$ rpki-client -vvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json) Hash identifier: ilHasF56fkQE08woyhrtgsPQQV2VfB7Oy3mMlAIICRA= Subject key identifier: 35:0F:82:58:ED:21:D7:34:BD:88:9A:E6:28:19:AB:B0:6C:21:7F:A8 Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Certificate serial: 2E8CB6763E8510A40AFF1E191FE2D44927171829 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 23:02:58 +0000 Manifest this update: Thu 23 Jul 2026 22:57:58 +0000 Manifest next update: Sat 25 Jul 2026 01:02:58 +0000 Files and hashes: 1: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=) 2: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: jp8cp0Hxhq8RvUyulo8IDjiaizI/R4e2vfWcTGPSliI=) 3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8c:b6:76:3e:85:10:a4:0a:ff:1e:19:1f:e2:d4:49:27:17:18:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Validity Not Before: Jul 23 22:57:58 2026 GMT Not After : Jul 25 01:02:58 2026 GMT Subject: CN=350F8258ED21D734BD889AE62819ABB06C217FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:c1:cc:d4:3f:4d:71:1a:ea:61:6a:b2:83: 9f:ce:53:24:ec:be:fc:db:a6:57:00:9b:0d:2f:e5: 8e:42:1f:8e:0f:ce:cf:1c:71:bb:55:ce:9d:52:dc: bf:65:1d:23:df:4a:61:55:c9:9f:c8:5b:3f:dc:93: 93:df:db:f7:bd:71:33:62:95:90:05:d3:9e:79:7a: 25:d0:eb:99:77:a2:88:14:a6:91:f4:ac:14:50:5f: 6b:7c:3d:a9:90:17:4c:a4:9b:30:3a:f6:f1:fe:49: ea:5d:8c:db:da:b9:56:38:31:85:ce:97:4b:36:ff: f4:f7:c4:1a:11:21:e1:7c:27:43:66:89:52:81:2e: e6:64:85:4b:c0:74:40:97:65:3c:03:68:0d:b1:d3: 23:37:bf:a3:1e:29:8c:9c:7e:e0:b6:ee:c5:85:49: 37:77:bb:be:b6:b6:25:98:22:42:da:16:11:35:88: a0:44:85:4e:06:95:5a:d7:e4:f7:f3:1d:96:17:de: f6:ab:11:bc:75:29:14:8b:b9:a5:ce:f5:6e:2a:ab: 2f:44:30:0f:51:30:12:49:3b:c8:2a:da:88:a9:3b: 6d:5c:d9:d4:ae:2d:dc:56:13:09:11:53:62:3c:a8: 5b:ef:c0:4c:5a:0a:85:21:28:48:af:49:be:fc:c6: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0F:82:58:ED:21:D7:34:BD:88:9A:E6:28:19:AB:B0:6C:21:7F:A8 X509v3 Authority Key Identifier: keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:08:2a:b2:97:ad:0a:57:7a:d9:ee:73:b6:48:24:95:55:93: 45:71:0a:9b:c9:64:0e:3c:1b:53:04:9d:4d:1a:eb:23:3d:ba: 05:22:80:f4:2a:1c:35:60:56:e3:85:e5:6c:87:96:f6:8a:4f: ff:c7:d6:c1:63:72:1f:00:dc:4f:66:ce:36:2e:e3:97:af:28: 7a:55:8f:85:6f:bf:32:24:f2:00:c4:47:4b:16:ba:a3:c9:3b: bf:51:98:2d:f1:0a:b4:2b:eb:03:69:b4:20:32:a2:c9:7b:56: 73:db:b8:8a:32:8b:91:d5:a3:a9:ff:35:97:73:e8:0f:95:59: 30:9b:5b:77:26:33:ca:4a:82:5f:ae:ad:98:d4:e4:4b:8d:2b: 7a:96:53:d5:1f:35:cd:d0:bc:58:54:53:b4:17:03:2f:1e:32: aa:fc:33:f9:8b:72:88:6d:dc:aa:25:48:fb:16:64:6a:f2:7a: 18:d3:e0:39:b8:ae:aa:94:94:cc:45:47:77:f8:50:ec:cd:21: 1d:69:5e:da:2f:ee:44:a3:2c:5f:d0:11:ab:d1:c8:fa:a7:dd: c9:9e:cd:8b:21:9c:c4:4c:0d:b6:25:93:97:d2:c6:03:6d:a2: fb:44:05:13:79:db:98:ce:e1:be:eb:a5:7a:51:3f:cf:c9:fa: 62:e7:f8:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoy2dj6FEKQK/x4ZH+LUSScXGCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5 QkMyRjIxRjAeFw0yNjA3MjMyMjU3NThaFw0yNjA3MjUwMTAyNThaMDMxMTAvBgNV BAMTKDM1MEY4MjU4RUQyMUQ3MzRCRDg4OUFFNjI4MTlBQkIwNkMyMTdGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXMHM1D9NcRrqYWqyg5/OUyTs vvzbplcAmw0v5Y5CH44Pzs8ccbtVzp1S3L9lHSPfSmFVyZ/IWz/ck5Pf2/e9cTNi lZAF0555eiXQ65l3oogUppH0rBRQX2t8PamQF0ykmzA69vH+SepdjNvauVY4MYXO l0s2//T3xBoRIeF8J0NmiVKBLuZkhUvAdECXZTwDaA2x0yM3v6MeKYycfuC27sWF STd3u762tiWYIkLaFhE1iKBEhU4GlVrX5PfzHZYX3varEbx1KRSLuaXO9W4qqy9E MA9RMBJJO8gq2oipO21c2dSuLdxWEwkRU2I8qFvvwExaCoUhKEivSb78xqEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQ+CWO0h1zS9iJrmKBmrsGwhf6gwHwYDVR0j BBgwFoAUrRnSJkiQA/CStp1X8q7khJvC8h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNiMTc4NTctYmUzZC00MTMyLThmMTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0 ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5QkMyRjIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRDE5RDIyNjQ4OTAwM0YwOTJCNjlENTdGMkFFRTQ4NDlCQzJG MjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0 ODQ5QkMyRjIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcIKrKXrQpXetnuc7ZIJJVVk0VxCpvJZA48 G1MEnU0a6yM9ugUigPQqHDVgVuOF5WyHlvaKT//H1sFjch8A3E9mzjYu45evKHpV j4VvvzIk8gDER0sWuqPJO79RmC3xCrQr6wNptCAyosl7VnPbuIoyi5HVo6n/NZdz 6A+VWTCbW3cmM8pKgl+urZjU5EuNK3qWU9UfNc3QvFhUU7QXAy8eMqr8M/mLcoht 3KolSPsWZGryehjT4Dm4rqqUlMxFR3f4UOzNIR1pXtov7kSjLF/QEavRyPqn3cme zYshnMRMDbYlk5fSxgNtovtEBRN525jO4b7rpXpRP8/J+mLn+Jw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:18:53 2026 by rpki-client