$ rpki-client -vvf rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft File: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft (raw, json) Hash identifier: h68v7Z3Kc9tkiS/bWce162waCiNK7/+bm9xRvQaews0= Subject key identifier: 62:D9:C9:EE:F0:41:9C:42:A0:2D:5F:FB:C2:17:A3:4B:F2:63:CE:D6 Authority key identifier: 1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 Certificate issuer: /CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1 Certificate serial: 1A1D66598D5568B228AC17C3F7474D297713139C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:55:56 +0000 Manifest this update: Wed 13 May 2026 01:50:56 +0000 Manifest next update: Thu 14 May 2026 05:00:56 +0000 Files and hashes: 1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: m0f229ZhLX9SKvKbXbKHogZj70tOf+VKSr9KHdgMRls=) 2: 1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl (hash: qPL+rQrFoMFBjfmDOCDd5wryV7f/ozhvaqHx7qNgk28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1d:66:59:8d:55:68:b2:28:ac:17:c3:f7:47:4d:29:77:13:13:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1 Validity Not Before: May 13 01:50:56 2026 GMT Not After : May 14 05:00:56 2026 GMT Subject: CN=62D9C9EEF0419C42A02D5FFBC217A34BF263CED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:40:0a:27:37:a6:83:fe:4d:c2:d8:d5:6d: 5e:05:b0:6e:6b:95:fc:d1:6f:52:5a:ec:07:94:df: 23:15:96:6a:47:34:2a:49:31:78:78:93:15:d3:01: 69:cf:70:e2:a2:09:a9:15:96:3e:52:2c:4a:01:60: 8b:8a:48:bd:a5:f0:0f:2b:3b:7d:95:ee:2e:d4:0f: db:bf:00:be:f9:f5:6b:45:52:49:30:4d:35:09:10: 0c:a5:0f:47:7d:6d:f9:54:f9:94:05:76:86:f0:79: d6:84:fa:41:8e:48:30:39:84:66:1a:7d:f0:a6:7f: db:c6:aa:95:26:0e:b8:58:e5:c9:cb:3f:5b:1c:6f: ca:86:8e:d8:88:65:43:8c:01:0b:82:13:02:fd:bf: fa:8e:37:8a:ae:62:f8:06:80:c6:84:f8:36:e3:2f: 66:cc:98:14:50:32:dc:0c:87:5e:fb:b8:d5:29:94: 30:9c:d5:e0:74:f0:78:d4:23:39:d8:6a:6b:cf:50: 62:c8:9f:1a:af:8e:6c:f2:55:06:f8:75:42:da:af: e6:15:95:20:7c:4c:55:44:d2:0f:a1:6e:61:b9:9b: c1:73:60:61:05:f4:52:9e:26:cf:49:67:e3:11:ae: a5:19:fe:27:df:29:01:8a:6e:49:f8:9a:ca:22:02: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:C9:EE:F0:41:9C:42:A0:2D:5F:FB:C2:17:A3:4B:F2:63:CE:D6 X509v3 Authority Key Identifier: keyid:1E:1A:C1:C9:B3:E6:7F:83:95:39:54:23:DA:2E:B2:6E:8E:69:1F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1E1AC1C9B3E67F8395395423DA2EB26E8E691FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:27:8f:22:fd:c2:a1:d7:80:70:76:6e:a2:ce:0d:c1:f4:8a: 