$ rpki-client -vvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: wof6EdHfLggE4VhcY7sTXzYKULHWyDeYFG4NvHxkIdc= Subject key identifier: D2:2C:6C:72:A7:3F:96:4F:D4:D4:35:76:7C:1C:AB:2D:1D:DD:DC:5C Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 223C3C6E0EB92382CC60D5B573DB22CDE3892B02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:36:02 +0000 Manifest this update: Tue 12 May 2026 02:31:02 +0000 Manifest next update: Wed 13 May 2026 06:31:02 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 2: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: 9puyZsPNC4P7Dn0FnrFAQy0HhABTbmLdL1M3Ipi/G74=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3c:3c:6e:0e:b9:23:82:cc:60:d5:b5:73:db:22:cd:e3:89:2b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: May 12 02:31:02 2026 GMT Not After : May 13 06:31:02 2026 GMT Subject: CN=D22C6C72A73F964FD4D435767C1CAB2D1DDDDC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:76:1d:6c:4d:09:5b:55:89:04:22:48:b3: 32:4a:e3:16:e5:3d:39:f0:15:1a:8a:d8:81:d4:3e: d5:a6:05:11:12:16:88:4e:2f:09:5e:56:9b:bb:ec: 98:0f:74:14:f9:72:91:ac:c7:c2:ed:14:e7:aa:24: a8:61:0b:48:59:04:18:0a:f8:3a:b0:f1:4f:a3:11: 46:7b:53:9f:63:ed:34:fd:b1:c5:4a:1d:49:9e:99: 71:a0:69:67:b4:c2:11:79:3a:bc:27:38:e8:48:51: 04:13:a6:b2:61:99:32:68:16:91:d8:d5:82:99:16: c3:6d:c6:fc:cb:39:62:fe:3e:7a:f6:57:7d:a1:2a: 8c:71:6b:c1:5b:ae:75:3a:05:73:26:e9:f8:ff:c3: 9a:66:f5:ae:97:8a:b0:19:37:0c:d9:ff:a4:f8:64: 42:e0:d6:0c:2d:a9:b3:f7:43:1c:86:ab:49:86:9d: 35:c2:af:11:e2:73:0f:d1:86:7c:35:23:8e:2b:98: 46:04:3f:9d:d4:56:b9:b5:85:31:b0:c2:df:14:75: 76:fe:1a:e0:24:de:45:5f:b0:41:0f:af:80:c0:57: fa:67:4c:65:31:ee:62:74:0c:e4:95:5f:3b:df:9e: cd:7b:23:d1:75:3e:9a:60:b6:89:97:63:8d:aa:c7: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:6C:72:A7:3F:96:4F:D4:D4:35:76:7C:1C:AB:2D:1D:DD:DC:5C X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4d:e0:26:81:37:89:7a:a7:b5:53:3e:6e:3a:f9:33:db:17: 91:e6:65:94:69:52:e0:e8:19:09:f4:81:67:0f:49:bc:2c:e4: 7c:36:3f:87:a1:f8:16:d8:bb:24:84:85:a5:0e:1e:eb:68:cd: 0f:02:1c:a0:70:06:4a:9c:c9:96:db:7c:d4:f0:ee:87:de:e8: 9b:42:1b:2a:6c:eb:e3:0d:d0:83:61:ad:0a:2b:6f:45:22:fe: 55:36:f8:81:4b:a2:49:e6:7c:3a:dd:1a:8f:a1:fd:44:71:57: 17:fe:86:9d:28:c5:3a:41:92:19:97:79:ea:d8:33:32:4e:a3: 34:14:9b:da:3c:5a:8d:bf:94:25:12:5c:dd:97:35:2d:c1:02: 04:90:fa:8b:32:a4:7c:a5:01:55:b9:54:dc:c8:9a:da:4a:93: 95:7c:6a:c2:77:b9:ab:a7:35:09:9c:bc:b2:5f:52:79:89:c2: f1:c3:5e:1b:5d:91:f1:a0:15:72:7f:ba:54:4f:bd:1f:0f:2b: 84:cc:d9:81:66:3e:2a:b5:e6:d9:f9:05:01:13:98:c2:b4:6d: 12:ca:29:76:21:64:a2:ff:55:33:d7:73:21:cc:28:06:0f:6e: 63:6d:ef:df:1c:ff:b4:0f:d1:da:09:89:12:c4:00:51:41:fa: 38:51:a9:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjw8bg65I4LMYNW1c9sizeOJKwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA1MTIwMjMxMDJaFw0yNjA1MTMwNjMxMDJaMDMxMTAvBgNV BAMTKEQyMkM2QzcyQTczRjk2NEZENEQ0MzU3NjdDMUNBQjJEMURERERDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/HYdbE0JW1WJBCJIszJK4xbl PTnwFRqK2IHUPtWmBRESFohOLwleVpu77JgPdBT5cpGsx8LtFOeqJKhhC0hZBBgK +Dqw8U+jEUZ7U59j7TT9scVKHUmemXGgaWe0whF5OrwnOOhIUQQTprJhmTJoFpHY 1YKZFsNtxvzLOWL+Pnr2V32hKoxxa8FbrnU6BXMm6fj/w5pm9a6XirAZNwzZ/6T4 ZELg1gwtqbP3QxyGq0mGnTXCrxHicw/Rhnw1I44rmEYEP53UVrm1hTGwwt8UdXb+ GuAk3kVfsEEPr4DAV/pnTGUx7mJ0DOSVXzvfns17I9F1PppgtomXY42qx1LLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ixscqc/lk/U1DV2fByrLR3d3FwwHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpN4CaBN4l6p7VTPm46+TPbF5HmZZRpUuDo GQn0gWcPSbws5Hw2P4eh+BbYuySEhaUOHutozQ8CHKBwBkqcyZbbfNTw7ofe6JtC Gyps6+MN0INhrQorb0Ui/lU2+IFLoknmfDrdGo+h/URxVxf+hp0oxTpBkhmXeerY MzJOozQUm9o8Wo2/lCUSXN2XNS3BAgSQ+osypHylAVW5VNzImtpKk5V8asJ3uaun NQmcvLJfUnmJwvHDXhtdkfGgFXJ/ulRPvR8PK4TM2YFmPiq15tn5BQETmMK0bRLK KXYhZKL/VTPXcyHMKAYPbmNt798c/7QP0doJiRLEAFFB+jhRqcQ= -----END CERTIFICATE-----Generated at Tue May 12 22:47:02 2026 by rpki-client