$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft (raw, json) Hash identifier: i7MWc6LjHqKXwiNXUpHGq0m0xNnkrIw1UTF6N8C55JU= Subject key identifier: 0B:CD:5A:4E:85:E3:28:51:01:C5:B0:39:24:77:A3:40:15:F8:78:0A Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Certificate issuer: /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Certificate serial: 0FE47BCBA19AE8D83B762BC09262887CDB99489B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft Manifest number: 0267 Signing time: Sat 18 Apr 2026 23:01:57 +0000 Manifest this update: Sat 18 Apr 2026 22:56:57 +0000 Manifest next update: Wed 22 Apr 2026 09:36:57 +0000 Files and hashes: 1: 3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (hash: 8o9FS5xLO5vhevJDNVpAnOF71b53C2MlNbITwJZ0GuU=) 2: 3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (hash: zqJ6/Ht8K/+Ny3dimqY84LbP7J5Bka6C/L5Nlwxj1Xo=) 3: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl (hash: bO9VmpVSanwWtpycY5rs2D9JXypkrEtgsg9S8u5OAV8=) 4: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (hash: Y4I82S4d7a/x1ViD8xkMuBl2nqrV7Rl0lBJwgFX9+xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 09:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e4:7b:cb:a1:9a:e8:d8:3b:76:2b:c0:92:62:88:7c:db:99:48:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Validity Not Before: Apr 18 22:56:57 2026 GMT Not After : Apr 22 09:36:57 2026 GMT Subject: CN=0BCD5A4E85E3285101C5B0392477A34015F8780A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:32:f3:10:dc:51:69:1c:d1:2f:8f:4d:ed: 30:c1:10:48:ed:78:e3:d9:6f:5e:7e:d2:6c:5f:b9: 89:ae:b6:e5:13:5d:ff:63:a2:6d:06:0c:6b:76:1f: ea:86:22:98:7d:f1:1a:e7:47:2c:70:0b:d6:52:e7: b9:1b:d4:06:92:e3:8b:06:84:ac:9d:be:87:0e:f0: 28:d9:d3:35:4e:e0:bf:df:a8:6d:61:ce:c1:ad:dd: ec:11:29:42:1c:62:be:9e:06:e3:34:fc:e5:f1:c3: 72:33:f4:9b:e6:8d:7c:b4:f0:0d:27:f5:22:31:1b: 25:07:f5:dc:f7:56:9b:01:10:64:a0:54:8d:17:e1: 7b:ce:a7:55:71:18:37:d8:a8:51:74:36:67:2b:92: a0:56:cb:a2:a7:24:ac:d3:60:15:ac:79:b8:17:ec: 2c:2d:eb:19:33:cb:f4:27:80:a2:f6:d8:8c:ae:0a: 9f:ff:55:a7:cc:d1:f3:3f:bd:2a:3e:9d:c5:5f:65: f5:82:6c:10:24:5c:d5:e4:bc:46:e8:72:46:ad:9b: 87:d3:a4:5a:d8:89:2c:cc:f9:18:f4:26:18:e0:fa: e0:c6:7d:97:f6:6b:d5:66:bf:2f:e4:ca:f4:ff:6c: d5:53:66:6d:20:4f:78:8f:7f:76:b7:6a:b1:0c:1e: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CD:5A:4E:85:E3:28:51:01:C5:B0:39:24:77:A3:40:15:F8:78:0A X509v3 Authority Key Identifier: keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fe:c2:2e:b7:f2:80:e3:e2:47:86:82:fa:6d:ca:b8:70:98: 56:ac:a3:19:88:5a:91:d5:41:b3:b0:f6:d3:8d:a9:f4:05:6d: e1:10:30:cb:77:8d:ce:38:8b:a4:e3:a3:2b:52:be:9f:4b:8f: f2:b2:bc:a7:08:9e:68:95:34:49:a9:1b:93:77:71:8a:4f:85: 13:a0:55:ea:15:60:65:bd:db:9f:f7:5d:a7:8f:6c:59:bd:ac: 0b:a5:ec:a9:eb:fb:cc:45:87:6d:41:73:d5:b3:9c:8c:36:fc: 7d:96:a8:d1:60:c0:ce:1d:19:46:f7:e8:89:29:ac:78:3d:cf: 26:2a:e4:56:de:27:1a:6c:79:a3:f7:57:ae:bc:8c:1e:de:f3: f0:1a:da:82:92:c1:d4:de:84:86:24:98:bc:80:fb:76:d5:95: 65:c3:f1:82:af:1a:98:ae:1e:e7:ca:0a:9d:dd:46:40:79:05: 58:ff:e9:78:6a:7f:ad:da:c3:cf:b4:bd:ce:93:0b:19:b0:6e: f6:b4:2b:6c:76:ad:1d:47:22:f1:a6:60:ca:d3:96:d5:e7:05: 68:ea:31:10:8d:e1:b5:c1:ff:d7:e5:60:c3:33:37:54:66:b3: 9a:d6:be:f6:a9:3e:21:6a:a4:6b:9c:cf:2d:e7:6b:4f:ca:90: a4:64:ba:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+R7y6Ga6Ng7divAkmKIfNuZSJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy QTZGRjg3RTAeFw0yNjA0MTgyMjU2NTdaFw0yNjA0MjIwOTM2NTdaMDMxMTAvBgNV BAMTKDBCQ0Q1QTRFODVFMzI4NTEwMUM1QjAzOTI0NzdBMzQwMTVGODc4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2zLzENxRaRzRL49N7TDBEEjt eOPZb15+0mxfuYmutuUTXf9jom0GDGt2H+qGIph98RrnRyxwC9ZS57kb1AaS44sG hKydvocO8CjZ0zVO4L/fqG1hzsGt3ewRKUIcYr6eBuM0/OXxw3Iz9JvmjXy08A0n 9SIxGyUH9dz3VpsBEGSgVI0X4XvOp1VxGDfYqFF0NmcrkqBWy6KnJKzTYBWsebgX 7Cwt6xkzy/QngKL22IyuCp//VafM0fM/vSo+ncVfZfWCbBAkXNXkvEbockatm4fT pFrYiSzM+Rj0Jhjg+uDGfZf2a9Vmvy/kyvT/bNVTZm0gT3iPf3a3arEMHvE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC81aToXjKFEBxbA5JHejQBX4eAowHwYDVR0j BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG Rjg3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUxZDZjOWMtZWFkNy00NWZlLWEx OWEtNDIyMzVmYzUzNzgwLzAvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMy MzYyQTZGRjg3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv+wi638oDj4keGgvptyrhwmFasoxmIWpHV QbOw9tONqfQFbeEQMMt3jc44i6TjoytSvp9Lj/KyvKcInmiVNEmpG5N3cYpPhROg VeoVYGW925/3XaePbFm9rAul7Knr+8xFh21Bc9WznIw2/H2WqNFgwM4dGUb36Ikp rHg9zyYq5FbeJxpseaP3V668jB7e8/Aa2oKSwdTehIYkmLyA+3bVlWXD8YKvGpiu HufKCp3dRkB5BVj/6Xhqf63aw8+0vc6TCxmwbva0K2x2rR1HIvGmYMrTltXnBWjq MRCN4bXB/9flYMMzN1Rms5rWvvapPiFqpGuczy3na0/KkKRkugk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:31 2026 by rpki-client