$ rpki-client -vvf rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft File: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft (raw, json) Hash identifier: pwZldHagXjJfDuof3W6ftSXMamLET8L3FA1ITTQMPy8= Subject key identifier: 35:C3:3D:F2:94:CC:6F:53:F1:40:D2:E5:95:7D:2C:35:D0:E7:E4:25 Authority key identifier: 1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 Certificate issuer: /CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Certificate serial: 1F7A91EE672E01453DA585C213BD82E37BB2ACE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 18:45:10 +0000 Manifest this update: Sun 02 Aug 2026 18:40:10 +0000 Manifest next update: Mon 03 Aug 2026 18:47:10 +0000 Files and hashes: 1: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: uWBx9zBBtj0stXgPd31iD2z2lhamwuv83R9Ofcw0CoU=) 2: 1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl (hash: zQ3DXlvW8zKHHEArZIAtthctTH8INoivHdoiKgPx+Z8=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: 3BHAnWW4TLEpO1A4dud6ZoedASP5ZMDsQskvXQSf2zg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7a:91:ee:67:2e:01:45:3d:a5:85:c2:13:bd:82:e3:7b:b2:ac:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B22824E2A256E413E679DEC541FE82DC0BAD8A0 Validity Not Before: Aug 2 18:40:10 2026 GMT Not After : Aug 3 18:47:10 2026 GMT Subject: CN=35C33DF294CC6F53F140D2E5957D2C35D0E7E425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c7:79:43:c8:df:89:bd:f4:34:fe:26:db:50: b5:13:a0:39:ed:6d:86:2e:8c:1d:96:0d:aa:96:aa: 67:bd:75:bc:ff:d2:e2:6f:0e:7f:a8:26:96:18:73: 39:43:ef:24:a0:e3:61:85:00:e8:71:5c:5e:b4:3b: 09:09:38:2e:60:46:6e:6d:12:ef:32:9d:2d:5b:80: 33:87:c3:c5:d7:12:27:a0:af:b3:c7:e9:88:ca:b9: 7e:d5:2c:51:c2:93:c8:3b:75:1b:6e:95:a9:32:33: de:3c:f8:13:44:90:3b:45:d9:45:e0:59:0a:ba:9d: 4d:db:e6:61:df:47:7c:c8:fc:a3:f5:85:06:dd:a2: 6c:04:51:5b:dc:bf:91:c9:6f:b5:53:e5:97:b3:d7: 7c:2e:09:16:f3:cd:44:6e:27:ec:4b:8d:ff:d5:62: 9b:70:a1:21:35:f3:12:db:6e:6c:97:dd:2b:66:ab: bd:c7:ce:64:57:3c:6f:dd:1d:1d:b0:3c:3a:fb:0d: fe:1f:21:ad:fd:e7:8d:91:45:87:34:fd:3f:05:55: 84:d3:96:16:f1:12:94:d7:67:10:93:9c:16:c1:be: a0:48:f8:d7:3c:ab:36:a0:12:b2:96:ce:b9:34:cf: f9:06:45:d6:b7:bb:19:7d:34:63:c3:7d:54:5a:2a: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C3:3D:F2:94:CC:6F:53:F1:40:D2:E5:95:7D:2C:35:D0:E7:E4:25 X509v3 Authority Key Identifier: keyid:1B:22:82:4E:2A:25:6E:41:3E:67:9D:EC:54:1F:E8:2D:C0:BA:D8:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/1B22824E2A256E413E679DEC541FE82DC0BAD8A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:74:08:24:ab:7e:7d:e4:99:e5:32:70:4a:55:3b:3f:c9:ab: