$ rpki-client -vvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft File: 19101281C951DCE434F1B713AE570F59EE413A09.mft (raw, json) Hash identifier: Xsa06ea0zLUUoSo3wH757guVtDE+fooPM9B3QD/uskE= Subject key identifier: 20:12:8E:A8:39:9B:0E:51:1E:1C:BE:B5:18:23:86:2C:F0:C5:9A:30 Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09 Certificate serial: 29B35D90A287BF20399B127AA35D0A0D00428E67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:31:06 +0000 Manifest this update: Fri 24 Jul 2026 01:26:06 +0000 Manifest next update: Sat 25 Jul 2026 04:00:06 +0000 Files and hashes: 1: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: w5VnAqDMpxkCSyJK8a4JzBCfvPRADlp4Zd050ewYnlA=) 2: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE=) 3: 19101281C951DCE434F1B713AE570F59EE413A09.crl (hash: GnhXSI4X6pHHl9r7VZ6EKB8sh7t9xs7+YaVGqFwry8Q=) 4: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: pQnNBmBtFzueuc0/RAfPveu5rYMb0ariGWnKZ/WG/t8=) 5: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: lsZJ+/dkSenhsqGfebfOtSdM0lXp316Uwu+8bQgCJfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b3:5d:90:a2:87:bf:20:39:9b:12:7a:a3:5d:0a:0d:00:42:8e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09 Validity Not Before: Jul 24 01:26:06 2026 GMT Not After : Jul 25 04:00:06 2026 GMT Subject: CN=20128EA8399B0E511E1CBEB51823862CF0C59A30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ab:e5:0f:68:86:51:c6:c8:fb:8e:d1:cd:23: d5:d4:67:f1:da:ef:0b:22:cf:f3:81:0d:a8:d4:94: b3:0e:da:68:c9:90:95:e1:18:76:ea:9c:b7:57:ef: 15:84:14:c2:7b:dd:44:24:ee:f9:12:8f:4d:42:bc: 1a:ac:b1:db:06:af:fd:bb:a0:88:52:d4:27:56:98: 79:9f:a9:43:52:9f:62:d1:30:36:ec:0d:4a:f9:54: 50:86:6b:1b:6e:75:5a:16:1a:d1:6a:43:f4:d5:e2: f4:4d:8c:60:55:f1:a0:d8:55:1f:98:f9:69:5a:bc: c7:09:46:07:40:88:31:1e:37:c6:ac:96:36:d4:9d: 04:9b:0c:67:1f:64:b8:66:90:49:62:b6:1c:86:3b: d4:e1:62:6f:4e:6f:93:3b:ca:56:2e:b6:72:a3:d4: cd:6c:06:d9:1a:42:c5:ba:9a:57:24:3c:14:f6:9b: 5b:39:9f:a7:8a:79:1c:ac:a2:1d:a6:35:b7:6e:92: 0c:8c:b8:a2:4e:0f:2d:6d:3d:a6:d5:2e:79:51:73: bc:86:37:49:31:d6:37:d0:cc:1b:e4:04:d2:9e:bb: ff:69:10:c8:2a:41:a7:c0:b5:21:a1:e0:21:ca:41: f6:46:94:7b:2e:bf:39:78:cc:fe:94:68:e6:6c:ed: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:12:8E:A8:39:9B:0E:51:1E:1C:BE:B5:18:23:86:2C:F0:C5:9A:30 X509v3 Authority Key Identifier: keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:25:62:56:c4:47:00:07:ae:05:e2:f3:d4:b9:34:97:5d:ad: