$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json) Hash identifier: Mts/kj09/8GOxOIiNTLFTVcQsShzsoyrIe3TJINMfPo= Subject key identifier: AC:38:23:FF:1B:8C:0F:48:87:19:77:1E:32:95:71:C2:56:DB:B6:27 Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573 Certificate serial: 042AD35D07809457755306F6D951BB70A288740E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft Manifest number: A1 Signing time: Mon 31 Aug 2026 15:54:06 +0000 Manifest this update: Mon 31 Aug 2026 15:49:06 +0000 Manifest next update: Tue 01 Sep 2026 16:02:06 +0000 Files and hashes: 1: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: 8pkePIQP9nTj3J677g9gSpF76gBG+SCIUYlWdgjfIzs=) 2: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=) 3: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 16:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2a:d3:5d:07:80:94:57:75:53:06:f6:d9:51:bb:70:a2:88:74:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573 Validity Not Before: Aug 31 15:49:06 2026 GMT Not After : Sep 1 16:02:06 2026 GMT Subject: CN=AC3823FF1B8C0F488719771E329571C256DBB627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:18:fc:f1:b3:39:ff:e2:94:47:89:68:44: 9e:10:2e:b6:2b:93:7c:77:49:c2:56:f5:7a:6f:ae: ba:5e:97:ad:5a:06:20:d1:84:cd:e0:9f:74:c4:15: 3e:f6:d6:1e:a8:56:96:7b:16:22:fb:13:8b:4d:5f: 4e:ca:c6:66:08:18:ba:7b:05:ad:35:a6:0b:c5:8d: b1:7a:1c:61:9e:7f:64:1b:bc:3f:3e:77:ea:b1:8a: bf:d9:2d:7d:20:31:05:8d:30:f2:9d:64:17:10:44: 2e:a3:87:8f:2f:17:b3:a2:0d:12:e3:4b:43:6f:d5: ea:62:b4:bc:46:21:0c:5a:a7:32:1f:26:5a:97:5a: 25:ee:a4:df:0e:3e:b3:99:d1:ba:4c:cb:af:e2:95: bd:d9:55:dc:16:92:fa:52:4d:6e:a7:ec:5f:88:d0: bd:10:98:5a:ff:d5:7f:6f:57:a9:ce:4a:2a:59:e1: af:0a:5f:f5:d0:4b:86:c1:24:ee:56:a7:cd:d8:47: 88:d6:3c:12:3d:27:8e:85:ab:ad:0c:7e:0f:ce:bf: f3:a1:50:20:7f:84:f5:41:e4:9b:2b:b3:d9:66:1a: b7:db:8c:f7:85:57:f4:b0:61:76:8f:dc:b8:ea:62: 5d:a7:31:9f:2b:7d:9d:10:18:68:e6:98:a3:61:b1: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:38:23:FF:1B:8C:0F:48:87:19:77:1E:32:95:71:C2:56:DB:B6:27 X509v3 Authority Key Identifier: keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0b:02:44:61:5e:af:a9:ea:39:56:6e:9c:77:4c:8d:cc:7c: a8:c2:75:e7:ab:72:1f:29:ba:21:8d:f7:22:b5:45:32:50:fb: cb:78:df:f3:f0:29:75:f4:42:0b:9c:7a:45:a1:d9:6f:03:47: c3:1a:0c:94:ac:66:5a:b6:73:94:c0:84:ed:00:8b:6f:96:24: 53:ac:19:20:c4:78:13:cb:18:cb:41:ce:ca:3f:74:a5:96:53: da:c7:78:4a:6d:22:ba:e1:a4:e0:f5:b5:46:24:6c:61:d7:4b: c6:08:4f:6d:88:52:45:2c:c6:8f:19:89:68:16:4b:a7:6a:62: f9:88:d3:95:ef:b9:2d:38:ba:3e:b6:37:72:a9:f5:20:50:8e: 0b:48:7c:f8:61:39:85:56:e9:01:a8:89:a7:1c:73:a4:e1:64: 3b:8b:d4:1a:12:50:f7:ef:2c:b2:b8:38:87:42:12:1f:de:2b: 16:12:07:79:4c:e4:b4:0d:44:5a:90:3a:e7:20:d8:2f:5a:fa: 49:45:48:6d:2f:b8:de:8f:1c:33:d5:0d:8c:0d:d9:b7:ca:dd: bd:c6:82:ad:63:73:5b:8e:44:30:da:fe:89:ce:09:cd:9c:68: 79:48:14:3d:49:6d:e2:cc:6e:84:19:c8:d3:db:6f:47:56:7a: 01:a8:88:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCrTXQeAlFd1Uwb22VG7cKKIdA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1 MEUyODU3MzAeFw0yNjA4MzExNTQ5MDZaFw0yNjA5MDExNjAyMDZaMDMxMTAvBgNV BAMTKEFDMzgyM0ZGMUI4QzBGNDg4NzE5NzcxRTMyOTU3MUMyNTZEQkI2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbRj88bM5/+KUR4loRJ4QLrYr k3x3ScJW9Xpvrrpel61aBiDRhM3gn3TEFT721h6oVpZ7FiL7E4tNX07KxmYIGLp7 Ba01pgvFjbF6HGGef2QbvD8+d+qxir/ZLX0gMQWNMPKdZBcQRC6jh48vF7OiDRLj S0Nv1epitLxGIQxapzIfJlqXWiXupN8OPrOZ0bpMy6/ilb3ZVdwWkvpSTW6n7F+I 0L0QmFr/1X9vV6nOSipZ4a8KX/XQS4bBJO5Wp83YR4jWPBI9J46Fq60Mfg/Ov/Oh UCB/hPVB5Jsrs9lmGrfbjPeFV/SwYXaP3LjqYl2nMZ8rfZ0QGGjmmKNhsXsTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrDgj/xuMD0iHGXceMpVxwlbbticwHwYDVR0j BBgwFoAUHMyfkDsHlyWdSFGDH9t06FDihXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhMjZhMTAtNThlOC00M2M3LTk0N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAz QjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1MEUyODU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQ0NDOUY5MDNCMDc5NzI1OUQ0ODUxODMxRkRCNzRFODUwRTI4 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0 RTg1MEUyODU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0LAkRhXq+p6jlWbpx3TI3MfKjCdeerch8p uiGN9yK1RTJQ+8t43/PwKXX0QgucekWh2W8DR8MaDJSsZlq2c5TAhO0Ai2+WJFOs GSDEeBPLGMtBzso/dKWWU9rHeEptIrrhpOD1tUYkbGHXS8YIT22IUkUsxo8ZiWgW S6dqYvmI05XvuS04uj62N3Kp9SBQjgtIfPhhOYVW6QGoiaccc6ThZDuL1BoSUPfv LLK4OIdCEh/eKxYSB3lM5LQNRFqQOucg2C9a+klFSG0vuN6PHDPVDYwN2bfK3b3G gq1jc1uORDDa/onOCc2caHlIFD1JbeLMboQZyNPbb0dWegGoiAQ= -----END CERTIFICATE-----Generated at Tue Sep 1 03:21:57 2026 by rpki-client