$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft (raw, json) Hash identifier: noaZMo++0G52GT9a/ObTTPzf89wYdlmUKP/HOUG0odE= Subject key identifier: AD:4A:0D:7C:4A:6D:B7:42:9E:02:9A:26:03:08:CE:DF:B2:D5:75:30 Authority key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Certificate issuer: /CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Certificate serial: 3F5D643FDF7A283380537D29937D4DF3303A121A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:39:12 +0000 Manifest this update: Thu 23 Jul 2026 19:34:12 +0000 Manifest next update: Fri 24 Jul 2026 21:10:12 +0000 Files and hashes: 1: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: OElnQGjywIal+TKkNzEv0fSQqUAS10jHhU+dlj8V8js=) 2: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl (hash: gWOkh53IhJ3+Z1ZLrdR8NKAm2coNUuM1810CGMIssr4=) 3: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: PTvRAn9wK3M28ze+u03Jb/fa1WyNAdR/8RUqE31KU0c=) 4: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: YBDSZRtlV3p/ZiGWn3MdsKVwu9Di7caAjGBDoupE+PI=) 5: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: Nk1xhHZXV5Jyg1FLRsoF8BjuMkVYDKCRPbEV62yPbSM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5d:64:3f:df:7a:28:33:80:53:7d:29:93:7d:4d:f3:30:3a:12:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Validity Not Before: Jul 23 19:34:12 2026 GMT Not After : Jul 24 21:10:12 2026 GMT Subject: CN=AD4A0D7C4A6DB7429E029A260308CEDFB2D57530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:2e:9f:04:72:df:f6:e3:32:c7:1c:1d:b2: 90:3d:04:28:c1:fe:63:06:bb:3e:fd:5e:8d:bd:aa: 7d:fd:ef:8c:7a:ec:b7:1d:d0:a9:69:c9:b3:5b:94: 45:03:bf:e6:75:6f:48:da:05:46:b2:9f:b0:11:e3: e5:4c:c8:74:c8:d2:2c:ef:64:79:db:42:64:54:d1: 9e:63:73:7a:ba:3d:31:12:67:6e:28:55:2f:71:07: 0b:f6:6d:2b:a1:e0:f7:1a:db:3d:db:58:89:b7:6f: b5:43:2e:06:51:ae:08:78:80:0e:34:50:99:68:42: 7d:af:d1:f1:5f:c4:b2:f7:43:f7:75:cc:65:64:b2: 22:58:fb:7c:37:27:1f:fe:59:c0:b0:da:fa:2a:fa: 94:c8:e7:d5:9d:63:49:db:50:ee:13:f7:93:a0:91: db:ce:13:71:1e:9c:f9:c7:ca:38:d4:e9:00:cc:af: e1:e5:63:f1:e7:b5:8c:18:ce:8c:8e:58:bb:cc:95: 3a:d1:f1:43:89:4f:39:7c:c3:6a:5e:6a:bc:fe:cb: 5e:64:92:ee:58:9e:d1:ea:19:3a:0c:c2:64:b2:8f: 30:d3:1c:1c:86:83:61:a0:38:8b:db:98:bc:bb:5c: 2e:15:f6:34:1a:ae:3d:cd:e1:2a:9a:d2:9e:ed:23: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4A:0D:7C:4A:6D:B7:42:9E:02:9A:26:03:08:CE:DF:B2:D5:75:30 X509v3 Authority Key Identifier: