$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json) Hash identifier: e64jyRoG1t4h2Rd0S0h508fNNNfJakW/yrJAcuZfS9w= Subject key identifier: 7A:C4:D4:AC:4D:95:DA:E4:D0:B2:E4:C1:CB:9C:46:1F:E5:E9:8C:A1 Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573 Certificate serial: 2AFC6A4965CE931BD28FBD82BFF99D30555F586E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:13 +0000 Manifest this update: Tue 12 May 2026 19:15:13 +0000 Manifest next update: Wed 13 May 2026 21:32:13 +0000 Files and hashes: 1: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=) 2: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=) 3: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: CgwFbt6QL3hD7Xdnux19gMBdKdv/al8niZRzkHGV+Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fc:6a:49:65:ce:93:1b:d2:8f:bd:82:bf:f9:9d:30:55:5f:58:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573 Validity Not Before: May 12 19:15:13 2026 GMT Not After : May 13 21:32:13 2026 GMT Subject: CN=7AC4D4AC4D95DAE4D0B2E4C1CB9C461FE5E98CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:37:05:21:2a:77:8d:59:c1:56:6f:5d:c3: 48:76:f7:b6:db:c2:ea:cc:c9:1f:ed:5c:7f:51:a0: 94:99:f9:f5:50:d3:a6:bc:c5:ae:71:df:bf:df:79: 72:a9:e1:0c:e0:7d:62:12:c4:41:f6:da:44:26:89: 7f:75:c9:65:90:69:ca:88:b0:44:a2:f0:17:9c:e9: 48:02:cf:72:89:58:fa:20:f7:95:34:8e:3d:6a:bc: e8:46:fb:8a:2f:79:e6:ed:de:e5:db:9a:ac:35:eb: 58:07:e4:f0:81:ff:de:83:47:22:ac:9e:41:ca:88: 7e:85:44:e4:0d:67:5b:22:e0:b6:6e:15:50:2c:5f: 89:fc:8f:ee:5a:42:74:84:17:f8:28:f9:f3:6c:ac: 8d:38:1a:d8:3e:46:b3:8e:4e:5e:79:19:62:42:c8: 6c:b1:1d:3e:55:1f:d8:40:09:69:8c:60:28:ad:ff: b9:f6:1e:36:9b:95:3d:f8:99:de:b5:6b:2c:ad:ac: ab:f4:f2:b3:ba:56:f6:d9:88:63:2b:77:e2:a8:7f: a2:3a:44:64:ee:da:94:4a:09:f0:1e:d6:f0:e0:a4: d4:03:f4:de:40:ea:4c:b0:4f:66:7b:d9:2d:ae:ab: 1b:d8:37:ac:f2:90:40:de:8b:cb:1d:74:e3:75:cc: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C4:D4:AC:4D:95:DA:E4:D0:B2:E4:C1:CB:9C:46:1F:E5:E9:8C:A1 X509v3 Authority Key Identifier: keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:33:3b:ff:ad:1b:9b:b7:60:8b:69:ab:a8:b1:24:35:34:0d: e2:78:cd:ff:7b:94:34:51:e6:eb:04:dd:05:b6:ef:72:e9:ba: ab:28:bf:57:ca:03:38:dc:d2:b3:54:f1:6a:20:8c:2d:54:35: 69:94:90:09:0c:2a:45:9b:dc:bf:d6:3e:83:b7:c7:eb:1d:27: 56:a9:90:86:b9:57:34:6b:4b:01:49:e4:b2:b1:0d:5d:c4:c1: 4b:b8:24:0b:db:1e:e5:54:01:7b:02:b6:bb:79:71:d9:9b:12: 0b:50:88:bf:9e:72:8e:ba:5e:a5:c1:56:9d:34:73:99:4e:57: 53:b1:1b:c3:01:f5:be:1a:e7:a2:33:1c:09:5c:62:a8:3a:2c: 03:f4:c2:15:ca:2f:24:ac:d0:d7:cc:46:a8:52:a6:95:91:61: 16:e0:c2:05:74:5a:e2:d4:da:b0:f4:05:20:49:6c:48:ca:2f: db:15:ff:28:8c:4b:30:58:2f:56:57:7c:b6:a3:91:2a:e0:10: 89:53:0c:3e:5e:47:65:99:5f:90:2e:f2:7a:6d:eb:73:3b:d0: df:5e:b4:94:18:07:fa:17:42:e8:32:3d:52:75:b0:02:f1:d5: 95:63:b9:0f:c2:4f:54:74:ba:9b:60:5e:bd:f5:d9:8f:54:a3: 18:f4:54:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvxqSWXOkxvSj72Cv/mdMFVfWG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1 MEUyODU3MzAeFw0yNjA1MTIxOTE1MTNaFw0yNjA1MTMyMTMyMTNaMDMxMTAvBgNV BAMTKDdBQzRENEFDNEQ5NURBRTREMEIyRTRDMUNCOUM0NjFGRTVFOThDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIFzcFISp3jVnBVm9dw0h297bb wurMyR/tXH9RoJSZ+fVQ06a8xa5x37/feXKp4QzgfWISxEH22kQmiX91yWWQacqI sESi8Bec6UgCz3KJWPog95U0jj1qvOhG+4oveebt3uXbmqw161gH5PCB/96DRyKs nkHKiH6FROQNZ1si4LZuFVAsX4n8j+5aQnSEF/go+fNsrI04Gtg+RrOOTl55GWJC yGyxHT5VH9hACWmMYCit/7n2HjablT34md61ayytrKv08rO6VvbZiGMrd+Kof6I6 RGTu2pRKCfAe1vDgpNQD9N5A6kywT2Z72S2uqxvYN6zykEDei8sddON1zGiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUesTUrE2V2uTQsuTBy5xGH+XpjKEwHwYDVR0j BBgwFoAUHMyfkDsHlyWdSFGDH9t06FDihXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhMjZhMTAtNThlOC00M2M3LTk0N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAz QjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1MEUyODU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQ0NDOUY5MDNCMDc5NzI1OUQ0ODUxODMxRkRCNzRFODUwRTI4 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0 RTg1MEUyODU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIzO/+tG5u3YItpq6ixJDU0DeJ4zf97lDRR 5usE3QW273Lpuqsov1fKAzjc0rNU8WogjC1UNWmUkAkMKkWb3L/WPoO3x+sdJ1ap kIa5VzRrSwFJ5LKxDV3EwUu4JAvbHuVUAXsCtrt5cdmbEgtQiL+eco66XqXBVp00 c5lOV1OxG8MB9b4a56IzHAlcYqg6LAP0whXKLySs0NfMRqhSppWRYRbgwgV0WuLU 2rD0BSBJbEjKL9sV/yiMSzBYL1ZXfLajkSrgEIlTDD5eR2WZX5Au8npt63M70N9e tJQYB/oXQugyPVJ1sALx1ZVjuQ/CT1R0uptgXr312Y9Uoxj0VIw= -----END CERTIFICATE-----Generated at Wed May 13 04:51:35 2026 by rpki-client