$ rpki-client -vvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: qO5krt8DPsZvzxwQfQ+x+3cEDP6UlWlWIjUXWqzJFwo= Subject key identifier: C8:BF:FF:9F:D9:45:88:75:46:78:19:8A:FF:B9:40:A8:C3:43:65:49 Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 342B26D63AD674962BEFCF0FD399BBB6B5CF3A84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 20:24:42 +0000 Manifest this update: Tue 02 Jun 2026 20:19:42 +0000 Manifest next update: Wed 03 Jun 2026 20:42:42 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) 2: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: Wg7lNZcYxUVtMsNeDilrmrWJ4kKuZ3MFBQjVfBae1dA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2b:26:d6:3a:d6:74:96:2b:ef:cf:0f:d3:99:bb:b6:b5:cf:3a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Jun 2 20:19:42 2026 GMT Not After : Jun 3 20:42:42 2026 GMT Subject: CN=C8BFFF9FD94588754678198AFFB940A8C3436549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:77:fa:d1:f0:37:32:66:b7:29:dc:1c:72: 65:87:ee:25:e1:16:05:f4:21:89:6a:dd:96:99:8d: cb:d3:4c:f1:f3:b1:b0:cc:6c:fe:c3:80:b7:92:6e: 5a:66:c4:f6:c7:1e:27:8c:29:b4:29:38:4d:5c:76: 0f:c8:96:cf:bc:d3:d3:16:4f:25:04:17:7a:4a:58: 9b:47:af:8b:41:04:a3:65:10:dd:d1:0e:cc:b0:76: c1:52:17:ef:f5:8c:07:4c:a9:ca:69:f2:0b:72:42: 79:db:5d:84:7d:72:42:56:29:35:a2:86:88:23:0a: c4:9f:f4:41:49:35:32:42:cc:35:1e:cb:7a:90:bc: c9:fd:99:56:e1:e1:ab:d8:5b:3e:77:7f:9e:47:66: 05:0f:85:ef:7a:6e:85:20:bf:2b:2f:34:3a:f1:1c: f5:20:99:32:3d:9c:31:2e:81:ff:67:11:60:f2:8c: 6c:43:be:f1:cc:b7:3a:ea:79:24:b0:52:ab:99:12: 5b:70:ff:b6:a6:2c:8e:20:f3:56:98:5a:91:ce:5d: fe:b4:0c:0a:e1:8c:33:46:6f:b1:62:10:5e:18:eb: 6d:b2:99:15:34:e0:0b:96:e7:29:80:b5:30:9c:05: 88:a7:61:16:33:9a:6e:ba:5b:db:70:eb:4f:06:5d: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:FF:9F:D9:45:88:75:46:78:19:8A:FF:B9:40:A8:C3:43:65:49 X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:e9:f0:06:09:29:ef:bb:0d:ab:20:da:43:d8:af:8b:98: 8a:07:20:4a:40:cf:72:66:4b:66:6b:88:82:5a:bc:54:9b:40: c6:b9:12:f3:a7:15:6d:90:0e:9c:8b:1e:f5:bb:85:0a:62:f8: 25:89:4d:84:2c:79:94:34:1c:62:d5:e6:41:7c:d9:df:41:9e: 64:4c:f2:32:cf:80:a9:ed:cc:17:23:13:77:8a:15:6d:9c:87: 8e:00:f0:ff:de:1a:e9:13:53:1a:e2:a8:ee:d5:35:23:73:98: 9c:89:46:f2:6d:e6:24:ee:bd:9a:11:15:fb:d8:60:cc:2d:14: 96:fd:8c:6a:4c:68:7d:f4:af:f5:ab:a2:f6:59:8c:bb:2b:af: ef:41:ff:6b:8f:a5:15:af:3d:08:f6:38:c1:1b:df:f3:2a:e7: 6e:63:a4:a6:d5:be:c9:75:9b:70:79:09:f0:22:e4:3b:eb:b2: 2a:ab:2f:81:f5:3d:14:57:c4:87:db:17:30:25:6f:5e:ac:0e: e3:96:a8:5b:e4:40:fa:14:4b:00:b5:83:00:47:be:d1:27:b0: 7a:af:14:00:83:4b:c7:39:88:24:7d:23:80:d3:dc:53:9b:0e: 49:03:29:7f:da:e3:ea:71:a6:73:e2:48:e7:64:93:a8:81:c7: 43:7a:ec:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCsm1jrWdJYr788P05m7trXPOoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA2MDIyMDE5NDJaFw0yNjA2MDMyMDQyNDJaMDMxMTAvBgNV BAMTKEM4QkZGRjlGRDk0NTg4NzU0Njc4MTk4QUZGQjk0MEE4QzM0MzY1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+enf60fA3Mma3KdwccmWH7iXh FgX0IYlq3ZaZjcvTTPHzsbDMbP7DgLeSblpmxPbHHieMKbQpOE1cdg/Ils+809MW TyUEF3pKWJtHr4tBBKNlEN3RDsywdsFSF+/1jAdMqcpp8gtyQnnbXYR9ckJWKTWi hogjCsSf9EFJNTJCzDUey3qQvMn9mVbh4avYWz53f55HZgUPhe96boUgvysvNDrx HPUgmTI9nDEugf9nEWDyjGxDvvHMtzrqeSSwUquZEltw/7amLI4g81aYWpHOXf60 DArhjDNGb7FiEF4Y622ymRU04AuW5ymAtTCcBYinYRYzmm66W9tw608GXRPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyL//n9lFiHVGeBmK/7lAqMNDZUkwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ76fAGCSnvuw2rINpD2K+LmIoHIEpAz3Jm S2ZriIJavFSbQMa5EvOnFW2QDpyLHvW7hQpi+CWJTYQseZQ0HGLV5kF82d9BnmRM 8jLPgKntzBcjE3eKFW2ch44A8P/eGukTUxriqO7VNSNzmJyJRvJt5iTuvZoRFfvY YMwtFJb9jGpMaH30r/WrovZZjLsrr+9B/2uPpRWvPQj2OMEb3/Mq525jpKbVvsl1 m3B5CfAi5DvrsiqrL4H1PRRXxIfbFzAlb16sDuOWqFvkQPoUSwC1gwBHvtEnsHqv FACDS8c5iCR9I4DT3FObDkkDKX/a4+pxpnPiSOdkk6iBx0N67Ks= -----END CERTIFICATE-----Generated at Wed Jun 3 04:47:56 2026 by rpki-client