keyid:1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3a:c1:45:78:a8:d1:94:06:d2:c6:30:6b:21:dd:5b:3b:54: 25:cc:db:38:de:fa:a3:aa:65:f4:da:79:56:dc:f4:cb:05:f0: 49:4a:be:55:39:29:57:23:69:35:3c:c2:d0:bc:14:88:17:98: 07:69:bb:80:a4:f2:2b:7a:fb:d0:83:9e:46:d6:f9:78:4c:5e: 2d:ed:68:9e:25:fb:5e:fc:16:3b:74:aa:46:6e:ea:30:31:5c: e0:05:25:5f:4a:26:a0:e5:a3:2d:7c:54:72:df:ce:a0:d0:0e: 23:e9:c8:d5:9d:92:4f:3c:c9:cb:4a:4c:25:d7:75:5b:d4:ae: 45:68:37:60:f3:ae:2f:a5:48:3a:73:71:75:df:ca:76:a8:ec: 42:43:e5:de:99:30:a2:5e:72:57:e3:49:c6:33:29:c2:2e:cf: 95:2a:03:ae:bf:c2:e1:f0:f1:de:e8:fd:80:27:40:fb:71:aa: 21:5a:e6:d5:ad:75:4d:b6:e8:69:04:9b:ae:e8:42:5d:30:be: 85:37:a5:7a:dd:ee:c5:d8:c3:7f:f6:53:4f:e6:9a:e6:52:6c: aa:e6:28:dc:dd:6c:74:d0:b5:d0:27:7f:97:a9:18:46:d7:51: 12:e1:bf:7f:f5:c9:9d:3c:39:88:da:4a:f0:bb:3f:3b:66:25: 88:05:5e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP11kP996KDOAU30pk31N8zA6EhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0IwN0Mx QUZGRTY5MjAeFw0yNjA3MjMxOTM0MTJaFw0yNjA3MjQyMTEwMTJaMDMxMTAvBgNV BAMTKEFENEEwRDdDNEE2REI3NDI5RTAyOUEyNjAzMDhDRURGQjJENTc1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Xi6fBHLf9uMyxxwdspA9BCjB /mMGuz79Xo29qn3974x67Lcd0KlpybNblEUDv+Z1b0jaBUayn7AR4+VMyHTI0izv ZHnbQmRU0Z5jc3q6PTESZ24oVS9xBwv2bSuh4Pca2z3bWIm3b7VDLgZRrgh4gA40 UJloQn2v0fFfxLL3Q/d1zGVksiJY+3w3Jx/+WcCw2voq+pTI59WdY0nbUO4T95Og kdvOE3EenPnHyjjU6QDMr+HlY/HntYwYzoyOWLvMlTrR8UOJTzl8w2pearz+y15k ku5YntHqGToMwmSyjzDTHByGg2GgOIvbmLy7XC4V9jQarj3N4Sqa0p7tI1aTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUoNfEptt0KeApomAwjO37LVdTAwHwYDVR0j BBgwFoAUHqqTeiNtSto22azfiPOwfBr/5pIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY4ODUxZTUtZWU1Yi00MWUxLTlhYmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0Ey MzZENEFEQTM2RDlBQ0RGODhGM0IwN0MxQUZGRTY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUFBOTM3QTIzNkQ0QURBMzZEOUFDREY4OEYzQjA3QzFBRkZF NjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvMUVBQTkzN0EyMzZENEFEQTM2RDlBQ0RGODhGM0Iw N0MxQUZGRTY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg6wUV4qNGUBtLGMGsh3Vs7VCXM2zje+qOq ZfTaeVbc9MsF8ElKvlU5KVcjaTU8wtC8FIgXmAdpu4Ck8it6+9CDnkbW+XhMXi3t aJ4l+178Fjt0qkZu6jAxXOAFJV9KJqDloy18VHLfzqDQDiPpyNWdkk88yctKTCXX dVvUrkVoN2Dzri+lSDpzcXXfynao7EJD5d6ZMKJeclfjScYzKcIuz5UqA66/wuHw 8d7o/YAnQPtxqiFa5tWtdU226GkEm67oQl0wvoU3pXrd7sXYw3/2U0/mmuZSbKrm KNzdbHTQtdAnf5epGEbXURLhv3/1yZ08OYjaSvC7PztmJYgFXlw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:41:45 2026 by rpki-client