ee:ec:e6:bc:14:59:d4:73:75:d6:3e:3f:96:86:e4:0c:88:82: 8b:06:43:b0:01:85:53:3b:5e:59:71:7c:39:e4:2c:da:83:47: bd:7f:fb:13:e4:7e:e4:84:3f:61:93:9a:29:da:eb:ad:96:ca: b9:ab:12:1d:46:ed:27:23:26:37:05:73:02:07:ca:7a:91:d8: 16:44:7d:75:d4:58:0f:f7:80:20:a6:00:2e:68:1e:15:79:d8: 09:4a:b9:13:2e:6c:37:31:45:50:74:e1:6a:79:d8:90:d5:48: 07:22:d1:ac:fc:51:b6:73:fb:0c:62:29:c7:29:28:e6:2f:83: 2b:58:2b:2c:d0:f0:60:c1:6c:61:fe:38:0f:81:f8:92:61:b9: fd:f3:cf:5f:91:d4:a6:5a:91:b4:1e:8b:58:a4:ce:24:78:34: 31:b2:e2:be:9e:62:6e:f7:a7:94:dc:a3:9b:c6:e3:86:0d:de: de:87:03:08:e2:6d:81:ab:2c:0b:cd:55:f2:22:45:d5:d9:30: dc:2b:4f:1c:58:2b:dd:7e:51:33:0b:36:f2:c9:c2:e5:09:74: ba:55:eb:30:32:b1:9f:8f:25:a1:b9:2c:af:03:4e:5d:7f:07: b0:2f:61:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbNdkKKHvyA5mxJ6o10KDQBCjmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMDEyODFDOTUxRENFNDM0RjFCNzEzQUU1NzBGNTlF RTQxM0EwOTAeFw0yNjA3MjQwMTI2MDZaFw0yNjA3MjUwNDAwMDZaMDMxMTAvBgNV BAMTKDIwMTI4RUE4Mzk5QjBFNTExRTFDQkVCNTE4MjM4NjJDRjBDNTlBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYq+UPaIZRxsj7jtHNI9XUZ/Ha 7wsiz/OBDajUlLMO2mjJkJXhGHbqnLdX7xWEFMJ73UQk7vkSj01CvBqssdsGr/27 oIhS1CdWmHmfqUNSn2LRMDbsDUr5VFCGaxtudVoWGtFqQ/TV4vRNjGBV8aDYVR+Y +WlavMcJRgdAiDEeN8asljbUnQSbDGcfZLhmkElithyGO9ThYm9Ob5M7ylYutnKj 1M1sBtkaQsW6mlckPBT2m1s5n6eKeRysoh2mNbdukgyMuKJODy1tPabVLnlRc7yG N0kx1jfQzBvkBNKeu/9pEMgqQafAtSGh4CHKQfZGlHsuvzl4zP6UaOZs7RFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIBKOqDmbDlEeHL61GCOGLPDFmjAwHwYDVR0j BBgwFoAUGRASgclR3OQ08bcTrlcPWe5BOgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJjNjk0NDAtOGIxNy00YTY4LWEwZmEtNjYxNTllMjE2MmUwLzAvMTkxMDEyODFD OTUxRENFNDM0RjFCNzEzQUU1NzBGNTlFRTQxM0EwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTEwMTI4MUM5NTFEQ0U0MzRGMUI3MTNBRTU3MEY1OUVFNDEz QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvMTkxMDEyODFDOTUxRENFNDM0RjFCNzEzQUU1NzBG NTlFRTQxM0EwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAglYlbERwAHrgXi89S5NJddre7s5rwUWdRz ddY+P5aG5AyIgosGQ7ABhVM7XllxfDnkLNqDR71/+xPkfuSEP2GTmina662Wyrmr Eh1G7ScjJjcFcwIHynqR2BZEfXXUWA/3gCCmAC5oHhV52AlKuRMubDcxRVB04Wp5 2JDVSAci0az8UbZz+wxiKccpKOYvgytYKyzQ8GDBbGH+OA+B+JJhuf3zz1+R1KZa kbQei1ikziR4NDGy4r6eYm73p5Tco5vG44YN3t6HAwjibYGrLAvNVfIiRdXZMNwr TxxYK91+UTMLNvLJwuUJdLpV6zAysZ+PJaG5LK8DTl1/B7AvYR4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:56:19 2026 by rpki-client