$ rpki-client -vvf rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft File: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft (raw, json) Hash identifier: MlA7xXlezpD8qNgLGk1ZA39yW9aTx+u9YbiBJPJviso= Subject key identifier: 05:58:5C:E2:93:2A:6F:0D:CB:D7:D6:1F:04:75:37:AB:87:EB:5B:14 Authority key identifier: 1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 Certificate issuer: /CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Certificate serial: 39B3DBEFFC1BB3E87EA3AC35FAD68E3E3D954F48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 15:03:06 +0000 Manifest this update: Fri 24 Jul 2026 14:58:06 +0000 Manifest next update: Sat 25 Jul 2026 15:17:06 +0000 Files and hashes: 1: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: 8ZC6zz9Re3rZ3m+opQHEHUjBM1e+RO/tPdv5dWkLhp4=) 2: 1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl (hash: myc97cod/pTDtTDzpDlJCmlhXgy06Ze9vHzhfewbrRY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b3:db:ef:fc:1b:b3:e8:7e:a3:ac:35:fa:d6:8e:3e:3d:95:4f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0DAD245766AEB19BB04F688F000254E9F4BB89 Validity Not Before: Jul 24 14:58:06 2026 GMT Not After : Jul 25 15:17:06 2026 GMT Subject: CN=05585CE2932A6F0DCBD7D61F047537AB87EB5B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:08:83:21:2d:45:8a:84:5b:50:db:2c:f7: ff:6d:2b:cd:be:95:dc:07:af:8d:9f:1c:ce:ba:d9: e7:73:72:95:9a:cc:13:e7:69:e2:38:f2:83:ef:8e: 46:13:82:b1:15:49:73:26:22:83:1b:27:84:f3:34: af:43:dd:2d:a2:35:0a:39:82:08:17:63:33:5d:cd: ae:d3:22:4c:ec:0d:97:91:5a:a7:b6:ad:f6:ce:e4: 4a:e7:fa:b3:7b:fa:20:5a:f0:bf:70:01:7b:db:f3: f3:55:ed:43:25:df:75:34:28:27:86:15:f7:ef:12: 7f:93:60:ed:44:8d:45:8f:64:97:ed:39:76:2e:80: e8:27:51:f5:ac:e0:00:84:85:b8:75:89:4e:06:8a: 06:e0:4b:37:e2:21:86:28:5d:c9:56:7b:18:3c:a1: 7e:f4:70:12:91:09:a3:c5:50:b0:68:65:ee:dc:15: 66:8c:f1:80:f2:73:9a:65:50:99:24:d9:c4:c9:12: 90:03:e8:0b:c1:1d:72:0d:e4:e1:17:ba:f1:62:a9: 05:d0:27:96:ac:d0:53:53:d1:19:90:18:7f:07:53: e1:14:39:ff:69:1a:02:7f:9d:41:8f:f8:b8:4f:00: 98:52:c1:d3:8c:a9:6f:39:72:fb:86:92:b5:86:b1: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:58:5C:E2:93:2A:6F:0D:CB:D7:D6:1F:04:75:37:AB:87:EB:5B:14 X509v3 Authority Key Identifier: keyid:1A:0D:AD:24:57:66:AE:B1:9B:B0:4F:68:8F:00:02:54:E9:F4:BB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A0DAD245766AEB19BB04F688F000254E9F4BB89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/1A0DAD245766AEB19BB04F688F000254E9F4BB89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:60:a8:b0:33:1b:d4:ef:24:5b:fb:06:15:9c:bf:55:86:c6: