$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: jo6p2TzsQC8kft1jWZtJhbDn8dLq8KTsGW59RkpHgRg= Subject key identifier: 48:AC:79:4A:1A:2B:4B:5A:3E:7D:93:85:7C:D3:91:1D:C2:49:74:99 Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 7CBDE58426E18EADB96CBA34FB0BBBC4E376372E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 08:52:51 +0000 Manifest this update: Tue 28 Jul 2026 08:47:51 +0000 Manifest next update: Wed 29 Jul 2026 10:48:51 +0000 Files and hashes: 1: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) 2: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: ZwXz7WBp8oimPqMc48QL/JnVmuLtxgwPxVnP5G7gQjw=) 3: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bd:e5:84:26:e1:8e:ad:b9:6c:ba:34:fb:0b:bb:c4:e3:76:37:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: Jul 28 08:47:51 2026 GMT Not After : Jul 29 10:48:51 2026 GMT Subject: CN=48AC794A1A2B4B5A3E7D93857CD3911DC2497499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:49:76:74:a7:95:d0:e6:70:8b:19:91:2f: 44:51:3d:54:8d:8a:23:89:39:ab:4d:80:70:07:b3: db:11:a5:b0:0e:a2:7f:0a:53:fc:e5:e6:06:24:86: ac:9e:cd:19:c7:df:98:03:17:11:66:60:08:5e:6b: 9a:e3:5d:b9:0b:09:da:75:50:23:91:2a:8b:8b:d5: 26:92:21:85:81:d3:cf:04:3f:0c:c5:17:92:32:23: 2d:ac:92:c4:bf:0c:34:02:77:f5:59:7b:ac:73:be: 8f:60:34:66:05:cf:86:fa:18:a4:9f:3f:a0:62:31: b7:66:73:8a:ed:18:15:c5:c7:9b:22:00:9d:29:08: cb:fc:6c:c2:e2:8e:d5:c0:61:9b:f4:6f:ef:1e:dd: 06:2c:e1:92:3f:e3:9b:a8:cc:33:79:f1:70:b5:36: a4:8e:bd:45:4d:b1:4b:d5:f9:df:0e:a0:b1:37:16: 9a:d3:dc:bc:66:bd:08:c8:06:3a:a3:9e:dd:2f:e0: 4a:e1:76:a8:78:15:b4:30:15:d7:eb:e4:a8:f9:4e: 1f:bd:32:04:a2:43:f0:b0:97:07:bc:82:b5:34:6e: be:c2:0b:f4:9e:7d:ec:78:28:48:38:0a:a5:75:54: a7:44:aa:7e:a5:36:77:36:c8:3f:6c:ea:94:6a:f2: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AC:79:4A:1A:2B:4B:5A:3E:7D:93:85:7C:D3:91:1D:C2:49:74:99 X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d1:31:96:f9:20:9c:94:ac:41:0f:33:19:42:7a:5e:71:c6: ca:6b:71:d8:28:6a:94:b9:34:25:9a:d5:93:e4:1a:c2:87:1d: 0a:07:36:75:58:c7:66:b4:de:24:a7:2f:1d:b8:69:02:53:46: a7:90:8e:6e:51:55:69:14:09:c8:ad:e5:11:0f:ba:9f:58:2c: 4b:a8:cf:ad:c9:16:30:fd:f9:11:b5:0f:89:71:64:5d:19:89: 70:d2:3e:f0:e9:0c:36:7b:df:40:52:1f:b1:a5:63:27:d5:ab: b4:8d:bc:18:1a:8a:61:26:2e:10:d9:49:ca:e9:c9:80:f0:52: 32:18:a3:fc:df:f5:55:a7:bb:5e:5d:60:56:cd:d4:22:5c:7d: 66:e5:94:da:a4:9a:7d:dc:9b:ea:b8:b3:4c:93:fc:6b:6c:bb: 0b:4e:7f:76:3f:91:ae:a6:11:43:e6:63:a6:ef:b8:a1:16:96: 06:88:02:48:57:c7:76:68:d9:1c:c6:80:66:8e:df:8b:21:68: da:f4:96:40:26:ec:f6:b6:76:14:ed:23:1b:34:2e:42:e5:8d: 3f:d3:a0:40:f9:02:4a:f9:b4:d6:fc:88:51:ec:79:82:b7:21: 7e:d0:47:69:70:cb:46:07:a5:1b:31:3f:ea:18:15:9a:55:b4: 2c:71:66:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfL3lhCbhjq25bLo0+wu7xON2Ny4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjA3MjgwODQ3NTFaFw0yNjA3MjkxMDQ4NTFaMDMxMTAvBgNV BAMTKDQ4QUM3OTRBMUEyQjRCNUEzRTdEOTM4NTdDRDM5MTFEQzI0OTc0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5Ul2dKeV0OZwixmRL0RRPVSN iiOJOatNgHAHs9sRpbAOon8KU/zl5gYkhqyezRnH35gDFxFmYAhea5rjXbkLCdp1 UCORKouL1SaSIYWB088EPwzFF5IyIy2sksS/DDQCd/VZe6xzvo9gNGYFz4b6GKSf P6BiMbdmc4rtGBXFx5siAJ0pCMv8bMLijtXAYZv0b+8e3QYs4ZI/45uozDN58XC1 NqSOvUVNsUvV+d8OoLE3FprT3LxmvQjIBjqjnt0v4Erhdqh4FbQwFdfr5Kj5Th+9 MgSiQ/Cwlwe8grU0br7CC/Sefex4KEg4CqV1VKdEqn6lNnc2yD9s6pRq8oaBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKx5ShorS1o+fZOFfNORHcJJdJkwHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjRMZb5IJyUrEEPMxlCel5xxsprcdgoapS5 NCWa1ZPkGsKHHQoHNnVYx2a03iSnLx24aQJTRqeQjm5RVWkUCcit5REPup9YLEuo z63JFjD9+RG1D4lxZF0ZiXDSPvDpDDZ730BSH7GlYyfVq7SNvBgaimEmLhDZScrp yYDwUjIYo/zf9VWnu15dYFbN1CJcfWbllNqkmn3cm+q4s0yT/GtsuwtOf3Y/ka6m EUPmY6bvuKEWlgaIAkhXx3Zo2RzGgGaO34shaNr0lkAm7Pa2dhTtIxs0LkLljT/T oED5Akr5tNb8iFHseYK3IX7QR2lwy0YHpRsxP+oYFZpVtCxxZhY= -----END CERTIFICATE-----Generated at Tue Jul 28 20:57:18 2026 by rpki-client