$ rpki-client -vvf rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft File: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft (raw, json) Hash identifier: 02+W8bM2hcj3VLh9zHff6vIOgUPr+sX7qQ1/xLKwR1g= Subject key identifier: 59:37:38:57:C9:BD:6E:FC:22:5E:61:24:7E:1D:2F:D3:25:4A:52:3A Authority key identifier: 1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 Certificate issuer: /CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Certificate serial: 19380A310889D9DF483DF640378F2DBE85AD8EAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:58:45 +0000 Manifest this update: Tue 02 Jun 2026 22:53:45 +0000 Manifest next update: Thu 04 Jun 2026 02:04:45 +0000 Files and hashes: 1: 1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl (hash: rfHdHvevC2XHlIIc/d5r4cMqX4U7vTO2j3yXZjFSZKQ=) 2: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: abHJVxNnwaoboRz133X3G8MnlftrvDuOlkNRl1NWN8Q=) 3: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: 8wIJWteGAIk9T9oN6S4OkGcsq4cI3A7o+2OUPgwfN0k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:38:0a:31:08:89:d9:df:48:3d:f6:40:37:8f:2d:be:85:ad:8e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346 Validity Not Before: Jun 2 22:53:45 2026 GMT Not After : Jun 4 02:04:45 2026 GMT Subject: CN=59373857C9BD6EFC225E61247E1D2FD3254A523A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:93:67:18:28:25:65:ac:27:aa:7c:36:54: 4d:b2:35:cb:86:99:5e:a6:6b:73:1d:05:3a:d8:eb: 41:74:57:28:25:93:ae:7c:9b:1b:3e:c4:ed:36:01: 34:06:ce:af:08:e2:b1:2c:c9:65:a4:85:ed:5b:e8: d5:66:e2:50:01:0b:13:44:05:c4:c0:fa:3b:1a:db: 48:d1:52:17:90:fc:8a:cc:55:a2:90:6e:32:10:37: 00:f8:fd:1f:12:d5:41:6d:e2:aa:83:37:c4:e0:88: 80:4a:6f:a1:b9:92:37:ce:a7:61:f1:51:02:30:9b: e1:da:ea:b8:45:20:d3:95:44:f0:53:7b:dd:0b:d2: a3:38:66:58:4f:85:fa:5f:b9:e3:e7:84:35:5c:f4: 80:a0:b4:6a:26:7c:fa:8b:56:6a:03:05:ae:30:21: ed:c9:03:d0:2e:21:f7:9e:c4:be:aa:3d:2f:f3:17: 95:fa:8a:77:34:0e:03:81:05:c4:cc:dc:bf:b4:c7: 07:62:4b:5a:f0:4c:04:97:36:64:64:63:63:2d:24: f0:60:56:11:0f:00:8b:c8:a8:8b:ad:b3:42:b9:62: 86:aa:81:40:54:f8:8a:c7:a1:c3:4d:8f:75:a0:11: 34:ff:87:81:ff:f5:76:15:ab:59:e1:ac:97:11:f6: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:37:38:57:C9:BD:6E:FC:22:5E:61:24:7E:1D:2F:D3:25:4A:52:3A X509v3 Authority Key Identifier: keyid:1C:F2:17:AA:EB:C8:A5:B8:BA:FA:D3:F7:EF:49:BE:BC:61:FB:E3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/1CF217AAEBC8A5B8BAFAD3F7EF49BEBC61FBE346.