$ rpki-client -vvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft File: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft (raw, json) Hash identifier: OxG5Kt8Huwpb4HZnD+7ZOuHEFKRqtzbeeA6/vfoWYWk= Subject key identifier: 3E:A4:EF:B1:62:74:67:A9:C5:C8:A4:F0:18:5D:32:7F:61:6E:BB:B0 Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 Certificate issuer: /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Certificate serial: 66B1064F6131BD1DB2FEF045D8A570D382D80766 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:15:23 +0000 Manifest this update: Wed 17 Jun 2026 06:10:23 +0000 Manifest next update: Thu 18 Jun 2026 08:21:23 +0000 Files and hashes: 1: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: Ur2deLsRWDmCAqL8yUm8FNnfEGneYV45Th8VxPgH0qk=) 2: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: rAfzEZvuHRI/Kzt1SmKQHwBtPJb8jdNpuP/cvt9qX+w=) 3: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: yUTHLwhvAH/MhoYaduOS14+07g6chdMoBPVYy5YJcX4=) 4: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: 7AkBTaxaVF6MfSYLN5bOMc9OzhJ7a78FUzJRaPwJ6kQ=) 5: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl (hash: tVYuIKNSE6VGft6nu6E8mApEVoguTOhKGYPuXyla0Fc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b1:06:4f:61:31:bd:1d:b2:fe:f0:45:d8:a5:70:d3:82:d8:07:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Validity Not Before: Jun 17 06:10:23 2026 GMT Not After : Jun 18 08:21:23 2026 GMT Subject: CN=3EA4EFB1627467A9C5C8A4F0185D327F616EBBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:75:48:22:dc:dd:0a:eb:df:0f:82:5d:5a: e4:fa:55:f3:05:33:17:96:80:39:b2:f1:a7:eb:e2: 03:2c:f1:e2:ec:9d:99:74:b2:c4:da:91:80:1d:e6: 8c:b0:f7:85:92:c9:58:27:ab:05:00:0a:3a:59:d4: 8a:a5:c9:f0:b8:95:80:c9:7e:f2:34:06:3e:37:de: 9c:14:e5:37:9f:bd:ea:ad:91:5d:a5:50:9b:69:8e: 25:6e:4c:37:58:b3:fa:73:41:4e:d1:92:ce:28:d4: e5:63:29:06:e1:6a:c2:29:b2:cd:b8:2f:ff:ef:64: 5c:43:c8:73:61:64:85:54:f9:86:e6:1a:d2:1b:54: 57:3a:41:22:07:e2:d2:c8:96:55:46:67:00:81:77: a2:13:eb:f1:bf:2c:90:e6:c7:55:42:d2:f9:1c:de: 8c:f2:c9:ee:da:ab:47:20:f0:8d:01:c2:96:cf:c6: ca:80:18:6a:ad:e4:01:c5:32:13:49:cf:37:08:79: f8:c2:2f:a1:2b:41:b0:4f:55:74:cf:ad:2f:c6:54: ad:e1:69:e1:ef:a3:1a:a2:8a:f3:7b:89:5a:20:77: ee:14:c7:0d:a1:61:36:e9:a7:d6:d5:7f:f2:cb:63: 54:cb:ce:e5:ae:67:1c:55:c8:46:ec:bb:b8:78:e5: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:EF:B1:62:74:67:A9:C5:C8:A4:F0:18:5D:32:7F:61:6E:BB:B0 X509v3 Authority Key