$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft File: 1CCC9F903B0797259D4851831FDB74E850E28573.mft (raw, json) Hash identifier: AV4V9DXbtkZodGzEjZN5QLfbxxZ/rGCsKK625rnCTwg= Subject key identifier: B7:05:94:CE:94:62:09:DD:83:B0:C0:68:60:BF:09:05:A9:66:98:6D Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573 Certificate serial: 953AA6A9ACAB96819D10949A3368D53DC0EC51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft Manifest number: 65 Signing time: Fri 17 Jul 2026 08:48:47 +0000 Manifest this update: Fri 17 Jul 2026 08:43:47 +0000 Manifest next update: Sat 18 Jul 2026 10:45:47 +0000 Files and hashes: 1: 1CCC9F903B0797259D4851831FDB74E850E28573.crl (hash: qCbm5UUM87ignKh/I3TnTsIbEkbRMOC9EwJg9WLzMiQ=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=) 3: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 10:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95:3a:a6:a9:ac:ab:96:81:9d:10:94:9a:33:68:d5:3d:c0:ec:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573 Validity Not Before: Jul 17 08:43:47 2026 GMT Not After : Jul 18 10:45:47 2026 GMT Subject: CN=B70594CE946209DD83B0C06860BF0905A966986D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:82:21:da:3b:89:83:ed:9a:05:07:86:21: 2c:11:96:7a:5f:2b:51:96:03:a6:8e:29:87:6c:e7: 0f:a1:0a:38:2f:67:ab:02:1f:45:07:47:46:a5:d9: 4a:fb:1d:2f:74:68:6d:7e:52:01:57:59:44:59:2a: f9:ef:15:f1:bd:58:39:d1:ff:e2:95:fb:0d:80:cc: 1a:12:a1:e2:bb:a8:e2:c2:66:46:60:f7:f7:fc:27: 57:17:7d:0f:8d:88:6f:0c:30:bd:4c:b0:49:4d:37: 01:81:cd:81:1b:20:8c:09:69:9e:cb:4e:51:30:60: 55:67:d8:7c:81:aa:67:a4:d7:c2:fa:f4:b7:ec:1b: 19:da:01:f6:fe:91:f9:1f:7e:f9:1c:9f:b8:dd:bd: 7b:d2:aa:52:e7:5e:19:f9:a8:66:46:65:df:06:76: f7:fb:63:1b:70:42:48:96:bc:a8:38:3f:96:59:81: 97:c9:ef:11:b0:4f:4b:ab:0b:6a:f7:3c:64:14:c9: 40:72:54:45:8e:31:81:cf:a2:f1:14:f2:8f:61:5f: 35:c1:07:00:0f:9a:bb:af:1d:bd:66:a2:7f:c4:07: 89:bc:e0:a9:7a:79:69:cf:6f:33:02:47:24:2b:1f: 91:f2:12:da:aa:30:a4:ed:f3:6f:d0:e2:37:ff:cd: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:05:94:CE:94:62:09:DD:83:B0:C0:68:60:BF:09:05:A9:66:98:6D X509v3 Authority Key Identifier: keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:85:80:54:c3:1c:a8:b0:12:4c:0d:2c:78:6c:8d:9a:87:94: 1f:ad:13:8c:ba:32:fc:eb:5f:cd:7c:b2:dd:6c:b1:ec:a5:98: a5:bf:9d:6f:38:ae:5f:c5:f5:97:80:79:7d:7c:36:4d:49:a4: d1:e0:61:99:4d:c9:ef:83:f2:ca:19:35:07:d9:d3:b4:07:57: 8f:18:e9:0f:56:23:38:2f:22:64:f1:fb:37:25:29:3b:9a:4b: a7:65:b7:5a:1b:20:d4:b5:91:ad:33:36:3d:78:23:1e:7f:35: 59:a7:5d:d2:e2:35:ba:9f:15:6a:20:35:86:a1:8b:f0:de:98: 5d:29:76:3e:19:9b:9e:67:89:80:81:9e:67:87:39:fe:6a:3c: 98:ca:46:e4:cc:54:44:e0:1e:4f:b4:d2:92:8d:ab:d1:12:73: 05:05:30:55:be:2b:52:fe:e2:cf:68:0c:58:d2:dd:f7:7d:65: 76:aa:d6:4f:3d:29:bb:54:89:cf:36:a3:45:76:a6:ac:d6:2b: 4a:40:a1:09:94:9a:26:5f:a4:73:95:82:f0:92:6b:9d:49:f6: 29:37:7a:7d:e1:88:15:a9:89:8a:b7:df:27:7b:e8:56:1e:f9: 85:1b:a4:b8:0b:03:a2:28:73:3e:f3:fd:86:b3:60:e9:e2:48: 62:75:36:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJU6pqmsq5aBnRCUmjNo1T3A7FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1 MEUyODU3MzAeFw0yNjA3MTcwODQzNDdaFw0yNjA3MTgxMDQ1NDdaMDMxMTAvBgNV BAMTKEI3MDU5NENFOTQ2MjA5REQ4M0IwQzA2ODYwQkYwOTA1QTk2Njk4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNoIh2juJg+2aBQeGISwRlnpf K1GWA6aOKYds5w+hCjgvZ6sCH0UHR0al2Ur7HS90aG1+UgFXWURZKvnvFfG9WDnR /+KV+w2AzBoSoeK7qOLCZkZg9/f8J1cXfQ+NiG8MML1MsElNNwGBzYEbIIwJaZ7L TlEwYFVn2HyBqmek18L69LfsGxnaAfb+kfkffvkcn7jdvXvSqlLnXhn5qGZGZd8G dvf7YxtwQkiWvKg4P5ZZgZfJ7xGwT0urC2r3PGQUyUByVEWOMYHPovEU8o9hXzXB BwAPmruvHb1mon/EB4m84Kl6eWnPbzMCRyQrH5HyEtqqMKTt82/Q4jf/zVkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwWUzpRiCd2DsMBoYL8JBalmmG0wHwYDVR0j BBgwFoAUHMyfkDsHlyWdSFGDH9t06FDihXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhMjZhMTAtNThlOC00M2M3LTk0N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAz QjA3OTcyNTlENDg1MTgzMUZEQjc0RTg1MEUyODU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQ0NDOUY5MDNCMDc5NzI1OUQ0ODUxODMxRkRCNzRFODUwRTI4 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMUNDQzlGOTAzQjA3OTcyNTlENDg1MTgzMUZEQjc0 RTg1MEUyODU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6FgFTDHKiwEkwNLHhsjZqHlB+tE4y6Mvzr X818st1sseylmKW/nW84rl/F9ZeAeX18Nk1JpNHgYZlNye+D8soZNQfZ07QHV48Y 6Q9WIzgvImTx+zclKTuaS6dlt1obINS1ka0zNj14Ix5/NVmnXdLiNbqfFWogNYah i/DemF0pdj4Zm55niYCBnmeHOf5qPJjKRuTMVETgHk+00pKNq9EScwUFMFW+K1L+ 4s9oDFjS3fd9ZXaq1k89KbtUic82o0V2pqzWK0pAoQmUmiZfpHOVgvCSa51J9ik3 en3hiBWpiYq33yd76FYe+YUbpLgLA6Iocz7z/YazYOniSGJ1Nmg= -----END CERTIFICATE-----Generated at Sat Jul 18 02:29:19 2026 by rpki-client