e7:0f:e9:ff:db:7c:4e:3e:9b:42:d0:70:dd:78:42: 36:7c:13:7f:d4:4d:a7:db:07:c4:f5:71:c6:a8:1d:b7:83:cf: a8:0e:66:c3:e1:f4:56:f2:56:02:85:31:6d:02:b5:0c:04:29: d4:15:45:63:7c:bd:e9:b4:a7:2d:bc:b8:92:34:99:94:1a:f5: a8:31:d6:62:38:6b:fc:9b:50:91:e8:8a:6a:00:5d:f4:67:61: eb:7d:22:79:30:4b:42:10:9b:81:e1:57:fe:7f:0e:40:59:3b: 02:9b:b0:dc:8d:26:b8:56:37:47:f1:a2:f9:4c:06:21:3f:25: 86:4b:64:e9:a1:1e:a4:f3:a7:27:4d:02:1b:3e:5a:3c:83:ec: e2:bd:5a:2d:67:2e:c4:67:fe:80:43:21:81:c4:7d:6f:24:d7: fa:80:d9:71:3c:da:b7:dd:40:a5:c6:6e:e9:b3:a1:38:af:c8: 61:1a:5f:2e:b8:9c:d6:dd:95:90:aa:83:56:b3:01:77:27:86: 94:97:d4:20:62:f4:98:97:e2:b3:f9:1a:7c:58:8e:54:de:39: 8c:83:c9:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKqi1QBpUI9f5Tp6PjdUFg8MY5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA1MTIxMzI4MzJaFw0yNjA1MTMxNDQzMzJaMDMxMTAvBgNV BAMTKEVDQjk0MENBRTc2NUQwMTRDREMyOTQ2RDU3NTkxQzAxRUY0MjlDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2M4P9Nb94GxvrJ9ruRH+d6hf kpXXH7T3yZbQieItW/AwSI3vhLwQTzJAXol/+R6E0eU43QpkEooWd/vIKrcPbkvQ plzTDBkj8T2wRgFXvht8d0WCtpa9yfCBjhFCfkwM/HXHddJr3SKhwwjh/qodwa0n 4SIl264cSAq4BBh7ES0NvhscbL7DHyTgbBhE4jpCAMwSyGRE6c3TDRRanFB/1uGO WccU7Yi4ea4aobTfq1pFXMTNOr0wghAiPhoCxPjbdPfbaStK2QwPyF0Nil9R9zM5 DgplNPNa3mdTOxyjc/+d733fQPdaxC50eYLCWqPuAS/QZi9Sgw1wHvCBIdQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7LlAyudl0BTNwpRtV1kcAe9CnOIwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC3SQjFapJbQaN0EeG0LxI6AoZ6B4yAAqwR wddgvyUryoaC2enSR+cP6f/bfE4+m0LQcN14QjZ8E3/UTafbB8T1ccaoHbeDz6gO ZsPh9FbyVgKFMW0CtQwEKdQVRWN8vem0py28uJI0mZQa9agx1mI4a/ybUJHoimoA XfRnYet9InkwS0IQm4HhV/5/DkBZOwKbsNyNJrhWN0fxovlMBiE/JYZLZOmhHqTz pydNAhs+WjyD7OK9Wi1nLsRn/oBDIYHEfW8k1/qA2XE82rfdQKXGbumzoTivyGEa Xy64nNbdlZCqg1azAXcnhpSX1CBi9JiX4rP5GnxYjlTeOYyDySU= -----END CERTIFICATE-----Generated at Tue May 12 22:13:29 2026 by rpki-client