$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft File: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft (raw, json) Hash identifier: +3RKQDlTTjYczyyCaD3170W1U4laFGBbYeFynMsE5PU= Subject key identifier: 0A:14:96:2F:4D:37:C2:7B:3F:59:82:87:4D:F2:9E:0B:B3:AA:DC:22 Authority key identifier: 1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A Certificate issuer: /CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Certificate serial: 656AAD4CDB287E1ADC2B600FA463DDF64AF9101D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:31:51 +0000 Manifest this update: Mon 20 Jul 2026 12:26:51 +0000 Manifest next update: Tue 21 Jul 2026 12:56:51 +0000 Files and hashes: 1: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: 3Pur9J/K8W30/vvGHGXc6KHgwQgQ4wEAxcFN1o16NNI=) 2: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: a6L02/ltQd6+ySj9pYMUEWkvYU4L6ZYKU3OEQlZp5vg=) 3: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: /fa1hwZEt68IrXwKEonGaCZwd1oMYZDyXJq4KeJo86E=) 4: 1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl (hash: +AoUANxACXiS3vyaFx+JMCt6z6vFseibmMrkJcjtUVI=) 5: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: an5beHJBQCXe1O6nJramlD3hI7Qm5QXG3JLpnD/aNxM=) 6: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: KWc9OTSiXvMZVJYcyeDQq+tc4s6Lq68tyd9neBf4i2s=) 7: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: a4IK1VqkQFifgbVqGFjspnePVTV/YkKjfKoaIwFfqZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 12:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6a:ad:4c:db:28:7e:1a:dc:2b:60:0f:a4:63:dd:f6:4a:f9:10:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F14849A30C98C1F01620E4C5ECBADDDF509992A Validity Not Before: Jul 20 12:26:51 2026 GMT Not After : Jul 21 12:56:51 2026 GMT Subject: CN=0A14962F4D37C27B3F5982874DF29E0BB3AADC22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:54:31:6e:65:e1:cd:20:93:86:c8:4e:4c: dc:1e:8e:9e:dc:ba:c4:a0:3a:68:d9:83:15:e9:36: c1:8b:af:b2:49:67:ae:60:83:75:3c:83:06:4a:e5: 94:df:67:81:4d:22:12:8a:69:7e:93:bf:65:ad:6f: 1c:6e:e5:df:7d:ee:42:a3:49:60:0b:fe:8c:f6:7b: 62:52:f5:f0:e4:7a:9d:3f:c2:77:6e:81:fd:3b:ae: 32:13:71:a3:07:6d:98:a8:0d:77:f2:5f:9f:8a:ca: c8:83:b3:34:82:9a:d5:5f:40:e9:f2:96:67:28:42: 4e:d3:8f:fe:e3:64:3c:90:6e:67:59:69:f2:78:48: 4c:46:7d:09:21:0b:fd:73:58:a2:5c:82:55:a3:18: 6d:e6:2c:38:ce:42:0b:e6:f0:2f:fb:72:a7:2e:b5: 52:28:45:6a:1e:86:a2:54:5e:35:f7:f7:07:71:21: 5e:45:83:89:97:9a:72:6e:3f:0e:18:02:d0:ec:18: 43:50:df:28:c2:be:12:0d:db:75:21:05:bc:57:e8: dd:a4:43:58:e5:cf:02:28:c9:38:5b:54:5a:23:dc: a1:b9:9c:a4:df:24:11:79:ce:48:10:0c:8b:1b:8d: 4f:77:05:2d:fc:61:73:a0:93:c7:0b:03:22:b8:3f: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:14:96:2F:4D:37:C2:7B:3F:59:82:87:4D:F2:9E:0B:B3:AA:DC:22 X509v3 