$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json) Hash identifier: QMNxG0dpkeCgoqxv06vG9LjdJ3zFxAnA/AwCmpniA6s= Subject key identifier: 80:6B:A8:F8:F5:54:A5:A9:6E:58:B6:34:1F:CD:A3:1F:CE:F3:35:9A Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Certificate serial: 1590660D9547B8EBA7DF5E62B9EDC2AD88E8EB50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 18:55:21 +0000 Manifest this update: Sun 02 Aug 2026 18:50:21 +0000 Manifest next update: Mon 03 Aug 2026 20:13:21 +0000 Files and hashes: 1: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: vN/VzC5ELfJxXmeiZFRAm4fjOto/yEIYXKL07qETQpI=) 2: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=) 3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:90:66:0d:95:47:b8:eb:a7:df:5e:62:b9:ed:c2:ad:88:e8:eb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF Validity Not Before: Aug 2 18:50:21 2026 GMT Not After : Aug 3 20:13:21 2026 GMT Subject: CN=806BA8F8F554A5A96E58B6341FCDA31FCEF3359A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9b:6c:41:aa:41:af:45:84:53:9b:f7:59:67: e7:2a:75:81:c7:7b:be:23:ae:c3:35:37:b6:c2:1f: e6:2c:bd:f5:f7:5c:b8:c5:27:eb:a6:ef:31:71:ae: bf:63:3e:db:65:ee:a3:fb:84:68:2c:02:6a:4b:8c: 24:5d:e2:64:33:d1:b4:48:90:11:9a:69:97:72:95: 80:1f:e8:01:05:cb:b1:47:15:4a:04:e4:32:4d:9d: 7a:a7:f2:99:54:04:30:b3:8a:fc:2d:a6:9d:72:09: f6:b9:b0:26:0e:b7:5d:67:90:bd:14:90:63:e6:8b: cb:fd:e3:6e:0b:f4:98:36:c8:0a:e2:ff:6d:0f:46: 74:76:d7:06:81:49:30:44:e8:3d:77:d8:ef:b2:f5: de:a8:72:66:61:28:2b:45:2d:b0:1c:04:d5:f2:f3: 2e:fb:b9:60:51:ef:80:df:3d:97:ed:92:de:72:88: 59:08:b8:d0:8a:05:e9:42:d6:85:28:17:e5:7b:94: b8:3c:49:10:b2:52:63:7b:d1:42:cc:48:82:a1:d6: 3c:56:b7:48:d5:b7:b4:f4:3a:4a:3b:28:72:d3:57: 39:16:cc:3f:3f:f2:98:97:52:85:9b:25:08:89:a1: ac:5d:72:29:7f:fa:24:86:ec:e3:54:61:db:93:23: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6B:A8:F8:F5:54:A5:A9:6E:58:B6:34:1F:CD:A3:1F:CE:F3:35:9A X509v3 Authority Key Identifier: keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f1:c0:12:b3:fa:67:e4:0f:ab:32:8c:3b:45:10:85:42:03: 29:92:25:76:08:e2:99:d2:2e:10:8a:71:48:e9:90:b1:44:af: c7:d6:01:8f:d8:c3:60:8c:12:db:2b:78:31:08:ce:b7:6b:07: 08:6d:ed:2b:83:af:d8:02:25:1b:0a:bb:4c:b7:0c:20:a6:01: 05:bc:12:00:1a:0d:9d:fc:80:87:9c:e1:95:9c:ff:f8:09:02: 35:0c:90:96:a3:02:4a:c1:f5:7e:57:8b:95:fc:2b:b5:ea:97: 00:b5:2a:ae:39:53:aa:0c:4a:f1:63:51:01:e8:2a:da:66:34: 93:c8:e2:3c:e9:97:69:4c:b1:3b:51:2a:cf:d8:19:0d:37:22: 98:68:3f:0e:ab:35:43:29:ce:88:98:76:4c:83:6b:ba:9c:4d: 3d:f5:25:78:e7:db:cd:ac:d3:55:ee:79:81:7f:28:91:1a:49: 5c:19:ad:df:06:e5:c6:11:1f:c2:4e:ca:1d:b9:25:f8:29:fd: cb:ed:aa:55:62:2d:2f:1e:4d:e9:a7:b2:08:2f:f5:86:14:35: 03:71:bb:2a:25:93:80:19:37:cd:be:d3:2d:2c:44:3e:e3:4e: b0:32:33:a9:53:03:10:53:5f:3a:de:0c:b0:a3:1e:6c:44:02: d5:a6:f5:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZBmDZVHuOun315iue3CrYjo61AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBB MDM3NDFERjAeFw0yNjA4MDIxODUwMjFaFw0yNjA4MDMyMDEzMjFaMDMxMTAvBgNV BAMTKDgwNkJBOEY4RjU1NEE1QTk2RTU4QjYzNDFGQ0RBMzFGQ0VGMzM1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSm2xBqkGvRYRTm/dZZ+cqdYHH e74jrsM1N7bCH+YsvfX3XLjFJ+um7zFxrr9jPttl7qP7hGgsAmpLjCRd4mQz0bRI kBGaaZdylYAf6AEFy7FHFUoE5DJNnXqn8plUBDCzivwtpp1yCfa5sCYOt11nkL0U kGPmi8v9424L9Jg2yAri/20PRnR21waBSTBE6D132O+y9d6ocmZhKCtFLbAcBNXy 8y77uWBR74DfPZftkt5yiFkIuNCKBelC1oUoF+V7lLg8SRCyUmN70ULMSIKh1jxW t0jVt7T0Oko7KHLTVzkWzD8/8piXUoWbJQiJoaxdcil/+iSG7ONUYduTI5h7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgGuo+PVUpaluWLY0H82jH87zNZowHwYDVR0j BBgwFoAUGikCyhQOWaKuNf8ytPbRIKA3Qd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzVlMzFlY2YtNTJhNC00Njc3LTkxMDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0Ex NDBFNTlBMkFFMzVGRjMyQjRGNkQxMjBBMDM3NDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTI5MDJDQTE0MEU1OUEyQUUzNUZGMzJCNEY2RDEyMEEwMzc0 MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMUEyOTAyQ0ExNDBFNTlBMkFFMzVGRjMyQjRGNkQx MjBBMDM3NDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXxwBKz+mfkD6syjDtFEIVCAymSJXYI4pnS LhCKcUjpkLFEr8fWAY/Yw2CMEtsreDEIzrdrBwht7SuDr9gCJRsKu0y3DCCmAQW8 EgAaDZ38gIec4ZWc//gJAjUMkJajAkrB9X5Xi5X8K7XqlwC1Kq45U6oMSvFjUQHo KtpmNJPI4jzpl2lMsTtRKs/YGQ03IphoPw6rNUMpzoiYdkyDa7qcTT31JXjn282s 01XueYF/KJEaSVwZrd8G5cYRH8JOyh25Jfgp/cvtqlViLS8eTemnsggv9YYUNQNx uyolk4AZN82+0y0sRD7jTrAyM6lTAxBTXzreDLCjHmxEAtWm9XI= -----END CERTIFICATE-----Generated at Sun Aug 2 22:46:05 2026 by rpki-client