$ rpki-client -vvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft File: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft (raw, json) Hash identifier: nCxGu4jeY/tbfoipbA8SxtcCl4roMu4a/Tm6R5BmR4I= Subject key identifier: 73:39:66:AE:5E:2A:15:F1:9C:6C:8D:02:14:EC:74:5D:D9:22:9E:2B Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 Certificate issuer: /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Certificate serial: 5671BE5B533AF64AB4C6494D697E53491DE19615 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:32:23 +0000 Manifest this update: Tue 12 May 2026 17:27:23 +0000 Manifest next update: Wed 13 May 2026 20:38:23 +0000 Files and hashes: 1: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: HunPJtEqs/fqqsfQUOtU9B9wzUHewY8exb3L7KPploo=) 2: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: QiGX1QkZSjLaMXHZar4XrbmTjiSd8XSa/Ltq8nabR1Q=) 3: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl (hash: nSJR2LfYrVfyERRbArgy5RiaLirFf9Oxr4Ft2O3W7NI=) 4: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: htKH4YuWIU36Hbp8yo72kjRU4hOcfi7XM5LsdSWMbvg=) 5: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: wbDwlUlyFrGZQKl0gY5JTi07kDW91OicmcdUSy58sFE=) 6: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 35qG3cZsKTQr56CXE5ASWwkKMND8Y/J6/M9bysYMszM=) 7: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: 8HqeGnG6uWiDbhlaJ6tLdsHXeZ7XmeYJjtOP51aVtq4=) 8: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: wUweDGGeMnbb7IWcYNeBY1oGGX+HDZ7VecKq2px9zPo=) 9: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: 6osBaVpCEcyr4sPNLrXGO9OphhAYx5PHHXLqmm632lw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:71:be:5b:53:3a:f6:4a:b4:c6:49:4d:69:7e:53:49:1d:e1:96:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Validity Not Before: May 12 17:27:23 2026 GMT Not After : May 13 20:38:23 2026 GMT Subject: CN=733966AE5E2A15F19C6C8D0214EC745DD9229E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:50:5b:82:1b:be:d2:56:14:c9:c7:5d:c6: a7:a5:62:7e:af:99:4f:0b:1a:88:1d:c7:47:9d:1b: 81:94:98:06:76:50:c1:1b:95:9d:c0:96:70:02:81: 62:29:31:e6:98:64:5f:c7:ee:61:23:74:e6:79:b9: a0:9b:ab:90:1b:c2:c5:cf:58:6b:12:66:38:13:39: a4:76:f1:dd:9f:d5:2a:c4:a2:c0:48:4b:8f:62:51: 37:64:58:2d:72:be:d6:03:b9:7f:5b:fe:0b:36:7e: 68:8d:24:db:54:75:15:0b:7a:cb:9b:86:88:37:17: 9f:c9:11:19:2b:85:b0:74:b0:51:90:37:36:f8:ba: 19:23:fc:fe:6e:1a:7c:90:54:0d:6f:99:72:2c:7f: f4:d4:4b:2d:f1:d4:c1:53:fd:79:ea:dc:03:ac:d5: c9:80:3b:e8:57:d1:ca:2f:60:fb:eb:1d:fd:b0:e2: 59:cf:84:8f:bc:d0:1c:be:df:0c:bc:25:d9:c8:67: 16:55:a5:dc:e1:6a:77:ea:d7:be:d5:84:32:27:e5: b5:6c:9e:af:87:26:b8:5b:70:ea:94:4c:70:54:89: d0:fb:a7:d7:66:1c:76:15:60:2a:1a:e9:57:e8:4c: