$ rpki-client -vvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: 74QiL0sT4XIWuyhLu8wFnZth+MnNHS02WknHyJs413Q= Subject key identifier: 64:42:BE:1F:A5:E4:7E:9A:0A:A6:84:E6:21:04:1F:22:F4:C8:8E:A8 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 2C18B3CA2E355F77DB2F887783E46160A5D24016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:14 +0000 Manifest this update: Tue 12 May 2026 19:46:14 +0000 Manifest next update: Wed 13 May 2026 22:28:14 +0000 Files and hashes: 1: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: HuJqODLNvs8BHoNhHxGkbMm4owtSdSuJmF9JWnY9mlU=) 2: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) 3: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) 4: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:18:b3:ca:2e:35:5f:77:db:2f:88:77:83:e4:61:60:a5:d2:40:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: May 12 19:46:14 2026 GMT Not After : May 13 22:28:14 2026 GMT Subject: CN=6442BE1FA5E47E9A0AA684E621041F22F4C88EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:b3:48:1a:b4:c1:d0:55:28:51:1d:49:ed: df:ea:f8:b8:bb:5e:2b:46:79:09:e4:cf:1c:6b:34: bc:3b:dc:1d:ad:80:33:e4:75:dd:7e:cb:0c:c0:f6: 7b:8f:f6:a9:28:27:d0:d3:35:25:16:a6:c0:e8:51: 4a:8b:fc:ca:25:0c:52:cd:e5:99:ce:c7:a5:10:48: 1c:8a:fd:c1:83:68:4b:e6:83:d2:9f:57:b9:a7:2b: 4e:5c:3d:e8:0a:d6:bd:0a:14:21:59:d6:ac:43:53: d7:b5:35:ea:30:af:e6:16:47:84:47:59:1e:82:75: 12:64:dc:6b:95:f6:c4:85:3b:8a:fc:48:c3:7a:8b: d5:4c:d1:da:2f:cf:cd:48:5e:ff:c5:a4:13:85:4f: df:6d:21:f8:63:d0:3e:41:2c:ff:89:9d:3d:be:04: ff:fb:19:8c:0d:e8:40:e9:aa:73:0c:e2:0b:43:bc: 2d:d3:0a:80:7e:57:2d:fd:e8:e7:47:a1:fc:a0:be: 5e:2c:6d:39:7e:9b:ac:b7:0e:fc:bf:f9:0d:4e:71: b7:0e:ef:fb:77:18:41:c3:21:aa:cb:0c:6d:9f:59: 51:c9:af:15:4e:f1:fd:66:95:f9:56:d4:98:f3:f3: 17:b3:23:dc:5b:19:8a:ea:5d:23:5c:84:9e:d0:a9: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:42:BE:1F:A5:E4:7E:9A:0A:A6:84:E6:21:04:1F:22:F4:C8:8E:A8 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1a:73:78:6f:2b:62:c0:a2:cd:63:24:cf:f1:ed:a5:d8:3f: 0d:6a:76:61:47:29:b6:36:2d:79:70:e6:d3:c6:be:22:e6:29: a1:c5:1b:0b:c2:73:b8:46:b8:6f:5f:e2:cb:17:8c:b4:c2:cf: 96:04:85:05:18:8e:b4:06:08:0d:2d:7a:89:77:88:94:d2:0d: 47:26:0a:dc:db:72:64:59:f7:ce:4d:b1:69:68:d6:99:5a:67: 0f:2b:b6:58:ad:13:fc:aa:62:73:16:35:14:f5:b6:50:b1:33: b1:fc:7d:93:4a:62:a1:1c:ea:c9:a8:43:8c:c8:e8:51:a8:4e: f9:44:71:d5:f1:53:a3:14:1d:91:6b:07:af:11:15:94:b4:b4: 75:ec:39:f1:14:c1:9b:9a:e9:5f:0a:6a:72:4b:e3:57:9a:b1: df:d0:36:89:60:0a:91:79:f6:79:fb:c1:8b:9f:aa:a0:04:74: 6f:d1:29:f5:d9:02:06:5f:31:85:82:0d:16:6e:45:b0:23:a5: 1a:c6:94:e7:8d:41:0e:57:b0:9b:41:39:3e:84:69:4d:60:f3: 21:58:0f:60:30:ed:4e:e2:ba:98:af:3a:18:a5:9a:63:3b:3b: f4:00:5f:b2:96:0e:93:4a:62:5a:44:13:0f:14:cc:d0:30:c0: fe:82:ca:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBizyi41X3fbL4h3g+RhYKXSQBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA1MTIxOTQ2MTRaFw0yNjA1MTMyMjI4MTRaMDMxMTAvBgNV BAMTKDY0NDJCRTFGQTVFNDdFOUEwQUE2ODRFNjIxMDQxRjIyRjRDODhFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BbNIGrTB0FUoUR1J7d/q+Li7 XitGeQnkzxxrNLw73B2tgDPkdd1+ywzA9nuP9qkoJ9DTNSUWpsDoUUqL/MolDFLN 5ZnOx6UQSByK/cGDaEvmg9KfV7mnK05cPegK1r0KFCFZ1qxDU9e1Neowr+YWR4RH WR6CdRJk3GuV9sSFO4r8SMN6i9VM0dovz81IXv/FpBOFT99tIfhj0D5BLP+JnT2+ BP/7GYwN6EDpqnMM4gtDvC3TCoB+Vy396OdHofygvl4sbTl+m6y3Dvy/+Q1OcbcO 7/t3GEHDIarLDG2fWVHJrxVO8f1mlflW1Jjz8xezI9xbGYrqXSNchJ7Qqa0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZEK+H6XkfpoKpoTmIQQfIvTIjqgwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgac3hvK2LAos1jJM/x7aXYPw1qdmFHKbY2 LXlw5tPGviLmKaHFGwvCc7hGuG9f4ssXjLTCz5YEhQUYjrQGCA0teol3iJTSDUcm CtzbcmRZ985NsWlo1plaZw8rtlitE/yqYnMWNRT1tlCxM7H8fZNKYqEc6smoQ4zI 6FGoTvlEcdXxU6MUHZFrB68RFZS0tHXsOfEUwZua6V8KanJL41easd/QNolgCpF5 9nn7wYufqqAEdG/RKfXZAgZfMYWCDRZuRbAjpRrGlOeNQQ5XsJtBOT6EaU1g8yFY D2Aw7U7iupivOhilmmM7O/QAX7KWDpNKYlpEEw8UzNAwwP6CymU= -----END CERTIFICATE-----Generated at Wed May 13 04:03:01 2026 by rpki-client