$ rpki-client -vvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: PdJjGu9RHdMyDODtcYvsk+ARB670+JgXt0QGn+9+kRU= Subject key identifier: 4A:73:B9:B2:28:B6:7A:80:07:BE:F1:72:A0:47:27:D3:58:F0:97:14 Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 28312C8D324048E4F30D6FF1E7B0766A0EB254A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:04:52 +0000 Manifest this update: Tue 16 Jun 2026 16:59:52 +0000 Manifest next update: Wed 17 Jun 2026 19:17:52 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 2: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: az+HoetsXDsbvSi+lmegeLmLesY1emjOS/Q/RF4SayE=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:31:2c:8d:32:40:48:e4:f3:0d:6f:f1:e7:b0:76:6a:0e:b2:54:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Jun 16 16:59:52 2026 GMT Not After : Jun 17 19:17:52 2026 GMT Subject: CN=4A73B9B228B67A8007BEF172A04727D358F09714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:d3:e0:05:bd:28:6f:85:54:63:92:c0:37: 80:0b:ec:34:0d:70:2d:90:f8:5d:b7:89:af:a9:35: d6:d7:c1:24:bd:21:7b:18:54:f6:3d:78:e3:43:66: 99:e4:76:4d:58:d9:d9:81:18:6d:b4:b7:09:30:0e: a7:e5:b6:e7:45:df:0e:e7:fa:a7:94:71:ef:3a:c6: 14:5e:09:af:dd:12:e5:cb:0b:dc:32:e5:43:bc:5c: a9:2a:5b:70:8b:f7:30:c8:84:a5:23:fc:81:9f:04: 76:32:3e:e2:1a:70:df:d7:a5:10:e5:92:67:cd:4c: de:e0:34:c3:80:8f:ee:09:19:69:30:cd:3d:9a:32: 03:d3:3b:45:29:54:9c:e2:a7:e5:b9:ab:97:b6:2f: b8:de:09:2b:7a:22:84:7a:cf:9c:17:4d:04:0d:b6: 4b:9b:44:57:2e:de:b8:00:b2:13:33:4a:93:bb:ed: 94:f2:db:52:d1:57:81:f8:08:95:72:e9:4f:41:a9: 89:ee:82:fe:14:42:8e:55:28:53:36:0f:39:32:5e: d3:27:9c:a9:f3:db:90:eb:ab:ed:ad:ff:35:60:4c: c9:19:98:34:ef:a5:3c:88:c5:73:b8:f5:9c:fa:58: 2c:a4:f1:93:53:5f:96:fe:cf:16:00:36:16:2a:40: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:73:B9:B2:28:B6:7A:80:07:BE:F1:72:A0:47:27:D3:58:F0:97:14 X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7e:45:ac:61:04:8f:74:c9:f1:df:83:31:a3:19:1c:3c:d9: 35:7c:f4:5e:00:dc:fb:9d:b9:9e:63:46:24:68:30:a5:f0:85: 4e:f1:ec:67:29:f9:1d:68:51:00:d9:cd:6d:7f:a0:64:1e:f3: cf:8c:6d:b2:26:78:d9:5e:cc:cd:14:69:17:68:f7:84:f8:ce: f8:9c:67:e4:28:cc:2e:a1:6c:33:22:b4:4a:10:b7:9c:9c:b7: 34:b0:d2:8b:cb:58:09:a0:e6:97:7f:77:45:c5:c4:f1:77:d6: 05:78:35:79:0b:a8:8c:30:e3:02:6c:57:8a:e9:bd:55:2d:2f: 7e:7d:af:40:27:fc:3a:1d:5b:ac:5f:30:65:12:32:b4:bf:55: 78:94:01:0a:80:8b:2c:a6:6b:90:13:fc:68:6b:da:0a:47:58: ae:d5:8e:bb:69:c7:83:62:90:e7:b5:df:a1:a5:0a:ee:b4:ea: 87:1a:c1:37:24:13:d7:e7:3e:b9:b0:dd:92:4f:e5:d2:a8:d6: cd:90:60:78:74:1a:1e:28:4a:0a:b0:e9:2f:c8:f8:3f:0d:4c: c4:72:37:1c:59:32:cd:82:34:93:99:85:ce:b5:52:ca:a1:6d: 69:df:c5:5d:18:42:70:ab:72:bf:7f:9f:92:a9:fe:2d:0e:bc: 43:39:e2:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDEsjTJASOTzDW/x57B2ag6yVKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA2MTYxNjU5NTJaFw0yNjA2MTcxOTE3NTJaMDMxMTAvBgNV BAMTKDRBNzNCOUIyMjhCNjdBODAwN0JFRjE3MkEwNDcyN0QzNThGMDk3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdldPgBb0ob4VUY5LAN4AL7DQN cC2Q+F23ia+pNdbXwSS9IXsYVPY9eONDZpnkdk1Y2dmBGG20twkwDqfltudF3w7n +qeUce86xhReCa/dEuXLC9wy5UO8XKkqW3CL9zDIhKUj/IGfBHYyPuIacN/XpRDl kmfNTN7gNMOAj+4JGWkwzT2aMgPTO0UpVJzip+W5q5e2L7jeCSt6IoR6z5wXTQQN tkubRFcu3rgAshMzSpO77ZTy21LRV4H4CJVy6U9BqYnugv4UQo5VKFM2DzkyXtMn nKnz25Drq+2t/zVgTMkZmDTvpTyIxXO49Zz6WCyk8ZNTX5b+zxYANhYqQDvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSnO5sii2eoAHvvFyoEcn01jwlxQwHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9+RaxhBI90yfHfgzGjGRw82TV89F4A3Pud uZ5jRiRoMKXwhU7x7Gcp+R1oUQDZzW1/oGQe88+MbbImeNlezM0UaRdo94T4zvic Z+QozC6hbDMitEoQt5yctzSw0ovLWAmg5pd/d0XFxPF31gV4NXkLqIww4wJsV4rp vVUtL359r0An/DodW6xfMGUSMrS/VXiUAQqAiyyma5AT/Ghr2gpHWK7Vjrtpx4Ni kOe136GlCu606ocawTckE9fnPrmw3ZJP5dKo1s2QYHh0Gh4oSgqw6S/I+D8NTMRy NxxZMs2CNJOZhc61UsqhbWnfxV0YQnCrcr9/n5Kp/i0OvEM54lM= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:58 2026 by rpki-client