c0:ca:1e:06:89:5c:a4:5c:e3:dc:0e:37:3d:9c:5e:74:a6:64: 97:a3:13:0e:8f:3a:03:56:75:91:84:04:9c:bd:5f:2d:e4:ef: b2:c5:35:f0:f1:5b:4e:00:9a:d0:40:a9:8c:f3:7f:e2:68:b9: 6a:10:d6:41:c0:4e:e9:e6:74:95:15:16:83:9d:94:6d:2f:a1: b2:c8:1d:db:84:34:22:49:eb:ec:b4:1a:e4:29:c4:a7:18:30: 84:5a:d5:a2:c0:b6:33:d8:27:5f:e3:a1:c8:dd:08:b5:75:8c: b8:98:d2:c0:3f:a3:12:8e:6d:90:7d:6e:15:6a:eb:6a:58:3b: c7:4b:c8:67:a5:00:1f:88:e7:22:b9:99:4b:cb:df:c9:f6:06: 65:ef:fd:09:04:e1:aa:03:e7:5c:07:37:e8:97:85:3e:52:8c: ec:ae:59:81:41:63:ef:53:e0:5e:b7:5f:e6:49:85:73:4b:f3: 54:1d:07:d2:71:90:02:d8:25:34:3e:5d:9a:62:c5:20:06:9b: 76:86:0a:9a:4b:e5:9f:cf:6a:96:9d:3d:b3:1e:4e:24:4e:c1: 57:7e:db:95:ff:21:1e:b5:a4:ab:a4:e4:3b:ea:f6:c2:e1:4e: cb:91:a0:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObPb7/wbs+h+o6w1+taOPj2VT0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRF OUY0QkI4OTAeFw0yNjA3MjQxNDU4MDZaFw0yNjA3MjUxNTE3MDZaMDMxMTAvBgNV BAMTKDA1NTg1Q0UyOTMyQTZGMERDQkQ3RDYxRjA0NzUzN0FCODdFQjVCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIwiDIS1FioRbUNss9/9tK82+ ldwHr42fHM662edzcpWazBPnaeI48oPvjkYTgrEVSXMmIoMbJ4TzNK9D3S2iNQo5 gggXYzNdza7TIkzsDZeRWqe2rfbO5Ern+rN7+iBa8L9wAXvb8/NV7UMl33U0KCeG FffvEn+TYO1EjUWPZJftOXYugOgnUfWs4ACEhbh1iU4GigbgSzfiIYYoXclWexg8 oX70cBKRCaPFULBoZe7cFWaM8YDyc5plUJkk2cTJEpAD6AvBHXIN5OEXuvFiqQXQ J5as0FNT0RmQGH8HU+EUOf9pGgJ/nUGP+LhPAJhSwdOMqW85cvuGkrWGsaqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBVhc4pMqbw3L19YfBHU3q4frWxQwHwYDVR0j BBgwFoAUGg2tJFdmrrGbsE9ojwACVOn0u4kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk4NDMyY2QtYTA0Ny00ODViLTgxNDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1 NzY2QUVCMTlCQjA0RjY4OEYwMDAyNTRFOUY0QkI4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTBEQUQyNDU3NjZBRUIxOUJCMDRGNjg4RjAwMDI1NEU5RjRC Qjg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvMUEwREFEMjQ1NzY2QUVCMTlCQjA0RjY4OEYwMDAy NTRFOUY0QkI4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNgqLAzG9TvJFv7BhWcv1WGxsDKHgaJXKRc 49wONz2cXnSmZJejEw6POgNWdZGEBJy9Xy3k77LFNfDxW04AmtBAqYzzf+JouWoQ 1kHATunmdJUVFoOdlG0vobLIHduENCJJ6+y0GuQpxKcYMIRa1aLAtjPYJ1/jocjd CLV1jLiY0sA/oxKObZB9bhVq62pYO8dLyGelAB+I5yK5mUvL38n2BmXv/QkE4aoD 51wHN+iXhT5SjOyuWYFBY+9T4F63X+ZJhXNL81QdB9JxkALYJTQ+XZpixSAGm3aG CppL5Z/PapadPbMeTiROwVd+25X/IR61pKuk5Dvq9sLhTsuRoO0= -----END CERTIFICATE-----Generated at Fri Jul 24 19:06:08 2026 by rpki-client