$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: KZbE2kkDKShdH/ahS/bBu1XlLbsaryu5lFZKKUjtCI4= Subject key identifier: 33:E9:C2:77:AF:8E:6C:00:FE:72:C5:ED:2A:73:DC:EC:54:83:5D:30 Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 7E3B32E1D9456BB13E3EFDF46A4405B021EC07FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:20:39 +0000 Manifest this update: Tue 12 May 2026 22:15:39 +0000 Manifest next update: Thu 14 May 2026 01:15:39 +0000 Files and hashes: 1: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: 761nCUbdn9ILr4udm1vhXthH8iPGXG9t8yeb/6DNISY=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3b:32:e1:d9:45:6b:b1:3e:3e:fd:f4:6a:44:05:b0:21:ec:07:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: May 12 22:15:39 2026 GMT Not After : May 14 01:15:39 2026 GMT Subject: CN=33E9C277AF8E6C00FE72C5ED2A73DCEC54835D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:f1:f5:1b:00:22:7b:a9:9c:ce:58:7a:bd: e4:d1:e1:a2:2e:35:6b:e0:3d:a0:1b:bc:c6:fe:f4: b3:96:15:d8:82:6b:b2:b6:fb:3c:81:a4:fc:c9:aa: af:91:f1:ad:88:46:5d:12:5a:4e:a0:f5:4b:ca:48: 78:13:86:20:44:77:2d:ac:b6:2c:e4:c4:1f:68:4b: d6:05:cf:12:52:d6:40:30:de:a7:ef:5e:dc:8c:0b: d1:4c:36:f9:b3:cc:c0:17:8b:67:a3:2b:49:97:c6: 83:20:d0:aa:59:83:3b:de:43:85:10:74:91:78:d4: 08:86:15:5f:9e:27:02:da:42:0b:6d:3b:97:5c:9b: b9:8a:e0:a5:41:30:0e:c8:42:95:83:7d:ff:59:2c: 41:bb:69:49:12:c9:ae:d4:f0:c3:f4:e7:16:bc:72: 21:99:18:86:82:a3:ad:fe:81:cb:be:4d:c6:98:e3: c6:89:34:38:e4:2c:b6:b0:21:b3:e0:60:d0:4b:f1: a1:f0:09:5c:52:04:68:a5:fb:70:35:9a:bc:40:d8: 8b:a6:1f:0c:0f:fe:29:26:4f:45:10:cd:dd:ef:4c: fd:78:c3:f8:23:11:df:78:69:06:b9:9d:b4:49:25: 70:a0:33:f4:6a:5d:47:50:31:12:79:18:36:05:57: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E9:C2:77:AF:8E:6C:00:FE:72:C5:ED:2A:73:DC:EC:54:83:5D:30 X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e3:dc:4f:58:72:44:1b:eb:e0:7d:58:b1:a9:ff:75:b3:3c: 89:20:11:58:03:68:07:c1:91:15:7e:66:ea:38:e2:ad:ce:64: c4:8e:fe:65:8d:7b:1b:9d:62:d5:8b:36:c7:72:e9:8f:ee:89: 61:8b:96:54:d1:8f:d4:5e:15:b7:c9:e8:60:30:4f:90:be:7d: 3b:7c:cb:7f:a2:98:d4:33:28:f4:7a:00:9f:7c:79:b9:ee:65: 48:0f:ff:2b:30:1f:91:1c:48:10:d1:40:fa:53:dd:89:2e:03: 84:b4:25:a6:24:4a:a2:da:0e:af:55:89:e9:c6:76:eb:fb:a9: a5:d8:27:a7:aa:de:a6:90:77:6c:e1:cb:e1:ae:21:79:cc:e3: 55:f5:41:95:ef:d1:1f:50:ea:bb:c4:9c:0c:6e:1c:71:71:7f: ce:dc:b0:13:24:b7:3f:fb:62:de:1b:9d:bf:7d:ea:f1:38:18: fa:ac:6e:af:d6:33:cf:b1:1e:56:7a:86:b9:7a:17:11:28:0d: fd:c9:76:18:b2:33:7e:63:22:d0:8e:61:52:b1:b8:b7:e8:ff: 8c:5e:67:55:70:29:b1:d3:98:96:d8:11:4e:b6:b0:09:bc:47: 14:f6:78:7d:61:50:d7:1e:32:e0:f9:b2:71:2e:89:d6:cd:42: d7:8e:20:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjsy4dlFa7E+Pv30akQFsCHsB/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA1MTIyMjE1MzlaFw0yNjA1MTQwMTE1MzlaMDMxMTAvBgNV BAMTKDMzRTlDMjc3QUY4RTZDMDBGRTcyQzVFRDJBNzNEQ0VDNTQ4MzVEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiPH1GwAie6mczlh6veTR4aIu NWvgPaAbvMb+9LOWFdiCa7K2+zyBpPzJqq+R8a2IRl0SWk6g9UvKSHgThiBEdy2s tizkxB9oS9YFzxJS1kAw3qfvXtyMC9FMNvmzzMAXi2ejK0mXxoMg0KpZgzveQ4UQ dJF41AiGFV+eJwLaQgttO5dcm7mK4KVBMA7IQpWDff9ZLEG7aUkSya7U8MP05xa8 ciGZGIaCo63+gcu+TcaY48aJNDjkLLawIbPgYNBL8aHwCVxSBGil+3A1mrxA2Ium HwwP/ikmT0UQzd3vTP14w/gjEd94aQa5nbRJJXCgM/RqXUdQMRJ5GDYFV4oBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM+nCd6+ObAD+csXtKnPc7FSDXTAwHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7j3E9YckQb6+B9WLGp/3WzPIkgEVgDaAfB kRV+Zuo44q3OZMSO/mWNexudYtWLNsdy6Y/uiWGLllTRj9ReFbfJ6GAwT5C+fTt8 y3+imNQzKPR6AJ98ebnuZUgP/yswH5EcSBDRQPpT3YkuA4S0JaYkSqLaDq9VienG duv7qaXYJ6eq3qaQd2zhy+GuIXnM41X1QZXv0R9Q6rvEnAxuHHFxf87csBMktz/7 Yt4bnb996vE4GPqsbq/WM8+xHlZ6hrl6FxEoDf3JdhiyM35jItCOYVKxuLfo/4xe Z1VwKbHTmJbYEU62sAm8RxT2eH1hUNceMuD5snEuidbNQteOIJ4= -----END CERTIFICATE-----Generated at Wed May 13 00:45:15 2026 by rpki-client