$ rpki-client -vvf rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft File: 1FF488AB707220858C10BA99E5944DE409195015.mft (raw, json) Hash identifier: rIhkExumaEtZoLQjCu6tkiUaxL4OQwuMKT5tnrHI8CQ= Subject key identifier: 31:39:61:76:F6:29:99:44:B3:46:1A:DD:78:98:6D:A5:4B:AD:57:0B Authority key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 Certificate issuer: /CN=1FF488AB707220858C10BA99E5944DE409195015 Certificate serial: 1F175F9009B141535764845D9A71BD18B5ABDDE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:12:24 +0000 Manifest this update: Wed 03 Jun 2026 02:07:24 +0000 Manifest next update: Thu 04 Jun 2026 03:05:24 +0000 Files and hashes: 1: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: 6EwDqg7LpLZJUkIylUyUl3veH/xN6XvmcMqV9SdWGwQ=) 2: 1FF488AB707220858C10BA99E5944DE409195015.crl (hash: y1uYM4hhm2NkFhxAopqKOi/syBTdVjY+EdOGNtiv7S0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:17:5f:90:09:b1:41:53:57:64:84:5d:9a:71:bd:18:b5:ab:dd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF488AB707220858C10BA99E5944DE409195015 Validity Not Before: Jun 3 02:07:24 2026 GMT Not After : Jun 4 03:05:24 2026 GMT Subject: CN=31396176F6299944B3461ADD78986DA54BAD570B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:bb:95:a5:eb:d9:28:f8:bf:00:af:b5:e7: cd:e4:ab:ee:61:01:27:56:96:f7:d1:d9:4b:9b:b9: 9e:41:3f:fd:68:9a:6c:d2:28:73:8e:c5:22:3a:ef: f0:59:96:f8:2d:93:21:52:39:4e:e2:59:06:26:c8: ef:58:7e:bd:c1:97:53:80:05:bc:ef:c5:2e:60:ad: 60:a4:57:ce:bc:e4:88:8e:ee:46:e0:44:6e:23:c3: 76:3a:80:3a:5e:08:ce:24:d3:c9:ac:d9:be:6a:7c: a3:ac:0e:79:99:5b:49:ad:27:8e:2b:c1:70:5a:34: fa:60:c6:69:94:34:c7:87:3e:6b:b4:0e:ba:9e:e7: 7d:9e:b6:89:9b:b1:61:11:18:7b:d0:1b:c9:f1:a5: 54:73:90:d1:e0:18:6f:7e:39:7b:df:e9:fd:f8:da: 1a:93:87:11:47:9e:66:5c:66:0c:91:66:22:73:a5: 36:77:5f:f1:3e:03:f9:da:fa:74:1a:73:ee:13:57: d3:2a:c9:a0:46:d2:cc:89:cf:5c:16:4f:b8:0b:3c: 26:4a:49:2a:5d:1a:a6:f2:20:fc:6f:b9:48:1e:19: e8:a8:e3:eb:89:8f:78:ec:38:a2:a9:c0:69:fe:dd: a7:71:f5:eb:44:76:05:0f:00:e9:01:f6:3f:ae:42: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:39:61:76:F6:29:99:44:B3:46:1A:DD:78:98:6D:A5:4B:AD:57:0B X509v3 Authority Key Identifier: keyid:1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:58:36:14:0b:da:f7:8b:bd:96:66:74:80:08:9f:75:e5:d5: 67:be:66:a5:ed:e6:76:f6:4b:bb:ee:90:fd:58:bb:96:46:f8: ab:49:80:68:cf:e1:2b:9d:20:e5:1e:67:a7:6c:86:3d:19:55: 5d:4f:8d:8a:09:82:7c:c6:35:11:d9:e7:bf:7e:d3:3c:8e:9c: 8b:c4:f7:c1:cb:02:67:69:d6:55:e9:c4:ae:8d:aa:bf:c0:04: 9d:a9:df:eb:6a:41:71:9a:a9:8c:d3:e4:14:ae:62:76:d6:e3: b2:fc:30:eb:6f:1f:04:ed:a6:7a:36:3b:bd:eb:af:e4:55:aa: a8:67:59:47:60:0c:c0:cd:e7:89:c8:b2:1e:f1:c4:d1:c4:99: 2d:92:7e:1e:8f:ba:1e:04:15:06:5c:24:b4:68:e4:10:90:f1: 22:c6:ee:57:b7:69:5c:96:06:5a:8b:01:dc:2e:fe:01:a2:8e: 15:71:61:26:a8:91:a6:87:83:91:74:a8:3c:77:9a:29:14:77: 3f:88:53:65:c2:d1:91:dc:5a:6a:00:e5:82:e4:88:57:6a:d1: 74:31:a9:58:f3:19:eb:e2:bb:39:8c:1a:65:ab:6b:99:35:ee: db:eb:98:ba:21:93:05:bd:b8:b3:79:7b:67:10:08:0f:c1:88: 65:e9:c3:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxdfkAmxQVNXZIRdmnG9GLWr3ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRERTQw OTE5NTAxNTAeFw0yNjA2MDMwMjA3MjRaFw0yNjA2MDQwMzA1MjRaMDMxMTAvBgNV BAMTKDMxMzk2MTc2RjYyOTk5NDRCMzQ2MUFERDc4OTg2REE1NEJBRDU3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB77uVpevZKPi/AK+1583kq+5h ASdWlvfR2UubuZ5BP/1ommzSKHOOxSI67/BZlvgtkyFSOU7iWQYmyO9Yfr3Bl1OA BbzvxS5grWCkV8685IiO7kbgRG4jw3Y6gDpeCM4k08ms2b5qfKOsDnmZW0mtJ44r wXBaNPpgxmmUNMeHPmu0Drqe532etombsWERGHvQG8nxpVRzkNHgGG9+OXvf6f34 2hqThxFHnmZcZgyRZiJzpTZ3X/E+A/na+nQac+4TV9MqyaBG0syJz1wWT7gLPCZK SSpdGqbyIPxvuUgeGeio4+uJj3jsOKKpwGn+3adx9etEdgUPAOkB9j+uQneHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMTlhdvYpmUSzRhrdeJhtpUutVwswHwYDVR0j BBgwFoAUH/SIq3ByIIWMELqZ5ZRN5AkZUBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM1OWI2YTMtYjc0Yi00YmFhLTk5M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3 MDcyMjA4NThDMTBCQTk5RTU5NDRERTQwOTE5NTAxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkY0ODhBQjcwNzIyMDg1OEMxMEJBOTlFNTk0NERFNDA5MTk1 MDE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvMUZGNDg4QUI3MDcyMjA4NThDMTBCQTk5RTU5NDRE RTQwOTE5NTAxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtYNhQL2veLvZZmdIAIn3Xl1We+ZqXt5nb2 S7vukP1Yu5ZG+KtJgGjP4SudIOUeZ6dshj0ZVV1PjYoJgnzGNRHZ579+0zyOnIvE 98HLAmdp1lXpxK6Nqr/ABJ2p3+tqQXGaqYzT5BSuYnbW47L8MOtvHwTtpno2O73r r+RVqqhnWUdgDMDN54nIsh7xxNHEmS2Sfh6Puh4EFQZcJLRo5BCQ8SLG7le3aVyW BlqLAdwu/gGijhVxYSaokaaHg5F0qDx3mikUdz+IU2XC0ZHcWmoA5YLkiFdq0XQx qVjzGeviuzmMGmWra5k17tvrmLohkwW9uLN5e2cQCA/BiGXpw68= -----END CERTIFICATE-----Generated at Wed Jun 3 04:27:22 2026 by rpki-client