$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json) Hash identifier: v0wkUbXO32kGAxYPsVL4lJRN/dnS5quSgb0tXY2xGvA= Subject key identifier: 73:C1:0A:49:E4:34:D5:A8:2E:64:3E:FF:F5:0A:BF:0F:D0:2C:FE:A9 Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573 Certificate serial: 1465E8855204617EBFCBDE6B854D340FC70EA1CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 06:19:52 +0000 Manifest this update: Tue 28 Jul 2026 06:14:52 +0000 Manifest next update: Wed 29 Jul 2026 09:27:52 +0000 Files and hashes: 1: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=) 2: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: Cq/0XixgXoINZfQT8PgGOLCgORg1YZuxD7UAB6vCwBI=) 3: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:65:e8:85:52:04:61:7e:bf:cb:de:6b:85:4d:34:0f:c7:0e:a1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573 Validity Not Before: Jul 28 06:14:52 2026 GMT Not After : Jul 29 09:27:52 2026 GMT Subject: CN=73C10A49E434D5A82E643EFFF50ABF0FD02CFEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8a:2e:db:c5:89:5c:66:e5:4c:31:7d:77:e5: 6c:b7:37:d4:b3:c9:1e:a7:f2:86:c1:d4:07:63:d0: 83:48:d3:11:e7:f1:7e:f3:cc:f2:34:cd:4c:7c:41: 85:75:97:da:93:26:25:d3:2f:2f:7f:fc:fa:a9:b9: fa:c2:df:f7:8d:d6:63:17:91:7c:2e:5f:1f:be:30: 0f:61:52:c3:10:cf:a3:35:92:9a:c0:35:97:aa:1f: c3:ed:ec:5c:d2:a3:f8:ce:2f:bc:7e:80:af:4f:a8: 87:e9:25:ce:57:56:7e:c3:de:44:e2:26:45:7f:88: ea:1c:f7:41:12:a6:3e:50:75:86:76:2d:7c:5f:8e: 6d:85:0f:d7:ce:5f:78:cb:98:26:ec:9d:af:d4:72: ab:79:cc:e8:2b:a7:21:9e:8e:21:8d:69:5c:ab:0f: a9:49:8e:4a:ad:5c:9e:08:73:1e:24:5f:9f:01:b7: dd:07:50:8c:58:8b:10:ca:e2:b1:0f:bd:9a:12:37: 00:b5:1c:74:c8:cb:f0:8e:a9:f7:40:b5:ee:09:bb: 4d:ea:4b:36:a1:f0:21:6e:03:76:e2:1f:21:ed:3c: be:5e:b7:a5:63:ac:22:7d:95:a2:7c:17:bf:f9:7c: 23:fa:43:6e:bb:ba:96:be:a5:32:25:70:99:cc:a9: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C1:0A:49:E4:34:D5:A8:2E:64:3E:FF:F5:0A:BF:0F:D0:2C:FE:A9 X509v3 Authority Key Identifier: keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:2a:1c:4b:41:db:91:5d:38:5f:62:ce:ed:63:0d:19:7e:f8: a7:53:dc:d6:f0:c9:84:ba:c0:97:dd:8f:14:eb:d7:ea:34:7f: 5f:88:e9:4b:95:e4:95:70:ac:9a:17:8c:f8:45:e6:70:88:34: fc:ff:00:ff:33:8e:7a:e9:37:dd:73:03:e8:3e:99:70:cc:6c: 0e:b6:0c:d3:f5:73:d1:38:69:44:ff:a3:ee:ec:08:4e:1b:a9: 54:fc:9f:4e:83:32:dc:a3:9b:b2:f3:75:3f:51:23:75:da:a7: 58:91:0d:e1:9b:e5:82:c7:1b:a0:25:f6:c1:9b:56:62:9a:f5: f0:12:91:4c:38:b2:f8:85:37:e3:48:5f:82:fc:4e:56:5d:1b: 89:af:b1:6c:5d:ba:79:4c:8b:9e:c6:a3:df:f3:a0:e9:24:fb: 2a:96:42:35:dc:57:0d:13:c4:f1:ee:bf:5b:ef:71:28:71:5c: dd:5c:b4:32:8a:af:ab:c5:8f:a1:ff:b7:c3:ae:07:66:1e:7e: 53:89:6c:e9:da:aa:7a:33:cf:70:cf:c3:34:fb:7b:62:38:4a: 63:5d:fb:7b:c7:e3:4b:00:81:df:18:8d:0b:8e:aa:66:c9:d4: 38:11:87:dd:bc:99:55:b4:85:63:c7:06:fb:32:23:75:83:18: af:d8:64:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGXohVIEYX6/y95rhU00D8cOoc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1 MEUyODU3MzAeFw0yNjA3MjgwNjE0NTJaFw0yNjA3MjkwOTI3NTJaMDMxMTAvBgNV BAMTKDczQzEwQTQ5RTQzNEQ1QTgyRTY0M0VGRkY1MEFCRjBGRDAyQ0ZFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ii7bxYlcZuVMMX135Wy3N9Sz yR6n8obB1Adj0INI0xHn8X7zzPI0zUx8QYV1l9qTJiXTLy9//PqpufrC3/eN1mMX kXwuXx++MA9hUsMQz6M1kprANZeqH8Pt7FzSo/jOL7x+gK9PqIfpJc5XVn7D3kTi JkV/iOoc90ESpj5QdYZ2LXxfjm2FD9fOX3jLmCbsna/Ucqt5zOgrpyGejiGNaVyr D6lJjkqtXJ4Icx4kX58Bt90HUIxYixDK4rEPvZoSNwC1HHTIy/COqfdAte4Ju03q Szah8CFuA3biHyHtPL5et6VjrCJ9laJ8F7/5fCP6Q267upa+pTIlcJnMqb6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc8EKSeQ01aguZD7/9Qq/D9As/qkwHwYDVR0j BBgwFoAUHMyfkDsHlyWdSFGDH9t06FDihXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhMjZhMTAtNThlOC00M2M3LTk0N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAz QjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1MEUyODU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQ0NDOUY5MDNCMDc5NzI1OUQ0ODUxODMxRkRCNzRFODUwRTI4 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0 RTg1MEUyODU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQqHEtB25FdOF9izu1jDRl++KdT3NbwyYS6 wJfdjxTr1+o0f1+I6UuV5JVwrJoXjPhF5nCINPz/AP8zjnrpN91zA+g+mXDMbA62 DNP1c9E4aUT/o+7sCE4bqVT8n06DMtyjm7LzdT9RI3Xap1iRDeGb5YLHG6Al9sGb VmKa9fASkUw4sviFN+NIX4L8TlZdG4mvsWxdunlMi57Go9/zoOkk+yqWQjXcVw0T xPHuv1vvcShxXN1ctDKKr6vFj6H/t8OuB2YeflOJbOnaqnozz3DPwzT7e2I4SmNd +3vH40sAgd8YjQuOqmbJ1DgRh928mVW0hWPHBvsyI3WDGK/YZJU= -----END CERTIFICATE-----Generated at Tue Jul 28 20:40:44 2026 by rpki-client