$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: JaBytwPlD+4Li4qmjwyZstgqn2Uku6geeixUG7hpImA= Subject key identifier: E0:E1:C7:B8:AF:86:2D:7E:BB:EE:65:84:4B:48:6E:6D:91:F7:3D:07 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 725941087DCF8CC9457CD8316EC181C0E450465F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 21:07:35 +0000 Manifest this update: Tue 28 Jul 2026 21:02:35 +0000 Manifest next update: Wed 29 Jul 2026 22:45:35 +0000 Files and hashes: 1: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: WS4t5Dsxay0mcQOZrhPM/3MSKxrxBzm56Aey9snAJcs=) 2: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) 3: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) 4: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:59:41:08:7d:cf:8c:c9:45:7c:d8:31:6e:c1:81:c0:e4:50:46:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Jul 28 21:02:35 2026 GMT Not After : Jul 29 22:45:35 2026 GMT Subject: CN=E0E1C7B8AF862D7EBBEE65844B486E6D91F73D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:04:75:dc:b5:f9:ed:df:2e:a2:a1:b7:6c: 4a:83:e5:c0:d1:d4:06:01:18:bd:af:4b:60:2a:cf: 39:8c:bd:ec:40:83:d5:41:45:d0:82:ef:8d:df:3a: 1c:37:46:9c:f9:88:a4:ed:d6:92:94:04:eb:ae:b3: 9d:a3:86:b5:bb:6e:88:34:93:c5:94:da:14:ea:94: 63:e7:fe:ff:9b:31:d6:c1:3e:ec:4b:28:b1:fb:3c: 37:78:18:64:b8:1d:cc:5c:35:69:a5:d3:84:29:20: 04:35:c3:f0:3d:da:25:d0:2d:6f:dd:fb:6e:2b:20: f5:48:71:62:f0:a6:eb:3b:c9:02:dd:ad:b6:4a:63: 9f:e3:41:1b:2e:73:57:03:4a:d6:9f:23:c9:7e:54: ab:a6:9e:be:1d:d7:96:43:84:27:ef:13:ec:6d:92: ed:3f:a3:bd:55:2c:a0:e0:50:bb:02:6f:4c:d6:1e: 22:16:53:f0:c3:0b:fa:f2:21:8b:0e:9c:ea:ec:d1: 7e:a4:03:0d:cb:26:30:8f:37:93:3e:57:dd:21:47: b2:2a:b9:6c:92:38:da:81:73:81:57:23:72:c1:d5: dd:a4:47:71:e3:27:8b:4f:ff:36:16:7a:20:c6:29: 11:0b:58:37:6d:18:9c:bb:7c:29:32:2e:8f:22:d5: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:C7:B8:AF:86:2D:7E:BB:EE:65:84:4B:48:6E:6D:91:F7:3D:07 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:53:29:70:8d:51:43:b7:a0:83:6b:75:33:8d:a8:6e:0a:7c: 81:09:b6:3a:2e:c4:6d:c6:a7:08:7e:74:3b:ba:dd:09:c1:29: c5:eb:a2:bf:b8:92:9f:47:d4:c0:17:83:da:88:f2:29:d1:41: e3:3b:45:79:11:cb:d2:e3:db:77:b3:f0:52:09:f5:cd:2e:f6: 79:f8:74:65:7e:18:18:5b:52:77:b0:68:7d:9f:1b:c0:89:5c: a8:80:26:07:c2:15:78:83:80:33:eb:f8:7f:c4:8f:87:1d:8d: ff:99:d7:c2:61:73:fe:c9:ce:34:d9:fc:ba:1f:00:e9:6d:1a: 97:de:fd:f0:03:f4:1a:74:e5:e2:27:df:79:e5:07:ee:ec:44: a0:79:ed:e3:9b:71:b7:16:5b:b4:0b:c8:f2:c3:f1:6f:4c:96: c8:26:fc:34:f5:e7:e5:63:a7:79:e3:44:92:87:a6:d9:93:b8: 3e:1d:cc:ae:ff:c6:65:b5:36:7c:e6:3f:d4:a0:15:bd:66:1c: 99:f1:46:6e:9a:5c:06:f6:af:22:eb:80:cc:0c:ff:16:25:70: bb:d8:60:70:1a:8b:25:6c:99:db:cf:f6:b3:7c:5e:1c:a5:da: 5e:88:41:a0:c9:00:b5:52:e5:22:13:dd:c0:68:95:27:82:45: 42:c7:64:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcllBCH3PjMlFfNgxbsGBwORQRl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA3MjgyMTAyMzVaFw0yNjA3MjkyMjQ1MzVaMDMxMTAvBgNV BAMTKEUwRTFDN0I4QUY4NjJEN0VCQkVFNjU4NDRCNDg2RTZEOTFGNzNEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lgR13LX57d8uoqG3bEqD5cDR 1AYBGL2vS2AqzzmMvexAg9VBRdCC743fOhw3Rpz5iKTt1pKUBOuus52jhrW7bog0 k8WU2hTqlGPn/v+bMdbBPuxLKLH7PDd4GGS4HcxcNWml04QpIAQ1w/A92iXQLW/d +24rIPVIcWLwpus7yQLdrbZKY5/jQRsuc1cDStafI8l+VKumnr4d15ZDhCfvE+xt ku0/o71VLKDgULsCb0zWHiIWU/DDC/ryIYsOnOrs0X6kAw3LJjCPN5M+V90hR7Iq uWySONqBc4FXI3LB1d2kR3HjJ4tP/zYWeiDGKRELWDdtGJy7fCkyLo8i1QW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OHHuK+GLX677mWES0hubZH3PQcwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1TKXCNUUO3oINrdTONqG4KfIEJtjouxG3G pwh+dDu63QnBKcXror+4kp9H1MAXg9qI8inRQeM7RXkRy9Lj23ez8FIJ9c0u9nn4 dGV+GBhbUnewaH2fG8CJXKiAJgfCFXiDgDPr+H/Ej4cdjf+Z18Jhc/7JzjTZ/Lof AOltGpfe/fAD9Bp05eIn33nlB+7sRKB57eObcbcWW7QLyPLD8W9Mlsgm/DT15+Vj p3njRJKHptmTuD4dzK7/xmW1NnzmP9SgFb1mHJnxRm6aXAb2ryLrgMwM/xYlcLvY YHAaiyVsmdvP9rN8Xhyl2l6IQaDJALVS5SIT3cBolSeCRULHZC4= -----END CERTIFICATE-----Generated at Wed Jul 29 05:40:22 2026 by rpki-client