$ rpki-client -vvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: QTz3DPrcCGNB63sgsecLZ7XbCzgYQOtG+KbHAoiFuYo= Subject key identifier: 5E:04:A5:ED:27:F3:DA:8D:2B:D1:9D:00:5F:10:DD:1A:94:E6:89:A0 Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 6D503C45DE44966418AE2FCC9314565B1F28A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:51:28 +0000 Manifest this update: Tue 12 May 2026 05:46:28 +0000 Manifest next update: Wed 13 May 2026 07:47:28 +0000 Files and hashes: 1: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) 2: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: PMOnXZUGTjA8BlQ0ykNwD/aeK+ge+8GZNcRihr4QCEA=) 3: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:50:3c:45:de:44:96:64:18:ae:2f:cc:93:14:56:5b:1f:28:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: May 12 05:46:28 2026 GMT Not After : May 13 07:47:28 2026 GMT Subject: CN=5E04A5ED27F3DA8D2BD19D005F10DD1A94E689A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:52:ec:14:90:1b:fe:a4:52:83:2e:ce:96: f1:2e:78:36:21:7d:1b:e8:69:69:ab:51:90:67:99: 57:ff:35:31:6e:9a:60:88:90:bc:50:05:fa:32:19: f8:02:8f:d4:86:80:76:2b:65:2f:ab:b3:4e:ed:36: 9d:df:c1:99:e8:ea:20:9c:8b:12:85:4b:a4:73:e9: a9:63:69:f2:97:b6:ab:1b:bb:17:a9:5f:37:d2:25: df:b4:51:b3:ae:51:fe:73:0b:81:17:e5:ea:85:c4: d7:c8:9b:c7:fe:48:eb:d8:25:39:dd:2c:54:97:f0: 39:e7:cf:b8:79:ac:99:29:56:e8:ed:78:ff:d5:1f: 8c:6f:4b:93:07:fe:dc:3c:c2:b9:c5:f4:1e:0a:66: cb:76:41:10:a6:03:78:b1:11:17:ba:1b:93:17:cd: 9f:e0:04:73:76:d1:55:6f:2f:2c:a1:11:e3:c5:68: 79:3d:e0:04:ef:82:85:41:aa:49:01:b6:d4:de:be: ba:ec:68:f0:07:ea:79:d6:92:2c:22:fb:c2:00:fb: c6:69:35:33:b3:47:5b:3d:09:a7:b4:31:41:a0:44: f0:9a:12:80:e8:db:46:8e:9e:25:12:cf:96:c3:cd: f7:45:c0:5a:5e:ee:83:12:74:df:bc:20:53:5b:7e: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:04:A5:ED:27:F3:DA:8D:2B:D1:9D:00:5F:10:DD:1A:94:E6:89:A0 X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:97:95:97:b1:b8:bf:82:05:f4:6e:36:61:a0:6e:f8:a6:e4: 56:4d:8a:69:5c:0a:f9:82:fd:b6:63:a3:4d:df:9f:a7:12:c7: 96:04:56:53:d7:66:67:b5:76:fd:24:99:80:29:26:dc:52:fb: 1f:2c:04:8d:85:11:df:d0:f1:bb:02:f5:4c:d1:82:10:28:82: 97:63:bf:5f:7c:2a:1c:87:e2:75:61:c8:9b:bd:2d:34:1d:98: 3d:45:d6:5b:f5:e7:78:ae:d7:70:80:ad:f5:1c:78:88:57:cc: f4:a3:83:1d:93:63:35:a3:83:56:66:28:07:81:f4:ba:98:04: a9:c0:73:d7:78:9f:18:29:ec:27:50:66:ba:f3:29:b4:2c:b1: ea:56:74:18:d8:e0:82:3a:a9:eb:ba:2a:88:76:a3:3c:bf:b2: 8a:48:d0:a1:f9:4c:17:6a:d1:05:c5:62:55:d3:d9:6b:f2:fc: 6b:b6:b9:fd:30:86:db:51:60:1e:df:c6:4f:19:ee:d7:ac:54: e9:ec:84:55:bf:a8:1e:54:59:c5:81:fb:d7:53:d8:fe:10:de: 0f:37:65:a7:82:d9:22:3c:c0:4a:3d:68:8b:31:76:aa:aa:1a: bc:4c:0e:a3:c1:84:f8:63:4d:c5:fb:74:61:c8:5f:6e:b6:58: 42:f7:db:cf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITbVA8Rd5ElmQYri/MkxRWWx8opTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYx RkJFMzQ2MB4XDTI2MDUxMjA1NDYyOFoXDTI2MDUxMzA3NDcyOFowMzExMC8GA1UE AxMoNUUwNEE1RUQyN0YzREE4RDJCRDE5RDAwNUYxMEREMUE5NEU2ODlBMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMn9UuwUkBv+pFKDLs6W8S54NiF9 G+hpaatRkGeZV/81MW6aYIiQvFAF+jIZ+AKP1IaAditlL6uzTu02nd/BmejqIJyL EoVLpHPpqWNp8pe2qxu7F6lfN9Il37RRs65R/nMLgRfl6oXE18ibx/5I69glOd0s VJfwOefPuHmsmSlW6O14/9UfjG9Lkwf+3DzCucX0Hgpmy3ZBEKYDeLERF7obkxfN n+AEc3bRVW8vLKER48VoeT3gBO+ChUGqSQG21N6+uuxo8AfqedaSLCL7wgD7xmk1 M7NHWz0Jp7QxQaBE8JoSgOjbRo6eJRLPlsPN90XAWl7ugxJ037wgU1t+mk0CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBReBKXtJ/PajSvRnQBfEN0alOaJoDAfBgNVHSME GDAWgBQc8heq68iluLr60/fvSb68YfvjRjAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9h ODc4YzA2Mi1iMDkyLTQwMjUtOWI2OC1iZmViOWI2NWE1YTAvMC8xQ0YyMTdBQUVC QzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJFMzQ2LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzFDRjIxN0FBRUJDOEE1QjhCQUZBRDNGN0VGNDlCRUJDNjFGQkUz NDYuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hODc4YzA2Mi1iMDkyLTQwMjUtOWI2 OC1iZmViOWI2NWE1YTAvMC8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVC QzYxRkJFMzQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAgJeVl7G4v4IF9G42YaBu+KbkVk2KaVwK+YL9 tmOjTd+fpxLHlgRWU9dmZ7V2/SSZgCkm3FL7HywEjYUR39DxuwL1TNGCECiCl2O/ X3wqHIfidWHIm70tNB2YPUXWW/XneK7XcICt9Rx4iFfM9KODHZNjNaODVmYoB4H0 upgEqcBz13ifGCnsJ1BmuvMptCyx6lZ0GNjggjqp67oqiHajPL+yikjQoflMF2rR BcViVdPZa/L8a7a5/TCG21FgHt/GTxnu16xU6eyEVb+oHlRZxYH711PY/hDeDzdl p4LZIjzASj1oizF2qqoavEwOo8GE+GNNxft0YchfbrZYQvfbzw== -----END CERTIFICATE-----Generated at Wed May 13 01:37:24 2026 by rpki-client