$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft File: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft (raw, json) Hash identifier: vT3QZM9RfcjybRa6frCa0fgqs9u2OW9FKhAsCWLFlvc= Subject key identifier: A8:2D:9F:DF:21:1A:1D:29:C5:23:C4:70:4F:60:2E:55:9A:45:8A:93 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 1B32DB5EB913076A944AC1AAA9951ADD1E3F002A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 21:03:44 +0000 Manifest this update: Fri 17 Jul 2026 20:58:44 +0000 Manifest next update: Sat 18 Jul 2026 22:09:44 +0000 Files and hashes: 1: AS139994.roa (hash: G9jUsHOqGF8GyMe4d4F0m9p9Wpq1ELwFCpA8Pkmrzks=) 2: AS24203.roa (hash: GC9KIMugoCl+PFxNhKrxUiJjAqMz/PW5WzhJj/Fex+w=) 3: 1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl (hash: r5CznO6t8ciwtB7fJbQhdKO7UNETiA+H7bO8v0n/nBk=) 4: AS17885.roa (hash: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 22:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:32:db:5e:b9:13:07:6a:94:4a:c1:aa:a9:95:1a:dd:1e:3f:00:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: Jul 17 20:58:44 2026 GMT Not After : Jul 18 22:09:44 2026 GMT Subject: CN=A82D9FDF211A1D29C523C4704F602E559A458A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:b0:a0:be:aa:c3:b2:45:05:d8:b2:33:b0: ce:0e:32:8a:9e:65:04:3c:8c:22:f2:8f:76:4b:04: a5:d8:81:8d:a9:d7:02:1b:7c:39:bc:dd:f6:48:3b: a1:e4:33:bc:32:c9:15:5e:63:2f:5c:27:52:68:f0: 5f:46:3f:e6:86:b6:08:ca:41:a7:73:57:7f:17:73: 96:93:27:98:5d:10:26:d8:be:7f:a5:7b:5f:ca:e9: 2f:ae:53:31:17:77:09:e9:ab:4d:8c:75:49:23:04: 2a:c8:10:4d:30:0e:bb:e8:96:26:a3:a7:81:fc:db: 7c:81:ae:59:0a:3c:33:45:95:f5:d3:08:d8:1b:fc: 10:30:2c:66:ea:d7:a7:a2:0d:6e:17:eb:a1:08:e7: a8:ab:c1:8c:a2:6a:98:b2:47:c2:3a:14:d4:96:eb: c0:5e:62:18:12:77:60:25:4a:06:23:10:ea:e4:66: 5b:b9:ae:a8:4c:10:14:9e:a3:e0:c1:cd:df:00:d0: c3:ac:ae:f7:79:a8:02:c9:d2:a1:67:1a:38:3f:45: cb:01:26:bc:37:de:47:af:3f:42:49:b2:53:43:93: 6c:f1:91:e2:30:dc:b8:79:c2:70:78:1b:84:d6:ac: 9c:92:8c:02:0e:81:da:c5:30:43:44:d7:5f:2f:a4: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:9F:DF:21:1A:1D:29:C5:23:C4:70:4F:60:2E:55:9A:45:8A:93 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:50:b3:0a:2c:3f:0e:c6:b2:a6:e4:49:0a:53:ce:b8:ab:0d: 9e:b4:43:f2:cc:7a:9a:f2:3f:96:2b:e3:bf:06:63:17:23:be: 92:3d:b1:14:cc:a0:3e:86:8e:ef:57:ed:7e:3f:02:99:52:84: ff:50:cf:fd:fc:18:eb:0a:46:f7:11:22:e3:57:6b:e4:96:71: fc:fd:48:8e:3b:49:ae:a4:f2:c5:4e:16:65:d8:de:b8:66:a8: 98:47:9e:b7:2e:5d:cc:96:82:b5:d5:ff:c6:7e:4a:07:3e:13: 3f:02:2a:40:e5:73:c0:7f:a4:c2:7a:27:eb:2e:eb:a0:82:77: c7:6a:8b:14:a0:b0:96:04:26:61:b2:98:dc:8d:bc:ed:15:5d: ad:0f:24:e0:05:c5:64:4e:f6:19:31:ae:24:13:2e:e5:5a:55: fa:50:ee:a0:db:50:91:ea:e3:30:c7:16:e9:38:ee:64:a6:6c: 47:3a:f0:f5:60:cc:4e:fc:0f:98:d9:41:75:cf:32:fe:7b:ac: f8:d9:15:52:3d:9b:72:31:96:b1:bd:96:ba:4b:30:2f:7c:1c: 57:c9:3c:31:3d:d9:83:93:06:a8:bc:aa:22:ed:be:52:8f:5e: 02:c4:aa:f3:7b:29:90:b3:5c:7c:06:88:ca:e8:11:eb:15:f7: f3:2c:bd:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzLbXrkTB2qUSsGqqZUa3R4/ACowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA3MTcyMDU4NDRaFw0yNjA3MTgyMjA5NDRaMDMxMTAvBgNV BAMTKEE4MkQ5RkRGMjExQTFEMjlDNTIzQzQ3MDRGNjAyRTU1OUE0NThBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOLCgvqrDskUF2LIzsM4OMoqe ZQQ8jCLyj3ZLBKXYgY2p1wIbfDm83fZIO6HkM7wyyRVeYy9cJ1Jo8F9GP+aGtgjK QadzV38Xc5aTJ5hdECbYvn+le1/K6S+uUzEXdwnpq02MdUkjBCrIEE0wDrvoliaj p4H823yBrlkKPDNFlfXTCNgb/BAwLGbq16eiDW4X66EI56irwYyiapiyR8I6FNSW 68BeYhgSd2AlSgYjEOrkZlu5rqhMEBSeo+DBzd8A0MOsrvd5qALJ0qFnGjg/RcsB Jrw33kevP0JJslNDk2zxkeIw3Lh5wnB4G4TWrJySjAIOgdrFMENE118vpPRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqC2f3yEaHSnFI8RwT2AuVZpFipMwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZE QUM4RjlEMDA3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5QswosPw7GsqbkSQpTzrirDZ60Q/LMepry P5Yr478GYxcjvpI9sRTMoD6Gju9X7X4/AplShP9Qz/38GOsKRvcRIuNXa+SWcfz9 SI47Sa6k8sVOFmXY3rhmqJhHnrcuXcyWgrXV/8Z+Sgc+Ez8CKkDlc8B/pMJ6J+su 66CCd8dqixSgsJYEJmGymNyNvO0VXa0PJOAFxWRO9hkxriQTLuVaVfpQ7qDbUJHq 4zDHFuk47mSmbEc68PVgzE78D5jZQXXPMv57rPjZFVI9m3IxlrG9lrpLMC98HFfJ PDE92YOTBqi8qiLtvlKPXgLEqvN7KZCzXHwGiMroEesV9/Msvc4= -----END CERTIFICATE-----Generated at Sat Jul 18 07:09:37 2026 by rpki-client