$ rpki-client -vvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: Cy6FxumrvHRQUKUeNTk4lhrZewvj3WwxCWyFdtnMGig= Subject key identifier: 60:4E:FA:1C:1B:4B:6A:B1:60:2B:E2:46:7C:2B:CC:24:40:8F:56:1E Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 54F3D18833089815F16414062FF558C2181A76F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:46:03 +0000 Manifest this update: Mon 20 Jul 2026 15:41:03 +0000 Manifest next update: Tue 21 Jul 2026 16:59:03 +0000 Files and hashes: 1: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: t3HXfcar+nUforfB54z0Yadbtuh4s4/bgI4HjFp/iKs=) 2: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) 3: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f3:d1:88:33:08:98:15:f1:64:14:06:2f:f5:58:c2:18:1a:76:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: Jul 20 15:41:03 2026 GMT Not After : Jul 21 16:59:03 2026 GMT Subject: CN=604EFA1C1B4B6AB1602BE2467C2BCC24408F561E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:51:03:34:97:1b:bd:6c:f0:5f:47:34:0a: 7c:91:9a:69:51:41:2d:92:cb:29:f6:d1:b8:ab:73: 15:95:19:c3:be:46:d8:7c:c5:1d:ba:89:da:6d:a4: e6:a3:44:83:1a:4e:4d:db:4e:be:62:1e:dd:61:e7: 93:9a:65:82:ff:b1:24:84:57:f6:4a:d7:c4:a8:06: b3:4b:12:9b:bf:32:32:f7:6b:3a:b2:89:b6:29:7e: 4e:56:b9:80:2b:e0:da:17:4c:9f:f2:21:87:d1:7b: c2:13:f4:21:60:ec:df:b7:d6:9d:1c:0c:1a:51:91: 9c:0a:54:d7:ed:92:a5:c7:92:e4:c6:af:c5:1f:f9: 36:21:f7:b8:5b:92:89:36:b3:40:bc:d2:86:a2:f6: 12:3d:64:c5:ff:ac:45:a7:cc:af:17:3b:0a:7c:12: 4d:9a:50:83:7f:f8:d4:46:31:62:9a:37:2b:27:34: 31:0e:08:ba:04:c2:44:6b:82:cd:72:3a:61:09:17: 6a:c7:eb:24:f7:a0:36:23:c1:5c:f2:7d:0e:86:6a: aa:77:75:57:a3:a2:21:d0:6d:90:72:26:07:07:95: e5:dd:8b:1b:2d:55:b4:43:d7:6b:b5:e8:ab:28:02: ef:e6:9f:2f:88:f6:23:f6:f8:e4:98:e0:5e:f8:27: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4E:FA:1C:1B:4B:6A:B1:60:2B:E2:46:7C:2B:CC:24:40:8F:56:1E X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4a:78:c0:c2:c4:89:8c:aa:98:9e:49:d8:1e:e6:5b:7d:8c: 52:0b:6e:50:8a:39:50:36:c8:95:99:c2:68:69:8c:2d:1b:45: a6:c9:32:a2:6a:1d:9d:60:39:46:57:a7:50:82:e1:60:56:d0: d8:cc:05:26:ae:91:4d:6b:ad:bb:5b:30:8c:fe:5b:ad:5e:83: a2:81:fe:20:6a:b9:29:f1:1a:35:1e:cb:eb:c1:39:c9:ec:1d: 48:bd:63:f7:3f:32:52:70:16:16:42:53:fd:99:b3:79:33:5a: 35:e3:47:20:dc:17:1a:38:a5:16:ef:1e:2d:d8:fd:5e:d4:6e: 9a:52:c6:c8:3a:8a:36:7b:48:ec:ac:05:45:11:7c:83:4d:29: 14:e5:a4:89:dc:30:d3:53:cd:22:f3:75:0e:30:55:42:42:ef: 21:9a:ce:86:b7:62:0b:2d:65:95:39:01:5f:f8:31:7c:e7:75: 87:e6:9d:52:b0:97:e9:ec:d8:bc:14:26:f5:12:bc:dd:97:f5: ba:63:b7:f0:e6:de:f4:ea:06:83:de:f9:35:24:5a:bf:0e:f0: 90:de:96:ae:85:0c:a1:7a:4b:69:9c:79:ec:d3:bf:04:9e:53: 74:75:4d:e1:8b:9e:21:80:21:35:6b:ed:25:d7:11:7e:cb:ec: 31:c0:70:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPPRiDMImBXxZBQGL/VYwhgadvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2 MUZCRTM0NjAeFw0yNjA3MjAxNTQxMDNaFw0yNjA3MjExNjU5MDNaMDMxMTAvBgNV BAMTKDYwNEVGQTFDMUI0QjZBQjE2MDJCRTI0NjdDMkJDQzI0NDA4RjU2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq91EDNJcbvWzwX0c0CnyRmmlR QS2Syyn20bircxWVGcO+Rth8xR26idptpOajRIMaTk3bTr5iHt1h55OaZYL/sSSE V/ZK18SoBrNLEpu/MjL3azqyibYpfk5WuYAr4NoXTJ/yIYfRe8IT9CFg7N+31p0c DBpRkZwKVNftkqXHkuTGr8Uf+TYh97hbkok2s0C80oai9hI9ZMX/rEWnzK8XOwp8 Ek2aUIN/+NRGMWKaNysnNDEOCLoEwkRrgs1yOmEJF2rH6yT3oDYjwVzyfQ6Gaqp3 dVejoiHQbZByJgcHleXdixstVbRD12u16KsoAu/mny+I9iP2+OSY4F74J/iNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYE76HBtLarFgK+JGfCvMJECPVh4wHwYDVR0j BBgwFoAUHPIXquvIpbi6+tP370m+vGH740YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3OGMwNjItYjA5Mi00MDI1LTliNjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFF QkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2MUZCRTM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJF MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJF QkM2MUZCRTM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtKeMDCxImMqpieSdge5lt9jFILblCKOVA2 yJWZwmhpjC0bRabJMqJqHZ1gOUZXp1CC4WBW0NjMBSaukU1rrbtbMIz+W61eg6KB /iBquSnxGjUey+vBOcnsHUi9Y/c/MlJwFhZCU/2Zs3kzWjXjRyDcFxo4pRbvHi3Y /V7UbppSxsg6ijZ7SOysBUURfINNKRTlpIncMNNTzSLzdQ4wVUJC7yGazoa3Ygst ZZU5AV/4MXzndYfmnVKwl+ns2LwUJvUSvN2X9bpjt/Dm3vTqBoPe+TUkWr8O8JDe lq6FDKF6S2mceezTvwSeU3R1TeGLniGAITVr7SXXEX7L7DHAcDI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:53 2026 by rpki-client