$ rpki-client -vvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft File: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft (raw, json) Hash identifier: nuKBI1/bXa9mjUKqpJu8XdwNNgx0czI3gcVbSPfRWO8= Subject key identifier: 52:B2:E1:47:86:12:3F:86:40:36:37:2B:1C:0D:F1:A5:43:80:43:92 Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 Certificate issuer: /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Certificate serial: 67F5D183E8999D9F3C6A5B04EDBBDF488AE3F764 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:19:53 +0000 Manifest this update: Thu 23 Jul 2026 20:14:53 +0000 Manifest next update: Sat 25 Jul 2026 00:06:53 +0000 Files and hashes: 1: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl (hash: L5w8JD8qn6V2ufAKEtv/WIcYKy+hu8jg2H9nhfsqy4E=) 2: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Ctn3mxVihWEQWfZTzb0YPQIateGW/rElkgUhKfXEfc0=) 3: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: GZ2/sYXm8mn6l79+sWeTVBLDtiFjEldYgeqXYA/mkHs=) 4: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: iaDIctPMB1cb8jRuozs+7fq0LvdviMyJlcS3OgZDYDM=) 5: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: x6q8v1sq7gPnj36cQqjz3ENhVrIMCaudmUGFR0TJWTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f5:d1:83:e8:99:9d:9f:3c:6a:5b:04:ed:bb:df:48:8a:e3:f7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Validity Not Before: Jul 23 20:14:53 2026 GMT Not After : Jul 25 00:06:53 2026 GMT Subject: CN=52B2E14786123F864036372B1C0DF1A543804392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:5f:95:43:94:84:a6:3e:0f:60:63:e5:54: 6d:b2:a7:d0:50:17:19:df:0b:78:e6:37:c7:5c:57: df:d4:c3:b4:75:cb:4a:36:b3:10:c0:67:10:07:72: 38:f7:b3:1f:cb:62:ad:86:e8:ce:ba:ff:df:93:7b: 10:be:ad:25:37:6e:09:08:09:7b:1c:86:04:d3:09: dd:69:52:51:e2:a9:67:f0:2e:74:7f:17:10:03:70: 86:5e:0b:a2:44:4e:49:3b:03:01:e7:f7:02:7b:ee: 81:47:9d:79:5c:20:62:e4:f6:3e:0b:a6:56:b6:dc: 3e:b2:aa:25:71:5c:93:b8:8d:68:6f:fd:3c:8b:fa: 1f:94:47:49:fe:c7:ec:17:49:52:36:f4:bb:c7:a5: a5:94:e1:1b:25:e2:da:b0:39:b7:6f:a3:a6:06:72: 20:98:4b:56:94:d9:d9:ba:75:e1:48:3d:aa:cc:d8: a5:ed:bd:36:24:23:7c:e2:19:42:49:62:ca:04:93: 14:67:98:11:dc:13:c1:84:77:73:f4:30:3c:6a:80: 86:1d:d9:91:50:34:4c:17:5c:2d:b4:7f:2a:a3:ad: 4e:0c:04:56:7e:d1:3a:8c:ac:53:80:1e:e1:f4:8b: a5:35:6a:7a:2a:ad:5c:43:c3:d8:0c:2d:00:6a:04: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B2:E1:47:86:12:3F:86:40:36:37:2B:1C:0D:F1:A5:43:80:43:92 X509v3 Authority Key Identifier: keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:49:f1:06:5b:f3:05:7a:e2:c4:94:7f:5c:69:22:2f:d5:68: 97:28:35:1e:32:11:13:f2:91:e1:56:78:38:e0:ca:0e:55:6d: 7f:11:35:a3:50:e9:e2:df:59:3c:94:9c:67:5b:80:73:4a:6e: 33:85:c0:d5:06:25:95:3d:dd:3a:fd:0d:43:bf:86:79:0e:14: 5d:cf:82:5a:ab:2e:a4:59:60:e8:0f:fc:cb:75:a1:bb:aa:67: 54:f7:8d:a3:7b:c6:dd:d6:16:c1:09:f1:9e:2b:f0:9f:33:83: b4:90:eb:b0:4e:d3:b3:56:da:f9:e6:05:95:b3:50:7c:1c:28: 3d:f7:86:b6:e3:b8:cb:f9:a5:56:1e:bd:75:06:16:cd:b1:06: 08:46:75:36:bb:04:5a:8a:51:33:80:49:66:4f:2d:14:94:e1: c5:17:46:dd:a8:f4:db:c7:31:7a:70:10:9e:82:d5:a4:6c:98: e0:09:55:b8:c1:6e:1f:9b:c5:58:ec:5f:5a:1e:9a:41:a7:fe: 0b:7a:8e:1f:fc:d0:c9:f3:f0:1a:b5:ea:27:9e:28:cc:10:05: 41:14:b4:51:a6:62:99:e6:ee:a9:fa:d0:e1:76:2f:dd:cc:3a: 2b:86:c4:45:93:9f:61:07:2e:fb:94:df:c6:a9:e0:e4:a2:e8: 1f:d5:8d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/XRg+iZnZ88alsE7bvfSIrj92QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRF QjdBOUJEMDAeFw0yNjA3MjMyMDE0NTNaFw0yNjA3MjUwMDA2NTNaMDMxMTAvBgNV BAMTKDUyQjJFMTQ3ODYxMjNGODY0MDM2MzcyQjFDMERGMUE1NDM4MDQzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIv1+VQ5SEpj4PYGPlVG2yp9BQ FxnfC3jmN8dcV9/Uw7R1y0o2sxDAZxAHcjj3sx/LYq2G6M66/9+TexC+rSU3bgkI CXschgTTCd1pUlHiqWfwLnR/FxADcIZeC6JETkk7AwHn9wJ77oFHnXlcIGLk9j4L pla23D6yqiVxXJO4jWhv/TyL+h+UR0n+x+wXSVI29LvHpaWU4Rsl4tqwObdvo6YG ciCYS1aU2dm6deFIParM2KXtvTYkI3ziGUJJYsoEkxRnmBHcE8GEd3P0MDxqgIYd 2ZFQNEwXXC20fyqjrU4MBFZ+0TqMrFOAHuH0i6U1anoqrVxDw9gMLQBqBEqhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUrLhR4YSP4ZANjcrHA3xpUOAQ5IwHwYDVR0j BBgwFoAUIkGb7IgZbKKlqr9UMEthBOt6m9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxYmMzZWMtODZiOC00YWZiLThhOGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4 ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRFQjdBOUJEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjQxOUJFQzg4MTk2Q0EyQTVBQUJGNTQzMDRCNjEwNEVCN0E5 QkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYx MDRFQjdBOUJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRJ8QZb8wV64sSUf1xpIi/VaJcoNR4yERPy keFWeDjgyg5VbX8RNaNQ6eLfWTyUnGdbgHNKbjOFwNUGJZU93Tr9DUO/hnkOFF3P glqrLqRZYOgP/Mt1obuqZ1T3jaN7xt3WFsEJ8Z4r8J8zg7SQ67BO07NW2vnmBZWz UHwcKD33hrbjuMv5pVYevXUGFs2xBghGdTa7BFqKUTOASWZPLRSU4cUXRt2o9NvH MXpwEJ6C1aRsmOAJVbjBbh+bxVjsX1oemkGn/gt6jh/80Mnz8Bq16ieeKMwQBUEU tFGmYpnm7qn60OF2L93MOiuGxEWTn2EHLvuU38ap4OSi6B/VjW0= -----END CERTIFICATE-----Generated at Fri Jul 24 17:27:05 2026 by rpki-client