$ rpki-client -vvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: DiW3ZDAEnQaeR2VPTj0ARvjLJc80EewKhQP/QlJIcCM= Subject key identifier: 43:05:30:68:ED:CC:18:96:74:C6:B2:64:17:F7:B9:40:65:AD:9E:BC Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 57ADF50D2D05D05C69BEFF266E98FA52214075ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 20:49:20 +0000 Manifest this update: Tue 16 Jun 2026 20:44:20 +0000 Manifest next update: Wed 17 Jun 2026 23:18:20 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) 2: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: O26/bgpifL5zLQWjqz70tRnihGS2HqApKnNYTco7fBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ad:f5:0d:2d:05:d0:5c:69:be:ff:26:6e:98:fa:52:21:40:75:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Jun 16 20:44:20 2026 GMT Not After : Jun 17 23:18:20 2026 GMT Subject: CN=43053068EDCC189674C6B26417F7B94065AD9EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:55:31:6a:db:ea:8d:97:0a:3c:a2:bf:2d: 14:b4:ed:22:b3:06:07:aa:ed:70:9e:7a:54:c0:8f: 39:0a:07:07:1d:13:bc:25:ba:06:2d:10:bc:00:fe: ec:68:5a:86:e0:20:37:93:09:e7:25:f6:ef:13:95: e0:16:63:6b:2c:b7:d2:af:67:cb:e6:dd:50:19:54: b4:e5:58:12:8c:1a:1f:9e:42:5f:8e:e9:a4:4c:a2: 18:da:13:ab:6c:c1:a0:b2:0b:d8:9f:06:8d:2f:d3: e7:1b:d1:d7:05:30:fc:5c:61:9d:25:08:b9:c4:49: 36:f4:ad:ac:0e:96:a3:2d:72:f8:79:e1:c2:e0:ca: 34:fc:f2:ee:a6:90:55:71:6e:86:53:08:3a:fa:06: 4e:f3:ca:f3:2c:30:9c:4a:92:fb:cb:10:13:5c:0d: 52:c1:19:27:4d:62:dc:6c:a3:1f:a6:28:02:ce:6e: c3:fd:cd:9f:22:48:e1:17:4a:ef:ff:79:6d:2a:79: 3d:01:31:73:92:ec:86:e7:32:26:02:5f:07:21:d3: ad:10:b8:55:21:b2:be:58:47:14:1a:70:38:42:d2: 62:2e:92:a8:bf:0c:48:94:c9:cb:fc:29:21:8b:4c: 96:ba:63:f3:2a:7e:fb:ed:88:57:04:94:f0:f0:ea: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:05:30:68:ED:CC:18:96:74:C6:B2:64:17:F7:B9:40:65:AD:9E:BC X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:33:fe:43:b0:f1:5b:a2:a2:0d:dc:4c:7f:88:da:c7:fe:2e: f0:2d:4a:26:2e:d5:e1:17:5a:ee:ae:bb:38:f6:ef:b8:ce:51: c2:85:94:97:f9:74:af:a8:b5:b4:51:6f:4c:6b:a1:37:8d:d6: 9c:89:2b:54:1b:21:83:e1:91:ad:d5:93:c1:71:b5:8c:18:d2: 5a:27:ec:0e:2d:70:ae:d1:d0:5f:36:2c:b9:07:d2:3d:e9:6d: 72:ae:4c:37:eb:99:80:c9:3f:23:19:e3:35:4a:99:e4:99:39: 1d:e6:f2:4f:9a:43:6d:8b:cc:03:d0:6f:ba:ba:40:f8:d9:a3: bf:d6:31:0d:24:ee:67:6e:19:94:75:00:07:aa:8f:22:73:a2: 7c:fd:81:15:7b:b0:83:ca:5d:d5:54:4f:e0:f6:2f:ce:6b:49: 22:e8:f9:cd:ef:f5:d3:8a:39:9b:ac:24:ba:f9:04:de:1f:44: 5c:01:f1:ff:67:10:4f:c6:b6:7c:bd:11:e9:68:71:df:0d:b6: 50:c3:ce:13:52:8f:01:f2:f2:4e:0f:72:81:73:79:e9:e9:cc: 54:75:58:fe:45:77:a7:c8:98:fc:c5:90:b7:d9:9f:0d:cc:2c: c8:9b:6c:37:f5:81:fa:6d:15:7b:19:53:09:24:0a:3e:01:63: 8b:00:47:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV631DS0F0Fxpvv8mbpj6UiFAde0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA2MTYyMDQ0MjBaFw0yNjA2MTcyMzE4MjBaMDMxMTAvBgNV BAMTKDQzMDUzMDY4RURDQzE4OTY3NEM2QjI2NDE3RjdCOTQwNjVBRDlFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2lUxatvqjZcKPKK/LRS07SKz Bgeq7XCeelTAjzkKBwcdE7wlugYtELwA/uxoWobgIDeTCecl9u8TleAWY2sst9Kv Z8vm3VAZVLTlWBKMGh+eQl+O6aRMohjaE6tswaCyC9ifBo0v0+cb0dcFMPxcYZ0l CLnESTb0rawOlqMtcvh54cLgyjT88u6mkFVxboZTCDr6Bk7zyvMsMJxKkvvLEBNc DVLBGSdNYtxsox+mKALObsP9zZ8iSOEXSu//eW0qeT0BMXOS7IbnMiYCXwch060Q uFUhsr5YRxQacDhC0mIukqi/DEiUycv8KSGLTJa6Y/MqfvvtiFcElPDw6sXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQwUwaO3MGJZ0xrJkF/e5QGWtnrwwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkz/kOw8Vuiog3cTH+I2sf+LvAtSiYu1eEX Wu6uuzj277jOUcKFlJf5dK+otbRRb0xroTeN1pyJK1QbIYPhka3Vk8FxtYwY0lon 7A4tcK7R0F82LLkH0j3pbXKuTDfrmYDJPyMZ4zVKmeSZOR3m8k+aQ22LzAPQb7q6 QPjZo7/WMQ0k7mduGZR1AAeqjyJzonz9gRV7sIPKXdVUT+D2L85rSSLo+c3v9dOK OZusJLr5BN4fRFwB8f9nEE/Gtny9Eelocd8NtlDDzhNSjwHy8k4PcoFzeenpzFR1 WP5Fd6fImPzFkLfZnw3MLMibbDf1gfptFXsZUwkkCj4BY4sAR0o= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:10 2026 by rpki-client