$ rpki-client -vvf rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft File: 1FF488AB707220858C10BA99E5944DE409195015.mft (raw, json) Hash identifier: /Tf7qap2YCC/ScJCIPLSPgAzWIp4UKR8kdRQXYk7jo4= Subject key identifier: A3:E2:DE:7D:D5:FD:B2:4B:B0:45:C6:E2:1D:77:F3:96:11:A0:03:EB Authority key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 Certificate issuer: /CN=1FF488AB707220858C10BA99E5944DE409195015 Certificate serial: 3B21C1471310AB0102EA3F7F6E369AB02767316A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:05:17 +0000 Manifest this update: Tue 12 May 2026 22:00:17 +0000 Manifest next update: Wed 13 May 2026 22:40:17 +0000 Files and hashes: 1: 1FF488AB707220858C10BA99E5944DE409195015.crl (hash: Pp4unwGcbz6gZ/Wu+/iC3sNkqphUjY3yRzrpEtIi/h8=) 2: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: 6EwDqg7LpLZJUkIylUyUl3veH/xN6XvmcMqV9SdWGwQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:21:c1:47:13:10:ab:01:02:ea:3f:7f:6e:36:9a:b0:27:67:31:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF488AB707220858C10BA99E5944DE409195015 Validity Not Before: May 12 22:00:17 2026 GMT Not After : May 13 22:40:17 2026 GMT Subject: CN=A3E2DE7DD5FDB24BB045C6E21D77F39611A003EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:44:c7:13:58:e7:a7:32:fc:ab:e5:47:24: e7:fe:b5:f3:8d:ed:d8:c0:0b:94:e4:3a:9b:c7:34: 5e:7e:d2:29:bd:69:35:46:23:d9:e0:49:0c:b1:b4: 2d:4c:17:85:30:fc:7e:2b:c9:bb:d9:d6:82:33:9e: d6:79:a5:d1:b0:00:a3:ee:7c:9b:f0:88:0f:92:b8: 28:09:50:cd:6d:4b:91:9c:f0:fb:42:91:d8:01:15: 8c:5e:cc:45:81:60:6b:a0:58:46:93:5a:30:d1:7c: d8:65:54:66:cc:e0:6a:a3:80:78:84:37:91:14:e9: e8:03:d6:61:6e:10:6b:c5:68:30:9b:fd:3e:54:5e: f1:c4:5d:d0:b5:16:60:4f:b2:75:24:12:f8:a7:80: c7:2b:11:00:67:fa:35:80:b2:a2:da:7a:55:e3:dc: f2:b2:3b:99:0b:62:ee:51:47:ec:76:96:f8:29:6f: ed:36:17:bf:62:69:44:15:88:ed:96:25:fb:5b:13: e0:76:1f:b8:81:96:17:fb:55:a0:7a:bd:d9:33:64: 69:96:7b:9b:78:e7:3d:af:a8:bb:b5:bc:cf:a3:c2: a2:21:22:ca:10:68:c9:f8:ff:37:21:40:ac:0f:f1: 63:ce:f1:59:c3:31:81:e7:aa:77:9d:9c:82:16:d7: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:DE:7D:D5:FD:B2:4B:B0:45:C6:E2:1D:77:F3:96:11:A0:03:EB X509v3 Authority Key Identifier: keyid:1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:16:47:21:e2:6a:a9:4e:d8:0e:c2:95:7b:75:9f:9d:f6:80: 44:37:23:4e:e1:1a:35:bb:c6:6d:26:64:e3:69:11:91:ee:e7: 46:68:50:35:a1:b5:0b:72:1b:5d:6d:5c:6e:e0:be:8b:09:62: 03:00:b9:b9:82:d3:ff:e5:b8:58:78:3a:23:d1:d0:d2:bf:b9: 17:ea:c4:a3:44:d7:45:37:02:b4:fe:a1:38:b4:fd:3b:e0:6c: 7b:16:9e:86:a6:f9:0c:f5:2a:c5:a6:c2:d3:49:bc:80:aa:b0: 84:9c:d8:b7:13:b0:0c:fd:cb:df:57:b7:b2:d0:47:db:7e:1e: 02:43:9f:d6:9d:ed:b2:ae:07:5e:7e:7a:99:43:16:ca:34:10: c4:fd:65:64:3d:58:67:a8:33:cc:d5:b8:3e:5d:7a:eb:53:cf: d3:0a:b8:2e:5d:66:50:8b:c4:37:ca:a6:08:ff:22:a7:c0:6e: 0c:8c:60:9d:f1:65:ed:8d:c5:c5:a1:12:d1:56:10:a2:e0:f7: d8:6e:08:d3:3a:34:e7:fc:68:97:9b:bc:45:31:5d:7d:3a:4a: 13:80:2b:9c:e6:7d:5b:fb:7b:de:42:65:01:b5:c8:77:85:34: 04:cb:06:72:cd:a8:14:e0:f7:85:e7:ef:d5:f0:05:4f:2c:1a: 5f:44:2f:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyHBRxMQqwEC6j9/bjaasCdnMWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRERTQw OTE5NTAxNTAeFw0yNjA1MTIyMjAwMTdaFw0yNjA1MTMyMjQwMTdaMDMxMTAvBgNV BAMTKEEzRTJERTdERDVGREIyNEJCMDQ1QzZFMjFENzdGMzk2MTFBMDAzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfUTHE1jnpzL8q+VHJOf+tfON 7djAC5TkOpvHNF5+0im9aTVGI9ngSQyxtC1MF4Uw/H4rybvZ1oIzntZ5pdGwAKPu fJvwiA+SuCgJUM1tS5Gc8PtCkdgBFYxezEWBYGugWEaTWjDRfNhlVGbM4GqjgHiE N5EU6egD1mFuEGvFaDCb/T5UXvHEXdC1FmBPsnUkEvingMcrEQBn+jWAsqLaelXj 3PKyO5kLYu5RR+x2lvgpb+02F79iaUQViO2WJftbE+B2H7iBlhf7VaB6vdkzZGmW e5t45z2vqLu1vM+jwqIhIsoQaMn4/zchQKwP8WPO8VnDMYHnqnednIIW1yoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+LefdX9skuwRcbiHXfzlhGgA+swHwYDVR0j BBgwFoAUH/SIq3ByIIWMELqZ5ZRN5AkZUBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1OWI2YTMtYjc0Yi00YmFhLTk5M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3 MDcyMjA4NThDMTBCQTk5RTU5NDRERTQwOTE5NTAxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkY0ODhBQjcwNzIyMDg1OEMxMEJBOTlFNTk0NERFNDA5MTk1 MDE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRE RTQwOTE5NTAxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEWRyHiaqlO2A7ClXt1n532gEQ3I07hGjW7 xm0mZONpEZHu50ZoUDWhtQtyG11tXG7gvosJYgMAubmC0//luFh4OiPR0NK/uRfq xKNE10U3ArT+oTi0/TvgbHsWnoam+Qz1KsWmwtNJvICqsISc2LcTsAz9y99Xt7LQ R9t+HgJDn9ad7bKuB15+eplDFso0EMT9ZWQ9WGeoM8zVuD5deutTz9MKuC5dZlCL xDfKpgj/IqfAbgyMYJ3xZe2NxcWhEtFWEKLg99huCNM6NOf8aJebvEUxXX06ShOA K5zmfVv7e95CZQG1yHeFNATLBnLNqBTg94Xn79XwBU8sGl9EL1w= -----END CERTIFICATE-----Generated at Wed May 13 08:40:07 2026 by rpki-client