$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft File: 19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json) Hash identifier: hy5ntI8fLw3mLC/3oTyepMH9Ewmpl0NQApXvm5Knof4= Subject key identifier: 71:46:C4:56:36:A4:A7:C5:98:26:20:00:34:65:B6:FD:1F:A4:E2:26 Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Certificate serial: 5D875C2185D3DE9FDBD40646BA3BFEB610655702 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft Manifest number: 0225 Signing time: Fri 17 Apr 2026 20:01:33 +0000 Manifest this update: Fri 17 Apr 2026 19:56:33 +0000 Manifest next update: Mon 20 Apr 2026 20:52:33 +0000 Files and hashes: 1: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: foSns+74q+ACmATSNPaRHdqkI9OMMCszUJQG7uEcjF4=) 2: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: /A41BcbFlmN4rn19MC9WB3juhu+qD5Fs4F7T58QaR/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:87:5c:21:85:d3:de:9f:db:d4:06:46:ba:3b:fe:b6:10:65:57:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Validity Not Before: Apr 17 19:56:33 2026 GMT Not After : Apr 20 20:52:33 2026 GMT Subject: CN=7146C45636A4A7C5982620003465B6FD1FA4E226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:fd:40:de:df:0f:7b:8d:6c:d5:8b:58:73: 90:4c:7a:0a:6c:2f:34:cf:c1:39:36:63:9f:d6:66: 79:51:c5:db:61:34:2f:89:ba:a5:37:8c:f0:80:c3: 3b:06:3a:a0:32:39:92:37:a0:13:b3:1a:1a:f1:9e: 01:25:94:d5:a4:29:1a:57:39:bd:5c:5b:16:d4:69: 5d:11:b0:ab:64:f5:ef:2c:5a:47:4c:9b:f0:7f:14: 01:3a:90:66:f6:e1:1a:11:dc:4f:26:fc:a9:43:26: fe:66:df:01:3f:a0:54:f7:0c:66:df:f8:b2:d4:c2: cb:4b:d5:57:11:d3:bb:b1:97:dc:20:07:40:96:d5: 34:17:64:af:4f:a9:ba:52:88:b7:fa:bf:70:7d:30: d9:1f:9d:4b:46:7c:0f:47:ca:b2:d4:d9:50:4d:d1: 44:08:cb:a1:a1:1f:4d:75:12:28:02:d0:91:c8:7b: 0a:38:fc:a7:5c:52:80:35:4f:ef:ab:fe:69:d7:d7: 71:0d:36:36:15:ee:67:a6:be:9a:cf:58:55:46:94: 5e:bd:bf:5e:4c:41:f4:b3:da:c5:23:3f:cb:c5:1f: 0a:bf:4c:04:e3:cb:37:a3:89:7e:c1:82:0f:4a:b3: 0e:24:21:5c:5f:ae:df:d6:e6:3b:a3:4d:09:ea:99: 1c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:C4:56:36:A4:A7:C5:98:26:20:00:34:65:B6:FD:1F:A4:E2:26 X509v3 Authority Key Identifier: keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a9:5a:4c:51:57:5b:d7:ac:35:10:c5:dd:33:5c:12:55:ce: d6:8d:6c:c2:db:ce:6d:99:fb:56:6b:e9:a6:46:82:0a:c7:2e: b7:73:88:10:8d:05:e1:6d:8d:11:2c:23:50:4b:95:d8:f0:7a: 57:cb:0e:4c:d0:9e:67:d4:2d:34:10:37:0a:b1:cb:3e:9d:ea: aa:4e:67:8c:43:c2:3b:a8:78:bb:50:ff:0d:1e:5d:28:46:cc: 76:be:46:71:ec:0e:68:b8:fd:12:76:e6:e7:70:78:33:17:0b: 0d:f0:12:fb:ac:44:3f:7a:b9:8c:d3:e9:f6:9d:e2:1c:4a:e0: a9:10:16:b7:c2:35:19:e3:1f:54:0d:8b:29:42:86:16:a5:e0: 7c:d8:82:4d:31:a6:1b:13:4f:56:35:96:13:33:80:0c:80:5c: 9f:31:b3:8d:9c:d5:44:4e:5d:aa:6c:e0:b3:7f:f1:9d:9d:00: f7:98:71:9e:3f:03:73:4e:4d:e4:ca:6a:4a:fc:b6:98:f1:8c: 9c:17:24:7e:39:de:2b:de:bb:03:f7:a6:9d:28:22:c5:1e:37: 0f:4d:8c:0f:b5:ba:28:f5:57:1e:47:8f:bb:8f:6c:0a:fe:c6: 7c:74:19:e3:6a:f5:67:d7:51:de:4e:6e:0e:ac:ff:b8:f5:3c: 9c:0f:c2:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYdcIYXT3p/b1AZGujv+thBlVwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4 MTdFOTYzNTAeFw0yNjA0MTcxOTU2MzNaFw0yNjA0MjAyMDUyMzNaMDMxMTAvBgNV BAMTKDcxNDZDNDU2MzZBNEE3QzU5ODI2MjAwMDM0NjVCNkZEMUZBNEUyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcf1A3t8Pe41s1YtYc5BMegps LzTPwTk2Y5/WZnlRxdthNC+JuqU3jPCAwzsGOqAyOZI3oBOzGhrxngEllNWkKRpX Ob1cWxbUaV0RsKtk9e8sWkdMm/B/FAE6kGb24RoR3E8m/KlDJv5m3wE/oFT3DGbf +LLUwstL1VcR07uxl9wgB0CW1TQXZK9PqbpSiLf6v3B9MNkfnUtGfA9HyrLU2VBN 0UQIy6GhH011EigC0JHIewo4/KdcUoA1T++r/mnX13ENNjYV7memvprPWFVGlF69 v15MQfSz2sUjP8vFHwq/TATjyzejiX7Bgg9Ksw4kIVxfrt/W5jujTQnqmRy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUbEVjakp8WYJiAANGW2/R+k4iYwHwYDVR0j BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3 MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKpWkxRV1vXrDUQxd0zXBJVztaNbMLbzm2Z +1Zr6aZGggrHLrdziBCNBeFtjREsI1BLldjwelfLDkzQnmfULTQQNwqxyz6d6qpO Z4xDwjuoeLtQ/w0eXShGzHa+RnHsDmi4/RJ25udweDMXCw3wEvusRD96uYzT6fad 4hxK4KkQFrfCNRnjH1QNiylChhal4HzYgk0xphsTT1Y1lhMzgAyAXJ8xs42c1URO Xaps4LN/8Z2dAPeYcZ4/A3NOTeTKakr8tpjxjJwXJH453iveuwP3pp0oIsUeNw9N jA+1uij1Vx5Hj7uPbAr+xnx0GeNq9WfXUd5Obg6s/7j1PJwPwug= -----END CERTIFICATE-----Generated at Sat Apr 18 03:26:18 2026 by rpki-client