$ rpki-client -vvf rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft File: 1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft (raw, json) Hash identifier: TuM2esjaVdSiNOoH/X1/eIHLmvCLWYghqYCMHK6ZUP8= Subject key identifier: 62:18:40:14:08:35:20:75:ED:CA:09:0C:C0:28:02:0C:40:26:C8:66 Authority key identifier: 1A:50:ED:9A:69:66:DA:CB:09:03:F7:05:DF:03:BB:28:65:81:F4:A6 Certificate issuer: /CN=1A50ED9A6966DACB0903F705DF03BB286581F4A6 Certificate serial: 2B8D896E3E1F9D4AA2B3A04C8E0A8D8334E0E865 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft Manifest number: 4C Signing time: Sat 27 Jun 2026 10:19:04 +0000 Manifest this update: Sat 27 Jun 2026 10:14:04 +0000 Manifest next update: Sun 28 Jun 2026 14:01:04 +0000 Files and hashes: 1: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: JrEW/30RO3gUW1ByazsB4J+UwUtCgvPKBe7wSHvmciQ=) 2: 1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl (hash: Gi9Vr6Pu80SKVEn4fLdDZKn4bGm34EWW17FJDfwcY/4=) 3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: /gkps6YmjETNnD4xTy2XTErh7Br1EnrDL/N1FLVMik4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Jun 2026 10:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8d:89:6e:3e:1f:9d:4a:a2:b3:a0:4c:8e:0a:8d:83:34:e0:e8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A50ED9A6966DACB0903F705DF03BB286581F4A6 Validity Not Before: Jun 27 10:14:04 2026 GMT Not After : Jun 28 14:01:04 2026 GMT Subject: CN=6218401408352075EDCA090CC028020C4026C866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:e4:d9:27:4a:2a:49:d1:61:9b:02:1c:2c: 5e:01:99:ca:1f:00:31:96:5c:e3:c7:d4:b3:fc:de: 35:a6:b3:ee:4a:dc:ba:fd:06:e0:e8:ff:b1:5c:5a: 5f:1c:df:88:bd:ae:13:1e:60:41:ed:82:58:63:62: 09:f9:24:a3:a4:21:7a:b3:5a:0b:2d:fd:70:d0:b7: 7c:4c:71:fd:56:9f:63:6f:8b:55:06:4d:e6:ed:4f: ba:1b:75:c5:8d:32:f5:97:c3:27:16:c3:ea:50:57: 38:55:43:94:3a:a9:b6:7d:f8:3a:78:d7:19:9d:b8: 56:93:d2:29:42:6b:1c:e5:cd:37:a2:2f:f0:09:c8: 47:66:cc:f9:97:99:2f:20:46:bc:bd:eb:41:9b:7f: 4e:e1:83:09:23:21:c8:68:00:2b:f0:54:cf:8b:5d: cd:72:d7:0d:f4:47:85:54:ce:22:2e:80:53:52:65: 4a:aa:da:fc:15:ea:c3:08:82:24:92:ba:07:c1:18: 88:ec:cf:d3:7a:18:89:de:e5:3c:35:66:0b:18:ee: 53:31:e1:79:b6:f9:4c:dd:1e:01:e3:57:63:bb:8b: 91:df:5d:a7:56:76:36:f0:a7:9a:3d:b7:c6:2c:70: c9:cf:dd:27:f2:e0:3f:32:50:11:89:c2:f9:f4:6c: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:18:40:14:08:35:20:75:ED:CA:09:0C:C0:28:02:0C:40:26:C8:66 X509v3 Authority Key Identifier: keyid:1A:50:ED:9A:69:66:DA:CB:09:03:F7:05:DF:03:BB:28:65:81:F4:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e2:cf:11:80:af:52:fa:0b:7e:5c:4f:eb:4f:a0:96:2b:f1: 36:21:a9:b0:e7:98:51:0f:a0:8f:7e:13:67:33:3e:f3:42:b3: 36:cc:ea:8d:b0:f9:93:49:3b:6f:81:51:5b:74:fd:01:95:1b: 69:ed:68:d4:c3:9f:5f:b1:98:c5:41:a7:d2:cb:e2:83:f1:61: 6e:a8:77:fe:67:05:22:3c:17:55:a9:5d:fb:d9:b1:ab:db:0e: 1e:94:9a:26:e5:02:c7:9e:5d:c2:01:a0:dd:f3:15:c2:9b:ac: 41:d0:d4:f7:81:e3:b2:62:df:b8:58:01:f5:b4:15:17:b2:36: 8a:de:54:c9:d6:d0:f0:c2:f4:63:f6:d9:3d:f8:99:1e:91:0e: 5c:a0:c4:86:61:37:f2:f1:42:0a:3e:d0:54:ec:ad:a6:a4:6f: 31:ad:75:d4:5d:c9:f0:1f:48:19:eb:48:88:21:e8:d5:72:df: 44:fc:0e:fd:3c:a7:4f:c0:8f:c5:85:39:83:c0:bd:ed:36:47: 74:5a:6a:a0:5f:75:04:f6:e4:31:c6:18:ca:fd:de:06:b0:4f: 6d:8b:3d:6a:f6:76:39:90:d2:5c:60:fd:1b:67:01:29:cc:7f: 4d:f7:04:c8:10:1e:fb:d1:40:a5:55:cb:f1:e9:6d:75:e7:7d: 96:fc:00:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK42Jbj4fnUqis6BMjgqNgzTg6GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1MEVEOUE2OTY2REFDQjA5MDNGNzA1REYwM0JCMjg2 NTgxRjRBNjAeFw0yNjA2MjcxMDE0MDRaFw0yNjA2MjgxNDAxMDRaMDMxMTAvBgNV BAMTKDYyMTg0MDE0MDgzNTIwNzVFRENBMDkwQ0MwMjgwMjBDNDAyNkM4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ouTZJ0oqSdFhmwIcLF4Bmcof ADGWXOPH1LP83jWms+5K3Lr9BuDo/7FcWl8c34i9rhMeYEHtglhjYgn5JKOkIXqz Wgst/XDQt3xMcf1Wn2Nvi1UGTebtT7obdcWNMvWXwycWw+pQVzhVQ5Q6qbZ9+Dp4 1xmduFaT0ilCaxzlzTeiL/AJyEdmzPmXmS8gRry960Gbf07hgwkjIchoACvwVM+L Xc1y1w30R4VUziIugFNSZUqq2vwV6sMIgiSSugfBGIjsz9N6GIne5Tw1ZgsY7lMx 4Xm2+UzdHgHjV2O7i5HfXadWdjbwp5o9t8YscMnP3Sfy4D8yUBGJwvn0bMHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYhhAFAg1IHXtygkMwCgCDEAmyGYwHwYDVR0j BBgwFoAUGlDtmmlm2ssJA/cF3wO7KGWB9KYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0N2E2YTItMWFkMC00NmM3LTljYWQtNThiYmQ3MWZiNWE0LzAvMUE1MEVEOUE2 OTY2REFDQjA5MDNGNzA1REYwM0JCMjg2NTgxRjRBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQTUwRUQ5QTY5NjZEQUNCMDkwM0Y3MDVERjAzQkIyODY1ODFG NEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvMUE1MEVEOUE2OTY2REFDQjA5MDNGNzA1REYwM0JC Mjg2NTgxRjRBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvizxGAr1L6C35cT+tPoJYr8TYhqbDnmFEP oI9+E2czPvNCszbM6o2w+ZNJO2+BUVt0/QGVG2ntaNTDn1+xmMVBp9LL4oPxYW6o d/5nBSI8F1WpXfvZsavbDh6UmiblAseeXcIBoN3zFcKbrEHQ1PeB47Ji37hYAfW0 FReyNoreVMnW0PDC9GP22T34mR6RDlygxIZhN/LxQgo+0FTsraakbzGtddRdyfAf SBnrSIgh6NVy30T8Dv08p0/Aj8WFOYPAve02R3RaaqBfdQT25DHGGMr93gawT22L PWr2djmQ0lxg/RtnASnMf033BMgQHvvRQKVVy/HpbXXnfZb8AOE= -----END CERTIFICATE-----Generated at Sun Jun 28 01:24:42 2026 by rpki-client