$ rpki-client -vvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: NZEPpX2I+d3Gp95y/v/NPpNgO3p/CCtzvsWByH1CgfM= Subject key identifier: 8A:EF:06:3B:57:A3:57:E9:A6:02:AD:89:B1:36:03:34:E9:ED:16:50 Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 7C9EFBD643958098C4A9C0B185AC544985D291D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 05:21:20 +0000 Manifest this update: Thu 23 Jul 2026 05:16:20 +0000 Manifest next update: Fri 24 Jul 2026 09:12:20 +0000 Files and hashes: 1: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: 5KMcnZw66T7q8yXN0S796ngKSra7FHDMRBrDX4kFqEA=) 2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9e:fb:d6:43:95:80:98:c4:a9:c0:b1:85:ac:54:49:85:d2:91:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Jul 23 05:16:20 2026 GMT Not After : Jul 24 09:12:20 2026 GMT Subject: CN=8AEF063B57A357E9A602AD89B1360334E9ED1650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:82:40:64:b0:0f:84:24:8f:7b:e6:94:ef:57: da:a1:b2:67:33:55:3b:0e:c6:19:a1:43:b7:0d:f5: 14:42:23:46:b4:54:9d:f9:a1:78:5b:cd:83:32:0e: b4:e9:b9:37:47:1e:e2:ab:b3:3e:7d:ed:47:d8:9f: af:87:7e:74:88:c4:d1:77:1c:fe:d5:ed:1b:4e:85: 81:17:a7:15:0a:47:03:1f:1d:78:3d:f8:b8:86:b6: a9:d8:97:ba:14:ff:bf:ac:2e:8d:82:1c:ae:b1:70: 5c:65:b6:c9:d2:af:71:87:90:72:a0:27:7e:60:f3: 1f:2d:00:ae:cd:b2:3c:72:65:7a:60:e3:9f:68:3d: 26:5c:27:cd:d7:e9:ae:b6:55:20:79:6a:fb:8c:9a: 57:67:c6:cd:38:1c:28:0f:81:d6:84:b6:ea:00:d8: 04:6a:6e:88:0a:66:61:ea:ff:fe:3a:99:d5:1b:18: c8:40:fd:ee:d9:10:11:85:a9:5b:6a:f9:bc:1a:af: 6b:9e:18:e3:ea:06:4b:62:8e:7c:a0:fa:8e:57:dc: 1c:ba:ff:96:56:f4:61:15:d6:df:4f:b7:66:ac:0e: cf:46:bc:4a:e9:73:90:dd:bf:7c:e0:89:d9:99:98: 83:80:01:b7:77:2c:eb:6a:7e:15:f8:46:10:76:a3: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EF:06:3B:57:A3:57:E9:A6:02:AD:89:B1:36:03:34:E9:ED:16:50 X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a5:db:cb:26:ed:6b:e1:1e:2e:92:39:77:ce:d6:89:6f:79: 49:ff:34:d3:db:1e:de:2f:44:f6:bc:57:6f:2f:28:9c:fc:7f: b6:fb:d7:3e:79:41:fb:f1:00:ef:6b:30:8c:be:00:cd:10:85: 67:d8:16:88:34:1c:9a:c7:1c:4d:c9:36:b3:9c:01:e4:b4:c3: c5:82:93:2c:43:74:c1:ce:00:7a:f0:aa:31:e6:a5:82:75:ca: eb:0c:f0:e9:c5:0a:86:b9:2f:92:98:a1:75:74:a9:d9:5f:b9: 1b:d3:1e:53:f6:e4:6f:2d:54:f7:03:25:2e:07:15:a2:b1:e6: d4:fe:01:f8:7e:26:ba:77:91:3f:61:f5:fe:1e:3b:65:7f:dd: 53:8b:37:43:15:ad:66:45:86:37:cb:25:48:7a:a0:26:30:a4: 4c:91:11:10:39:86:35:03:3f:1e:7b:8f:66:48:6b:5e:9a:e7: 72:80:0c:4f:8c:a5:5f:3d:78:4e:00:af:41:54:92:a4:03:5e: 04:39:f8:5a:86:4f:82:b0:1a:cf:13:0f:b3:62:a9:a5:2f:34: ab:00:13:5b:ae:e3:32:94:f7:3c:97:19:ba:b6:5d:8e:53:89: 0d:dd:5c:99:b5:61:f7:82:cf:14:9d:70:0b:7d:f7:bf:82:70: de:90:2e:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJ771kOVgJjEqcCxhaxUSYXSkdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA3MjMwNTE2MjBaFw0yNjA3MjQwOTEyMjBaMDMxMTAvBgNV BAMTKDhBRUYwNjNCNTdBMzU3RTlBNjAyQUQ4OUIxMzYwMzM0RTlFRDE2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkgkBksA+EJI975pTvV9qhsmcz VTsOxhmhQ7cN9RRCI0a0VJ35oXhbzYMyDrTpuTdHHuKrsz597UfYn6+HfnSIxNF3 HP7V7RtOhYEXpxUKRwMfHXg9+LiGtqnYl7oU/7+sLo2CHK6xcFxltsnSr3GHkHKg J35g8x8tAK7NsjxyZXpg459oPSZcJ83X6a62VSB5avuMmldnxs04HCgPgdaEtuoA 2ARqbogKZmHq//46mdUbGMhA/e7ZEBGFqVtq+bwar2ueGOPqBktijnyg+o5X3By6 /5ZW9GEV1t9Pt2asDs9GvErpc5Ddv3zgidmZmIOAAbd3LOtqfhX4RhB2oyOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiu8GO1ejV+mmAq2JsTYDNOntFlAwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOl28sm7WvhHi6SOXfO1olveUn/NNPbHt4v RPa8V28vKJz8f7b71z55QfvxAO9rMIy+AM0QhWfYFog0HJrHHE3JNrOcAeS0w8WC kyxDdMHOAHrwqjHmpYJ1yusM8OnFCoa5L5KYoXV0qdlfuRvTHlP25G8tVPcDJS4H FaKx5tT+Afh+Jrp3kT9h9f4eO2V/3VOLN0MVrWZFhjfLJUh6oCYwpEyRERA5hjUD Px57j2ZIa16a53KADE+MpV89eE4Ar0FUkqQDXgQ5+FqGT4KwGs8TD7NiqaUvNKsA E1uu4zKU9zyXGbq2XY5TiQ3dXJm1YfeCzxSdcAt997+CcN6QLsI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:45 2026 by rpki-client