$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: JlWFQxWxYcnAJoECEI63R3cwE+bjci1FuIE67/Fd8G0= Subject key identifier: 9D:E5:D6:EE:17:75:28:C9:1A:5A:74:E2:C6:51:F2:85:E3:C8:98:D1 Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 50AB5D94E5DB2E46F752574B91A8878B9C3438D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:41:03 +0000 Manifest this update: Tue 12 May 2026 09:36:03 +0000 Manifest next update: Wed 13 May 2026 11:35:03 +0000 Files and hashes: 1: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) 3: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: +mKW5IbBQFTPwt1d/ieHQ/v8p7Hv2OIzU4imdmxEFXI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ab:5d:94:e5:db:2e:46:f7:52:57:4b:91:a8:87:8b:9c:34:38:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: May 12 09:36:03 2026 GMT Not After : May 13 11:35:03 2026 GMT Subject: CN=9DE5D6EE177528C91A5A74E2C651F285E3C898D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:2a:04:5c:7e:cc:99:36:bf:c7:ee:6e:0b: 80:2a:15:56:53:07:04:b8:4c:6c:cf:82:e9:ab:82: 1c:b9:3f:8c:dd:e0:e9:f8:0b:7a:a5:be:80:56:72: 5d:96:67:85:ce:bf:dd:5e:de:25:4d:de:2a:f2:0e: 2c:06:90:43:06:61:03:86:54:8c:0c:a6:38:12:a7: c9:b1:0a:84:05:e8:0d:97:17:ec:30:dd:3e:01:c7: 05:ac:95:23:27:2e:1d:47:bc:a3:93:cd:91:3a:12: bb:b8:93:51:94:74:98:08:b2:5f:62:0d:83:9c:99: 87:7c:03:8d:01:9f:f2:73:f3:4e:de:ec:fe:b1:45: 72:58:36:10:9a:2c:ef:da:c7:ac:3a:b1:c7:fd:b6: 3d:a1:f4:6b:ed:2f:bf:a9:23:93:8d:77:0b:34:28: a1:c5:a7:1a:b0:9a:16:31:b6:7b:3b:64:67:a2:50: f0:19:ed:15:22:5a:a9:5c:cc:c1:48:50:df:57:91: 6f:d0:e6:ac:a9:d8:74:b1:14:78:75:e0:95:06:a8: e2:75:41:8a:45:b5:e8:2b:07:90:a8:98:df:72:59: ef:c6:9e:d7:3d:61:4b:ee:54:42:c3:a2:8f:ec:2f: 8e:59:b0:dc:59:67:2d:06:ac:64:fd:f0:07:07:69: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:D6:EE:17:75:28:C9:1A:5A:74:E2:C6:51:F2:85:E3:C8:98:D1 X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6a:12:61:af:d7:6a:aa:14:e3:06:7a:9d:c8:20:75:86:db: be:1a:26:3b:3d:9e:f9:8a:7b:b4:70:74:d3:2e:d8:19:e9:1f: c8:11:a8:77:96:03:30:d5:30:e7:4f:35:03:46:f6:5f:b2:27: 6f:c4:64:f0:24:14:d0:94:4d:fd:91:d3:db:28:8e:7a:c1:d1: 6c:ff:c6:97:9b:29:9d:68:82:8f:6a:3d:2b:5b:18:06:46:26: 43:e1:fa:83:05:d3:a5:53:5c:5b:37:bb:a7:3c:7c:f4:3f:cd: 57:2a:48:e5:19:08:fc:62:cd:25:5c:46:0f:b9:39:04:8e:a4: 43:cd:0d:de:7e:25:14:1d:76:35:35:4b:15:4c:84:0c:7b:3b: ee:61:7e:35:af:4d:c7:b7:ff:ed:9a:0d:cc:18:1a:1f:2f:99: c5:2d:3f:ca:cd:96:5e:ee:dc:61:ad:94:e3:eb:7c:18:fe:6d: a7:db:6a:1f:df:d9:15:69:4f:72:8d:6b:df:18:57:80:b2:8e: 3b:03:2d:2e:b9:44:c3:04:8f:d3:38:4b:84:48:75:08:0d:c8: 11:7d:56:26:ca:6d:18:13:52:b9:9b:ef:65:75:49:6c:e9:e6: 3b:ba:91:91:a6:ad:af:8b:51:8b:1e:3a:33:35:93:55:49:43: 62:eb:37:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKtdlOXbLkb3UldLkaiHi5w0ONQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjA1MTIwOTM2MDNaFw0yNjA1MTMxMTM1MDNaMDMxMTAvBgNV BAMTKDlERTVENkVFMTc3NTI4QzkxQTVBNzRFMkM2NTFGMjg1RTNDODk4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsCoEXH7MmTa/x+5uC4AqFVZT BwS4TGzPgumrghy5P4zd4On4C3qlvoBWcl2WZ4XOv91e3iVN3iryDiwGkEMGYQOG VIwMpjgSp8mxCoQF6A2XF+ww3T4BxwWslSMnLh1HvKOTzZE6Eru4k1GUdJgIsl9i DYOcmYd8A40Bn/Jz807e7P6xRXJYNhCaLO/ax6w6scf9tj2h9GvtL7+pI5ONdws0 KKHFpxqwmhYxtns7ZGeiUPAZ7RUiWqlczMFIUN9XkW/Q5qyp2HSxFHh14JUGqOJ1 QYpFtegrB5ComN9yWe/Gntc9YUvuVELDoo/sL45ZsNxZZy0GrGT98AcHaZJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUneXW7hd1KMkaWnTixlHyhePImNEwHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJqEmGv12qqFOMGep3IIHWG274aJjs9nvmK e7RwdNMu2BnpH8gRqHeWAzDVMOdPNQNG9l+yJ2/EZPAkFNCUTf2R09sojnrB0Wz/ xpebKZ1ogo9qPStbGAZGJkPh+oMF06VTXFs3u6c8fPQ/zVcqSOUZCPxizSVcRg+5 OQSOpEPNDd5+JRQddjU1SxVMhAx7O+5hfjWvTce3/+2aDcwYGh8vmcUtP8rNll7u 3GGtlOPrfBj+bafbah/f2RVpT3KNa98YV4CyjjsDLS65RMMEj9M4S4RIdQgNyBF9 VibKbRgTUrmb72V1SWzp5ju6kZGmra+LUYseOjM1k1VJQ2LrNxU= -----END CERTIFICATE-----Generated at Wed May 13 05:36:18 2026 by rpki-client