$ rpki-client -vvf rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft File: 1FF488AB707220858C10BA99E5944DE409195015.mft (raw, json) Hash identifier: yQBE0jkU2h6DhAwSth1J+cYdAZoZDhH0pG8P6/HZte8= Subject key identifier: 43:CF:BF:17:27:EE:B6:D9:5E:6D:D6:75:E5:FB:E9:74:82:DA:B0:86 Authority key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 Certificate issuer: /CN=1FF488AB707220858C10BA99E5944DE409195015 Certificate serial: 5DFBE1ADFD5AFC9822FAFEF7E63971E55123B74F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:52:48 +0000 Manifest this update: Fri 24 Jul 2026 02:47:48 +0000 Manifest next update: Sat 25 Jul 2026 03:58:48 +0000 Files and hashes: 1: 1FF488AB707220858C10BA99E5944DE409195015.crl (hash: 5CNKHbiDOdISx7A59soNMi/fx+B/XHQGfXxLDe4yhao=) 2: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: 6EwDqg7LpLZJUkIylUyUl3veH/xN6XvmcMqV9SdWGwQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fb:e1:ad:fd:5a:fc:98:22:fa:fe:f7:e6:39:71:e5:51:23:b7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF488AB707220858C10BA99E5944DE409195015 Validity Not Before: Jul 24 02:47:48 2026 GMT Not After : Jul 25 03:58:48 2026 GMT Subject: CN=43CFBF1727EEB6D95E6DD675E5FBE97482DAB086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:73:94:21:40:f4:a0:2c:aa:45:b9:ae:a0: 78:37:4e:cd:97:f7:d4:bf:b2:89:7a:f1:be:b2:44: 15:e4:2a:03:0f:0a:1d:41:0d:e8:94:8b:0e:31:1a: 07:c8:29:58:43:79:d7:1f:b2:44:67:c9:f9:dd:9b: c1:14:a2:27:80:83:bb:b9:b6:ac:bf:42:21:49:53: ea:f3:8a:c7:1b:b2:9d:1a:65:4e:56:a7:c6:2e:da: 8e:65:31:0e:d9:7a:3d:9f:a5:e3:a1:d4:c0:af:50: 7b:f4:f0:de:ae:7d:9e:bd:70:38:c9:44:10:c4:fe: 62:28:eb:fa:b8:19:54:f1:97:7d:23:db:3c:98:84: 39:68:6e:ea:9a:2e:4a:03:4f:cb:c1:11:f9:40:0b: d7:e9:a4:2a:dc:23:66:2f:9a:7e:22:3f:e2:2d:65: 50:dd:9b:ec:30:e4:c5:bf:69:33:3b:4a:82:2b:fa: 7f:c3:ca:67:cc:40:7b:1f:7e:8e:bd:bc:7e:3e:eb: c9:fc:c5:86:4d:1a:76:6d:0f:9a:c0:42:8d:bd:ab: 0e:ce:ee:74:d2:fb:84:3a:6f:64:20:5b:8d:42:29: 65:4c:5a:ca:cf:27:36:77:14:a6:d5:31:05:58:95: f5:65:b4:a6:a3:41:9e:8d:30:39:2f:b1:bc:ff:28: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CF:BF:17:27:EE:B6:D9:5E:6D:D6:75:E5:FB:E9:74:82:DA:B0:86 X509v3 Authority Key Identifier: keyid:1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d9:34:9d:24:e5:3e:00:85:50:51:b8:4b:9f:fe:c5:0f:7a: 08:85:c6:9f:51:61:c5:5a:c7:af:ef:45:c7:c2:fe:cc:7c:0f: 23:46:8d:41:c2:26:d6:5b:88:74:94:38:f7:0e:c7:0b:a2:ad: a9:1e:63:35:a6:73:a7:16:9f:a5:69:01:00:af:21:65:57:a4: 34:6d:78:a6:0f:b5:52:73:07:78:d5:3e:74:e5:da:47:34:d1: 28:c3:b8:67:29:84:12:37:85:5b:8c:26:71:04:18:e3:0c:4d: 1c:1b:12:cc:46:fd:9c:6a:3a:4d:6f:b1:52:e3:84:02:9c:94: 23:a6:77:f5:56:ad:0a:df:2b:29:6a:68:dc:95:10:f1:f1:a0: 4c:bc:a8:6c:41:46:b1:76:22:bd:a5:3c:66:7d:27:c5:dd:de: ff:09:82:b1:8d:93:2c:53:59:b9:27:7a:e9:1c:ce:1c:0b:43: 23:5d:e2:fe:8e:48:fa:22:1e:56:12:50:4f:22:fe:99:60:99: 91:94:ea:4c:16:8d:0e:1a:f5:10:3e:fa:14:cd:3a:e8:c2:2f: d6:11:78:5c:0f:01:0e:09:a6:6f:b5:be:e0:8d:da:3c:69:84: 6f:29:ea:a1:3c:b3:15:2d:00:cf:60:5d:fe:5c:61:d5:bf:48: fb:2b:44:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfvhrf1a/Jgi+v735jlx5VEjt08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRERTQw OTE5NTAxNTAeFw0yNjA3MjQwMjQ3NDhaFw0yNjA3MjUwMzU4NDhaMDMxMTAvBgNV BAMTKDQzQ0ZCRjE3MjdFRUI2RDk1RTZERDY3NUU1RkJFOTc0ODJEQUIwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUXOUIUD0oCyqRbmuoHg3Ts2X 99S/sol68b6yRBXkKgMPCh1BDeiUiw4xGgfIKVhDedcfskRnyfndm8EUoieAg7u5 tqy/QiFJU+rziscbsp0aZU5Wp8Yu2o5lMQ7Zej2fpeOh1MCvUHv08N6ufZ69cDjJ RBDE/mIo6/q4GVTxl30j2zyYhDlobuqaLkoDT8vBEflAC9fppCrcI2Yvmn4iP+It ZVDdm+ww5MW/aTM7SoIr+n/DymfMQHsffo69vH4+68n8xYZNGnZtD5rAQo29qw7O 7nTS+4Q6b2QgW41CKWVMWsrPJzZ3FKbVMQVYlfVltKajQZ6NMDkvsbz/KPOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8+/FyfuttlebdZ15fvpdILasIYwHwYDVR0j BBgwFoAUH/SIq3ByIIWMELqZ5ZRN5AkZUBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1OWI2YTMtYjc0Yi00YmFhLTk5M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3 MDcyMjA4NThDMTBCQTk5RTU5NDRERTQwOTE5NTAxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkY0ODhBQjcwNzIyMDg1OEMxMEJBOTlFNTk0NERFNDA5MTk1 MDE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRE RTQwOTE5NTAxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjZNJ0k5T4AhVBRuEuf/sUPegiFxp9RYcVa x6/vRcfC/sx8DyNGjUHCJtZbiHSUOPcOxwuirakeYzWmc6cWn6VpAQCvIWVXpDRt eKYPtVJzB3jVPnTl2kc00SjDuGcphBI3hVuMJnEEGOMMTRwbEsxG/ZxqOk1vsVLj hAKclCOmd/VWrQrfKylqaNyVEPHxoEy8qGxBRrF2Ir2lPGZ9J8Xd3v8JgrGNkyxT WbkneukczhwLQyNd4v6OSPoiHlYSUE8i/plgmZGU6kwWjQ4a9RA++hTNOujCL9YR eFwPAQ4Jpm+1vuCN2jxphG8p6qE8sxUtAM9gXf5cYdW/SPsrRE4= -----END CERTIFICATE-----Generated at Fri Jul 24 18:40:51 2026 by rpki-client