69:a7:ba:5c:cc:17:2c:e4:3a:09:4f:d8:1d:f5:82:30:23:79: 06:fc:de:b4:ef:62:8e:44:92:fe:0c:38:98:92:f0:ee:32:da: 9d:ab:4a:30:c6:98:83:ad:cd:45:45:69:68:72:ac:2c:5d:8c: 06:03:23:c2:c9:b7:71:41:9e:89:d0:ae:da:f0:ba:2f:82:c3: 9f:25:5b:15:20:6f:1a:59:04:ea:c9:74:1e:4b:96:ef:be:af: 83:0f:85:7f:a7:e6:12:19:7b:0e:e7:c3:47:e2:4b:9d:0c:39: f1:7b:86:3f:91:05:6c:30:54:09:6e:59:cc:3b:4c:93:0e:8f: ea:fa:c6:91:b9:2b:5a:4f:cc:22:c7:04:33:4f:d1:21:5f:7a: ad:44:ac:9d:27:f8:88:a1:7f:69:0e:f5:79:f1:74:ba:e1:06: 5f:29:64:1d:74:39:ad:ef:fb:2e:c2:53:48:fb:b3:08:b0:9c: 80:88:18:39:67:42:0a:ce:7c:17:1f:08:ab:fd:82:4e:ab:74: a2:8b:a7:91:70:2e:72:18:72:e1:da:8a:9b:dc:2f:06:69:d3: c0:d3:c8:a1:cf:d9:ef:8d:09:83:36:7c:0b:cc:3c:68:8b:1f: 90:2c:54:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGh1mWY1VaLIorBfD90dNKXcTE5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUxQUMxQzlCM0U2N0Y4Mzk1Mzk1NDIzREEyRUIyNkU4 RTY5MUZDMTAeFw0yNjA1MTMwMTUwNTZaFw0yNjA1MTQwNTAwNTZaMDMxMTAvBgNV BAMTKDYyRDlDOUVFRjA0MTlDNDJBMDJENUZGQkMyMTdBMzRCRjI2M0NFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWEAKJzemg/5NwtjVbV4FsG5r lfzRb1Ja7AeU3yMVlmpHNCpJMXh4kxXTAWnPcOKiCakVlj5SLEoBYIuKSL2l8A8r O32V7i7UD9u/AL759WtFUkkwTTUJEAylD0d9bflU+ZQFdobwedaE+kGOSDA5hGYa ffCmf9vGqpUmDrhY5cnLP1scb8qGjtiIZUOMAQuCEwL9v/qON4quYvgGgMaE+Dbj L2bMmBRQMtwMh177uNUplDCc1eB08HjUIznYamvPUGLInxqvjmzyVQb4dULar+YV lSB8TFVE0g+hbmG5m8FzYGEF9FKeJs9JZ+MRrqUZ/iffKQGKbkn4msoiAieJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYtnJ7vBBnEKgLV/7whejS/JjztYwHwYDVR0j BBgwFoAUHhrBybPmf4OVOVQj2i6ybo5pH8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI3MmU1MjctNzI1Yi00OWUzLTg3NDMtYzc1M2RkMzM3OWUzLzAvMUUxQUMxQzlC M0U2N0Y4Mzk1Mzk1NDIzREEyRUIyNkU4RTY5MUZDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTFBQzFDOUIzRTY3RjgzOTUzOTU0MjNEQTJFQjI2RThFNjkx RkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUUxQUMxQzlCM0U2N0Y4Mzk1Mzk1NDIzREEyRUIy NkU4RTY5MUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJknjyL9wqHXgHB2bqLODcH0immnulzMFyzk OglP2B31gjAjeQb83rTvYo5Ekv4MOJiS8O4y2p2rSjDGmIOtzUVFaWhyrCxdjAYD I8LJt3FBnonQrtrwui+Cw58lWxUgbxpZBOrJdB5Llu++r4MPhX+n5hIZew7nw0fi S50MOfF7hj+RBWwwVAluWcw7TJMOj+r6xpG5K1pPzCLHBDNP0SFfeq1ErJ0n+Iih f2kO9XnxdLrhBl8pZB10Oa3v+y7CU0j7swiwnICIGDlnQgrOfBcfCKv9gk6rdKKL p5FwLnIYcuHaipvcLwZp08DTyKHP2e+NCYM2fAvMPGiLH5AsVNg= -----END CERTIFICATE-----Generated at Wed May 13 05:58:17 2026 by rpki-client