$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft File: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft (raw, json) Hash identifier: 3Kqn202kb4AJsu5J5UOekFp5on3aNotXn7fySXeRpRA= Subject key identifier: 32:5F:12:E7:3F:37:AD:9A:2B:1B:57:4C:E0:FD:C1:9C:ED:6C:C0:AE Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 6C74086519D2B580B88D886504872E8AD0BBA4CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft Manifest number: 055F Signing time: Wed 25 Mar 2026 16:41:47 +0000 Manifest this update: Wed 25 Mar 2026 16:36:47 +0000 Manifest next update: Sat 28 Mar 2026 16:43:47 +0000 Files and hashes: 1: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (hash: Be1o2enB5OVbfeTb11FQx0y/6KQQnTeDSPNmLL8NRc4=) 2: 19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl (hash: RTZP90LGInvB0Eft5+V/WF69lTc5Q0sr8z1rKfnuwPQ=) 3: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (hash: 4brGPOCgGPQmWwoETwSHHbE2lw9R22KEcXYm0M7Fp90=) 4: 3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (hash: U5fnoyr/5IIStrT2HEQ+BlCOUuRxzROoZ8IEFi9/L1Q=) 5: 3135372e3131392e3232302e302f32322d3234203d3e203435333032.roa (hash: HO0xgGTKI8hDqeJBD1vkonWKYqVkEjngRgMiBcK+FFk=) 6: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (hash: hclG6eHZVb4H2Dv3mKJVXKKatJdKMCXUFJ5B8dDmEf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:74:08:65:19:d2:b5:80:b8:8d:88:65:04:87:2e:8a:d0:bb:a4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Mar 25 16:36:47 2026 GMT Not After : Mar 28 16:43:47 2026 GMT Subject: CN=325F12E73F37AD9A2B1B574CE0FDC19CED6CC0AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:a5:29:23:85:7f:05:89:1f:65:a0:7b:3c: 34:8b:ab:d0:2d:21:72:62:95:38:dc:b4:21:36:bc: e3:bc:da:36:c9:93:66:bc:4d:e5:b8:2b:17:5b:f6: f5:f1:7a:22:17:ca:00:40:67:87:75:25:c0:69:54: 31:c7:11:ad:d3:ef:19:af:1b:6b:81:fb:eb:6d:62: 99:5b:36:c0:2e:13:c1:af:5e:d1:fb:0c:49:82:d9: 5c:21:11:ad:cc:05:5e:56:fe:3b:94:0d:fc:86:c8: 19:69:d3:70:54:6b:f2:95:1c:87:e9:93:99:fc:37: 4c:7f:cf:dc:1c:1b:3a:20:a4:96:6f:b8:cd:f8:22: 15:c8:f6:dd:95:42:14:2b:42:06:fd:cf:9b:18:9b: ed:51:f1:39:39:66:c5:f1:39:85:29:06:ad:38:45: 98:41:2b:8f:b3:5f:34:e7:8b:35:e3:6a:94:bf:87: c8:25:46:39:8f:b4:7d:33:f0:d0:b4:dd:a1:6a:a1: 91:de:2b:1f:60:2b:ad:b6:90:55:57:89:a6:c9:31: 1d:c0:e4:79:7d:7e:d0:4c:88:52:c4:50:67:34:ae: 24:12:92:ca:c9:5f:d2:e5:02:9c:16:90:ff:3f:4e: bf:dc:22:8f:89:52:58:ff:4c:e4:cb:8f:f8:74:b6: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5F:12:E7:3F:37:AD:9A:2B:1B:57:4C:E0:FD:C1:9C:ED:6C:C0:AE X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:02:98:2a:93:e7:e3:f7:fc:f5:fa:c8:45:6d:c2:fd:35:6c: 72:c9:4a:5d:f6:f2:7d:5e:a9:1e:04:8a:d2:3a:c5:42:18:82: 24:3f:7e:5d:f6:ce:37:6e:fb:df:7e:a2:94:1c:2a:c0:fe:b9: 85:b2:31:95:76:1c:a0:8f:03:56:79:b4:c4:dc:b4:43:8c:29: c8:78:96:77:a5:af:9b:54:1d:b1:fb:14:1a:47:88:cb:3b:ff: 40:ec:72:66:3e:c3:1a:ac:a1:f3:e7:73:5e:e0:f8:b4:d6:7d: 56:bb:5c:22:40:70:f5:67:b3:6e:83:4b:51:8d:e1:77:7a:fc: 96:0d:25:a1:9b:e2:f6:c0:6a:4e:49:fa:35:62:49:d0:a4:01: b2:41:40:51:79:44:41:06:f4:85:4c:b8:23:81:a7:11:15:68: 71:35:da:7e:95:05:b9:c0:56:6d:a4:bd:51:d6:ab:12:6e:26: 23:63:98:13:63:f1:38:c6:96:3e:34:c2:93:73:35:a3:44:26: 2b:b3:ca:2b:0b:eb:06:88:a7:7c:70:bd:75:31:8d:8c:e8:fd: 87:a3:01:17:e9:d6:c6:09:a6:73:87:65:79:7b:87:72:67:17: 01:bd:b8:58:8f:b7:c8:9d:18:33:ec:11:cb:ec:5b:66:7c:b9: e0:09:58:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHQIZRnStYC4jYhlBIcuitC7pM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNjAzMjUxNjM2NDdaFw0yNjAzMjgxNjQzNDdaMDMxMTAvBgNV BAMTKDMyNUYxMkU3M0YzN0FEOUEyQjFCNTc0Q0UwRkRDMTlDRUQ2Q0MwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDivaUpI4V/BYkfZaB7PDSLq9At IXJilTjctCE2vOO82jbJk2a8TeW4Kxdb9vXxeiIXygBAZ4d1JcBpVDHHEa3T7xmv G2uB++ttYplbNsAuE8GvXtH7DEmC2VwhEa3MBV5W/juUDfyGyBlp03BUa/KVHIfp k5n8N0x/z9wcGzogpJZvuM34IhXI9t2VQhQrQgb9z5sYm+1R8Tk5ZsXxOYUpBq04 RZhBK4+zXzTnizXjapS/h8glRjmPtH0z8NC03aFqoZHeKx9gK622kFVXiabJMR3A 5Hl9ftBMiFLEUGc0riQSksrJX9LlApwWkP8/Tr/cIo+JUlj/TOTLj/h0tlUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMl8S5z83rZorG1dM4P3BnO1swK4wHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmI4ODU4ZTAtZWNmMC00ZTUzLWE0 OTAtM2I3YzJkZTE2OTNjLzAvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMx NjM4N0U2NUMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0CmCqT5+P3/PX6yEVtwv01bHLJSl328n1e qR4EitI6xUIYgiQ/fl32zjdu+99+opQcKsD+uYWyMZV2HKCPA1Z5tMTctEOMKch4 lnelr5tUHbH7FBpHiMs7/0DscmY+wxqsofPnc17g+LTWfVa7XCJAcPVns26DS1GN 4Xd6/JYNJaGb4vbAak5J+jViSdCkAbJBQFF5REEG9IVMuCOBpxEVaHE12n6VBbnA Vm2kvVHWqxJuJiNjmBNj8TjGlj40wpNzNaNEJiuzyisL6waIp3xwvXUxjYzo/Yej ARfp1sYJpnOHZXl7h3JnFwG9uFiPt8idGDPsEcvsW2Z8ueAJWAc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:53 2026 by rpki-client