$ rpki-client -vvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: pCUoRKc71OfTwfrp4JftAFFLaANa8/y3cCpJro2j5A0= Subject key identifier: 9B:5E:19:DA:8E:7A:97:F4:25:43:07:D2:30:FA:9E:CD:C0:9B:19:C0 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 0AA6CCBD602721B1B18D163DD75B09822E78869D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 08:34:58 +0000 Manifest this update: Fri 24 Jul 2026 08:29:58 +0000 Manifest next update: Sat 25 Jul 2026 08:55:58 +0000 Files and hashes: 1: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: iYWlg+OHoEDyjWz5EYqeSgvatt2IgcVt6MB+XSypPKo=) 2: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) 3: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a6:cc:bd:60:27:21:b1:b1:8d:16:3d:d7:5b:09:82:2e:78:86:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Jul 24 08:29:58 2026 GMT Not After : Jul 25 08:55:58 2026 GMT Subject: CN=9B5E19DA8E7A97F4254307D230FA9ECDC09B19C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:84:93:c4:52:d8:a8:2e:fa:51:0c:f2:7a: e3:9e:d6:f6:10:c9:bb:ce:f9:a3:4a:43:ec:55:51: 63:b4:bc:88:7e:e8:18:9d:cc:a0:0c:b1:4b:3b:a5: 4d:3d:1c:84:ef:99:21:32:7b:11:ee:0c:48:5f:f6: 5f:b1:96:92:b7:d8:ac:f8:cb:20:f2:df:b9:ac:bd: d1:e9:3a:a4:cf:96:8a:22:32:21:6d:51:9b:93:6a: 11:cb:50:d0:93:a2:b2:c3:e8:06:a4:f8:32:df:6f: f3:32:0e:d4:d7:40:1e:6c:99:32:fa:25:a1:3a:65: af:0a:91:87:11:cd:fa:cc:7a:87:2e:82:f2:61:b6: a5:30:db:79:ff:77:be:58:2e:7c:62:d1:09:ce:0f: 49:f9:27:16:7a:e3:fe:73:d3:2a:84:c5:d1:d7:1b: 1e:2e:4b:df:6b:aa:73:f1:84:0f:e4:3f:48:c7:41: d3:dd:b5:36:46:bc:77:b5:8b:0d:6e:d2:f6:68:1b: 16:a9:7c:74:08:a4:a5:39:ea:0a:00:37:15:0e:e3: 22:fe:c4:93:d6:f0:f1:a2:a4:76:e7:46:13:80:6f: 9e:17:f3:e1:8f:c2:41:05:2a:bd:8a:d9:c6:e6:57: b7:d4:7a:77:2b:ae:5d:83:3c:cf:fa:c7:b7:31:e2: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5E:19:DA:8E:7A:97:F4:25:43:07:D2:30:FA:9E:CD:C0:9B:19:C0 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1b:56:c5:75:db:40:5b:0e:e9:7c:15:2d:43:6c:23:c7:d3: 14:40:bc:ea:09:2a:ca:83:a5:7f:2c:ed:82:c1:8c:a7:8d:8d: 5d:88:8c:d0:f1:f9:f2:3d:61:fc:28:88:60:76:19:8e:c4:51: 48:2e:b0:1a:64:a2:5c:ca:4d:8d:c9:03:a2:e0:9e:a3:2e:28: 73:c3:cc:da:f2:1f:9f:ab:52:68:59:26:a7:49:3e:cc:1b:f5: 7c:56:d0:db:14:5c:7b:83:7a:b6:d3:8d:dc:aa:0b:a3:08:da: b2:02:be:b9:f4:bf:aa:41:06:a2:b3:d4:48:ec:f5:95:a9:76: 6d:c1:66:de:96:b8:63:01:42:cc:19:83:70:73:51:fa:a7:20: 21:65:e3:14:d8:d3:4c:45:fa:fd:bf:b4:23:cd:28:ad:4b:52: 3c:aa:89:08:59:2d:1e:8e:2c:81:ed:fa:21:e5:46:70:18:98: 89:64:19:aa:d0:74:28:26:ce:b0:f3:64:63:36:83:7f:3e:48: e6:cf:71:2d:a3:95:71:23:9c:62:1e:51:51:85:28:99:1e:e9: f3:7f:c3:94:75:ac:fd:e2:eb:ae:d1:1c:cc:45:9e:b0:28:a8: 17:5f:d7:8b:96:6e:3a:6a:f3:58:d3:e8:25:eb:44:69:fa:92: db:50:65:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqbMvWAnIbGxjRY911sJgi54hp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA3MjQwODI5NThaFw0yNjA3MjUwODU1NThaMDMxMTAvBgNV BAMTKDlCNUUxOURBOEU3QTk3RjQyNTQzMDdEMjMwRkE5RUNEQzA5QjE5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4voSTxFLYqC76UQzyeuOe1vYQ ybvO+aNKQ+xVUWO0vIh+6BidzKAMsUs7pU09HITvmSEyexHuDEhf9l+xlpK32Kz4 yyDy37msvdHpOqTPlooiMiFtUZuTahHLUNCTorLD6Aak+DLfb/MyDtTXQB5smTL6 JaE6Za8KkYcRzfrMeocugvJhtqUw23n/d75YLnxi0QnOD0n5JxZ64/5z0yqExdHX Gx4uS99rqnPxhA/kP0jHQdPdtTZGvHe1iw1u0vZoGxapfHQIpKU56goANxUO4yL+ xJPW8PGipHbnRhOAb54X8+GPwkEFKr2K2cbmV7fUencrrl2DPM/6x7cx4oD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm14Z2o56l/QlQwfSMPqezcCbGcAwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAbVsV120BbDul8FS1DbCPH0xRAvOoJKsqD pX8s7YLBjKeNjV2IjNDx+fI9YfwoiGB2GY7EUUgusBpkolzKTY3JA6LgnqMuKHPD zNryH5+rUmhZJqdJPswb9XxW0NsUXHuDerbTjdyqC6MI2rICvrn0v6pBBqKz1Ejs 9ZWpdm3BZt6WuGMBQswZg3BzUfqnICFl4xTY00xF+v2/tCPNKK1LUjyqiQhZLR6O LIHt+iHlRnAYmIlkGarQdCgmzrDzZGM2g38+SObPcS2jlXEjnGIeUVGFKJke6fN/ w5R1rP3i667RHMxFnrAoqBdf14uWbjpq81jT6CXrRGn6kttQZQs= -----END CERTIFICATE-----Generated at Fri Jul 24 12:11:15 2026 by rpki-client