$ rpki-client -vvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: 82ERqyw/14baj7M+5tjDXKEK1U9U3wTm2jfCY4fW9Io= Subject key identifier: D7:10:B9:8B:98:FA:BA:30:AD:C8:47:7C:AD:B6:F8:61:06:76:5C:5A Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 17736180D7BEE409B090EFD86527998C561690C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:19:52 +0000 Manifest this update: Thu 23 Jul 2026 16:14:52 +0000 Manifest next update: Fri 24 Jul 2026 16:38:52 +0000 Files and hashes: 1: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) 2: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) 3: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: 32Wdxaceu2Dfqt5NTjlR3sP9AM1j7DxulAFFMpO5bpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:73:61:80:d7:be:e4:09:b0:90:ef:d8:65:27:99:8c:56:16:90:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: Jul 23 16:14:52 2026 GMT Not After : Jul 24 16:38:52 2026 GMT Subject: CN=D710B98B98FABA30ADC8477CADB6F86106765C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:01:9c:98:e0:ac:40:03:01:61:d1:be:42: fb:fa:c4:0b:4e:07:cb:1b:fe:66:5f:d0:6f:9d:de: 03:56:e7:77:36:46:5d:ed:1a:51:c1:b6:40:d9:c7: 81:ee:26:06:cd:c4:83:f9:87:87:a6:a9:37:c2:b7: 75:97:80:54:9e:fc:d7:42:3e:75:5b:1b:a5:67:53: fe:20:5b:53:be:b5:d2:b5:43:9f:1c:86:b7:de:6c: 35:e4:df:26:0b:7f:23:1b:9d:1b:90:58:b8:33:62: ea:b0:78:21:71:64:5d:db:75:84:d3:47:bd:a1:1d: df:48:eb:26:f2:6f:18:d1:b5:1f:18:14:c8:9b:5a: da:00:8f:3d:43:d2:80:95:1b:f4:c7:45:a4:32:52: c9:91:42:9e:c8:a1:d1:ac:a1:16:bc:fb:ae:93:fb: b4:9c:95:e9:f5:b8:a6:f1:80:ce:3d:24:93:1a:da: be:60:69:da:c1:0c:fc:b3:4f:6c:ac:d1:6e:e6:5d: 45:f3:05:b0:43:9d:f2:8b:73:90:30:39:ef:0c:c3: 81:3d:1c:11:2a:4e:13:58:73:bc:48:b3:ff:ec:f9: dd:e6:cf:6c:2a:c4:b5:f3:89:ca:c7:49:d8:dc:37: 46:80:99:ad:a9:b7:a2:a4:d6:a1:3b:cc:f4:85:15: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:B9:8B:98:FA:BA:30:AD:C8:47:7C:AD:B6:F8:61:06:76:5C:5A X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c2:85:a7:fc:8f:26:e9:67:ac:80:4d:a9:26:f6:65:8f:a6: 8e:31:ea:f2:e6:c5:3e:37:00:ab:16:5a:98:7f:43:5c:b1:a9: 40:8d:f8:c9:cc:1e:29:cd:1f:b5:00:bf:fb:cf:42:24:21:4f: c4:4e:a8:cc:b2:4b:5a:1a:7f:7d:6d:85:fe:fc:d6:7f:6f:16: d7:b6:1c:24:e7:47:58:ff:af:ee:3b:48:71:84:6e:90:64:40: 01:4d:0e:88:5d:3b:0f:dd:6d:1c:08:b1:f5:77:8d:e7:00:9f: a8:40:c6:34:c7:92:be:d6:a2:4d:20:54:0e:ee:cc:a3:14:0c: 2e:cd:77:0c:4d:4d:2a:73:7d:21:f5:31:b0:71:e6:d2:04:02: bb:ac:32:18:6d:84:ea:91:70:4b:df:f7:7a:5d:0f:5f:ff:12: d4:ef:70:07:fa:a2:6a:4b:b7:ce:f4:80:d1:7d:d4:f3:f2:da: 9d:d7:4c:6e:e2:9b:17:3f:69:b1:fc:22:57:08:16:17:22:20: da:96:71:67:77:71:e0:fb:15:84:c6:7e:17:cc:ac:28:d7:c9: 93:f4:65:b4:b5:a0:03:a9:fa:90:45:14:2b:73:59:c7:49:f7: 23:ef:83:6a:43:e6:2d:a7:2d:5d:d6:5d:f9:97:73:64:1a:5c: c9:7a:15:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3NhgNe+5AmwkO/YZSeZjFYWkMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2 MUZCRTM0NjAeFw0yNjA3MjMxNjE0NTJaFw0yNjA3MjQxNjM4NTJaMDMxMTAvBgNV BAMTKEQ3MTBCOThCOThGQUJBMzBBREM4NDc3Q0FEQjZGODYxMDY3NjVDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOQGcmOCsQAMBYdG+Qvv6xAtO B8sb/mZf0G+d3gNW53c2Rl3tGlHBtkDZx4HuJgbNxIP5h4emqTfCt3WXgFSe/NdC PnVbG6VnU/4gW1O+tdK1Q58chrfebDXk3yYLfyMbnRuQWLgzYuqweCFxZF3bdYTT R72hHd9I6ybybxjRtR8YFMibWtoAjz1D0oCVG/THRaQyUsmRQp7IodGsoRa8+66T +7Sclen1uKbxgM49JJMa2r5gadrBDPyzT2ys0W7mXUXzBbBDnfKLc5AwOe8Mw4E9 HBEqThNYc7xIs//s+d3mz2wqxLXzicrHSdjcN0aAma2pt6Kk1qE7zPSFFY5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1xC5i5j6ujCtyEd8rbb4YQZ2XFowHwYDVR0j BBgwFoAUHPIXquvIpbi6+tP370m+vGH740YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3OGMwNjItYjA5Mi00MDI1LTliNjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFF QkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2MUZCRTM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJF MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJF QkM2MUZCRTM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjChaf8jybpZ6yATakm9mWPpo4x6vLmxT43 AKsWWph/Q1yxqUCN+MnMHinNH7UAv/vPQiQhT8ROqMyyS1oaf31thf781n9vFte2 HCTnR1j/r+47SHGEbpBkQAFNDohdOw/dbRwIsfV3jecAn6hAxjTHkr7Wok0gVA7u zKMUDC7NdwxNTSpzfSH1MbBx5tIEArusMhhthOqRcEvf93pdD1//EtTvcAf6ompL t870gNF91PPy2p3XTG7imxc/abH8IlcIFhciINqWcWd3ceD7FYTGfhfMrCjXyZP0 ZbS1oAOp+pBFFCtzWcdJ9yPvg2pD5i2nLV3WXfmXc2QaXMl6FWs= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:07 2026 by rpki-client