$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json) Hash identifier: BwVPHOJANZqjwaPaHwTdL3e1qW/RYmlIKqxb6JWuj9E= Subject key identifier: 1F:DD:52:2B:E1:FA:0E:53:33:39:7B:32:DD:48:C1:94:36:B6:2B:BC Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573 Certificate serial: 14188D7135B5559C51BFDBD654E0E8C3DD9B01E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:10:04 +0000 Manifest this update: Tue 02 Jun 2026 12:05:04 +0000 Manifest next update: Wed 03 Jun 2026 15:50:04 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=) 3: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: asEdwLST4GT1/rDfbOolOmW8meN0pvnVYWWWsJVPcgU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:18:8d:71:35:b5:55:9c:51:bf:db:d6:54:e0:e8:c3:dd:9b:01:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573 Validity Not Before: Jun 2 12:05:04 2026 GMT Not After : Jun 3 15:50:04 2026 GMT Subject: CN=1FDD522BE1FA0E5333397B32DD48C19436B62BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:cb:a3:2f:2f:86:55:b5:bd:d4:16:84:ea: 33:c4:1d:9f:55:c4:c3:30:7b:32:d6:be:61:5f:c9: c1:ba:bf:b9:4b:d6:b9:6e:2b:66:c9:09:ac:57:5d: f8:5f:91:67:17:4b:52:b1:9d:68:be:07:99:40:b6: 0e:ac:f7:df:9a:5c:bd:80:84:dc:92:4c:9b:37:1a: 6a:16:f8:73:80:a1:25:ba:a4:42:22:df:9b:84:93: 3c:21:8f:19:f0:60:fe:b2:09:9a:2b:79:30:b2:b0: 26:3d:16:59:c6:02:4a:62:9a:d1:53:14:f6:b9:fd: 0a:ee:ea:a4:e3:77:fc:b7:08:89:34:8e:56:15:ad: 8a:5f:a1:ca:3b:d0:69:4b:18:aa:3a:b8:a7:25:11: fc:03:20:11:8f:8f:de:72:9f:3c:10:7b:45:01:cf: cc:45:2b:43:32:a2:8d:1b:6e:49:c9:48:10:a3:d2: 04:84:87:4a:2d:18:12:e8:70:51:89:b5:38:33:11: 74:59:e1:d5:74:74:9a:c5:da:cb:ce:2c:aa:5c:d1: 62:6a:e6:d5:de:a3:49:fb:a2:7a:d9:c3:c5:a7:c8: aa:ec:b5:74:5f:b0:aa:84:c8:4c:79:5c:d4:35:d7: 89:c1:fa:08:4b:32:48:14:70:d6:6f:b5:11:86:ba: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DD:52:2B:E1:FA:0E:53:33:39:7B:32:DD:48:C1:94:36:B6:2B:BC X509v3 Authority Key Identifier: keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6c:cc:2f:a5:97:66:85:61:79:f8:e9:8c:c6:57:e9:72:67: 8f:aa:7f:e4:ae:92:5d:fd:2a:8d:2d:d8:a6:04:e9:39:87:ca: 00:48:19:d8:f7:5d:33:d8:28:8f:e7:2e:cc:61:a2:61:a5:10: 85:f6:ac:7a:39:f1:50:71:2e:2c:b2:31:1a:64:fb:b7:a1:24: e8:62:d9:c7:b5:ff:99:94:b5:fc:4e:3c:16:a5:6c:1f:a7:a5: ec:32:d5:44:7f:0f:c2:3c:8e:b4:8f:44:2b:86:62:1f:26:7b: ed:5c:54:a0:06:50:bf:a1:86:d9:8e:d9:65:d2:de:df:4d:7c: e0:63:97:a4:31:5b:8f:26:ee:64:c5:fe:c1:18:73:8a:18:0a: c0:3c:da:b6:a6:5a:2f:3e:6d:f2:31:6c:db:b7:66:e3:df:96: 9d:d1:c1:bc:23:b6:81:a7:c4:4b:f5:c4:fc:fc:9d:1f:89:11: 21:1c:6e:79:f4:f6:62:b8:21:87:2b:b9:89:a7:e1:89:5f:11: e9:31:a6:cc:4d:0d:dc:66:b8:e8:a5:16:16:a4:08:73:87:94: 5f:a8:f0:e1:ed:0c:1d:90:2b:6a:20:39:e9:66:26:7d:d7:49: b9:34:b4:a0:5a:d1:a2:86:95:a0:0d:a5:21:a7:d1:6d:df:2d: d9:33:9f:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBiNcTW1VZxRv9vWVODow92bAeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1 MEUyODU3MzAeFw0yNjA2MDIxMjA1MDRaFw0yNjA2MDMxNTUwMDRaMDMxMTAvBgNV BAMTKDFGREQ1MjJCRTFGQTBFNTMzMzM5N0IzMkRENDhDMTk0MzZCNjJCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWMujLy+GVbW91BaE6jPEHZ9V xMMwezLWvmFfycG6v7lL1rluK2bJCaxXXfhfkWcXS1KxnWi+B5lAtg6s99+aXL2A hNySTJs3GmoW+HOAoSW6pEIi35uEkzwhjxnwYP6yCZoreTCysCY9FlnGAkpimtFT FPa5/Qru6qTjd/y3CIk0jlYVrYpfoco70GlLGKo6uKclEfwDIBGPj95ynzwQe0UB z8xFK0Myoo0bbknJSBCj0gSEh0otGBLocFGJtTgzEXRZ4dV0dJrF2svOLKpc0WJq 5tXeo0n7onrZw8WnyKrstXRfsKqEyEx5XNQ114nB+ghLMkgUcNZvtRGGuoajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH91SK+H6DlMzOXsy3UjBlDa2K7wwHwYDVR0j BBgwFoAUHMyfkDsHlyWdSFGDH9t06FDihXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhMjZhMTAtNThlOC00M2M3LTk0N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAz QjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1MEUyODU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQ0NDOUY5MDNCMDc5NzI1OUQ0ODUxODMxRkRCNzRFODUwRTI4 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0 RTg1MEUyODU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1szC+ll2aFYXn46YzGV+lyZ4+qf+Sukl39 Ko0t2KYE6TmHygBIGdj3XTPYKI/nLsxhomGlEIX2rHo58VBxLiyyMRpk+7ehJOhi 2ce1/5mUtfxOPBalbB+npewy1UR/D8I8jrSPRCuGYh8me+1cVKAGUL+hhtmO2WXS 3t9NfOBjl6QxW48m7mTF/sEYc4oYCsA82ramWi8+bfIxbNu3ZuPflp3RwbwjtoGn xEv1xPz8nR+JESEcbnn09mK4IYcruYmn4YlfEekxpsxNDdxmuOilFhakCHOHlF+o 8OHtDB2QK2ogOelmJn3XSbk0tKBa0aKGlaANpSGn0W3fLdkzn0A= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:18 2026 by rpki-client