$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft File: 819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft (raw, json) Hash identifier: iqNJGHFOsxiymkcY9B5FlEw4pW6Zha9Tb/8ooqeT7j4= Subject key identifier: D9:13:E0:12:1A:6D:D0:9C:12:B4:21:8F:DC:00:63:18:C1:D3:25:1C Authority key identifier: 81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4 Certificate issuer: /CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4 Certificate serial: 7E2D11F289E2CF98367E0EC1514C00EEE0B2EE3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:11 +0000 Manifest this update: Tue 12 May 2026 20:48:11 +0000 Manifest next update: Wed 13 May 2026 23:45:11 +0000 Files and hashes: 1: 819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl (hash: Q9MeFofp15QmORVE2Sdb0Z51DjJtOwgLOgotCS0B5S4=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: qHmMyZbiN3k/cS5UVLVJqORSDX8DOjqv/PbL7rfrzl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2d:11:f2:89:e2:cf:98:36:7e:0e:c1:51:4c:00:ee:e0:b2:ee:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4 Validity Not Before: May 12 20:48:11 2026 GMT Not After : May 13 23:45:11 2026 GMT Subject: CN=D913E0121A6DD09C12B4218FDC006318C1D3251C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:1b:e7:31:f4:f4:39:1b:f1:48:34:20:4e: 7a:cb:84:bd:a7:69:c1:0f:25:58:a0:03:a7:64:33: 93:8b:2a:56:93:89:97:a5:b0:14:2c:81:5d:f6:13: f9:08:72:b3:d2:a4:95:c8:0f:c5:1f:95:bb:9f:5d: 9a:33:7a:07:3c:dd:0c:bf:50:36:c6:75:4f:31:0b: e0:6c:04:a7:60:7c:51:8b:fe:5c:93:4c:62:a0:31: cb:6a:5a:b3:94:d3:3e:ae:24:95:b7:97:1a:31:e8: 26:b5:f4:ab:37:87:23:38:e8:bd:1a:ef:85:83:38: 40:6b:de:8a:fd:89:d5:b1:06:86:fb:d7:cd:6a:fd: d9:41:2a:02:0e:a1:dd:ed:82:af:d0:f9:1f:21:20: 88:51:8d:6a:2f:4e:05:52:9e:2a:bc:99:22:4a:35: c5:6f:5b:50:48:13:a3:fa:68:fe:f5:45:a8:e8:26: c6:ab:43:46:02:a5:6a:8b:2d:ff:fc:40:74:54:fe: bc:b9:59:c0:46:67:47:5d:b7:8b:d0:c5:ff:b0:9a: cc:db:c7:d8:27:77:34:cb:4c:ef:e4:52:97:5a:46: 0c:c3:1a:a0:88:9c:e1:ba:85:2a:85:b9:7f:b0:9d: 6f:3c:fc:00:d5:66:9c:7a:06:c9:0c:dc:20:45:a7: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:13:E0:12:1A:6D:D0:9C:12:B4:21:8F:DC:00:63:18:C1:D3:25:1C X509v3 Authority Key Identifier: keyid:81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:91:af:3c:84:32:ca:dd:42:63:cb:c7:25:d7:80:16:29:f2: 0f:30:ed:11:d4:29:85:d2:e2:ed:af:d0:9c:5d:fc:54:9b:84: 4a:16:57:8a:59:21:c4:ae:5b:96:ac:ca:a5:24:91:ae:79:e0: 69:c8:ee:9c:bb:f0:4b:d1:d2:16:50:ef:bd:94:b9:94:20:e5: 59:b2:70:bd:83:e1:66:1a:46:18:9a:ad:6c:e6:e7:da:c2:4d: c3:21:8b:e4:00:07:74:65:02:d5:2e:14:ea:40:1c:01:50:3f: 46:c7:83:c8:07:cf:d9:7b:aa:0e:10:f2:85:b5:31:88:5f:7f: 07:70:9d:77:d5:bb:98:0b:e2:4a:ff:6d:f9:4c:e7:fc:c0:86: 85:b4:e3:bc:7b:5b:fc:11:1d:6e:12:c2:07:8e:d6:37:91:3a: e9:8a:d4:05:19:4f:85:43:a5:8e:6e:8a:a4:63:da:b0:75:4f: 35:9a:80:b3:92:d9:52:fe:0c:9f:7c:81:36:a7:87:a6:78:99: c6:11:ac:56:f8:e5:0c:6b:92:16:28:55:e6:6c:4d:0e:4e:5c: e0:0c:df:b8:34:c1:08:9d:de:55:4c:2d:08:f3:7c:eb:8f:e1: 10:87:04:6d:72:c3:af:ec:d3:ce:47:f7:f7:ca:69:e6:ad:f5: 83:a1:61:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfi0R8oniz5g2fg7BUUwA7uCy7jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QjY2ODlGRENFQkFFNTAyQURFN0U3N0VBOTY4Q0VF RjAxMUFENDAeFw0yNjA1MTIyMDQ4MTFaFw0yNjA1MTMyMzQ1MTFaMDMxMTAvBgNV BAMTKEQ5MTNFMDEyMUE2REQwOUMxMkI0MjE4RkRDMDA2MzE4QzFEMzI1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtxvnMfT0ORvxSDQgTnrLhL2n acEPJVigA6dkM5OLKlaTiZelsBQsgV32E/kIcrPSpJXID8UflbufXZozegc83Qy/ UDbGdU8xC+BsBKdgfFGL/lyTTGKgMctqWrOU0z6uJJW3lxox6Ca19Ks3hyM46L0a 74WDOEBr3or9idWxBob7181q/dlBKgIOod3tgq/Q+R8hIIhRjWovTgVSniq8mSJK NcVvW1BIE6P6aP71RajoJsarQ0YCpWqLLf/8QHRU/ry5WcBGZ0ddt4vQxf+wmszb x9gndzTLTO/kUpdaRgzDGqCInOG6hSqFuX+wnW88/ADVZpx6BskM3CBFp1tZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RPgEhpt0JwStCGP3ABjGMHTJRwwHwYDVR0j BBgwFoAUgZtmif3OuuUCrefnfqlozu8BGtQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ0ZmJmYjAtOTNlZS00ZWE2LWI0Y2YtMDdkNzY5Yjg4YTIyLzAvODE5QjY2ODlG RENFQkFFNTAyQURFN0U3N0VBOTY4Q0VFRjAxMUFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTlCNjY4OUZEQ0VCQUU1MDJBREU3RTc3RUE5NjhDRUVGMDEx QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvODE5QjY2ODlGRENFQkFFNTAyQURFN0U3N0VBOTY4 Q0VFRjAxMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKRrzyEMsrdQmPLxyXXgBYp8g8w7RHUKYXS 4u2v0Jxd/FSbhEoWV4pZIcSuW5asyqUkka554GnI7py78EvR0hZQ772UuZQg5Vmy cL2D4WYaRhiarWzm59rCTcMhi+QAB3RlAtUuFOpAHAFQP0bHg8gHz9l7qg4Q8oW1 MYhffwdwnXfVu5gL4kr/bflM5/zAhoW047x7W/wRHW4SwgeO1jeROumK1AUZT4VD pY5uiqRj2rB1TzWagLOS2VL+DJ98gTanh6Z4mcYRrFb45QxrkhYoVeZsTQ5OXOAM 37g0wQid3lVMLQjzfOuP4RCHBG1yw6/s085H9/fKaeat9YOhYds= -----END CERTIFICATE-----Generated at Tue May 12 22:46:10 2026 by rpki-client