$ rpki-client -vvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft File: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft (raw, json) Hash identifier: TaVP82ORkzgOH0VT+QB3JAOD2jymkRA1MrQrnq22R+E= Subject key identifier: 3A:7D:DB:21:F8:E9:EC:D2:0A:E4:5A:05:3F:B3:CE:3F:92:06:E3:1C Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 Certificate issuer: /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Certificate serial: 10D57F9FE38E07E4E27C1414FE57B8DF323262C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:08:41 +0000 Manifest this update: Thu 23 Jul 2026 11:03:41 +0000 Manifest next update: Fri 24 Jul 2026 15:04:41 +0000 Files and hashes: 1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: IOAwzQ73Cr2im/VcFN1TaAQYk3NUUawiD2oAPVCKSrc=) 3: 1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl (hash: PXCcnKHb7J90p/Kb18zPAwzFw75G2z5I3XeJUxCeTNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d5:7f:9f:e3:8e:07:e4:e2:7c:14:14:fe:57:b8:df:32:32:62:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467 Validity Not Before: Jul 23 11:03:41 2026 GMT Not After : Jul 24 15:04:41 2026 GMT Subject: CN=3A7DDB21F8E9ECD20AE45A053FB3CE3F9206E31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:74:23:f6:1c:a9:ab:8b:e6:a1:7b:85:97: ee:54:fd:d8:89:44:99:5e:50:8b:8f:3a:53:62:4f: 34:22:6c:8d:03:7d:50:4c:5f:0e:26:2c:08:ca:78: 1b:7f:ca:04:ea:57:40:2e:3a:f6:87:2f:f8:6b:f2: 9a:45:59:d9:f6:7b:1e:3e:3c:1f:b0:6f:5c:03:b6: ff:e9:15:b0:e7:e2:04:9c:51:27:5f:03:eb:28:3c: 03:33:e1:de:40:5d:19:bd:a4:7c:f6:07:af:ef:32: 7f:60:c4:ba:84:f2:6f:8d:40:64:ae:8c:11:17:2b: 03:a6:4f:7c:e7:0c:2a:57:22:21:6e:62:39:63:97: b6:32:a4:4d:27:da:54:4f:c9:3e:bb:bd:4a:cb:92: a7:0b:b6:ba:ab:55:03:61:fe:2d:9a:23:07:18:7e: 25:d3:15:0c:d4:91:d1:0e:0d:6e:b5:7c:d3:94:c7: 8a:ef:29:15:49:43:18:23:2a:b2:5c:15:a0:bc:8a: 6f:54:25:31:81:8f:d6:fc:bb:f6:bb:3e:21:92:fa: 19:6d:3a:2a:f5:2d:b9:41:1c:d7:b9:0e:bb:20:91: 4e:bb:7d:81:92:5e:92:12:88:84:66:d1:73:f7:3f: f3:af:ba:c8:4c:1a:d0:06:92:8b:68:40:7c:56:dc: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7D:DB:21:F8:E9:EC:D2:0A:E4:5A:05:3F:B3:CE:3F:92:06:E3:1C X509v3 Authority Key Identifier: keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:27:17:c6:46:3b:3d:43:3b:a6:8a:f1:0e:96:33:83:0d:9c: 55:f4:26:db:db:26:d4:91:44:ae:1d:cf:46:f4:dd:cf:a8:df: e7:89:67:00:81:94:c9:d5:ca:e3:37:1c:53:0c:87:2a:31:bf: 57:02:9f:24:c8:b7:61:38:db:8b:98:26:5d:2d:64:38:a5:f6: 43:f5:3c:01:ef:f6:6c:2a:b9:9f:9e:65:02:29:76:84:d6:93: 8b:10:40:be:f7:77:8a:e5:1a:3a:b8:68:b3:79:86:12:4b:fa: 90:4d:61:ca:7c:56:79:54:7f:73:20:15:70:76:19:20:09:da: 05:23:ab:86:ae:ac:36:97:e3:3e:95:81:8e:97:db:7f:99:88: 28:2f:ce:c0:bb:77:08:b9:0b:3f:c1:3c:46:52:e1:6c:f5:5a: 13:01:76:37:9c:bd:56:5d:b1:d0:4d:b8:53:63:af:e2:92:b5: 73:df:1e:9b:2f:2a:96:c3:01:80:8a:0e:a6:ff:a8:72:6c:66: 49:6d:0f:c1:e3:ba:9a:b3:46:7b:c8:60:a0:78:2c:f6:2f:15: 64:c5:23:e9:c0:c4:07:01:54:6f:fa:77:2b:70:90:7e:8a:58: 18:e1:6d:c2:dc:dc:43:49:b4:26:03:e5:bc:cd:83:f9:f2:4e: d0:25:ec:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENV/n+OOB+TifBQU/le43zIyYsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERGQUYy NzMwMjQ2NzAeFw0yNjA3MjMxMTAzNDFaFw0yNjA3MjQxNTA0NDFaMDMxMTAvBgNV BAMTKDNBN0REQjIxRjhFOUVDRDIwQUU0NUEwNTNGQjNDRTNGOTIwNkUzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvE3Qj9hypq4vmoXuFl+5U/diJ RJleUIuPOlNiTzQibI0DfVBMXw4mLAjKeBt/ygTqV0AuOvaHL/hr8ppFWdn2ex4+ PB+wb1wDtv/pFbDn4gScUSdfA+soPAMz4d5AXRm9pHz2B6/vMn9gxLqE8m+NQGSu jBEXKwOmT3znDCpXIiFuYjljl7YypE0n2lRPyT67vUrLkqcLtrqrVQNh/i2aIwcY fiXTFQzUkdEODW61fNOUx4rvKRVJQxgjKrJcFaC8im9UJTGBj9b8u/a7PiGS+hlt Oir1LblBHNe5DrsgkU67fYGSXpISiIRm0XP3P/OvushMGtAGkotoQHxW3HefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOn3bIfjp7NIK5FoFP7POP5IG4xwwHwYDVR0j BBgwFoAUHqYQz63XJ62qdPqb/o3frycwJGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDEwZWRkY2QtN2QzOC00NzY1LWFhMjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZB REQ3MjdBREFBNzRGQTlCRkU4RERGQUYyNzMwMjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUE2MTBDRkFERDcyN0FEQUE3NEZBOUJGRThEREZBRjI3MzAy NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvMUVBNjEwQ0ZBREQ3MjdBREFBNzRGQTlCRkU4RERG QUYyNzMwMjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUnF8ZGOz1DO6aK8Q6WM4MNnFX0JtvbJtSR RK4dz0b03c+o3+eJZwCBlMnVyuM3HFMMhyoxv1cCnyTIt2E424uYJl0tZDil9kP1 PAHv9mwquZ+eZQIpdoTWk4sQQL73d4rlGjq4aLN5hhJL+pBNYcp8VnlUf3MgFXB2 GSAJ2gUjq4aurDaX4z6VgY6X23+ZiCgvzsC7dwi5Cz/BPEZS4Wz1WhMBdjecvVZd sdBNuFNjr+KStXPfHpsvKpbDAYCKDqb/qHJsZkltD8HjupqzRnvIYKB4LPYvFWTF I+nAxAcBVG/6dytwkH6KWBjhbcLc3ENJtCYD5bzNg/nyTtAl7CA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:27 2026 by rpki-client