$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft File: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft (raw, json) Hash identifier: MBiIeyrohBtSOOAW9xqvBdoOwVGIUOORU5Qq8iaUz/I= Subject key identifier: 8D:84:2A:BE:BF:24:25:30:E8:1C:5A:D4:FB:E5:E5:FA:C1:8E:69:6F Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Certificate serial: 7C278311AFA85F7DC448160DFE52DE32E2F5A835 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 08:17:14 +0000 Manifest this update: Thu 18 Jun 2026 08:12:14 +0000 Manifest next update: Fri 19 Jun 2026 08:58:14 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: dL84/0rOuXqtPF6MekaG9yTRybyEbuVFXsB4G8qdgKg=) 2: 1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl (hash: G2yhcrQZW/AkdJDHtCLZnoY3H1mA07jQKgKgY4cHoos=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:27:83:11:af:a8:5f:7d:c4:48:16:0d:fe:52:de:32:e2:f5:a8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97 Validity Not Before: Jun 18 08:12:14 2026 GMT Not After : Jun 19 08:58:14 2026 GMT Subject: CN=8D842ABEBF242530E81C5AD4FBE5E5FAC18E696F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:d6:23:a5:f8:96:3e:f0:70:45:93:85:7d: 09:76:74:bf:f1:06:d7:54:06:b8:86:6c:ab:28:8c: 55:85:e1:bf:63:d6:b3:01:63:ba:97:1b:6f:21:e4: bb:8d:93:24:dc:28:22:bc:38:26:60:ff:d2:fc:bd: 82:9e:a1:20:b1:75:bc:96:5e:08:07:d6:80:cf:7b: 4f:aa:fd:88:31:71:8f:53:c0:6d:01:64:b4:08:eb: 80:27:4a:5d:4f:7b:6e:8e:71:b7:61:eb:0e:56:95: e8:e0:4d:75:e6:ca:56:d6:fc:0d:32:81:c7:3c:dd: 14:f1:8d:e6:e3:13:2f:97:f6:44:c9:27:c0:ce:e5: ef:3b:08:66:a9:d4:01:1a:08:35:7a:21:7d:a5:54: 4f:b6:56:fb:0c:1b:9e:b0:8a:70:43:98:77:bf:59: f1:6c:22:20:f4:64:a8:5a:ba:e8:af:31:1e:02:11: 87:ed:71:9f:52:e8:ff:37:7a:b2:8f:8e:5a:79:9c: 97:5c:cc:d8:36:30:e4:97:d8:2d:34:ad:e8:af:45: 34:cc:b1:18:38:6f:ed:33:6e:c9:27:0a:2d:5e:9b: de:00:e5:09:20:99:d5:c5:1a:5b:48:05:4f:22:6c: 69:04:f0:78:0d:ec:b0:87:2d:8a:ea:cd:53:4f:7a: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:84:2A:BE:BF:24:25:30:E8:1C:5A:D4:FB:E5:E5:FA:C1:8E:69:6F X509v3 Authority Key Identifier: keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a1:ba:e0:c5:54:99:86:ed:58:e7:cd:fe:ff:24:d4:b3:b3: 62:b6:77:db:55:3d:52:45:96:fb:db:66:b1:32:3e:ba:85:0e: 3e:31:49:38:ef:9e:79:ab:ce:20:7d:fb:74:1e:44:66:30:46: 1d:d0:54:38:14:15:59:ae:22:ce:be:ef:bd:16:e9:fa:7d:86: 32:be:09:c8:a7:69:85:b2:4a:10:d6:1f:0d:54:55:0e:20:41: 4a:ad:08:aa:b5:96:e4:6b:1c:84:1f:9f:c4:db:25:62:7a:c2: e4:57:67:de:33:91:cb:82:cb:a0:7f:22:03:93:f4:b4:5d:cb: ee:88:35:aa:93:61:4d:49:e4:80:a7:4f:85:b5:d7:e0:72:7d: ce:83:32:d0:3f:03:c2:de:e3:c6:e7:0c:e5:7e:9c:92:b9:c8: 42:00:ac:e4:81:89:8b:92:b5:c8:4b:54:56:91:f9:78:b6:9a: a6:e2:bc:d6:c2:1c:f8:cd:41:89:4b:15:8b:cc:ca:73:25:eb: 40:87:29:b1:37:00:1e:f3:59:23:18:54:d7:f9:07:0d:a4:9d: 5c:64:b9:49:da:6a:0d:7d:11:82:eb:9e:cf:32:3d:db:f6:e6: b8:53:1e:5f:3c:5d:54:91:d8:0b:50:3c:f2:8e:74:89:06:8b: b0:c7:ec:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCeDEa+oX33ESBYN/lLeMuL1qDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBG RjE3N0Q5NzAeFw0yNjA2MTgwODEyMTRaFw0yNjA2MTkwODU4MTRaMDMxMTAvBgNV BAMTKDhEODQyQUJFQkYyNDI1MzBFODFDNUFENEZCRTVFNUZBQzE4RTY5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJtYjpfiWPvBwRZOFfQl2dL/x BtdUBriGbKsojFWF4b9j1rMBY7qXG28h5LuNkyTcKCK8OCZg/9L8vYKeoSCxdbyW XggH1oDPe0+q/YgxcY9TwG0BZLQI64AnSl1Pe26Ocbdh6w5WlejgTXXmylbW/A0y gcc83RTxjebjEy+X9kTJJ8DO5e87CGap1AEaCDV6IX2lVE+2VvsMG56winBDmHe/ WfFsIiD0ZKhauuivMR4CEYftcZ9S6P83erKPjlp5nJdczNg2MOSX2C00reivRTTM sRg4b+0zbsknCi1em94A5QkgmdXFGltIBU8ibGkE8HgN7LCHLYrqzVNPeqH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYQqvr8kJTDoHFrU++Xl+sGOaW8wHwYDVR0j BBgwFoAUHFw6r31c/jjOrlNsqUzwcP8XfZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGY1ODJmMmItODYyNS00ZjM4LWIyNmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3 RDVDRkUzOENFQUU1MzZDQTk0Q0YwNzBGRjE3N0Q5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQzVDM0FBRjdENUNGRTM4Q0VBRTUzNkNBOTRDRjA3MEZGMTc3 RDk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvMUM1QzNBQUY3RDVDRkUzOENFQUU1MzZDQTk0Q0Yw NzBGRjE3N0Q5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAChuuDFVJmG7Vjnzf7/JNSzs2K2d9tVPVJF lvvbZrEyPrqFDj4xSTjvnnmrziB9+3QeRGYwRh3QVDgUFVmuIs6+770W6fp9hjK+ CcinaYWyShDWHw1UVQ4gQUqtCKq1luRrHIQfn8TbJWJ6wuRXZ94zkcuCy6B/IgOT 9LRdy+6INaqTYU1J5ICnT4W11+Byfc6DMtA/A8Le48bnDOV+nJK5yEIArOSBiYuS tchLVFaR+Xi2mqbivNbCHPjNQYlLFYvMynMl60CHKbE3AB7zWSMYVNf5Bw2knVxk uUnaag19EYLrns8yPdv25rhTHl88XVSR2AtQPPKOdIkGi7DH7M8= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:25 2026 by rpki-client