$ rpki-client -vvf rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft File: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft (raw, json) Hash identifier: UjPAUqnm5yWKlIpW/g9+PyLBBA1mTdSnERGKSVioGBU= Subject key identifier: 53:B6:8D:BF:52:7B:86:5F:8D:12:A0:10:BE:39:1A:C8:CC:13:3B:57 Authority key identifier: 1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 Certificate issuer: /CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Certificate serial: 7FD856DBAD9AFDCA9B3C0BE6327DCA564741D427 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:02:12 +0000 Manifest this update: Tue 02 Jun 2026 13:57:12 +0000 Manifest next update: Wed 03 Jun 2026 17:24:12 +0000 Files and hashes: 1: 1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl (hash: kv65dp5VtO4cBGXR1KZk1XX+Gcekv/ih9pIB/HkZsB4=) 2: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: u/1jDxUqM/7ncceawRPeB2DW2rEBNRQs2Nl3FA3lKkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d8:56:db:ad:9a:fd:ca:9b:3c:0b:e6:32:7d:ca:56:47:41:d4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0 Validity Not Before: Jun 2 13:57:12 2026 GMT Not After : Jun 3 17:24:12 2026 GMT Subject: CN=53B68DBF527B865F8D12A010BE391AC8CC133B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:91:94:a6:45:b0:ec:65:a8:cf:29:26:aa: ae:81:f1:73:8a:c3:a2:cd:55:7e:af:7f:71:48:13: 7f:c7:5e:a8:52:de:2d:f8:a0:7a:3a:46:93:66:36: 96:db:39:f3:5e:59:3a:55:8d:e3:46:92:30:c6:a2: c7:8e:e7:47:4d:40:ab:36:94:49:0c:cb:c2:57:db: aa:53:1f:4c:d2:07:7b:80:51:90:ba:17:60:f7:ca: 91:a8:49:70:6b:08:54:ff:3b:46:8e:33:94:10:f2: 1d:69:4b:22:d4:d2:0d:b9:22:a3:06:2c:04:ca:33: 2a:db:ea:89:34:9d:a5:0f:f9:7b:26:f2:3c:cb:a3: e3:e6:5c:5d:8c:6e:ac:4f:36:24:4e:e3:56:95:0b: 3b:9a:f7:6c:91:92:36:26:e0:e9:56:61:1e:94:9c: 58:e5:ba:de:7e:d4:10:1f:50:d3:d1:83:2c:09:9e: 29:e5:d7:2e:0d:9b:b1:19:86:75:c0:5e:e0:db:65: 6c:29:b7:b7:f0:aa:3b:21:c5:3f:5c:21:de:c2:1d: 28:59:ca:70:5d:cf:b1:d8:a0:d0:2f:bf:1a:2b:67: f9:25:d1:2f:aa:cd:32:7e:ba:25:5d:9c:0f:11:3d: 47:76:24:19:59:2f:a1:2b:fb:a2:8e:6f:1a:a5:b9: 10:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B6:8D:BF:52:7B:86:5F:8D:12:A0:10:BE:39:1A:C8:CC:13:3B:57 X509v3 Authority Key Identifier: keyid:1C:4F:D4:27:31:A3:06:9E:B1:1E:BB:1A:1D:08:D6:E4:59:2C:9A:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/1C4FD42731A3069EB11EBB1A1D08D6E4592C9AF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:55:bf:c7:aa:32:4e:6c:b9:a0:e6:75:94:21:a3:65:62:5e: 5f:c4:75:0c:6d:49:c7:0e:76:bc:ca:f5:e6:da:1d:aa:50:f7: 02:38:54:92:f7:46:b6:e6:b2:22:fb:74:2f:89:36:c8:f8:2b: 50:b9:9d:28:7c:4f:2b:b8:6d:14:80:2a:14:c9:cf:25:ef:51: cd:fb:30:4d:21:26:6a:2f:ee:06:a6:ca:d9:44:ec:5e:76:05: bb:c5:2d:dc:57:95:e9:bf:d8:72:69:5a:eb:3c:f5:a8:7d:79: 7f:fd:ea:46:58:32:9c:b2:79:f8:e1:ce:24:b2:15:4f:d8:6d: 1c:e8:94:c2:88:24:5f:c3:0e:9d:ef:14:1e:4a:46:fb:f5:b0: d6:4b:d7:52:5e:57:06:46:7a:4f:6c:e1:cd:a0:eb:bb:b0:7a: 96:8e:85:f6:64:e3:85:a1:c2:99:b7:72:76:86:ba:74:f6:0e: 44:db:dc:75:43:d3:f8:6e:b7:ef:dd:c0:3e:02:dd:46:c4:ff: 70:2c:f7:a1:af:45:ed:97:26:02:56:73:8e:de:dc:d8:97:ee: 9f:5d:3a:60:46:83:cc:0b:e3:e6:e1:1f:76:08:0d:6b:8a:6f: af:0e:dd:27:e6:0d:15:b8:99:c3:a5:96:e8:70:f7:8d:02:22: e0:ee:89:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9hW262a/cqbPAvmMn3KVkdB1CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1 OTJDOUFGMDAeFw0yNjA2MDIxMzU3MTJaFw0yNjA2MDMxNzI0MTJaMDMxMTAvBgNV BAMTKDUzQjY4REJGNTI3Qjg2NUY4RDEyQTAxMEJFMzkxQUM4Q0MxMzNCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbZGUpkWw7GWozykmqq6B8XOK w6LNVX6vf3FIE3/HXqhS3i34oHo6RpNmNpbbOfNeWTpVjeNGkjDGoseO50dNQKs2 lEkMy8JX26pTH0zSB3uAUZC6F2D3ypGoSXBrCFT/O0aOM5QQ8h1pSyLU0g25IqMG LATKMyrb6ok0naUP+Xsm8jzLo+PmXF2MbqxPNiRO41aVCzua92yRkjYm4OlWYR6U nFjlut5+1BAfUNPRgywJninl1y4Nm7EZhnXAXuDbZWwpt7fwqjshxT9cId7CHShZ ynBdz7HYoNAvvxorZ/kl0S+qzTJ+uiVdnA8RPUd2JBlZL6Er+6KObxqluRATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU7aNv1J7hl+NEqAQvjkayMwTO1cwHwYDVR0j BBgwFoAUHE/UJzGjBp6xHrsaHQjW5FksmvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTAxZGJhZmMtYzBjYy00OTZhLWI1ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0Mjcz MUEzMDY5RUIxMUVCQjFBMUQwOEQ2RTQ1OTJDOUFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzRGRDQyNzMxQTMwNjlFQjExRUJCMUExRDA4RDZFNDU5MkM5 QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvMUM0RkQ0MjczMUEzMDY5RUIxMUVCQjFBMUQwOEQ2 RTQ1OTJDOUFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdVv8eqMk5suaDmdZQho2ViXl/EdQxtSccO drzK9ebaHapQ9wI4VJL3RrbmsiL7dC+JNsj4K1C5nSh8Tyu4bRSAKhTJzyXvUc37 ME0hJmov7gamytlE7F52BbvFLdxXlem/2HJpWus89ah9eX/96kZYMpyyefjhziSy FU/YbRzolMKIJF/DDp3vFB5KRvv1sNZL11JeVwZGek9s4c2g67uwepaOhfZk44Wh wpm3cnaGunT2DkTb3HVD0/hut+/dwD4C3UbE/3As96GvRe2XJgJWc47e3NiX7p9d OmBGg8wL4+bhH3YIDWuKb68O3SfmDRW4mcOlluhw940CIuDuiaA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:55 2026 by rpki-client