$ rpki-client -vvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: mD4CbHzESBs9Mqr4MxgBvX0+1M5eFz+goHTqI3ohnX0= Subject key identifier: 68:64:D9:5B:C4:5B:54:00:67:55:6C:DC:4D:13:A5:C7:21:D1:B0:33 Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 53EEDC11550B7A35A80B0B0AE6A80DD08375A260 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:39:09 +0000 Manifest this update: Thu 23 Jul 2026 19:34:09 +0000 Manifest next update: Fri 24 Jul 2026 20:27:09 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 3: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: YhHO8HvGOumf7+neWE16sqR1QWf98vHI+GJ9o2vf2LQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ee:dc:11:55:0b:7a:35:a8:0b:0b:0a:e6:a8:0d:d0:83:75:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Jul 23 19:34:09 2026 GMT Not After : Jul 24 20:27:09 2026 GMT Subject: CN=6864D95BC45B540067556CDC4D13A5C721D1B033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:c1:08:6d:6a:9b:0e:35:d7:d1:05:1d:5e: c3:81:6b:0a:5a:03:90:d8:f3:e4:7a:ac:4b:01:90: 0a:29:71:9f:9b:27:9f:39:7c:e1:7b:28:05:0c:02: b4:49:2a:f6:5d:07:f2:73:35:93:42:7a:52:ca:4a: d6:89:94:e0:3a:f6:8b:e4:0b:a8:f0:71:51:b6:ef: 68:4c:3c:0a:01:6d:86:bf:ab:79:00:e1:5f:99:2d: 57:66:00:91:2c:ec:4a:11:42:01:56:14:42:d7:e7: 66:ac:84:52:f8:40:8c:cd:c8:4a:1b:41:42:58:b8: de:b2:08:95:43:89:c1:f5:ac:20:9a:61:09:a4:70: 31:96:fb:22:7a:4b:11:aa:da:ad:53:d9:62:88:01: 38:3e:dd:16:41:6c:77:1b:0b:5a:2c:9c:e0:14:dd: 3f:d2:1a:4f:ce:b7:0c:c4:4b:dd:16:66:c9:18:f5: 2e:8d:3f:ac:e5:a5:c0:50:33:38:fa:cc:c6:20:34: 45:c1:42:fa:6a:af:e2:ac:b1:b5:30:5e:8e:ec:1f: 3f:00:da:58:67:74:cb:9a:d1:22:95:d9:ff:11:0c: 4b:19:9d:f1:36:86:fe:4c:31:29:a9:b7:f4:72:bc: 05:a5:d8:f3:96:ad:fd:7d:02:6c:1b:17:ad:3b:5a: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:D9:5B:C4:5B:54:00:67:55:6C:DC:4D:13:A5:C7:21:D1:B0:33 X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:17:4d:27:50:89:54:74:ce:a6:92:f4:fd:dd:ed:b5:73:b6: 88:46:3e:4f:71:03:f3:4f:af:7d:8b:ea:ce:59:69:e6:10:dd: 03:42:9c:69:13:d7:4e:0b:c6:53:2f:3d:0e:0f:ae:97:1e:f0: 8f:1b:15:8b:b3:2c:35:e6:6b:ac:75:cb:48:e8:e6:2c:de:1a: fd:55:9d:5c:ec:a7:1e:d5:dc:92:e9:40:8c:f1:76:53:51:ea: 42:71:0f:13:b6:82:1a:d2:69:f4:e2:24:75:d1:8d:dd:6a:b0: 9d:80:28:3a:ea:5b:17:33:7a:9e:72:75:0c:85:16:91:c2:3e: 19:a4:bb:73:da:b6:5e:d8:fc:77:7b:8e:17:0d:0d:f5:63:76: 25:5b:6c:c8:b5:80:9f:3f:5f:ee:95:f3:21:57:41:0b:3f:01: fd:e8:2b:ec:c9:56:b8:4d:cc:47:96:c0:4e:24:01:20:43:ff: 0f:16:f2:ba:89:ef:3d:ec:a4:c9:55:39:de:08:0e:27:3d:52: a3:dd:02:d3:f2:50:31:e4:0d:74:f6:d6:c9:75:da:19:b7:5e: 64:ac:d2:8c:3e:e0:8c:c7:6f:3d:49:5e:c2:23:71:9b:71:3e: 6f:b2:ce:f5:8a:63:86:f6:d9:00:09:33:df:c2:f6:09:66:29: da:52:db:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+7cEVULejWoCwsK5qgN0IN1omAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA3MjMxOTM0MDlaFw0yNjA3MjQyMDI3MDlaMDMxMTAvBgNV BAMTKDY4NjREOTVCQzQ1QjU0MDA2NzU1NkNEQzREMTNBNUM3MjFEMUIwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbeMEIbWqbDjXX0QUdXsOBawpa A5DY8+R6rEsBkAopcZ+bJ585fOF7KAUMArRJKvZdB/JzNZNCelLKStaJlOA69ovk C6jwcVG272hMPAoBbYa/q3kA4V+ZLVdmAJEs7EoRQgFWFELX52ashFL4QIzNyEob QUJYuN6yCJVDicH1rCCaYQmkcDGW+yJ6SxGq2q1T2WKIATg+3RZBbHcbC1osnOAU 3T/SGk/OtwzES90WZskY9S6NP6zlpcBQMzj6zMYgNEXBQvpqr+KssbUwXo7sHz8A 2lhndMua0SKV2f8RDEsZnfE2hv5MMSmpt/RyvAWl2POWrf19AmwbF607WoRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaGTZW8RbVABnVWzcTROlxyHRsDMwHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAXTSdQiVR0zqaS9P3d7bVztohGPk9xA/NP r32L6s5ZaeYQ3QNCnGkT104LxlMvPQ4Prpce8I8bFYuzLDXma6x1y0jo5izeGv1V nVzspx7V3JLpQIzxdlNR6kJxDxO2ghrSafTiJHXRjd1qsJ2AKDrqWxczep5ydQyF FpHCPhmku3Patl7Y/Hd7jhcNDfVjdiVbbMi1gJ8/X+6V8yFXQQs/Af3oK+zJVrhN zEeWwE4kASBD/w8W8rqJ7z3spMlVOd4IDic9UqPdAtPyUDHkDXT21sl12hm3XmSs 0ow+4IzHbz1JXsIjcZtxPm+yzvWKY4b22QAJM9/C9glmKdpS2xo= -----END CERTIFICATE-----Generated at Fri Jul 24 05:10:37 2026 by rpki-client