$ rpki-client -vvf rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft File: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft (raw, json) Hash identifier: OJbZ3MbmQX67mfl0NSuPE49vqfURSnw+6fRLTP7btrA= Subject key identifier: 60:E9:35:C5:45:52:93:BA:EC:DE:07:7F:99:64:14:07:8C:DA:CB:38 Authority key identifier: 1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 Certificate issuer: /CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Certificate serial: 185819EC48E9AFF6CB92C1287E4BA790BF77C385 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 00:11:04 +0000 Manifest this update: Tue 21 Jul 2026 00:06:04 +0000 Manifest next update: Wed 22 Jul 2026 01:21:04 +0000 Files and hashes: 1: 1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl (hash: DRRURPxESLCTliWfbozRgNH0OQGJY6EvNIuyni/DqiY=) 2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Yhy0kPLYMQCNyqChEExantmOWkrvJQT2nQi7dTwL98I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:19:ec:48:e9:af:f6:cb:92:c1:28:7e:4b:a7:90:bf:77:c3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF9F825FCE31C27D16E02FE5444730BA39FCFF9 Validity Not Before: Jul 21 00:06:04 2026 GMT Not After : Jul 22 01:21:04 2026 GMT Subject: CN=60E935C5455293BAECDE077F996414078CDACB38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bf:e2:95:d3:df:9f:5f:56:ff:54:eb:46:64: 15:1a:0b:f3:bb:6f:68:4b:51:f8:a9:80:93:38:d0: 40:fd:eb:f3:ad:09:71:f4:cc:8e:9d:40:62:03:55: 2d:9e:b2:95:7b:44:fe:18:00:b9:84:90:8d:08:b0: 32:eb:cf:82:6d:3e:7a:49:fd:bd:40:75:ac:f1:1a: 36:d3:6f:2a:1f:d3:24:23:e0:75:25:31:f9:e2:86: b1:6c:03:8d:41:a7:5b:e8:3c:8a:40:6d:20:8a:b9: eb:3e:a6:0d:88:e4:be:b5:70:84:04:0b:06:5a:21: 8c:70:f0:9f:82:94:60:4e:f5:5d:96:e5:a4:49:f3: b2:ee:93:4c:d2:3e:82:f2:7e:7b:74:3e:15:db:0c: 29:ad:e8:70:d8:b5:f0:24:e4:f7:54:c1:73:36:7a: eb:42:fa:cd:38:2e:e6:73:d7:92:78:7d:b5:06:f8: e9:6a:7a:27:5a:7c:0c:e9:54:7d:e5:7f:05:e0:ec: 47:0e:5e:80:01:87:bf:9b:08:09:d2:dc:85:e6:bc: 04:01:9e:03:83:89:cc:b3:ac:9f:e5:1c:90:88:f4: 0e:f9:dd:43:e8:20:f5:a0:39:13:d2:46:8d:1e:a8: 68:47:34:1d:9d:de:69:e0:eb:aa:ec:94:05:34:7e: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E9:35:C5:45:52:93:BA:EC:DE:07:7F:99:64:14:07:8C:DA:CB:38 X509v3 Authority Key Identifier: keyid:1C:F9:F8:25:FC:E3:1C:27:D1:6E:02:FE:54:44:73:0B:A3:9F:CF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/1CF9F825FCE31C27D16E02FE5444730BA39FCFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:32:4e:91:09:e0:2e:8c:79:b9:b3:98:b6:c1:f9:cf:3b:ae: 1e:7e:f0:ce:92:6f:4e:02:9e:c9:91:7d:ad:17:9c:95:95:d2: bf:d3:df:6d:0f:01:ce:3d:bd:a1:bb:49:77:02:7c:99:ab:f3: b4:89:c4:9d:3f:6c:8d:e3:f8:68:81:8c:2c:c3:b1:83:78:5d: 56:15:21:33:4e:bd:83:23:e2:58:c7:df:04:14:d9:18:81:e3: b8:c4:8a:84:96:33:27:ef:e0:23:3d:d3:af:4a:62:da:62:15: 63:5d:ee:1c:aa:2a:4e:08:30:bf:2e:d8:4a:25:9f:52:aa:b8: 08:7d:19:33:94:27:47:29:a2:c7:eb:ec:95:7c:de:43:74:d4: 76:6a:6d:b8:76:0c:10:a0:78:a7:14:5a:58:6c:a8:28:65:16: cf:23:2c:98:e2:d1:72:66:5a:25:fa:f1:59:c6:4e:ab:2b:3a: 29:af:77:00:5b:ad:a5:2a:3b:a2:58:c3:d8:a6:94:a5:6e:df: f3:f8:4f:95:c9:5e:71:74:e6:e2:b7:7b:33:d1:ee:45:69:ce: a7:7b:df:f9:88:1c:b4:b5:c3:9c:25:77:16:82:8f:40:37:4f: 85:f9:56:3a:ab:cb:05:74:6a:aa:f6:1b:b4:c9:a4:a9:8c:45: aa:ed:f5:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFgZ7Ejpr/bLksEofkunkL93w4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJB MzlGQ0ZGOTAeFw0yNjA3MjEwMDA2MDRaFw0yNjA3MjIwMTIxMDRaMDMxMTAvBgNV BAMTKDYwRTkzNUM1NDU1MjkzQkFFQ0RFMDc3Rjk5NjQxNDA3OENEQUNCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOv+KV09+fX1b/VOtGZBUaC/O7 b2hLUfipgJM40ED96/OtCXH0zI6dQGIDVS2espV7RP4YALmEkI0IsDLrz4JtPnpJ /b1AdazxGjbTbyof0yQj4HUlMfnihrFsA41Bp1voPIpAbSCKues+pg2I5L61cIQE CwZaIYxw8J+ClGBO9V2W5aRJ87Luk0zSPoLyfnt0PhXbDCmt6HDYtfAk5PdUwXM2 eutC+s04LuZz15J4fbUG+OlqeidafAzpVH3lfwXg7EcOXoABh7+bCAnS3IXmvAQB ngODicyzrJ/lHJCI9A753UPoIPWgORPSRo0eqGhHNB2d3mng66rslAU0ftytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYOk1xUVSk7rs3gd/mWQUB4zayzgwHwYDVR0j BBgwFoAUHPn4JfzjHCfRbgL+VERzC6Ofz/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk5ODE5NWYtMTRiYi00MWZkLWI2ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVG Q0UzMUMyN0QxNkUwMkZFNTQ0NDczMEJBMzlGQ0ZGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQ0Y5RjgyNUZDRTMxQzI3RDE2RTAyRkU1NDQ0NzMwQkEzOUZD RkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMUNGOUY4MjVGQ0UzMUMyN0QxNkUwMkZFNTQ0NDcz MEJBMzlGQ0ZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwyTpEJ4C6MebmzmLbB+c87rh5+8M6Sb04C nsmRfa0XnJWV0r/T320PAc49vaG7SXcCfJmr87SJxJ0/bI3j+GiBjCzDsYN4XVYV ITNOvYMj4ljH3wQU2RiB47jEioSWMyfv4CM9069KYtpiFWNd7hyqKk4IML8u2Eol n1KquAh9GTOUJ0cposfr7JV83kN01HZqbbh2DBCgeKcUWlhsqChlFs8jLJji0XJm WiX68VnGTqsrOimvdwBbraUqO6JYw9imlKVu3/P4T5XJXnF05uK3ezPR7kVpzqd7 3/mIHLS1w5wldxaCj0A3T4X5VjqrywV0aqr2G7TJpKmMRart9eI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:30:59 2026 by rpki-client