$ rpki-client -vvf rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft File: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft (raw, json) Hash identifier: gIEopc0TYKxrc6mrRP9UutiSRhx4/M3XzfXU3YnAJSo= Subject key identifier: 04:F7:36:7E:F7:62:6B:CF:2E:4F:FC:7D:4D:0E:1D:2E:72:69:AB:07 Authority key identifier: 1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 Certificate issuer: /CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Certificate serial: 330BDE95714007D163623667208811EDC6E69F42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft Manifest number: 14 Signing time: Sat 16 May 2026 20:30:49 +0000 Manifest this update: Sat 16 May 2026 20:25:49 +0000 Manifest next update: Sun 17 May 2026 21:51:49 +0000 Files and hashes: 1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: krKKJL8xoxgN2wyxvjJrqrqA9vT6YHk/PFCm7/PP3c4=) 2: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: sefAns8WGP+QODtyZI5xSMBLlCAhkEsg1IdG1oXtiJc=) 3: 1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl (hash: 86JzksKNlSVpd88C+k/QZoQaS6VaUlXCGWe7m6fRlm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 21:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0b:de:95:71:40:07:d1:63:62:36:67:20:88:11:ed:c6:e6:9f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205 Validity Not Before: May 16 20:25:49 2026 GMT Not After : May 17 21:51:49 2026 GMT Subject: CN=04F7367EF7626BCF2E4FFC7D4D0E1D2E7269AB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:64:24:f3:ee:47:91:72:20:b2:89:27:a9: 39:16:e6:af:38:94:de:de:3b:32:2d:50:6b:7e:2c: 3c:c2:44:48:d0:7b:95:3c:c6:52:66:45:b6:86:a1: 43:71:7b:10:fd:90:51:b8:8b:a5:25:d9:7a:0d:4e: d9:db:b7:7f:7a:fd:92:a7:89:8f:c8:f0:dc:27:ed: bf:5e:4a:97:a2:11:b9:c4:ee:37:17:23:6e:4f:81: 81:8d:70:fb:64:ee:dc:ee:dc:72:f7:4c:55:a0:eb: c0:8c:68:82:47:17:3c:76:e7:fd:d1:d3:d6:bc:48: 73:e2:4d:bf:89:07:c0:23:4a:fa:40:df:a2:bd:5a: 5e:6f:7b:9a:62:0e:c5:4a:18:1d:21:81:36:90:48: 82:35:bc:fa:13:db:86:e4:7c:ea:d1:c6:7d:23:e7: 9f:2d:61:58:ac:1e:74:f6:18:86:90:3d:85:4f:d5: 0a:1f:68:d7:80:a7:02:bf:6c:af:e4:18:fa:6d:2c: 10:89:7b:fa:e6:54:92:39:c4:82:de:02:ea:a4:6f: 8b:db:50:75:c4:14:cd:c3:59:bf:ac:86:9c:fb:2c: f4:13:7d:26:ce:78:63:90:5c:6b:59:66:cd:2d:f8: ca:79:51:11:2e:42:f5:70:24:0f:75:a3:f3:c0:d7: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F7:36:7E:F7:62:6B:CF:2E:4F:FC:7D:4D:0E:1D:2E:72:69:AB:07 X509v3 Authority Key Identifier: