$ rpki-client -vvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft File: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft (raw, json) Hash identifier: 9yDA4t2QLR2ULk1WF9ndpbwnWLwMccIPuhAc0DkucnU= Subject key identifier: 30:2D:5B:1F:FA:3D:8F:7C:16:AE:9A:81:87:30:4B:29:4D:97:B5:73 Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 Certificate issuer: /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Certificate serial: 42F74A30987E15EF1611359BE02FE68D07E1061F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:28 +0000 Manifest this update: Tue 12 May 2026 18:13:28 +0000 Manifest next update: Wed 13 May 2026 20:24:28 +0000 Files and hashes: 1: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: rAfzEZvuHRI/Kzt1SmKQHwBtPJb8jdNpuP/cvt9qX+w=) 2: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: yUTHLwhvAH/MhoYaduOS14+07g6chdMoBPVYy5YJcX4=) 3: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: 7AkBTaxaVF6MfSYLN5bOMc9OzhJ7a78FUzJRaPwJ6kQ=) 4: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl (hash: NGpNhUZaQBnX5RDruGQE6x9zRZJoL40jYHDcZ0LaghQ=) 5: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: Ur2deLsRWDmCAqL8yUm8FNnfEGneYV45Th8VxPgH0qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f7:4a:30:98:7e:15:ef:16:11:35:9b:e0:2f:e6:8d:07:e1:06:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Validity Not Before: May 12 18:13:28 2026 GMT Not After : May 13 20:24:28 2026 GMT Subject: CN=302D5B1FFA3D8F7C16AE9A8187304B294D97B573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:1d:1a:b4:fe:e6:02:a4:83:49:a4:a7:03: 82:f7:27:52:48:4d:81:97:7f:2b:49:20:6e:4b:f9: 5a:d1:d7:9f:30:3f:51:57:0b:80:69:f2:4f:9d:e2: cd:4d:d3:52:b3:92:15:15:ef:93:ec:25:91:7f:92: 5c:28:fd:e4:56:31:c3:ec:6e:d0:73:62:b6:5f:c9: e8:9f:fe:98:74:4b:83:31:a1:98:4d:85:f5:2a:1a: 82:ec:b7:d9:a3:e7:d8:04:4c:6d:b8:e1:93:44:11: 4f:4a:d0:e2:18:33:25:29:17:ab:47:32:b4:81:30: 73:7f:7b:70:69:73:70:32:bf:6b:fb:d5:a2:82:2b: e6:3c:3c:10:6a:ca:f7:11:97:77:bc:a1:d2:96:77: 82:d1:2d:03:a5:94:a0:99:34:7d:d6:2a:df:72:ee: f7:04:83:ff:b2:6d:7e:e7:6e:a9:9b:e8:9d:84:87: f2:41:be:9e:f2:b0:fd:02:02:2c:8c:da:0f:d7:f9: e7:6a:fe:40:73:6f:8f:4a:cd:8d:d2:e0:fa:6e:69: 1a:87:57:46:36:87:17:d3:4a:6c:79:34:be:3c:74: 5e:f7:04:ec:80:0f:09:89:fb:a5:d2:71:bf:20:5a: 9e:50:de:57:40:e3:bf:8c:0e:ae:e3:9b:24:34:a4: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2D:5B:1F:FA:3D:8F:7C:16:AE:9A:81:87:30:4B:29:4D:97:B5:73 X509v3 Authority Key