$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: tghKBglSDJB1D8+8RkJ7IBaMW6Uzo07hJOFKAs7RfiQ= Subject key identifier: 01:70:BA:86:3F:94:38:FB:FC:67:F6:33:AC:2C:A6:1E:98:6E:23:F8 Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 34B5C848F74EAF005E0C07A8163261962431D441 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:45:40 +0000 Manifest this update: Thu 23 Jul 2026 12:40:40 +0000 Manifest next update: Fri 24 Jul 2026 16:37:40 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) 3: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: /d54qjJRsSNVzsHLZ9xv4K9/poI+JxpKvdiJFOyFp9M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b5:c8:48:f7:4e:af:00:5e:0c:07:a8:16:32:61:96:24:31:d4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Jul 23 12:40:40 2026 GMT Not After : Jul 24 16:37:40 2026 GMT Subject: CN=0170BA863F9438FBFC67F633AC2CA61E986E23F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:43:86:7c:3a:44:ba:ea:88:13:9c:1e:d7: 30:c9:d8:52:b1:85:f1:c5:a9:6d:c7:00:cd:c9:b3: 48:80:28:37:be:06:2c:29:7c:68:29:fe:ac:11:66: ec:5c:29:96:95:66:20:25:a2:f2:b4:8d:58:77:2e: 44:30:f1:2f:d5:c2:ee:89:65:20:ed:82:8e:07:98: af:7c:35:22:b6:9e:ad:5e:4b:4c:f7:85:1a:73:a0: 20:f0:ef:54:ca:57:38:ab:a6:a6:70:4b:3a:5f:c1: be:4f:c6:7b:82:a3:52:78:d9:13:97:b1:61:bb:50: 71:ba:35:4c:f8:ad:a7:b7:e9:db:49:36:bd:59:d1: 44:8d:50:82:1d:5c:f6:a4:b0:0d:f5:e7:4f:ab:37: f6:76:dd:15:6c:51:58:19:04:37:55:c1:e4:79:e1: e8:a5:e1:ca:bf:67:f5:d2:90:18:1a:e1:2f:f8:33: 4f:fd:26:ae:7f:78:13:45:cd:b0:91:88:23:29:98: 97:d1:ea:85:ad:c6:15:bd:14:73:d3:a5:c3:52:ce: 9d:1e:5f:fd:3b:a0:00:7f:39:f2:fb:da:e1:1a:2d: cf:37:6a:e5:e2:2e:ff:02:af:9f:bd:6d:d5:a8:6e: 9b:3a:c0:be:f0:73:2d:38:89:6a:99:f3:fd:a9:f4: 8e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:70:BA:86:3F:94:38:FB:FC:67:F6:33:AC:2C:A6:1E:98:6E:23:F8 X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5a:62:1f:4c:0d:4f:fb:e9:66:53:ef:ee:7b:aa:08:65:27: 60:41:34:52:65:75:1a:b6:7a:3a:38:c3:ca:b1:4c:5c:21:2c: 39:01:0d:66:78:71:29:22:78:3c:20:5a:ff:86:94:5b:c2:75: 73:2b:9c:a6:e4:31:28:18:d8:4f:b6:d7:1b:3c:d7:26:ff:99: f7:b5:c9:04:1e:63:58:b5:2f:50:3b:6c:a4:ff:55:47:a3:15: 24:50:97:08:a4:65:59:5a:5c:46:0a:50:03:ff:96:e2:5c:71: ee:a1:45:aa:c6:aa:dc:c9:c0:f5:5f:99:26:23:5d:29:8b:1c: 65:f7:b6:18:51:28:9e:71:e7:d3:00:8a:3e:81:f1:63:3a:88: 43:24:61:53:69:de:8f:c9:5b:cc:f1:61:a1:7d:05:3c:99:05: 83:03:dc:f3:3f:00:5b:aa:1e:92:95:46:ba:13:a9:47:ca:f4: 71:ff:0b:2a:e8:4f:c1:f2:e4:b6:5e:cc:10:2d:d3:49:c4:4f: 64:ce:f2:52:86:cb:98:e1:22:6e:de:ce:e0:f4:cc:50:d9:5d: 09:7e:e8:56:9e:31:cb:8c:9a:2f:f4:19:0f:ac:82:6d:b3:7c: 7b:c5:3f:37:06:23:15:d6:71:a7:0c:51:30:b9:ea:94:a2:66: 11:ca:b3:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLXISPdOrwBeDAeoFjJhliQx1EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA3MjMxMjQwNDBaFw0yNjA3MjQxNjM3NDBaMDMxMTAvBgNV BAMTKDAxNzBCQTg2M0Y5NDM4RkJGQzY3RjYzM0FDMkNBNjFFOTg2RTIzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOEOGfDpEuuqIE5we1zDJ2FKx hfHFqW3HAM3Js0iAKDe+BiwpfGgp/qwRZuxcKZaVZiAlovK0jVh3LkQw8S/Vwu6J ZSDtgo4HmK98NSK2nq1eS0z3hRpzoCDw71TKVzirpqZwSzpfwb5PxnuCo1J42ROX sWG7UHG6NUz4rae36dtJNr1Z0USNUIIdXPaksA3150+rN/Z23RVsUVgZBDdVweR5 4eil4cq/Z/XSkBga4S/4M0/9Jq5/eBNFzbCRiCMpmJfR6oWtxhW9FHPTpcNSzp0e X/07oAB/OfL72uEaLc83auXiLv8Cr5+9bdWobps6wL7wcy04iWqZ8/2p9I7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAXC6hj+UOPv8Z/YzrCymHphuI/gwHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1aYh9MDU/76WZT7+57qghlJ2BBNFJldRq2 ejo4w8qxTFwhLDkBDWZ4cSkieDwgWv+GlFvCdXMrnKbkMSgY2E+21xs81yb/mfe1 yQQeY1i1L1A7bKT/VUejFSRQlwikZVlaXEYKUAP/luJcce6hRarGqtzJwPVfmSYj XSmLHGX3thhRKJ5x59MAij6B8WM6iEMkYVNp3o/JW8zxYaF9BTyZBYMD3PM/AFuq HpKVRroTqUfK9HH/CyroT8Hy5LZezBAt00nET2TO8lKGy5jhIm7ezuD0zFDZXQl+ 6FaeMcuMmi/0GQ+sgm2zfHvFPzcGIxXWcacMUTC56pSiZhHKs7s= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:38 2026 by rpki-client