$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json) Hash identifier: F1G/W4cktgKyQ9GrcWF2LIVUfyGkYMwNLjt3zPSuj34= Subject key identifier: 8A:5B:B3:78:E6:56:7C:B3:8E:99:EF:77:BE:1D:C9:6D:E3:4B:F0:AC Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Certificate serial: 329BAB7C2B5398A2BC701EC47406457578FD60DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 12:37:14 +0000 Manifest this update: Tue 28 Jul 2026 12:32:14 +0000 Manifest next update: Wed 29 Jul 2026 15:24:14 +0000 Files and hashes: 1: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: hGIZ7ei+twIpkoHntfAIDBxebSztmy6ct7K8be2A0c0=) 2: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=) 3: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:9b:ab:7c:2b:53:98:a2:bc:70:1e:c4:74:06:45:75:78:fd:60:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Validity Not Before: Jul 28 12:32:14 2026 GMT Not After : Jul 29 15:24:14 2026 GMT Subject: CN=8A5BB378E6567CB38E99EF77BE1DC96DE34BF0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:44:6f:a4:8f:54:94:d7:bd:0b:e9:c8:4d: ed:78:b9:00:48:d7:a9:76:9b:77:65:ce:d6:51:2e: a1:b6:a5:83:3a:37:33:7d:b7:6b:00:ae:ec:2a:26: 8e:b7:f5:d8:bf:28:d4:a2:67:4c:21:ac:13:8b:37: 3c:e5:2b:a8:aa:e3:a9:8f:20:1a:6c:61:1c:3f:32: 98:94:ea:91:0b:86:d2:af:d6:da:9a:48:22:a4:3c: bb:10:96:97:c6:8e:83:79:ad:ed:3f:4d:29:93:05: b0:dc:c9:8d:41:9c:69:f0:06:ea:a4:b4:fa:bc:bc: 61:db:3a:50:f0:8b:ff:23:35:58:d3:b6:6f:5a:99: e7:a9:41:53:bb:7d:fe:b8:fc:71:dc:f2:c7:01:c9: f9:2d:35:7f:1a:d5:c4:78:38:6f:44:69:00:26:08: 42:b1:2e:45:70:a9:de:e8:cc:28:cd:0d:42:c7:85: 1f:f8:11:c7:47:2e:f1:94:f2:2e:0e:65:09:5a:7e: e1:8f:58:8d:f5:cc:cd:e4:96:da:76:d1:9b:82:fc: 44:f2:f0:9a:b6:35:5f:a0:d9:b8:2a:4d:7e:1c:5d: d6:e2:0d:df:ab:02:74:88:3a:da:1e:06:3b:e4:39: 54:cc:c4:b4:22:83:4e:9b:28:77:11:e0:44:31:0a: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5B:B3:78:E6:56:7C:B3:8E:99:EF:77:BE:1D:C9:6D:E3:4B:F0:AC X509v3 Authority Key Identifier: keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d2:70:bd:6a:b3:6c:48:1d:69:a1:8d:6f:77:73:ea:0e:10: 57:d3:58:17:d9:b2:4a:b0:c6:00:85:09:af:df:56:8c:67:8b: b2:4b:f5:ae:65:0f:2f:dc:d4:5d:b0:b4:70:63:01:f3:32:a3: a6:59:39:d4:79:e8:e2:33:16:75:35:dd:4e:65:4d:90:3e:91: a5:b0:73:8c:57:f4:8c:25:8c:8a:b7:42:df:8b:9c:c7:38:5a: 4b:af:48:d1:d9:86:91:f1:53:62:d1:b0:2a:ca:66:95:51:5e: 21:4a:da:56:74:42:6b:7c:c6:b5:da:f9:dc:be:e0:4d:da:ae: b2:05:d1:44:cb:20:c6:21:a2:af:01:e8:36:86:da:3b:67:b8: e7:47:3c:ee:bc:10:3f:76:64:72:7e:ec:ec:76:87:0a:e6:61: 66:b9:ab:a1:93:43:bc:61:66:32:6f:3a:b0:a9:34:cd:a8:85: fc:5e:50:5c:ad:e8:73:61:58:37:1a:4c:3f:2d:58:90:30:bd: 7a:50:2a:9a:4c:3c:4f:ef:fe:77:f1:5b:b6:c1:95:44:a9:b2: 41:5f:2f:06:52:42:c7:db:59:b9:81:a4:e6:83:c5:8a:ad:0c: 43:75:60:9d:fc:af:3a:6c:f6:f4:9d:e0:ea:3b:24:49:f4:1d: b0:78:05:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpurfCtTmKK8cB7EdAZFdXj9YNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBB MDM3NDFERjAeFw0yNjA3MjgxMjMyMTRaFw0yNjA3MjkxNTI0MTRaMDMxMTAvBgNV BAMTKDhBNUJCMzc4RTY1NjdDQjM4RTk5RUY3N0JFMURDOTZERTM0QkYwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTkRvpI9UlNe9C+nITe14uQBI 16l2m3dlztZRLqG2pYM6NzN9t2sAruwqJo639di/KNSiZ0whrBOLNzzlK6iq46mP IBpsYRw/MpiU6pELhtKv1tqaSCKkPLsQlpfGjoN5re0/TSmTBbDcyY1BnGnwBuqk tPq8vGHbOlDwi/8jNVjTtm9ameepQVO7ff64/HHc8scByfktNX8a1cR4OG9EaQAm CEKxLkVwqd7ozCjNDULHhR/4EcdHLvGU8i4OZQlafuGPWI31zM3kltp20ZuC/ETy 8Jq2NV+g2bgqTX4cXdbiDd+rAnSIOtoeBjvkOVTMxLQig06bKHcR4EQxCqAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiluzeOZWfLOOme93vh3JbeNL8KwwHwYDVR0j BBgwFoAUGikCyhQOWaKuNf8ytPbRIKA3Qd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlMzFlY2YtNTJhNC00Njc3LTkxMDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0Ex NDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBBMDM3NDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTI5MDJDQTE0MEU1OUEyQUUzNUZGMzJCNEY2RDEyMEEwMzc0 MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQx MjBBMDM3NDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLScL1qs2xIHWmhjW93c+oOEFfTWBfZskqw xgCFCa/fVoxni7JL9a5lDy/c1F2wtHBjAfMyo6ZZOdR56OIzFnU13U5lTZA+kaWw c4xX9IwljIq3Qt+LnMc4WkuvSNHZhpHxU2LRsCrKZpVRXiFK2lZ0Qmt8xrXa+dy+ 4E3arrIF0UTLIMYhoq8B6DaG2jtnuOdHPO68ED92ZHJ+7Ox2hwrmYWa5q6GTQ7xh ZjJvOrCpNM2ohfxeUFyt6HNhWDcaTD8tWJAwvXpQKppMPE/v/nfxW7bBlUSpskFf LwZSQsfbWbmBpOaDxYqtDEN1YJ38rzps9vSd4Oo7JEn0HbB4BRg= -----END CERTIFICATE-----Generated at Wed Jul 29 06:45:33 2026 by rpki-client