Identifier: keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:22:a7:62:53:b0:45:2f:36:bd:5b:14:c2:6c:2f:77:21:b1: 4b:25:af:41:8c:40:ea:ec:36:f9:6f:bb:b0:09:cd:4a:dc:e1: 0f:ab:df:9e:f6:84:d8:0a:ad:9a:44:a7:38:3a:e0:ce:f4:55: 3c:bb:97:b6:c1:07:90:85:f6:f6:f4:f1:2d:70:06:ba:53:6c: 06:8e:a0:4a:3b:24:b3:f9:8f:36:20:fc:67:b8:d3:47:39:5f: d3:e2:83:2c:e7:8d:fa:27:38:57:6b:8b:f1:89:43:19:c8:70: a8:05:5a:9a:7e:74:20:b0:5f:62:84:76:b2:96:9f:6c:fa:c0: da:c7:d2:0d:20:e8:40:fc:b9:ca:1d:49:25:d1:a1:a5:c8:09: e0:9f:24:7c:96:e0:3d:4e:97:9d:d0:e4:da:58:0e:34:64:3d: 5d:4a:20:8b:31:d6:31:cf:bb:8e:8a:cc:74:8f:d2:16:75:fd: 62:52:e0:7f:66:4a:5a:9c:4f:7b:0e:c5:0c:85:6a:a0:d8:0d: a5:6a:22:a5:4c:81:d8:c4:2d:7a:8e:c0:ce:da:44:fc:db:e0: ea:06:0d:f5:d0:6b:69:61:f5:0c:d9:c3:45:61:0f:2f:37:d7: 42:61:4e:1e:27:94:8f:ea:bb:8c:60:fd:8d:d0:13:84:e5:50: f6:c2:c8:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvdKMJh+Fe8WETWb4C/mjQfhBh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0MEFE RjFCQkIzNzAeFw0yNjA1MTIxODEzMjhaFw0yNjA1MTMyMDI0MjhaMDMxMTAvBgNV BAMTKDMwMkQ1QjFGRkEzRDhGN0MxNkFFOUE4MTg3MzA0QjI5NEQ5N0I1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudx0atP7mAqSDSaSnA4L3J1JI TYGXfytJIG5L+VrR158wP1FXC4Bp8k+d4s1N01KzkhUV75PsJZF/klwo/eRWMcPs btBzYrZfyeif/ph0S4MxoZhNhfUqGoLst9mj59gETG244ZNEEU9K0OIYMyUpF6tH MrSBMHN/e3Bpc3Ayv2v71aKCK+Y8PBBqyvcRl3e8odKWd4LRLQOllKCZNH3WKt9y 7vcEg/+ybX7nbqmb6J2Eh/JBvp7ysP0CAiyM2g/X+edq/kBzb49KzY3S4PpuaRqH V0Y2hxfTSmx5NL48dF73BOyADwmJ+6XScb8gWp5Q3ldA47+MDq7jmyQ0pK4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMC1bH/o9j3wWrpqBhzBLKU2XtXMwHwYDVR0j BBgwFoAUGafSRz+qa3LjmaShD0tkCt8buzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQxZTA4ZWYtM2FlNi00YjkwLWI0NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDcz RkFBNkI3MkUzOTlBNEExMEY0QjY0MEFERjFCQkIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUE3RDI0NzNGQUE2QjcyRTM5OUE0QTEwRjRCNjQwQURGMUJC QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0 MEFERjFCQkIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQip2JTsEUvNr1bFMJsL3chsUslr0GMQOrs Nvlvu7AJzUrc4Q+r3572hNgKrZpEpzg64M70VTy7l7bBB5CF9vb08S1wBrpTbAaO oEo7JLP5jzYg/Ge400c5X9PigyznjfonOFdri/GJQxnIcKgFWpp+dCCwX2KEdrKW n2z6wNrH0g0g6ED8ucodSSXRoaXICeCfJHyW4D1Ol53Q5NpYDjRkPV1KIIsx1jHP u46KzHSP0hZ1/WJS4H9mSlqcT3sOxQyFaqDYDaVqIqVMgdjELXqOwM7aRPzb4OoG DfXQa2lh9QzZw0VhDy8310JhTh4nlI/qu4xg/Y3QE4TlUPbCyEE= -----END CERTIFICATE-----Generated at Wed May 13 12:51:39 2026 by rpki-client