ce:0c:98:dc:b6:05:58:d2:ee:2c:18:c8:20:88:25:17:7a:9e: 95:27:0e:13:81:02:f4:4c:e9:c7:59:9a:28:4e:7f:aa:f0:21: c3:94:b2:27:8b:26:bd:ac:9c:a8:a6:7e:0e:c8:c7:9b:cc:96: 70:8a:70:db:97:12:67:03:fe:a8:40:2b:e9:f3:47:7a:86:29: a9:b9:d0:5a:d7:88:9c:c1:bb:bd:d4:de:b5:1e:43:cc:3e:b1: 51:c2:a5:74:93:df:a1:3a:f4:ca:d8:d3:f9:d2:67:c3:2b:33: 92:12:17:2a:d6:a3:4f:57:67:6d:b4:e8:1b:28:2d:26:12:4a: 7c:59:7f:15:18:ee:82:77:69:b3:39:9d:e5:25:70:64:18:ff: 01:09:16:7a:ec:b1:3e:21:99:5e:71:ca:b9:3e:b3:92:18:1b: 7e:29:7c:ac:58:63:5b:2d:c0:76:e2:a3:c5:e0:c4:43:a8:fc: b7:7a:23:a2:3a:ff:c5:90:1b:6a:c8:99:93:05:47:ce:1e:71: dd:43:da:93:4d:3a:6e:87:f5:f6:12:f3:13:8a:5e:5f:42:d4: a5:f9:38:e7:c4:3e:b8:c5:92:f3:15:b1:74:49:a3:2d:a5:10: b7:3e:8e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3qR7mcuAUU9pYXCE72C43uyrOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4MkRD MEJBRDhBMDAeFw0yNjA4MDIxODQwMTBaFw0yNjA4MDMxODQ3MTBaMDMxMTAvBgNV BAMTKDM1QzMzREYyOTRDQzZGNTNGMTQwRDJFNTk1N0QyQzM1RDBFN0U0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNx3lDyN+JvfQ0/ibbULUToDnt bYYujB2WDaqWqme9dbz/0uJvDn+oJpYYczlD7ySg42GFAOhxXF60OwkJOC5gRm5t Eu8ynS1bgDOHw8XXEiegr7PH6YjKuX7VLFHCk8g7dRtulakyM948+BNEkDtF2UXg WQq6nU3b5mHfR3zI/KP1hQbdomwEUVvcv5HJb7VT5Zez13wuCRbzzURuJ+xLjf/V YptwoSE18xLbbmyX3Stmq73HzmRXPG/dHR2wPDr7Df4fIa39542RRYc0/T8FVYTT lhbxEpTXZxCTnBbBvqBI+Nc8qzagErKWzrk0z/kGRda3uxl9NGPDfVRaKvzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcM98pTMb1PxQNLllX0sNdDn5CUwHwYDVR0j BBgwFoAUGyKCTiolbkE+Z53sVB/oLcC62KAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg2ZmYyNjQtZmYyNS00ZmU2LTg2ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUy QTI1NkU0MTNFNjc5REVDNTQxRkU4MkRDMEJBRDhBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjIyODI0RTJBMjU2RTQxM0U2NzlERUM1NDFGRTgyREMwQkFE OEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvMUIyMjgyNEUyQTI1NkU0MTNFNjc5REVDNTQxRkU4 MkRDMEJBRDhBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR0CCSrfn3kmeUycEpVOz/Jq84MmNy2BVjS 7iwYyCCIJRd6npUnDhOBAvRM6cdZmihOf6rwIcOUsieLJr2snKimfg7Ix5vMlnCK cNuXEmcD/qhAK+nzR3qGKam50FrXiJzBu73U3rUeQ8w+sVHCpXST36E69MrY0/nS Z8MrM5ISFyrWo09XZ2206BsoLSYSSnxZfxUY7oJ3abM5neUlcGQY/wEJFnrssT4h mV5xyrk+s5IYG34pfKxYY1stwHbio8XgxEOo/Ld6I6I6/8WQG2rImZMFR84ecd1D 2pNNOm6H9fYS8xOKXl9C1KX5OOfEPrjFkvMVsXRJoy2lELc+jiU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:57 2026 by rpki-client