$ rpki-client -vvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft File: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft (raw, json) Hash identifier: g+5ker60etfE10YvPvth7F6sb0UzTHVOmuiRG3As4vg= Subject key identifier: C4:7E:F9:6C:80:79:E6:53:9A:5A:F2:E1:FD:E6:94:73:08:BB:3B:8C Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 Certificate issuer: /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910 Certificate serial: 3AB9F5539DB4E9F0C2943D48EA8502607CB6FFAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:03:01 +0000 Manifest this update: Tue 02 Jun 2026 18:58:01 +0000 Manifest next update: Wed 03 Jun 2026 20:44:01 +0000 Files and hashes: 1: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: FOuLqe8z3jP9/FdA5FO4WwiK2ha2s9B/nD4rv4Mnpyg=) 2: 1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl (hash: pEY/XLur6jLFLa0x8E7L+f/vFumPEkILI4LOnPDhBNA=) 3: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 8FVK2/2gNZC5oxeYl9/JXd0zGR6AZ1yS8I4EVn+PCZM=) 4: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: OGO8y1XI3uaFZBO8XdrSwCG094qddn+s0g2Ctr82rYM=) 5: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: tYiK/crTfBIFT43mP50CWE5Oz0vdhgTgDowq7UN7boc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b9:f5:53:9d:b4:e9:f0:c2:94:3d:48:ea:85:02:60:7c:b6:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910 Validity Not Before: Jun 2 18:58:01 2026 GMT Not After : Jun 3 20:44:01 2026 GMT Subject: CN=C47EF96C8079E6539A5AF2E1FDE6947308BB3B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:bf:02:51:75:5d:cb:8b:eb:10:8b:fc:7f: 51:93:39:c3:e1:24:26:07:37:9a:3d:28:75:24:d5: 91:eb:e8:76:fb:72:98:74:33:4a:f2:f6:52:8c:ff: 00:9d:f9:26:01:11:81:80:04:74:e4:aa:b9:5e:cb: 47:4f:43:c5:a3:27:25:8e:d8:81:e1:02:99:54:1a: 96:65:0b:de:52:21:15:b8:94:3b:45:b0:25:fd:39: 85:84:18:c8:1c:6f:c0:48:e9:66:db:d3:34:37:5e: 93:c7:93:af:a3:79:35:9b:54:50:a3:df:6d:8b:2c: 06:6c:58:f5:8b:eb:3e:78:8c:ae:c6:88:45:b2:31: 36:a5:53:a3:9f:3d:68:1f:1e:7c:9f:47:ce:2f:70: 44:78:0a:9a:30:af:14:46:71:68:ec:7b:09:e4:7b: 92:1a:c3:5d:ce:cf:92:05:b8:9d:d1:96:6d:bc:f6: cb:41:84:ed:b9:fe:c7:fe:1d:6b:4f:78:6e:71:53: 30:e5:0d:8d:9d:2c:f1:e6:6d:06:15:0e:cc:ae:0f: a8:03:c3:40:a2:3e:d4:b7:86:4e:8b:23:be:f1:b2: ac:be:63:3d:e2:f1:f2:2d:db:d0:e5:0a:11:c2:80: 27:8c:a2:24:47:99:92:ad:6d:cb:f5:79:04:0a:f9: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:F9:6C:80:79:E6:53:9A:5A:F2:E1:FD:E6:94:73:08:BB:3B:8C X509v3 Authority Key Identifier: keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:05:f9:56:ef:28:67:cf:32:d0:e0:84:42:06:8f:07:89:22: 56:39:ff:71:6e:29:e8:95:00:73:50:18:b0:ff:89:43:ac:50: 73:f6:4c:30:20:e1:1c:b6:ae:61:50:b9:dd:38:60:11:50:21: 68:29:f2:37:00:75:43:4c:a9:32:a1:d9:23:09:07:ba:34:f3: 6e:0c:4c:c2:60:f5:4e:34:9e:0b:11:db:5e:9a:0c:28:b2:7d: d1:83:34:c5:01:f3:49:a6:b6:10:37:f0:03:fc:c0:9e:e2:29: 7f:b2:e7:80:24:72:a9:e0:a0:e5:d0:d7:a8:2f:c3:b0:e9:75: 45:93:cf:94:9c:71:78:52:e6:28:92:fa:a1:e1:4e:11:a8:b4: 6a:6b:ef:7c:83:2f:07:cc:44:ca:ef:09:8c:13:a4:a9:b2:c3: c9:bd:1d:91:cc:35:15:ab:4e:9c:63:b6:bf:c7:c0:e3:76:fc: d8:b2:b2:ec:0c:2c:64:cb:10:08:99:0b:51:a8:dc:54:de:38: b8:03:5c:85:fb:ef:0f:86:fd:b5:ec:1e:83:01:53:40:f8:67: b9:dd:79:13:74:2b:e6:36:c2:ae:97:5a:aa:09:f7:c9:a6:5b: 9a:11:d2:1b:d8:fc:b8:06:f5:8f:54:df:a2:5d:de:1e:bb:a4: e2:e0:d7:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrn1U5206fDClD1I6oUCYHy2/6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyNDFBRDFDQzMwMUU4MTVDQTRENkZBNUYxQkNDNjYw NjkxNTkxMDAeFw0yNjA2MDIxODU4MDFaFw0yNjA2MDMyMDQ0MDFaMDMxMTAvBgNV BAMTKEM0N0VGOTZDODA3OUU2NTM5QTVBRjJFMUZERTY5NDczMDhCQjNCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAr78CUXVdy4vrEIv8f1GTOcPh JCYHN5o9KHUk1ZHr6Hb7cph0M0ry9lKM/wCd+SYBEYGABHTkqrley0dPQ8WjJyWO 2IHhAplUGpZlC95SIRW4lDtFsCX9OYWEGMgcb8BI6Wbb0zQ3XpPHk6+jeTWbVFCj 322LLAZsWPWL6z54jK7GiEWyMTalU6OfPWgfHnyfR84vcER4CpowrxRGcWjsewnk e5Iaw13Oz5IFuJ3Rlm289stBhO25/sf+HWtPeG5xUzDlDY2dLPHmbQYVDsyuD6gD w0CiPtS3hk6LI77xsqy+Yz3i8fIt29DlChHCgCeMoiRHmZKtbcv1eQQK+Vd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxH75bIB55lOaWvLh/eaUcwi7O4wwHwYDVR0j BBgwFoAUHCQa0cwwHoFcpNb6XxvMZgaRWRAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg3NjZkNjYtMjkyMy00Y2UwLWFhODUtOWM0OTg4Y2M4YmExLzAvMUMyNDFBRDFD QzMwMUU4MTVDQTRENkZBNUYxQkNDNjYwNjkxNTkxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQzI0MUFEMUNDMzAxRTgxNUNBNEQ2RkE1RjFCQ0M2NjA2OTE1 OTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvMUMyNDFBRDFDQzMwMUU4MTVDQTRENkZBNUYxQkND NjYwNjkxNTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQF+VbvKGfPMtDghEIGjweJIlY5/3FuKeiV AHNQGLD/iUOsUHP2TDAg4Ry2rmFQud04YBFQIWgp8jcAdUNMqTKh2SMJB7o0824M TMJg9U40ngsR216aDCiyfdGDNMUB80mmthA38AP8wJ7iKX+y54AkcqngoOXQ16gv w7DpdUWTz5SccXhS5iiS+qHhThGotGpr73yDLwfMRMrvCYwTpKmyw8m9HZHMNRWr Tpxjtr/HwON2/NiysuwMLGTLEAiZC1Go3FTeOLgDXIX77w+G/bXsHoMBU0D4Z7nd eRN0K+Y2wq6XWqoJ98mmW5oR0hvY/LgG9Y9U36Jd3h67pOLg1wM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:50 2026 by rpki-client