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c0:22:be:c0:ad:35:8a:83:ca:0f:fa:68:78:55:a5:28:af: a0:32:f0:ca:fc:26:38:a6:32:46:2c:d5:e1:bf:6c:76:08:4b: bf:67:ca:52:d0:e7:d3:37:ed:8b:6d:4d:81:01:6e:81:a9:fa: 5e:a3:ef:e6:a5:9e:8b:0c:db:67:e0:02:a0:f4:90:7f:7a:99: 49:ba:d5:1c:8a:25:38:d6:8a:4d:49:49:7d:d5:51:4d:4c:e2: 00:d0:59:de:0e:05:dc:3f:0c:9d:16:4b:89:df:88:f5:31:b9: d7:15:77:6c:f8:62:2a:fb:71:4e:89:cf:33:77:d9:4c:bf:24: ec:de:d9:15:0f:23:de:01:05:82:4d:e4:83:b2:c4:1d:ae:a6: d5:55:a7:5e:54:ff:83:b8:1e:99:05:eb:31:fc:17:67:0f:d4: f6:90:80:1f:56:bd:c2:af:51:08:23:c6:a3:b3:e8:bb:a9:85: f2:cb:78:71:49:03:e4:be:5a:e2:16:6d:ea:02:71:34:22:48: b1:d0:dc:c0:c9:62:36:6c:9b:43:75:54:0a:97:22:c4:50:2f: bb:c6:e7:c5:e3:9a:79:f7:a6:72:be:3f:e0:d7:05:e7:50:a4: 0f:38:3d:1b:d1:8c:b3:90:4d:b8:12:58:9d:b6:00:f4:d9:d8: d2:fb:2e:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTgKMQiJ2d9IPfZAN48tvoWtjqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2 MUZCRTM0NjAeFw0yNjA2MDIyMjUzNDVaFw0yNjA2MDQwMjA0NDVaMDMxMTAvBgNV BAMTKDU5MzczODU3QzlCRDZFRkMyMjVFNjEyNDdFMUQyRkQzMjU0QTUyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEj5NnGCglZawnqnw2VE2yNcuG mV6ma3MdBTrY60F0Vyglk658mxs+xO02ATQGzq8I4rEsyWWkhe1b6NVm4lABCxNE BcTA+jsa20jRUheQ/IrMVaKQbjIQNwD4/R8S1UFt4qqDN8TgiIBKb6G5kjfOp2Hx UQIwm+Ha6rhFINOVRPBTe90L0qM4ZlhPhfpfuePnhDVc9ICgtGomfPqLVmoDBa4w Ie3JA9AuIfeexL6qPS/zF5X6inc0DgOBBcTM3L+0xwdiS1rwTASXNmRkY2MtJPBg VhEPAIvIqIuts0K5YoaqgUBU+IrHocNNj3WgETT/h4H/9XYVq1nhrJcR9vEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWTc4V8m9bvwiXmEkfh0v0yVKUjowHwYDVR0j BBgwFoAUHPIXquvIpbi6+tP370m+vGH740YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTg3OGMwNjItYjA5Mi00MDI1LTliNjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFF QkM4QTVCOEJBRkFEM0Y3RUY0OUJFQkM2MUZCRTM0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0YyMTdBQUVCQzhBNUI4QkFGQUQzRjdFRjQ5QkVCQzYxRkJF MzQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvMUNGMjE3QUFFQkM4QTVCOEJBRkFEM0Y3RUY0OUJF QkM2MUZCRTM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnAIr7ArTWKg8oP+mh4VaUor6Ay8Mr8Jjim MkYs1eG/bHYIS79nylLQ59M37YttTYEBboGp+l6j7+alnosM22fgAqD0kH96mUm6 1RyKJTjWik1JSX3VUU1M4gDQWd4OBdw/DJ0WS4nfiPUxudcVd2z4Yir7cU6JzzN3 2Uy/JOze2RUPI94BBYJN5IOyxB2uptVVp15U/4O4HpkF6zH8F2cP1PaQgB9WvcKv UQgjxqOz6LuphfLLeHFJA+S+WuIWbeoCcTQiSLHQ3MDJYjZsm0N1VAqXIsRQL7vG 58Xjmnn3pnK+P+DXBedQpA84PRvRjLOQTbgSWJ22APTZ2NL7Lkw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:17 2026 by rpki-client