$ rpki-client -vvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft File: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft (raw, json) Hash identifier: +RxLQ+r6kQl96AYtxqYzajBNcrN6fMdjxwCl0TCgHKI= Subject key identifier: 74:CA:56:18:6E:35:EA:B5:29:BC:FF:C2:3E:11:36:95:C6:F3:A3:77 Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 Certificate issuer: /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Certificate serial: 0687FD829DE1C201A4ECFEF7935556F1F13FBF5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:53:12 +0000 Manifest this update: Tue 12 May 2026 23:48:12 +0000 Manifest next update: Wed 13 May 2026 23:53:12 +0000 Files and hashes: 1: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: iaDIctPMB1cb8jRuozs+7fq0LvdviMyJlcS3OgZDYDM=) 2: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: x6q8v1sq7gPnj36cQqjz3ENhVrIMCaudmUGFR0TJWTE=) 3: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Ctn3mxVihWEQWfZTzb0YPQIateGW/rElkgUhKfXEfc0=) 4: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl (hash: xbbh5upI4XvUtsMYHzEP3SkZ5+BGP/hwB5nWyC+qAc4=) 5: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: GZ2/sYXm8mn6l79+sWeTVBLDtiFjEldYgeqXYA/mkHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:87:fd:82:9d:e1:c2:01:a4:ec:fe:f7:93:55:56:f1:f1:3f:bf:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Validity Not Before: May 12 23:48:12 2026 GMT Not After : May 13 23:53:12 2026 GMT Subject: CN=74CA56186E35EAB529BCFFC23E113695C6F3A377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:ef:f9:33:e2:9e:12:b0:00:2a:85:40:da: 38:67:20:3f:b1:31:c9:7a:eb:1f:93:16:44:ef:92: d5:74:20:94:ee:57:9b:ea:f2:d4:29:19:c6:84:10: d9:ae:a9:29:b4:cc:91:52:a3:47:e5:dd:9b:22:f3: 16:c5:b8:36:1d:d3:4e:4a:e3:31:cd:2e:1b:42:e9: 0f:8c:00:b3:ab:df:24:8f:1f:b6:6a:08:cc:03:4b: c0:00:d5:7f:81:dd:29:c4:84:58:1f:45:a8:df:87: 31:97:d9:01:98:15:03:cb:17:2b:0e:1d:3e:c4:68: c1:0a:b8:1c:6d:d3:ce:d3:4f:5b:77:15:70:47:cc: f8:50:8d:03:15:29:23:68:63:c3:78:73:3f:08:ea: 7c:69:36:7f:82:47:4a:17:17:70:33:c9:3f:ea:5d: 7c:55:ca:ea:f3:0e:da:c2:86:b7:07:c3:d1:c2:93: 66:e4:28:8d:1c:dc:56:a2:2d:ef:47:bf:c1:e2:53: e8:8e:90:f6:ac:8d:b3:c8:04:a0:11:54:3d:dc:33: e3:b5:ac:0f:3f:e8:e2:c4:15:9b:6c:ef:f1:30:05: 6f:ab:48:2c:5e:ff:69:b3:ce:b0:33:58:f7:71:d7: 71:d1:07:5e:d8:14:19:16:78:b2:5a:fa:c2:d9:28: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CA:56:18:6E:35:EA:B5:29:BC:FF:C2:3E:11:36:95:C6:F3:A3:77 X509v3 Authority Key Identifier: keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:df:43:c7:42:46:f5:cf:27:cb:11:bc:0f:d7:5d:a0:6e:8c: 60:14:da:50:73:36:c3:5b:83:ac:c1:1e:bb:65:50:85:cd:2d: 13:79:ed:bd:4e:c4:bb:21:6b:a3:55:a0:19:2c:b8:82:0a:45: e3:97:01:3e:e0:f3:8a:71:21:1c:ce:91:72:7a:5f:4e:0e:e8: 10:93:74:0d:05:49:30:00:56:1f:ff:50:75:85:22:a4:2b:14: 2b:d1:84:0e:d4:a1:09:a7:40:45:08:51:fb:45:cf:16:22:7c: 10:07:78:a3:cb:70:71:b0:75:0d:03:c4:17:1e:60:07:2e:21: ca:79:0a:b9:47:d3:57:df:68:df:76:3f:2a:9d:af:cb:02:62: 79:a5:34:bf:6f:a2:79:ed:30:dd:56:63:41:3c:97:9d:93:89: 77:c8:d9:63:6b:d8:c6:64:9a:ac:9b:01:f4:03:d9:39:49:9b: 5f:2f:e1:61:7f:f5:19:b3:98:65:f4:fd:53:65:1d:06:b8:6e: 3e:28:1c:a5:e1:ac:70:72:a7:22:fa:8f:86:cd:cd:01:0f:a6: 93:1f:17:7c:e6:3e:20:a5:56:9d:f0:55:7e:ae:18:a4:35:31: a6:63:ea:c0:1d:31:4e:21:d3:1e:2a:3d:38:40:93:9a:22:ed: e5:29:4b:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBof9gp3hwgGk7P73k1VW8fE/v1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRF QjdBOUJEMDAeFw0yNjA1MTIyMzQ4MTJaFw0yNjA1MTMyMzUzMTJaMDMxMTAvBgNV BAMTKDc0Q0E1NjE4NkUzNUVBQjUyOUJDRkZDMjNFMTEzNjk1QzZGM0EzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/t+/5M+KeErAAKoVA2jhnID+x Mcl66x+TFkTvktV0IJTuV5vq8tQpGcaEENmuqSm0zJFSo0fl3Zsi8xbFuDYd005K 4zHNLhtC6Q+MALOr3ySPH7ZqCMwDS8AA1X+B3SnEhFgfRajfhzGX2QGYFQPLFysO HT7EaMEKuBxt087TT1t3FXBHzPhQjQMVKSNoY8N4cz8I6nxpNn+CR0oXF3AzyT/q XXxVyurzDtrChrcHw9HCk2bkKI0c3FaiLe9Hv8HiU+iOkPasjbPIBKARVD3cM+O1 rA8/6OLEFZts7/EwBW+rSCxe/2mzzrAzWPdx13HRB17YFBkWeLJa+sLZKDoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdMpWGG416rUpvP/CPhE2lcbzo3cwHwYDVR0j BBgwFoAUIkGb7IgZbKKlqr9UMEthBOt6m9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxYmMzZWMtODZiOC00YWZiLThhOGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4 ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRFQjdBOUJEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjQxOUJFQzg4MTk2Q0EyQTVBQUJGNTQzMDRCNjEwNEVCN0E5 QkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYx MDRFQjdBOUJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTfQ8dCRvXPJ8sRvA/XXaBujGAU2lBzNsNb g6zBHrtlUIXNLRN57b1OxLsha6NVoBksuIIKReOXAT7g84pxIRzOkXJ6X04O6BCT dA0FSTAAVh//UHWFIqQrFCvRhA7UoQmnQEUIUftFzxYifBAHeKPLcHGwdQ0DxBce YAcuIcp5CrlH01ffaN92Pyqdr8sCYnmlNL9vonntMN1WY0E8l52TiXfI2WNr2MZk mqybAfQD2TlJm18v4WF/9RmzmGX0/VNlHQa4bj4oHKXhrHBypyL6j4bNzQEPppMf F3zmPiClVp3wVX6uGKQ1MaZj6sAdMU4h0x4qPThAk5oi7eUpSww= -----END CERTIFICATE-----Generated at Wed May 13 02:16:05 2026 by rpki-client