$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft (raw, json) Hash identifier: XKBhxHMlNEPfhh2f0/XsZkLac2uU6atPy4kYloR84nc= Subject key identifier: D1:18:99:5B:BB:51:E3:9E:AB:95:40:C5:27:4B:E9:74:D5:71:FB:AA Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Certificate issuer: /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Certificate serial: 4FEB39DDE2E9AF144CBA61BF3B73A6A8E6F9355E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft Manifest number: 025A Signing time: Tue 24 Mar 2026 07:51:58 +0000 Manifest this update: Tue 24 Mar 2026 07:46:58 +0000 Manifest next update: Fri 27 Mar 2026 15:16:58 +0000 Files and hashes: 1: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 0sBtxCmbxKq6J3NSJMDZXL4qE7kDKeTCzfpwrIBogLg=) 2: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: 6ROZVbNEcqpl1HbbpFIZhVYZrNJ1M6DcybOk7PyTnVE=) 3: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl (hash: nX63KNDlFzYISjGOBJU7K96Y53C+GVOHUZzhnmjbzFY=) 4: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: efHKgumm4W/iDiNoEk+pEOF7/XIOUKbYG+7UFPzA9VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:eb:39:dd:e2:e9:af:14:4c:ba:61:bf:3b:73:a6:a8:e6:f9:35:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Validity Not Before: Mar 24 07:46:58 2026 GMT Not After : Mar 27 15:16:58 2026 GMT Subject: CN=D118995BBB51E39EAB9540C5274BE974D571FBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:e2:e4:08:0c:34:ad:36:7c:b0:3c:7f:89: e8:1d:f4:b5:99:23:34:00:3d:5e:70:1d:0b:b1:62: c9:19:9f:aa:c5:54:cf:a3:b1:9a:55:3c:95:cf:8d: 0f:5c:3d:c5:a5:dd:20:4d:e4:7c:90:fa:d2:0d:1a: e2:d4:17:e9:52:0e:e1:0f:8b:9c:91:80:61:57:27: 04:10:05:a8:fa:93:f3:a6:f8:bf:bc:1b:cd:8c:41: 08:37:94:0c:b3:56:15:8a:d3:f2:bf:a2:42:53:fe: 4c:5d:b6:4e:5f:95:81:ae:50:4b:53:08:67:1e:c3: 5b:7a:79:e1:52:70:e2:a3:81:c0:42:fd:b4:27:db: ca:c1:23:77:08:09:3e:12:6f:3a:f4:9b:f6:2d:8b: 99:75:dd:88:45:f2:09:66:0f:01:75:94:64:ce:f2: 3d:ac:73:f1:d6:38:5b:6a:ab:2e:00:b1:7f:f8:4c: 70:c7:43:b0:2a:87:94:0d:d2:53:be:87:00:18:e0: 8d:bb:7a:ad:44:ee:f7:3a:3f:38:95:a1:62:ff:eb: e6:15:5f:34:3f:be:c1:6c:5f:53:92:8f:ff:27:e3: 08:9e:08:a4:3e:ec:36:b1:37:3c:de:16:f3:fa:83: be:53:ce:f6:e7:44:c5:d6:07:8b:ff:9c:0e:c4:19: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:18:99:5B:BB:51:E3:9E:AB:95:40:C5:27:4B:E9:74:D5:71:FB:AA X509v3 Authority Key Identifier: keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c5:f1:c0:2f:fe:f9:76:ec:4a:d8:4a:11:bd:6c:ca:d8:e1: cf:dd:5f:6b:62:75:a7:69:7d:5a:92:7c:87:9a:72:3e:42:17: 78:78:3b:a5:31:3f:87:30:64:49:66:d0:6e:e9:8f:59:4a:00: 7a:e4:70:58:db:28:a7:6a:3e:f2:25:df:c0:18:d3:e2:8d:61: 96:f2:67:8d:ad:1e:52:78:a4:19:d3:90:a8:f5:d9:26:3e:35: c2:43:29:5f:55:6d:43:3e:b8:e3:7c:0f:9d:b8:df:eb:77:2e: 5d:88:ec:04:63:9b:08:9d:2b:46:1e:aa:17:85:4a:f2:4e:f8: fc:da:2f:53:83:7d:03:99:9b:77:9e:70:a6:f3:34:63:85:8a: 52:4e:92:2f:c0:18:79:73:37:56:40:be:ab:a7:e7:42:b8:1f: 48:61:99:a2:9b:67:66:28:58:7e:73:9d:cc:38:4b:57:52:6b: 9a:77:b0:1b:59:7e:96:b3:d9:7f:67:bb:b4:d5:00:b5:a8:9a: 8f:b6:31:7a:5c:26:27:8a:25:05:83:22:c3:0b:7c:49:8a:46: f7:69:dd:f7:fd:8b:9a:05:40:4f:a9:6a:2f:31:3a:1d:55:65: 7f:e0:81:7e:c7:6b:0a:38:16:15:fa:5d:89:bd:a6:cb:59:03: 32:a0:23:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+s53eLprxRMumG/O3OmqOb5NV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy QTZGRjg3RTAeFw0yNjAzMjQwNzQ2NThaFw0yNjAzMjcxNTE2NThaMDMxMTAvBgNV BAMTKEQxMTg5OTVCQkI1MUUzOUVBQjk1NDBDNTI3NEJFOTc0RDU3MUZCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkOLkCAw0rTZ8sDx/iegd9LWZ IzQAPV5wHQuxYskZn6rFVM+jsZpVPJXPjQ9cPcWl3SBN5HyQ+tINGuLUF+lSDuEP i5yRgGFXJwQQBaj6k/Om+L+8G82MQQg3lAyzVhWK0/K/okJT/kxdtk5flYGuUEtT CGcew1t6eeFScOKjgcBC/bQn28rBI3cICT4Sbzr0m/Yti5l13YhF8glmDwF1lGTO 8j2sc/HWOFtqqy4AsX/4THDHQ7Aqh5QN0lO+hwAY4I27eq1E7vc6PziVoWL/6+YV XzQ/vsFsX1OSj/8n4wieCKQ+7DaxNzzeFvP6g75TzvbnRMXWB4v/nA7EGdMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0RiZW7tR456rlUDFJ0vpdNVx+6owHwYDVR0j BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG Rjg3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMy MzYyQTZGRjg3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjF8cAv/vl27ErYShG9bMrY4c/dX2tidadp fVqSfIeacj5CF3h4O6UxP4cwZElm0G7pj1lKAHrkcFjbKKdqPvIl38AY0+KNYZby Z42tHlJ4pBnTkKj12SY+NcJDKV9VbUM+uON8D5243+t3Ll2I7ARjmwidK0YeqheF SvJO+PzaL1ODfQOZm3eecKbzNGOFilJOki/AGHlzN1ZAvqun50K4H0hhmaKbZ2Yo WH5zncw4S1dSa5p3sBtZfpaz2X9nu7TVALWomo+2MXpcJieKJQWDIsMLfEmKRvdp 3ff9i5oFQE+pai8xOh1VZX/ggX7Hawo4FhX6XYm9pstZAzKgI0M= -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:55 2026 by rpki-client