Authority Key Identifier: keyid:1F:14:84:9A:30:C9:8C:1F:01:62:0E:4C:5E:CB:AD:DD:F5:09:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1F14849A30C98C1F01620E4C5ECBADDDF509992A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/1F14849A30C98C1F01620E4C5ECBADDDF509992A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0c:49:e9:5d:e6:50:d7:ff:7d:e8:e4:55:2b:d4:72:29:ae: c7:93:b8:2b:f0:00:09:50:e7:e1:53:6d:68:d2:fd:c6:04:3f: a5:34:ee:4f:62:b8:67:28:58:70:a4:79:70:0b:64:4a:1d:37: b6:2a:99:74:72:3a:35:86:d2:cf:5f:42:9b:16:f0:8c:b7:3b: c4:5b:9c:50:1c:96:7f:7b:34:da:d6:b6:ff:c7:c7:1b:24:cb: 36:76:b2:44:dc:3a:91:16:04:87:e0:5d:1a:f6:e5:ea:8e:aa: 92:7e:22:e2:cd:62:2d:ce:6e:86:c4:cf:ec:8d:4c:eb:0d:70: 37:5a:f4:08:43:76:54:2c:e1:2a:e2:69:26:6d:9e:8a:24:19: 04:3e:79:52:ff:80:dd:a8:80:d2:d1:a5:20:e9:55:dc:67:85: 8e:31:a9:f3:07:b6:bf:49:2f:a2:2b:83:a0:56:67:d5:4c:f7: e4:29:c5:20:0b:46:78:33:f7:0d:c1:4a:9f:62:7d:25:c7:80: d4:2e:c6:d6:57:10:63:c1:31:aa:07:50:d3:7c:98:8f:ba:46: 8d:5c:da:0f:cf:33:c5:1c:f6:ab:2b:f0:14:ff:67:b4:18:08: 9c:b8:fa:1b:55:bd:1b:49:f2:26:e9:0d:5e:21:b8:61:2c:d7: ea:44:30:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWqtTNsofhrcK2APpGPd9kr5EB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFERERG NTA5OTkyQTAeFw0yNjA3MjAxMjI2NTFaFw0yNjA3MjExMjU2NTFaMDMxMTAvBgNV BAMTKDBBMTQ5NjJGNEQzN0MyN0IzRjU5ODI4NzRERjI5RTBCQjNBQURDMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bFQxbmXhzSCThshOTNwejp7c usSgOmjZgxXpNsGLr7JJZ65gg3U8gwZK5ZTfZ4FNIhKKaX6Tv2Wtbxxu5d997kKj SWAL/oz2e2JS9fDkep0/wndugf07rjITcaMHbZioDXfyX5+KysiDszSCmtVfQOny lmcoQk7Tj/7jZDyQbmdZafJ4SExGfQkhC/1zWKJcglWjGG3mLDjOQgvm8C/7cqcu tVIoRWoehqJUXjX39wdxIV5Fg4mXmnJuPw4YAtDsGENQ3yjCvhIN23UhBbxX6N2k Q1jlzwIoyThbVFoj3KG5nKTfJBF5zkgQDIsbjU93BS38YXOgk8cLAyK4P/JNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChSWL003wns/WYKHTfKeC7Oq3CIwHwYDVR0j BBgwFoAUHxSEmjDJjB8BYg5MXsut3fUJmSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NmNjhhYmEtOTUxNS00ZDEyLWFhYzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEz MEM5OEMxRjAxNjIwRTRDNUVDQkFERERGNTA5OTkyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRjE0ODQ5QTMwQzk4QzFGMDE2MjBFNEM1RUNCQUREREY1MDk5 OTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvMUYxNDg0OUEzMEM5OEMxRjAxNjIwRTRDNUVDQkFE RERGNTA5OTkyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoMSeld5lDX/33o5FUr1HIprseTuCvwAAlQ 5+FTbWjS/cYEP6U07k9iuGcoWHCkeXALZEodN7YqmXRyOjWG0s9fQpsW8Iy3O8Rb nFAcln97NNrWtv/HxxskyzZ2skTcOpEWBIfgXRr25eqOqpJ+IuLNYi3ObobEz+yN TOsNcDda9AhDdlQs4SriaSZtnookGQQ+eVL/gN2ogNLRpSDpVdxnhY4xqfMHtr9J L6Irg6BWZ9VM9+QpxSALRngz9w3BSp9ifSXHgNQuxtZXEGPBMaoHUNN8mI+6Ro1c 2g/PM8Uc9qsr8BT/Z7QYCJy4+htVvRtJ8ibpDV4huGEs1+pEMK0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:08:40 2026 by rpki-client