$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json) Hash identifier: +kD0QfFrCy1fYyrSrE2oOUZTaZQ55lC9E/Lx6ZHZvbY= Subject key identifier: AD:DC:39:F2:13:89:51:45:2F:B3:5F:E4:45:25:99:79:FD:DE:16:C2 Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Certificate serial: 54CFD29F151A614EC57031CCEC8EDD18F611F2C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:10 +0000 Manifest this update: Tue 12 May 2026 18:03:10 +0000 Manifest next update: Wed 13 May 2026 21:13:10 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=) 2: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=) 3: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: 6gIjnqc+adivFjyJBAWF45wItNGGvvsBRS5dG8EPyIw=) 4: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=) 5: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cf:d2:9f:15:1a:61:4e:c5:70:31:cc:ec:8e:dd:18:f6:11:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Validity Not Before: May 12 18:03:10 2026 GMT Not After : May 13 21:13:10 2026 GMT Subject: CN=ADDC39F2138951452FB35FE445259979FDDE16C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:32:c3:ae:ac:cd:85:6d:ae:53:d5:e7:b1: d8:4e:19:75:05:0e:55:10:ae:c3:47:5f:db:03:0d: db:c6:dc:c7:c3:00:a8:18:7d:c9:68:16:9a:75:ad: fb:d7:27:cc:32:34:84:cb:fc:9c:bd:be:15:0b:a7: 2a:88:19:f4:e7:90:28:18:e0:f7:a8:9d:f6:d9:e4: 5e:7b:e6:e9:a5:fa:16:c1:86:c7:0b:11:95:c8:a1: c6:0e:cd:7c:80:70:a2:83:af:b3:c4:03:65:b5:5d: 24:b6:d6:8b:88:a7:e3:50:8d:f8:c6:74:68:b2:93: f6:fe:6b:58:27:51:6f:ff:fe:63:2d:e1:bb:da:fc: a0:96:3b:80:3b:0e:91:0a:09:f1:c2:c7:4d:9c:5c: b9:f5:31:d2:7c:a2:ee:2c:5e:e1:49:1d:27:19:a6: 10:48:b0:b3:76:94:c4:f8:55:93:65:d8:aa:2f:a8: 3d:51:a1:6d:0e:a1:90:fd:26:30:12:d6:5b:b1:33: e9:75:fb:df:c0:af:2e:92:56:d8:bc:81:50:d5:71: e6:6c:c8:4a:1f:76:29:eb:6b:aa:6b:e9:7e:4d:a4: 49:53:ad:04:07:ca:c6:cd:57:9a:d5:05:21:36:e5: ff:21:79:f5:6e:7a:cb:33:d6:85:81:f5:19:63:e4: 8d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DC:39:F2:13:89:51:45:2F:B3:5F:E4:45:25:99:79:FD:DE:16:C2 X509v3 Authority Key Identifier: keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:77:2e:a3:46:82:5e:9e:3b:2a:3d:b6:a9:62:d7:37:29:ef: da:2b:16:0c:1a:f7:cc:2a:5a:f8:65:e6:e5:25:aa:b3:85:9d: 19:04:48:df:09:a7:98:ce:3e:24:2a:b4:08:ee:e7:00:5d:9a: c2:e9:5e:3e:aa:ae:7f:38:0c:f9:ca:ca:ff:b9:3a:5e:76:1f: 5b:fb:a4:36:6b:f7:b0:e7:39:9f:5d:8e:34:fc:42:da:04:81: 60:74:58:e2:f0:bc:a1:36:70:f3:71:5e:a7:04:e2:f4:3d:29: d0:a9:47:e1:6a:02:14:45:57:2e:f5:d3:d5:33:a0:cf:ca:ab: d7:63:f7:42:b6:b1:c3:14:a7:82:8c:ac:92:88:d0:b9:e0:ee: 38:7a:b9:51:7b:e1:dc:51:e9:32:f4:e2:55:9a:25:8c:61:31: fe:bd:f4:6f:28:c4:82:49:d4:89:75:00:62:d3:11:0c:63:32: 8e:dc:09:e4:25:b0:d0:6b:c1:2c:29:9a:00:30:24:8f:a2:c4: 43:7a:7f:aa:84:b4:4b:9d:8c:04:fb:9b:94:06:05:57:1c:e0: 3f:bb:94:af:ef:a7:fd:bc:a6:1a:62:cc:21:82:63:de:85:23: 1a:bb:b4:e5:09:10:82:22:11:34:1b:e9:1c:51:62:3c:6d:3d: dc:ef:61:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVM/SnxUaYU7FcDHM7I7dGPYR8sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3 MUU2MDhFOTAeFw0yNjA1MTIxODAzMTBaFw0yNjA1MTMyMTEzMTBaMDMxMTAvBgNV BAMTKEFEREMzOUYyMTM4OTUxNDUyRkIzNUZFNDQ1MjU5OTc5RkRERTE2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZDLDrqzNhW2uU9XnsdhOGXUF DlUQrsNHX9sDDdvG3MfDAKgYfcloFpp1rfvXJ8wyNITL/Jy9vhULpyqIGfTnkCgY 4PeonfbZ5F575uml+hbBhscLEZXIocYOzXyAcKKDr7PEA2W1XSS21ouIp+NQjfjG dGiyk/b+a1gnUW///mMt4bva/KCWO4A7DpEKCfHCx02cXLn1MdJ8ou4sXuFJHScZ phBIsLN2lMT4VZNl2KovqD1RoW0OoZD9JjAS1luxM+l1+9/Ary6SVti8gVDVceZs yEofdinra6pr6X5NpElTrQQHysbNV5rVBSE25f8hefVuessz1oWB9Rlj5I1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdw58hOJUUUvs1/kRSWZef3eFsIwHwYDVR0j BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4 RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFD MTQ3MUU2MDhFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB93LqNGgl6eOyo9tqli1zcp79orFgwa98wq Wvhl5uUlqrOFnRkESN8Jp5jOPiQqtAju5wBdmsLpXj6qrn84DPnKyv+5Ol52H1v7 pDZr97DnOZ9djjT8QtoEgWB0WOLwvKE2cPNxXqcE4vQ9KdCpR+FqAhRFVy7109Uz oM/Kq9dj90K2scMUp4KMrJKI0Lng7jh6uVF74dxR6TL04lWaJYxhMf699G8oxIJJ 1Il1AGLTEQxjMo7cCeQlsNBrwSwpmgAwJI+ixEN6f6qEtEudjAT7m5QGBVcc4D+7 lK/vp/28phpizCGCY96FIxq7tOUJEIIiETQb6RxRYjxtPdzvYZg= -----END CERTIFICATE-----Generated at Wed May 13 06:11:58 2026 by rpki-client