$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json) Hash identifier: yCB9KvZdzKA3ILI8DBS7D+CXX+s+gpJBRkM+hX3zXfQ= Subject key identifier: 18:8A:26:D0:F2:D8:FB:A3:1C:E3:23:B8:01:25:50:4A:60:FE:38:42 Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Certificate serial: 60EA6A8AA38F28870EA92F011CFDC5F5100954D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:39:08 +0000 Manifest this update: Tue 12 May 2026 18:34:08 +0000 Manifest next update: Wed 13 May 2026 22:05:08 +0000 Files and hashes: 1: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=) 2: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=) 3: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: F7QPc1/kOEz8xII5ZfkVHZbnn3bjLDWJkaR6a3bsQyc=) 4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=) 5: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ea:6a:8a:a3:8f:28:87:0e:a9:2f:01:1c:fd:c5:f5:10:09:54:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Validity Not Before: May 12 18:34:08 2026 GMT Not After : May 13 22:05:08 2026 GMT Subject: CN=188A26D0F2D8FBA31CE323B80125504A60FE3842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:64:a1:21:2e:83:1b:30:24:aa:a6:01:92: ad:97:da:84:c4:9e:5b:63:5d:c9:a8:4b:91:bb:76: 00:40:f1:85:53:07:0b:67:66:76:97:c1:93:e5:b7: 84:9c:2a:a1:aa:7b:65:cc:c2:6b:01:62:0f:60:35: 16:af:9e:17:df:e8:4e:c9:52:d4:9f:66:e4:e2:f3: bf:01:21:16:b4:3a:bf:87:b4:c8:5a:0e:ec:bb:8b: 9c:c4:52:5c:b7:44:ee:4f:92:85:d1:9c:32:d3:27: b6:fb:33:5e:1e:ce:e1:9d:c5:0c:bd:26:07:d2:fd: dc:d5:88:cc:e1:06:05:11:71:ba:23:d2:96:ec:fc: 3b:a1:a3:f8:59:e7:d3:27:6b:ca:64:c6:91:ea:ae: a6:70:c8:ef:dd:de:c6:ae:f4:4c:58:e1:52:9a:1d: 44:6e:6f:6f:3f:bb:84:ae:d7:2e:98:02:86:10:70: f0:81:66:ff:e3:de:89:6b:b0:0a:25:27:a7:14:44: 22:ae:9a:51:26:05:5d:6a:c3:34:30:c0:99:18:fc: 1f:c6:82:3e:f6:52:25:b0:86:9a:4d:0d:d1:64:82: c8:63:e4:12:58:2b:95:c8:3c:58:b6:5c:d6:e8:8e: 97:3c:2a:fb:1b:72:67:92:9e:73:e9:22:90:63:d7: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8A:26:D0:F2:D8:FB:A3:1C:E3:23:B8:01:25:50:4A:60:FE:38:42 X509v3 Authority Key Identifier: keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9a:a9:17:1c:a6:90:f4:1f:00:bc:89:68:0b:69:cd:18:73: 39:4c:88:ef:fc:31:f6:c2:0c:c1:b9:95:97:c3:10:2f:ec:88: f8:2f:3c:6e:ec:19:72:c1:52:24:46:ae:2a:85:73:13:ec:4f: e2:a8:06:52:24:c0:3e:50:53:02:76:38:6b:9a:98:46:42:2a: 32:ba:1d:e0:c5:f4:81:c0:a7:04:c7:e5:45:ba:e9:60:fe:fc: 5b:00:76:55:dd:7e:13:96:3d:0e:80:77:a4:02:5e:76:0e:cb: 58:c4:06:a0:00:5a:12:82:b7:b7:01:cd:41:9e:d9:49:70:8c: 9e:68:6d:b5:ce:9e:01:18:32:81:79:1f:16:24:37:07:7a:eb: eb:86:71:0b:d5:c1:b4:5c:50:46:51:4f:e4:8f:dc:fa:a2:e4: 1f:18:b9:85:9d:5a:fb:c3:70:f0:54:a2:69:5e:2c:fa:f8:5a: ee:e1:32:d9:26:15:cb:5f:8d:9a:1c:b5:14:f2:fe:b7:66:3f: 51:7f:18:ea:9a:6f:a1:74:7c:0a:7d:b9:89:ad:a4:d4:1e:73: ef:5f:3b:47:34:7f:e5:fa:eb:b9:71:45:0f:d9:bd:b7:5f:25: 48:e5:8a:03:b3:96:5d:f8:23:2f:31:65:18:70:4a:a2:86:ee: 20:7a:fc:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOpqiqOPKIcOqS8BHP3F9RAJVNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUz OTM1NTA3QjAeFw0yNjA1MTIxODM0MDhaFw0yNjA1MTMyMjA1MDhaMDMxMTAvBgNV BAMTKDE4OEEyNkQwRjJEOEZCQTMxQ0UzMjNCODAxMjU1MDRBNjBGRTM4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciWShIS6DGzAkqqYBkq2X2oTE nltjXcmoS5G7dgBA8YVTBwtnZnaXwZPlt4ScKqGqe2XMwmsBYg9gNRavnhff6E7J UtSfZuTi878BIRa0Or+HtMhaDuy7i5zEUly3RO5PkoXRnDLTJ7b7M14ezuGdxQy9 JgfS/dzViMzhBgURcboj0pbs/Duho/hZ59Mna8pkxpHqrqZwyO/d3sau9ExY4VKa HURub28/u4Su1y6YAoYQcPCBZv/j3olrsAolJ6cURCKumlEmBV1qwzQwwJkY/B/G gj72UiWwhppNDdFkgshj5BJYK5XIPFi2XNbojpc8KvsbcmeSnnPpIpBj1+JfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGIom0PLY+6Mc4yO4ASVQSmD+OEIwHwYDVR0j BBgwFoAUgZo4tFtP6n+YtyoxC3Lbjjk1UHswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGEyZTViNjktYWRiZC00ZTJkLTg0N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1 QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUzOTM1NTA3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTlBMzhCNDVCNEZFQTdGOThCNzJBMzEwQjcyREI4RTM5MzU1 MDdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRC OEUzOTM1NTA3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiaqRccppD0HwC8iWgLac0YczlMiO/8MfbC DMG5lZfDEC/siPgvPG7sGXLBUiRGriqFcxPsT+KoBlIkwD5QUwJ2OGuamEZCKjK6 HeDF9IHApwTH5UW66WD+/FsAdlXdfhOWPQ6Ad6QCXnYOy1jEBqAAWhKCt7cBzUGe 2UlwjJ5obbXOngEYMoF5HxYkNwd66+uGcQvVwbRcUEZRT+SP3Pqi5B8YuYWdWvvD cPBUomleLPr4Wu7hMtkmFctfjZoctRTy/rdmP1F/GOqab6F0fAp9uYmtpNQec+9f O0c0f+X667lxRQ/ZvbdfJUjligOzll34Iy8xZRhwSqKG7iB6/Ag= -----END CERTIFICATE-----Generated at Wed May 13 01:11:22 2026 by rpki-client