keyid:1C:64:A5:D7:8F:86:E2:7A:0F:CF:C0:B1:E2:60:6E:2A:96:1F:72:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/1C64A5D78F86E27A0FCFC0B1E2606E2A961F7205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c7:d6:8e:f6:13:8e:32:6e:9f:27:b4:98:d1:16:1f:f0:83: 03:04:9f:c0:b1:7e:ce:ad:59:ec:fc:01:05:2a:9b:44:9a:64: 81:80:1d:76:c0:88:41:55:0d:7b:6e:4c:4f:c6:7f:b9:47:ce: e4:dd:a4:f3:f9:56:fd:ff:5e:d5:38:d6:bd:1f:82:1e:89:ce: e0:9e:e1:58:b6:5a:bf:a4:3f:0c:6d:07:b8:cf:11:81:d5:d0: 7a:9c:d0:be:00:a1:3a:17:1b:a4:ae:37:ba:f3:89:46:6d:d3: 28:cf:04:72:ec:8a:c1:00:3c:18:5b:88:73:31:b4:03:75:06: e3:36:52:2a:68:4a:2f:a9:b1:f9:e9:87:da:fa:a0:d3:85:96: d6:5a:cb:ff:d9:5b:e1:7f:ac:11:27:37:a2:c3:e3:ed:8c:2a: 84:20:09:1b:a2:6a:26:60:f2:1d:f1:ae:87:bb:9b:2e:83:05: e5:2d:e4:04:d9:1c:4c:13:95:ff:03:ec:28:95:3a:0a:9e:bf: 45:ad:9d:8b:73:90:a8:26:75:b4:52:ff:bb:3d:aa:25:b2:ad: 49:3f:0a:ea:5c:ce:ff:6f:d6:86:4a:3b:71:2b:d4:1b:7a:65: 6d:c7:9d:aa:9d:7a:3a:0d:4a:24:53:2f:cd:67:dd:c7:62:9e: 00:19:6c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwvelXFAB9FjYjZnIIgR7cbmn0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5 NjFGNzIwNTAeFw0yNjA1MTYyMDI1NDlaFw0yNjA1MTcyMTUxNDlaMDMxMTAvBgNV BAMTKDA0RjczNjdFRjc2MjZCQ0YyRTRGRkM3RDREMEUxRDJFNzI2OUFCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmWQk8+5HkXIgsoknqTkW5q84 lN7eOzItUGt+LDzCREjQe5U8xlJmRbaGoUNxexD9kFG4i6Ul2XoNTtnbt396/ZKn iY/I8Nwn7b9eSpeiEbnE7jcXI25PgYGNcPtk7tzu3HL3TFWg68CMaIJHFzx25/3R 09a8SHPiTb+JB8AjSvpA36K9Wl5ve5piDsVKGB0hgTaQSII1vPoT24bkfOrRxn0j 558tYVisHnT2GIaQPYVP1QofaNeApwK/bK/kGPptLBCJe/rmVJI5xILeAuqkb4vb UHXEFM3DWb+shpz7LPQTfSbOeGOQXGtZZs0t+Mp5UREuQvVwJA91o/PA13OfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPc2fvdia88uT/x9TQ4dLnJpqwcwHwYDVR0j BBgwFoAUHGSl14+G4noPz8Cx4mBuKpYfcgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkZWRlZDEtZDE0ZS00MTIzLWI1YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4 Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZFMkE5NjFGNzIwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzY0QTVENzhGODZFMjdBMEZDRkMwQjFFMjYwNkUyQTk2MUY3 MjA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvMUM2NEE1RDc4Rjg2RTI3QTBGQ0ZDMEIxRTI2MDZF MkE5NjFGNzIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7H1o72E44ybp8ntJjRFh/wgwMEn8Cxfs6t Wez8AQUqm0SaZIGAHXbAiEFVDXtuTE/Gf7lHzuTdpPP5Vv3/XtU41r0fgh6JzuCe 4Vi2Wr+kPwxtB7jPEYHV0Hqc0L4AoToXG6SuN7rziUZt0yjPBHLsisEAPBhbiHMx tAN1BuM2UipoSi+psfnph9r6oNOFltZay//ZW+F/rBEnN6LD4+2MKoQgCRuiaiZg 8h3xroe7my6DBeUt5ATZHEwTlf8D7CiVOgqev0WtnYtzkKgmdbRS/7s9qiWyrUk/ Cupczv9v1oZKO3Er1Bt6ZW3HnaqdejoNSiRTL81n3cdingAZbCA= -----END CERTIFICATE-----Generated at Sun May 17 12:03:31 2026 by rpki-client