$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: rtXRR9YNybLOUHt2V3D/T9cocJSlYhf9peL1jo7PZoQ= Subject key identifier: 78:A5:CE:4B:87:F7:20:65:0C:BB:DA:85:A5:F8:C5:27:0B:52:4A:52 Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 2D7C522393E6D5BE3399F9447D92AB5AAB3958B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 18:40:03 +0000 Manifest this update: Sun 02 Aug 2026 18:35:03 +0000 Manifest next update: Mon 03 Aug 2026 21:54:03 +0000 Files and hashes: 1: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) 2: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: Z0jAtEncMQCOkq8bkvJGBNW/gUgR4LgwjZgrMA3ExaY=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7c:52:23:93:e6:d5:be:33:99:f9:44:7d:92:ab:5a:ab:39:58:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Aug 2 18:35:03 2026 GMT Not After : Aug 3 21:54:03 2026 GMT Subject: CN=78A5CE4B87F720650CBBDA85A5F8C5270B524A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:66:9f:11:c7:4f:e5:c3:c2:07:31:6e:e5: d6:3a:20:a9:5b:1a:63:ed:0d:86:67:bb:2a:22:e1: af:d4:3e:5f:bc:3e:e0:51:36:cb:80:de:b6:8a:b7: 3a:e9:cd:ad:f5:5a:ca:9c:59:a3:27:57:cf:46:56: 79:11:33:ba:3c:81:e0:58:21:af:6d:c2:ba:43:95: 13:31:ef:3d:e9:b0:81:eb:ad:4c:69:89:0a:c9:14: e1:d2:19:b5:08:72:31:3d:40:8e:df:ff:15:a5:19: 57:0d:3c:b7:35:ca:cb:3c:b2:73:b7:fe:bf:4b:a4: c6:ce:c0:b2:a5:c0:15:3d:75:22:64:e8:84:f9:2d: 44:23:d9:6a:33:3f:4f:06:73:95:4e:f2:34:c9:12: d3:83:57:82:dd:48:64:42:50:96:1b:48:85:eb:10: ce:0b:8f:a3:46:1e:a7:82:54:1c:47:2d:cc:95:43: 35:a7:52:f7:c9:8a:76:5f:6b:b5:8f:3f:f5:fb:b0: 4d:d9:e7:02:3a:be:85:05:1a:99:93:03:98:87:a2: 67:41:cd:76:69:b7:75:2f:d8:17:2c:ed:e7:c1:1e: 39:26:6b:cb:6c:73:83:a8:1f:2c:da:3f:e6:aa:4a: fb:79:83:7b:8d:f7:2a:86:9e:00:8d:0b:e3:b9:84: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A5:CE:4B:87:F7:20:65:0C:BB:DA:85:A5:F8:C5:27:0B:52:4A:52 X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bd:0b:d8:99:4d:79:a2:d6:6e:b0:f8:84:7b:22:74:14:fb: 18:50:bf:48:10:c0:2c:9a:d4:e2:69:30:1c:6a:c2:b1:46:6e: 6b:e1:0b:c0:71:9e:a2:80:30:72:8c:87:ed:2d:e6:01:8d:3e: 86:4d:88:fe:63:29:92:cf:3a:f0:78:2e:7a:6d:b2:9e:83:46: bb:04:a4:9f:d7:cd:1d:1c:9e:f5:c0:f3:08:61:c9:e8:37:fb: bb:45:50:62:7f:e8:16:74:2f:7e:0b:a4:70:21:08:a6:c3:a9: ca:09:6a:52:24:01:44:29:8f:d7:be:99:c2:09:e1:ac:85:66: 25:ac:fe:08:80:c7:7d:64:2b:00:38:5f:dd:a5:d6:29:f1:fa: 47:87:92:25:52:cf:7d:e9:5a:75:c5:b1:12:28:2d:0d:4b:3a: 88:ba:4a:c2:9a:86:db:a9:ec:78:f6:94:d8:8f:c9:e3:53:78: b2:15:5a:8d:32:99:3e:9b:22:8b:48:a2:ed:5d:4b:3f:fa:47: bd:70:26:55:78:75:dc:55:e2:9e:8c:60:44:e0:ba:b4:0f:a6: 0e:91:75:02:d5:a7:76:00:93:c9:c3:58:d4:b3:2e:75:cc:4e: 92:c0:82:2d:6f:ee:28:78:c6:d7:0f:42:11:f3:98:da:29:3e: 7d:a0:58:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXxSI5Pm1b4zmflEfZKrWqs5WLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA4MDIxODM1MDNaFw0yNjA4MDMyMTU0MDNaMDMxMTAvBgNV BAMTKDc4QTVDRTRCODdGNzIwNjUwQ0JCREE4NUE1RjhDNTI3MEI1MjRBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPmafEcdP5cPCBzFu5dY6IKlb GmPtDYZnuyoi4a/UPl+8PuBRNsuA3raKtzrpza31WsqcWaMnV89GVnkRM7o8geBY Ia9twrpDlRMx7z3psIHrrUxpiQrJFOHSGbUIcjE9QI7f/xWlGVcNPLc1yss8snO3 /r9LpMbOwLKlwBU9dSJk6IT5LUQj2WozP08Gc5VO8jTJEtODV4LdSGRCUJYbSIXr EM4Lj6NGHqeCVBxHLcyVQzWnUvfJinZfa7WPP/X7sE3Z5wI6voUFGpmTA5iHomdB zXZpt3Uv2Bcs7efBHjkma8tsc4OoHyzaP+aqSvt5g3uN9yqGngCNC+O5hAw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeKXOS4f3IGUMu9qFpfjFJwtSSlIwHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu9C9iZTXmi1m6w+IR7InQU+xhQv0gQwCya 1OJpMBxqwrFGbmvhC8BxnqKAMHKMh+0t5gGNPoZNiP5jKZLPOvB4Lnptsp6DRrsE pJ/XzR0cnvXA8whhyeg3+7tFUGJ/6BZ0L34LpHAhCKbDqcoJalIkAUQpj9e+mcIJ 4ayFZiWs/giAx31kKwA4X92l1inx+keHkiVSz33pWnXFsRIoLQ1LOoi6SsKahtup 7Hj2lNiPyeNTeLIVWo0ymT6bIotIou1dSz/6R71wJlV4ddxV4p6MYETgurQPpg6R dQLVp3YAk8nDWNSzLnXMTpLAgi1v7ih4xtcPQhHzmNopPn2gWKo= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:44 2026 by rpki-client