$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: h2UpgZwPRjvehN6wGBlBp+AJiCCfX1KoFTHCRkMdC14= Subject key identifier: 30:E1:72:D7:D1:83:3A:31:2C:07:AA:52:BB:37:9E:BE:AB:44:F5:A6 Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 29F1301C7FFECA6F2DA21BFD689C2F21AE5D5034 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:16:14 +0000 Manifest this update: Tue 16 Jun 2026 18:11:14 +0000 Manifest next update: Wed 17 Jun 2026 20:45:14 +0000 Files and hashes: 1: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) 2: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: TNOzbXlOct1uEtu+srwv0QNUgBLaI+9UFqzHLZE3kRw=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f1:30:1c:7f:fe:ca:6f:2d:a2:1b:fd:68:9c:2f:21:ae:5d:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Jun 16 18:11:14 2026 GMT Not After : Jun 17 20:45:14 2026 GMT Subject: CN=30E172D7D1833A312C07AA52BB379EBEAB44F5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:bf:93:c2:04:49:c6:22:98:87:54:7a:44: 93:9a:b0:8d:88:e2:85:48:77:6d:59:3e:9c:96:ab: 98:8b:59:e1:e7:74:c6:06:5b:f6:75:1d:fc:31:6e: 6b:b6:97:7f:a7:e0:5b:45:c5:c5:76:7c:d5:a3:a9: 7a:9d:71:76:a4:21:2f:7b:6d:97:83:ac:53:03:28: c3:a1:ff:09:65:19:6d:dd:1d:f1:35:ce:1b:11:a1: 23:f2:11:6b:ff:73:46:59:22:e9:3b:5e:20:e0:00: 52:aa:1c:54:2e:80:ab:a3:cb:66:ac:53:1b:15:c5: 06:5d:7d:8f:2a:28:de:6d:3b:fc:ef:ec:a9:02:b5: 26:ec:2a:fd:7e:b1:f7:a6:79:b0:f2:52:55:55:04: 05:80:89:16:81:a5:9a:88:2e:00:d4:3e:21:77:f7: 46:5a:eb:9b:b3:c2:c8:68:6b:75:72:9c:e3:52:0f: ec:45:bd:25:4b:91:6d:cc:48:7b:e4:46:44:94:17: 63:88:68:da:a1:aa:3f:78:3a:60:aa:4a:54:ce:45: e3:c0:a1:92:88:3e:47:ac:be:17:42:b0:7a:a6:15: 49:f2:cf:1c:46:92:3e:e5:ef:ed:8c:07:ec:e8:53: 90:7a:a4:da:0c:9f:81:16:30:cb:b7:74:d8:56:7f: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E1:72:D7:D1:83:3A:31:2C:07:AA:52:BB:37:9E:BE:AB:44:F5:A6 X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a6:4d:2c:e3:14:0e:c5:90:2f:a2:ee:a9:5a:74:f4:fa:38: f0:28:73:06:44:cf:47:ec:be:59:96:60:00:fe:94:93:94:96: e3:86:9f:65:9a:9a:29:e4:ec:98:48:60:0c:61:84:0b:b0:da: 57:cc:a1:2a:cf:2c:26:09:1f:09:c0:63:c7:f4:de:e5:80:47: 11:a1:00:63:c6:7d:4e:36:8e:c7:15:42:e8:c4:49:b2:c1:9e: f4:88:c1:08:c1:f1:93:19:8d:ce:2e:91:bf:7e:07:72:52:ea: cc:6d:99:74:ec:b6:f2:17:47:72:01:a1:ec:64:ef:4a:88:e6: d4:1f:2e:87:bb:e6:93:96:65:61:54:55:5a:75:4b:6f:55:a6: 19:35:44:45:ac:55:2c:28:9c:f7:f5:73:8d:dd:d6:21:4d:9d: db:f4:e0:2a:5b:fd:c0:2a:f5:09:7a:6f:ce:b8:4a:9d:d8:83: 43:b5:e5:df:4f:dd:27:6f:ee:8d:2b:7c:92:70:ee:e1:a6:49: 09:e3:cd:16:75:2b:6e:28:be:de:39:1a:bc:2c:5d:69:f1:6b: 8e:29:f1:a1:77:7d:cd:82:73:9e:66:85:e9:02:66:84:7a:ed: 0e:24:d1:31:bc:f3:ff:c9:9f:09:a0:42:0d:2e:7f:7a:b5:8c: 98:7d:87:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfEwHH/+ym8tohv9aJwvIa5dUDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA2MTYxODExMTRaFw0yNjA2MTcyMDQ1MTRaMDMxMTAvBgNV BAMTKDMwRTE3MkQ3RDE4MzNBMzEyQzA3QUE1MkJCMzc5RUJFQUI0NEY1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibr+TwgRJxiKYh1R6RJOasI2I 4oVId21ZPpyWq5iLWeHndMYGW/Z1Hfwxbmu2l3+n4FtFxcV2fNWjqXqdcXakIS97 bZeDrFMDKMOh/wllGW3dHfE1zhsRoSPyEWv/c0ZZIuk7XiDgAFKqHFQugKujy2as UxsVxQZdfY8qKN5tO/zv7KkCtSbsKv1+sfemebDyUlVVBAWAiRaBpZqILgDUPiF3 90Za65uzwshoa3VynONSD+xFvSVLkW3MSHvkRkSUF2OIaNqhqj94OmCqSlTORePA oZKIPkesvhdCsHqmFUnyzxxGkj7l7+2MB+zoU5B6pNoMn4EWMMu3dNhWf9+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOFy19GDOjEsB6pSuzeevqtE9aYwHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKmTSzjFA7FkC+i7qladPT6OPAocwZEz0fs vlmWYAD+lJOUluOGn2Wamink7JhIYAxhhAuw2lfMoSrPLCYJHwnAY8f03uWARxGh AGPGfU42jscVQujESbLBnvSIwQjB8ZMZjc4ukb9+B3JS6sxtmXTstvIXR3IBoexk 70qI5tQfLoe75pOWZWFUVVp1S29Vphk1REWsVSwonPf1c43d1iFNndv04Cpb/cAq 9Ql6b864Sp3Yg0O15d9P3Sdv7o0rfJJw7uGmSQnjzRZ1K24ovt45GrwsXWnxa44p 8aF3fc2Cc55mhekCZoR67Q4k0TG88//JnwmgQg0uf3q1jJh9h/8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:17 2026 by rpki-client