b7:b6:df:a8:b3:40:87:1e:fe:85:5f:25:79:16:e5: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:66:AE:5E:2A:15:F1:9C:6C:8D:02:14:EC:74:5D:D9:22:9E:2B X509v3 Authority Key Identifier: keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:cc:c6:ee:1d:38:2d:11:3a:bf:98:e6:7b:7e:1e:38:28:b9: fa:79:6b:26:fd:0e:58:51:39:72:fc:01:fd:ba:f4:fa:39:98: f0:28:43:8b:e0:d8:c2:67:96:6b:8b:07:be:10:42:e2:11:bc: a4:48:d5:d7:ab:54:93:78:d2:1b:db:7c:3f:0a:ce:d9:9b:57: 7f:42:cc:05:77:31:ca:ce:9b:73:c8:89:56:c0:25:63:05:66: d6:b8:24:1f:24:bd:9b:08:12:67:78:2a:35:3b:c9:d4:44:27: c5:21:56:b8:62:21:de:da:4a:90:cf:ed:ff:76:cb:ac:63:39: a5:9d:5c:c7:db:c6:db:a4:78:56:b5:fd:d7:15:7a:2d:fb:8b: 2e:64:93:90:8d:b9:b5:1a:70:44:0e:fb:64:d4:f7:50:25:f5: 09:c6:f8:25:47:dc:8d:35:2f:1b:77:7c:8a:a0:f0:77:8f:35: 6f:ed:49:85:f8:56:3c:2f:14:2a:44:42:22:ba:e2:f1:02:03: 54:6d:9c:6c:d6:c7:91:f0:54:96:7a:f6:2e:e7:dd:e9:48:05: 95:94:2d:d9:2e:9e:1a:7c:23:e1:d9:d1:2e:ad:42:bf:a3:ad: 6b:84:3f:88:a4:41:32:6b:1f:c5:1e:6f:81:71:17:25:8c:06: 41:a5:ea:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVnG+W1M69kq0xklNaX5TSR3hlhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VF NkJEN0Y2MzAeFw0yNjA1MTIxNzI3MjNaFw0yNjA1MTMyMDM4MjNaMDMxMTAvBgNV BAMTKDczMzk2NkFFNUUyQTE1RjE5QzZDOEQwMjE0RUM3NDVERDkyMjlFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaFBbghu+0lYUycddxqelYn6v mU8LGogdx0edG4GUmAZ2UMEblZ3AlnACgWIpMeaYZF/H7mEjdOZ5uaCbq5AbwsXP WGsSZjgTOaR28d2f1SrEosBIS49iUTdkWC1yvtYDuX9b/gs2fmiNJNtUdRULesub hog3F5/JERkrhbB0sFGQNzb4uhkj/P5uGnyQVA1vmXIsf/TUSy3x1MFT/Xnq3AOs 1cmAO+hX0covYPvrHf2w4lnPhI+80By+3wy8JdnIZxZVpdzhanfq177VhDIn5bVs nq+HJrhbcOqUTHBUidD7p9dmHHYVYCoa6VfoTLe236izQIce/oVfJXkW5au9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUczlmrl4qFfGcbI0CFOx0XdkiniswHwYDVR0j BBgwFoAUGfWT+2CUpT0vVn+iPr0Azua9f2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTgyNDlmYzMtNmM4NC00ZTkxLWIwNjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2 MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VFNkJEN0Y2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUY1OTNGQjYwOTRBNTNEMkY1NjdGQTIzRUJEMDBDRUU2QkQ3 RjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAw Q0VFNkJEN0Y2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInMxu4dOC0ROr+Y5nt+Hjgoufp5ayb9DlhR OXL8Af269Po5mPAoQ4vg2MJnlmuLB74QQuIRvKRI1derVJN40hvbfD8KztmbV39C zAV3McrOm3PIiVbAJWMFZta4JB8kvZsIEmd4KjU7ydREJ8UhVrhiId7aSpDP7f92 y6xjOaWdXMfbxtukeFa1/dcVei37iy5kk5CNubUacEQO+2TU91Al9QnG+CVH3I01 Lxt3fIqg8HePNW/tSYX4VjwvFCpEQiK64vECA1RtnGzWx5HwVJZ69i7n3elIBZWU Ldkunhp8I+HZ0S6tQr+jrWuEP4ikQTJrH8Ueb4FxFyWMBkGl6qk= -----END CERTIFICATE-----Generated at Wed May 13 03:23:07 2026 by rpki-client