$ rpki-client -vvf rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft File: 1FF488AB707220858C10BA99E5944DE409195015.mft (raw, json) Hash identifier: YOYMJP2yGExDExxiguttILMKBU18qpKsxXI/LzB+oc0= Subject key identifier: 5E:37:1E:41:26:1B:F2:4F:BA:86:24:87:05:62:EE:45:5E:CE:22:7E Authority key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 Certificate issuer: /CN=1FF488AB707220858C10BA99E5944DE409195015 Certificate serial: 7217B1252AD3AAFB12754A922C26E798FFB2E1AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:16:09 +0000 Manifest this update: Tue 21 Jul 2026 00:11:09 +0000 Manifest next update: Wed 22 Jul 2026 04:09:09 +0000 Files and hashes: 1: 1FF488AB707220858C10BA99E5944DE409195015.crl (hash: 8MqdPk99qPm3uT55O0CCW5BqvsnBn0zVhYOEtof8W1Y=) 2: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: 6EwDqg7LpLZJUkIylUyUl3veH/xN6XvmcMqV9SdWGwQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:17:b1:25:2a:d3:aa:fb:12:75:4a:92:2c:26:e7:98:ff:b2:e1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF488AB707220858C10BA99E5944DE409195015 Validity Not Before: Jul 21 00:11:09 2026 GMT Not After : Jul 22 04:09:09 2026 GMT Subject: CN=5E371E41261BF24FBA8624870562EE455ECE227E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:b9:ce:30:72:e9:b9:5a:b7:af:f5:35:07: 0d:11:30:7e:36:da:54:68:f6:39:0e:3d:48:19:e5: b7:3f:24:a8:93:9c:02:97:53:e4:1f:12:b2:fe:04: 98:84:ae:ac:e8:93:4a:78:23:0e:62:7b:ac:0e:a2: 15:20:65:aa:c7:9c:c5:a1:ee:1e:e1:39:fd:b9:4f: b9:37:4b:1d:26:d0:94:72:35:6e:f8:d8:8d:17:e4: cb:bc:ff:09:7f:ec:ea:0e:6e:34:87:d8:a9:09:75: a3:30:1b:34:fc:4f:97:5a:3e:ea:32:b3:3d:7b:c2: 49:a2:80:ed:ef:21:1d:76:aa:87:c0:bd:b8:a5:e6: 39:13:79:f9:78:7b:8c:44:69:b7:70:5a:71:44:aa: 10:59:54:06:8a:e9:a9:6b:e9:4d:c9:c1:4a:ee:ff: 2b:d1:19:d5:47:cd:32:6d:73:ff:d0:24:78:ff:e8: cf:ed:93:72:1b:6d:73:64:d9:59:4f:ee:8d:5e:4a: 68:db:f6:8c:fd:f1:3b:96:19:f1:19:70:1e:66:98: a2:fb:47:8f:2b:73:19:97:25:f9:44:05:f2:5d:32: 09:47:01:9b:50:cd:02:6f:a8:ca:b2:1d:96:9d:b1: d0:fc:9f:94:19:41:a7:ad:de:3b:95:4b:a5:bf:2d: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:37:1E:41:26:1B:F2:4F:BA:86:24:87:05:62:EE:45:5E:CE:22:7E X509v3 Authority Key Identifier: keyid:1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:71:d4:5f:0a:10:0f:43:32:99:22:61:8f:cf:04:44:3f:fd: f9:63:25:bd:8a:05:5e:fc:7a:0b:26:2a:55:72:69:78:88:81: 45:ef:ec:8b:fb:a4:27:36:d4:27:1e:5a:0e:0b:33:35:01:d0: cf:33:5f:b3:ba:a3:3a:09:5f:6c:d3:e0:c7:36:f3:e0:89:46: ee:8f:40:57:7c:74:f7:4b:f7:1a:a5:74:e3:eb:29:b2:e8:ec: 6c:9c:00:13:4b:bb:73:6e:c2:62:4c:9b:ee:e7:a6:a1:df:e9: 0e:a6:80:33:8f:a8:36:0e:b4:34:35:38:ee:0a:93:d6:b0:29: 9a:6a:0a:31:e8:c0:13:2a:a0:2e:c4:ae:47:5d:6e:3a:26:5b: 2b:b0:97:8e:41:54:b9:23:fe:51:4c:0b:a1:3c:da:9b:de:0b: 3a:a7:30:c8:e0:21:65:34:b6:84:97:92:b3:ff:df:c8:9e:b8: 45:19:d5:82:db:c9:db:85:fc:79:4b:9e:ed:aa:55:b9:9d:7d: a7:2d:f4:34:54:38:21:88:83:46:a9:3c:4b:82:15:a8:4f:2b: 53:d4:6c:86:7c:2e:82:13:d2:77:21:34:3c:f0:9e:78:ec:69: 1a:b2:89:f3:b4:ad:5a:45:bd:16:fc:4a:48:44:45:82:01:ec: 20:ad:2c:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchexJSrTqvsSdUqSLCbnmP+y4aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRERTQw OTE5NTAxNTAeFw0yNjA3MjEwMDExMDlaFw0yNjA3MjIwNDA5MDlaMDMxMTAvBgNV BAMTKDVFMzcxRTQxMjYxQkYyNEZCQTg2MjQ4NzA1NjJFRTQ1NUVDRTIyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgLnOMHLpuVq3r/U1Bw0RMH42 2lRo9jkOPUgZ5bc/JKiTnAKXU+QfErL+BJiErqzok0p4Iw5ie6wOohUgZarHnMWh 7h7hOf25T7k3Sx0m0JRyNW742I0X5Mu8/wl/7OoObjSH2KkJdaMwGzT8T5daPuoy sz17wkmigO3vIR12qofAvbil5jkTefl4e4xEabdwWnFEqhBZVAaK6alr6U3JwUru /yvRGdVHzTJtc//QJHj/6M/tk3IbbXNk2VlP7o1eSmjb9oz98TuWGfEZcB5mmKL7 R48rcxmXJflEBfJdMglHAZtQzQJvqMqyHZadsdD8n5QZQaet3juVS6W/LUaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXjceQSYb8k+6hiSHBWLuRV7OIn4wHwYDVR0j BBgwFoAUH/SIq3ByIIWMELqZ5ZRN5AkZUBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1OWI2YTMtYjc0Yi00YmFhLTk5M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3 MDcyMjA4NThDMTBCQTk5RTU5NDRERTQwOTE5NTAxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkY0ODhBQjcwNzIyMDg1OEMxMEJBOTlFNTk0NERFNDA5MTk1 MDE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRE RTQwOTE5NTAxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZx1F8KEA9DMpkiYY/PBEQ//fljJb2KBV78 egsmKlVyaXiIgUXv7Iv7pCc21CceWg4LMzUB0M8zX7O6ozoJX2zT4Mc28+CJRu6P QFd8dPdL9xqldOPrKbLo7GycABNLu3NuwmJMm+7npqHf6Q6mgDOPqDYOtDQ1OO4K k9awKZpqCjHowBMqoC7ErkddbjomWyuwl45BVLkj/lFMC6E82pveCzqnMMjgIWU0 toSXkrP/38ieuEUZ1YLbyduF/HlLnu2qVbmdfact9DRUOCGIg0apPEuCFahPK1PU bIZ8LoIT0nchNDzwnnjsaRqyifO0rVpFvRb8SkhERYIB7CCtLDI= -----END CERTIFICATE-----Generated at Tue Jul 21 09:31:50 2026 by rpki-client