$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: 9xF8r2IYJhA2D+ngQY/UJoau4OJfbL2zO+o4V26Qa+w= Subject key identifier: 97:8C:D7:E2:0B:44:0A:D3:10:C0:EE:38:3C:DC:EC:66:AD:C8:F1:B1 Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 0AB7AAA99FDBD56718378B26EA82F301682A439B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:03:29 +0000 Manifest this update: Thu 23 Jul 2026 18:58:29 +0000 Manifest next update: Fri 24 Jul 2026 19:16:29 +0000 Files and hashes: 1: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: D5cp8U2KqkB6jQe/FIUs19/+Q49ysddYyOotH/kF0LU=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b7:aa:a9:9f:db:d5:67:18:37:8b:26:ea:82:f3:01:68:2a:43:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: Jul 23 18:58:29 2026 GMT Not After : Jul 24 19:16:29 2026 GMT Subject: CN=978CD7E20B440AD310C0EE383CDCEC66ADC8F1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:c0:b7:f7:5b:1a:33:8d:7d:c3:cd:05:dc: e6:ed:37:67:0d:43:b3:70:43:8f:19:8a:82:23:f4: 10:3f:06:e9:a8:8e:64:84:92:a3:84:8c:11:b1:a0: e7:05:3e:32:cc:7b:d2:17:bc:34:af:74:8d:3b:d3: 29:85:4f:e4:c1:fb:28:12:d0:50:56:15:4c:46:00: d7:75:43:a5:3d:79:c3:b8:a7:5f:66:87:66:ff:28: b0:4a:db:b1:e4:b1:a0:40:ff:9c:3a:97:80:af:a0: 2d:04:db:7c:2a:79:e0:7b:20:5e:4f:a0:e2:39:0f: ee:3b:ca:5b:a0:cc:0a:48:47:47:a7:a8:2f:3a:50: f5:ea:37:4e:66:bf:8b:2c:e8:9a:cf:4f:71:6d:df: 7d:a1:c9:4f:05:79:e8:64:a2:e1:29:ef:1d:54:74: 7e:7c:c6:30:b9:0b:ac:eb:a6:99:cd:d2:76:f7:fa: 00:c1:16:bb:56:9c:ce:6f:64:6d:fd:63:0e:dd:1d: 97:19:3c:75:bb:e5:85:96:c2:cd:f2:94:c5:00:84: 60:fa:35:e5:d8:4d:56:09:2f:55:f7:70:fe:95:c0: 95:0a:00:67:84:8d:09:4b:73:59:5a:dd:df:00:54: 35:05:50:da:14:58:51:21:ec:6b:43:0c:c0:7b:b4: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:D7:E2:0B:44:0A:D3:10:C0:EE:38:3C:DC:EC:66:AD:C8:F1:B1 X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f8:d7:39:be:94:57:28:2b:41:64:e8:2d:c8:10:78:29:f6: 0b:1a:74:c3:e6:c6:8c:5d:ab:8e:b1:d1:9f:31:16:ec:df:f4: df:1d:2f:52:78:94:42:45:90:c8:5b:c8:c8:07:a7:98:11:7e: fb:da:1f:4a:0a:11:6b:68:6d:93:57:b6:cb:3a:5f:4f:60:a7: 47:31:9c:5b:99:68:de:d6:dc:5c:05:ef:4b:a6:df:f6:0d:43: 97:fc:ee:97:9b:63:39:16:0e:1a:1a:47:cd:1f:15:79:03:45: 21:e0:64:06:be:de:5b:ac:12:63:e9:38:36:74:19:77:eb:87: 0f:df:ad:1d:48:c3:e1:b2:51:28:19:9b:85:32:a8:eb:42:47: 93:ff:18:76:c3:43:9e:1c:3a:cc:58:d0:a7:06:a6:f0:88:45: 79:4b:c3:39:c5:3c:8b:a6:8e:49:0d:1f:42:98:9e:98:04:6d: c7:69:31:68:af:47:a7:b1:85:20:e4:40:13:a7:70:6a:1a:f7: 88:16:48:d6:b2:59:fd:b4:df:f2:ba:93:4c:20:49:a3:95:cb: e0:c0:7c:bb:ee:d5:72:0a:70:89:d9:28:22:f5:fe:9c:30:9e: 8a:07:8b:e5:6e:ab:dd:17:ac:5f:f6:80:f8:76:3b:6f:8c:40: 1b:7c:ab:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCreqqZ/b1WcYN4sm6oLzAWgqQ5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjA3MjMxODU4MjlaFw0yNjA3MjQxOTE2MjlaMDMxMTAvBgNV BAMTKDk3OENEN0UyMEI0NDBBRDMxMEMwRUUzODNDRENFQzY2QURDOEYxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kcC391saM419w80F3ObtN2cN Q7NwQ48ZioIj9BA/BumojmSEkqOEjBGxoOcFPjLMe9IXvDSvdI070ymFT+TB+ygS 0FBWFUxGANd1Q6U9ecO4p19mh2b/KLBK27HksaBA/5w6l4CvoC0E23wqeeB7IF5P oOI5D+47ylugzApIR0enqC86UPXqN05mv4ss6JrPT3Ft332hyU8FeehkouEp7x1U dH58xjC5C6zrppnN0nb3+gDBFrtWnM5vZG39Yw7dHZcZPHW75YWWws3ylMUAhGD6 NeXYTVYJL1X3cP6VwJUKAGeEjQlLc1la3d8AVDUFUNoUWFEh7GtDDMB7tEbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl4zX4gtECtMQwO44PNzsZq3I8bEwHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL41zm+lFcoK0Fk6C3IEHgp9gsadMPmxoxd q46x0Z8xFuzf9N8dL1J4lEJFkMhbyMgHp5gRfvvaH0oKEWtobZNXtss6X09gp0cx nFuZaN7W3FwF70um3/YNQ5f87pebYzkWDhoaR80fFXkDRSHgZAa+3lusEmPpODZ0 GXfrhw/frR1Iw+GyUSgZm4UyqOtCR5P/GHbDQ54cOsxY0KcGpvCIRXlLwznFPIum jkkNH0KYnpgEbcdpMWivR6exhSDkQBOncGoa94gWSNayWf203/K6k0wgSaOVy+DA fLvu1XIKcInZKCL1/pwwnooHi+Vuq90XrF/2gPh2O2+MQBt8q9E= -----END CERTIFICATE-----Generated at Fri Jul 24 10:07:44 2026 by rpki-client