Identifier: keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0d:6b:72:38:29:fd:59:f2:8c:c6:9a:ed:24:bd:72:cb:70: 5f:47:b7:ec:00:23:cd:86:1f:57:c0:9a:7c:55:83:e4:23:21: 67:8a:aa:7e:9e:4e:15:b4:09:82:d1:ac:27:b2:54:4a:5c:dc: e0:29:62:03:a0:6f:50:5d:93:a5:27:8c:fe:68:db:00:31:0d: 37:ee:f3:24:29:eb:3e:20:c3:65:46:cb:d2:92:2e:6a:9d:69: ab:96:cc:1e:e6:fd:3a:af:3a:0f:c2:d3:e6:a6:e0:73:ab:26: 7f:2b:d9:07:99:54:38:34:8d:82:b9:b6:04:a6:26:ba:e6:66: 8c:59:51:48:ad:a1:5d:3a:4b:f5:75:d2:29:7e:c9:69:c4:a2: 03:2c:ae:12:d7:0e:d5:6e:73:9e:4f:16:e7:98:bd:6a:e2:c1: 89:75:c1:8d:1e:60:21:99:cd:a3:f2:e7:4d:9e:65:46:3d:09: 2d:d1:78:72:9f:ba:d6:38:11:54:2a:12:dc:51:0c:60:5c:cd: 49:95:4b:f7:58:77:75:7a:33:6f:6e:88:d8:9e:37:ef:6f:e9: 0b:b7:7c:6f:d5:75:da:a3:91:84:48:9b:b7:3b:e7:f8:99:89: 77:02:aa:49:1a:e8:2b:82:b9:42:b8:aa:0b:9c:42:b3:8c:f9: c9:84:43:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrEGT2ExvR2y/vBF2KVw04LYB2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0MEFE RjFCQkIzNzAeFw0yNjA2MTcwNjEwMjNaFw0yNjA2MTgwODIxMjNaMDMxMTAvBgNV BAMTKDNFQTRFRkIxNjI3NDY3QTlDNUM4QTRGMDE4NUQzMjdGNjE2RUJCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAnVIItzdCuvfD4JdWuT6VfMF MxeWgDmy8afr4gMs8eLsnZl0ssTakYAd5oyw94WSyVgnqwUACjpZ1IqlyfC4lYDJ fvI0Bj433pwU5TefveqtkV2lUJtpjiVuTDdYs/pzQU7Rks4o1OVjKQbhasIpss24 L//vZFxDyHNhZIVU+YbmGtIbVFc6QSIH4tLIllVGZwCBd6IT6/G/LJDmx1VC0vkc 3ozyye7aq0cg8I0BwpbPxsqAGGqt5AHFMhNJzzcIefjCL6ErQbBPVXTPrS/GVK3h aeHvoxqiivN7iVogd+4Uxw2hYTbpp9bVf/LLY1TLzuWuZxxVyEbsu7h45W3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPqTvsWJ0Z6nFyKTwGF0yf2Fuu7AwHwYDVR0j BBgwFoAUGafSRz+qa3LjmaShD0tkCt8buzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQxZTA4ZWYtM2FlNi00YjkwLWI0NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDcz RkFBNkI3MkUzOTlBNEExMEY0QjY0MEFERjFCQkIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUE3RDI0NzNGQUE2QjcyRTM5OUE0QTEwRjRCNjQwQURGMUJC QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0 MEFERjFCQkIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4Na3I4Kf1Z8ozGmu0kvXLLcF9Ht+wAI82G H1fAmnxVg+QjIWeKqn6eThW0CYLRrCeyVEpc3OApYgOgb1Bdk6UnjP5o2wAxDTfu 8yQp6z4gw2VGy9KSLmqdaauWzB7m/TqvOg/C0+am4HOrJn8r2QeZVDg0jYK5tgSm JrrmZoxZUUitoV06S/V10il+yWnEogMsrhLXDtVuc55PFueYvWriwYl1wY0eYCGZ zaPy502eZUY9CS3ReHKfutY4EVQqEtxRDGBczUmVS/dYd3V6M29uiNieN+9v6Qu3 fG/VddqjkYRIm7c75/iZiXcCqkka6CuCuUK4qgucQrOM+cmEQwo= -----END CERTIFICATE-----Generated at Wed Jun 17 12:44:49 2026 by rpki-client