$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft (raw, json) Hash identifier: yWMbVKLObIr7RIa6Xs6zNxgSWfeTLDy3tmvqsW5PIXc= Subject key identifier: B2:1B:35:76:2B:9A:30:41:75:E2:EB:F0:11:2B:55:1A:17:5D:EA:D4 Authority key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Certificate issuer: /CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Certificate serial: 4C156BC0251DE6A86D5EFF4F9E02E587D06AE977 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft Manifest number: 74 Signing time: Wed 29 Jul 2026 00:42:01 +0000 Manifest this update: Wed 29 Jul 2026 00:37:01 +0000 Manifest next update: Thu 30 Jul 2026 01:17:01 +0000 Files and hashes: 1: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl (hash: uOSHPd6GLqh/PMGPdArFy0eeddGbB/OxcdVGDmoqYpk=) 2: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: qUv8iwGfDUNsSHoYpr8OtHbSrHxY05J4t5ZSAS55J1w=) 3: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YqAlX6I3eetKbPgn7q5+SNbPjP9RfqZzOtFwmWR8tB8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:15:6b:c0:25:1d:e6:a8:6d:5e:ff:4f:9e:02:e5:87:d0:6a:e9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Validity Not Before: Jul 29 00:37:01 2026 GMT Not After : Jul 30 01:17:01 2026 GMT Subject: CN=B21B35762B9A304175E2EBF0112B551A175DEAD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:23:a7:09:11:60:22:77:38:31:94:7a:18: a6:05:39:a1:e9:55:b3:3c:d4:24:90:73:a1:5c:5a: e7:9a:85:b1:d2:08:b9:b2:1a:1a:75:c1:1a:85:47: 81:b2:af:ff:18:67:0f:57:e9:ef:ae:cf:b7:6e:7d: 02:0b:16:35:09:5e:e7:ab:81:1e:0d:6d:57:c2:79: ba:dd:6a:f8:6f:69:aa:3a:d4:30:97:0d:74:83:8f: 6d:2b:e8:17:8d:a3:40:8a:2a:0e:96:f3:05:c7:d9: cd:18:50:88:b6:f8:3d:cd:94:d3:43:b2:eb:83:65: 5b:5a:f0:50:76:7c:b5:22:6a:55:56:23:62:22:0f: 11:6e:50:cc:ad:2f:06:7f:7c:ae:20:93:27:6d:90: 76:3a:bf:53:99:2d:f9:fa:94:a2:09:13:df:28:e6: c9:16:6a:b2:e3:ca:5e:a4:ee:35:e7:68:89:76:b3: 9b:29:ed:99:13:3f:42:d1:31:b4:7f:df:67:d3:90: 70:8d:04:0b:1c:4d:69:d5:26:f4:5c:6f:d5:67:15: 80:70:57:34:38:08:19:fd:eb:a6:b6:b5:32:eb:d8: a7:93:c5:47:ad:b3:f8:fc:87:ef:91:54:a8:7e:ca: 1b:dc:cd:55:63:7b:1a:e7:ad:2b:6a:24:43:ba:88: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1B:35:76:2B:9A:30:41:75:E2:EB:F0:11:2B:55:1A:17:5D:EA:D4 X509v3 Authority Key Identifier: keyid:1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8c:81:b4:9e:93:fb:17:c0:9b:b1:16:5e:d4:c9:a7:a7:44: 89:73:54:1b:27:6d:6e:38:de:e1:20:67:0e:b3:7b:e2:c4:48: 9a:0e:09:96:6c:f6:ae:3a:59:ba:08:45:ae:2c:74:df:19:c5: 32:e3:02:06:ea:cd:44:28:bf:ee:c7:a1:14:8f:53:eb:0f:ba: e2:c6:c4:c6:24:cb:0e:2a:b1:d8:1a:14:1c:94:6d:68:20:43: 93:1c:53:ba:61:c1:7e:d0:6f:74:37:d3:fd:33:c0:a6:f4:ab: ec:31:cd:50:1f:78:2b:6f:76:00:53:97:3d:b5:f0:44:6f:00: d0:bd:80:a2:06:7e:69:6c:13:56:a2:0e:03:9b:c9:71:02:89: a9:ac:ac:bb:f8:18:6c:8d:9d:a7:f4:be:95:7c:66:cc:a0:22: d1:1e:64:7b:e2:22:98:24:36:b8:ad:7c:b5:15:98:f9:24:59: fa:a4:7c:c9:c6:87:e7:05:7d:2e:58:2d:7d:68:bd:c6:39:32: b2:5f:2d:6d:4a:8f:18:c8:cb:b2:3c:20:fd:25:d4:1f:fb:06: 7b:92:19:b3:70:aa:9f:77:e4:bd:fa:2d:c5:56:77:fd:d2:56: 80:d8:98:8e:fb:2a:3e:fe:99:68:ed:a0:4c:b8:1a:dc:96:b3: 2e:66:7d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBVrwCUd5qhtXv9PngLlh9Bq6XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYyQkYy ODBGM0JBODAeFw0yNjA3MjkwMDM3MDFaFw0yNjA3MzAwMTE3MDFaMDMxMTAvBgNV BAMTKEIyMUIzNTc2MkI5QTMwNDE3NUUyRUJGMDExMkI1NTFBMTc1REVBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylSOnCRFgInc4MZR6GKYFOaHp VbM81CSQc6FcWueahbHSCLmyGhp1wRqFR4Gyr/8YZw9X6e+uz7dufQILFjUJXuer gR4NbVfCebrdavhvaao61DCXDXSDj20r6BeNo0CKKg6W8wXH2c0YUIi2+D3NlNND suuDZVta8FB2fLUialVWI2IiDxFuUMytLwZ/fK4gkydtkHY6v1OZLfn6lKIJE98o 5skWarLjyl6k7jXnaIl2s5sp7ZkTP0LRMbR/32fTkHCNBAscTWnVJvRcb9VnFYBw VzQ4CBn966a2tTLr2KeTxUets/j8h++RVKh+yhvczVVjexrnrStqJEO6iGVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUshs1diuaMEF14uvwEStVGhdd6tQwHwYDVR0j BBgwFoAUHkBK9s/wheIL7kx74qXyvygPO6gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwMDIyOGYtNmUyNS00Yzk2LTljZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZD RkYwODVFMjBCRUU0QzdCRTJBNUYyQkYyODBGM0JBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTQwNEFGNkNGRjA4NUUyMEJFRTRDN0JFMkE1RjJCRjI4MEYz QkE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvMUU0MDRBRjZDRkYwODVFMjBCRUU0QzdCRTJBNUYy QkYyODBGM0JBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCMgbSek/sXwJuxFl7UyaenRIlzVBsnbW44 3uEgZw6ze+LESJoOCZZs9q46WboIRa4sdN8ZxTLjAgbqzUQov+7HoRSPU+sPuuLG xMYkyw4qsdgaFByUbWggQ5McU7phwX7Qb3Q30/0zwKb0q+wxzVAfeCtvdgBTlz21 8ERvANC9gKIGfmlsE1aiDgObyXECiamsrLv4GGyNnaf0vpV8ZsygItEeZHviIpgk NritfLUVmPkkWfqkfMnGh+cFfS5YLX1ovcY5MrJfLW1KjxjIy7I8IP0l1B/7BnuS GbNwqp935L36LcVWd/3SVoDYmI77Kj7+mWjtoEy4GtyWsy5mfUA= -----END CERTIFICATE-----Generated at Wed Jul 29 13:28:00 2026 by rpki-client