$ rpki-client -vvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: m0o6F6/PwaoeRQvp/ZbZbOYxcfByK9eSIj0OIeIxyIU= Subject key identifier: 19:02:FA:89:FA:06:7D:40:7C:09:57:C6:53:7A:43:97:84:73:FC:38 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 052E36BA3494EF1C47F228A9E5B98EAEDEDDAC89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:14:23 +0000 Manifest this update: Wed 17 Jun 2026 01:09:23 +0000 Manifest next update: Thu 18 Jun 2026 01:43:23 +0000 Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) 2: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) 3: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) 4: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: EtJ4W7HJECHjeId1nT2MogxnEtAQUXerpJlocuCEBjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2e:36:ba:34:94:ef:1c:47:f2:28:a9:e5:b9:8e:ae:de:dd:ac:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Jun 17 01:09:23 2026 GMT Not After : Jun 18 01:43:23 2026 GMT Subject: CN=1902FA89FA067D407C0957C6537A43978473FC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:19:21:11:07:a8:5f:dc:ab:1c:32:1e:d6: 4a:c4:97:97:49:5a:7e:69:e1:4a:26:5f:8f:6b:2c: 51:36:2a:51:ea:87:07:46:7d:79:23:a4:0f:a7:17: 04:4d:ea:c9:13:a5:df:96:ae:37:50:b1:91:e8:61: a6:ad:f9:8e:32:3e:03:0b:f8:00:24:3e:fb:00:87: 70:b7:f3:a1:ae:a4:3e:08:6f:ad:8f:b2:ed:1b:99: a4:8f:fd:04:51:dc:17:91:5d:f2:ac:e2:ef:5f:19: 6b:9b:95:5a:1f:c3:79:4b:5d:d3:67:68:b5:77:5d: 10:59:fb:36:be:4b:46:a4:0f:b5:cd:9b:e1:54:76: 84:56:e3:01:bc:0f:c1:bf:8c:8f:60:ee:f6:21:34: 4e:19:72:c8:d5:80:5f:ad:30:e5:fa:13:38:b7:35: 39:dd:1d:b3:dc:8b:cc:79:aa:3d:28:d2:bc:23:a7: 56:15:97:38:1a:0b:39:f5:fd:08:0e:71:5c:0f:ca: 4f:4b:0e:2c:36:64:54:c9:85:84:16:1d:9a:27:c0: 2f:19:1b:ec:e9:c5:b2:d8:12:04:85:44:30:9c:73: 63:77:80:69:5a:23:cc:c5:3c:25:c2:07:87:40:d0: 0e:08:3e:49:00:75:48:2b:6b:68:21:44:63:7c:14: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:02:FA:89:FA:06:7D:40:7C:09:57:C6:53:7A:43:97:84:73:FC:38 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7e:aa:9a:dc:6c:e4:b9:fc:60:31:7a:92:a1:8d:fe:59:4c: a1:b0:bf:45:33:6b:60:5c:13:1d:91:9f:28:7c:3f:bc:43:c6: c9:f6:33:48:dc:d7:92:ad:7c:a3:e3:5b:23:93:33:22:c6:68: 08:f0:bb:f5:c9:23:00:48:c3:a0:12:37:25:57:72:d8:7e:7c: d4:60:0b:34:57:f9:f0:fb:f1:d7:6c:b8:56:a8:0b:ec:54:95: a0:1d:f0:ba:43:63:8a:e7:50:63:25:bf:e0:eb:a1:7d:e7:73: 4b:90:d3:05:22:f1:fc:33:e4:bb:a1:0d:a0:8d:6b:df:03:ba: ff:27:81:47:b3:e2:93:00:c8:dd:ba:ea:b4:a9:9a:80:84:c0: 4d:7e:14:b0:56:26:fc:7b:bc:46:f9:05:c9:8c:7d:d0:ec:05: 52:eb:aa:dc:6f:81:35:69:b9:20:c3:65:22:e6:c8:ba:e6:10: 23:77:27:ca:f9:b5:8b:b4:93:cd:7f:7c:5b:1d:94:3f:12:e7: 18:e2:aa:b2:82:b1:6c:dc:a7:bd:dc:d6:4f:a8:bd:eb:b8:37: d9:35:00:63:df:ab:df:db:30:57:93:ef:61:90:a9:28:c9:be: c3:36:a6:87:49:b1:f4:8d:6b:e4:9c:bb:c6:4f:3b:33:a1:18: ba:fd:ed:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBS42ujSU7xxH8iip5bmOrt7drIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA2MTcwMTA5MjNaFw0yNjA2MTgwMTQzMjNaMDMxMTAvBgNV BAMTKDE5MDJGQTg5RkEwNjdENDA3QzA5NTdDNjUzN0E0Mzk3ODQ3M0ZDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHxkhEQeoX9yrHDIe1krEl5dJ Wn5p4UomX49rLFE2KlHqhwdGfXkjpA+nFwRN6skTpd+WrjdQsZHoYaat+Y4yPgML +AAkPvsAh3C386GupD4Ib62Psu0bmaSP/QRR3BeRXfKs4u9fGWublVofw3lLXdNn aLV3XRBZ+za+S0akD7XNm+FUdoRW4wG8D8G/jI9g7vYhNE4ZcsjVgF+tMOX6Ezi3 NTndHbPci8x5qj0o0rwjp1YVlzgaCzn1/QgOcVwPyk9LDiw2ZFTJhYQWHZonwC8Z G+zpxbLYEgSFRDCcc2N3gGlaI8zFPCXCB4dA0A4IPkkAdUgra2ghRGN8FKXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQL6ifoGfUB8CVfGU3pDl4Rz/DgwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt+qprcbOS5/GAxepKhjf5ZTKGwv0Uza2Bc Ex2Rnyh8P7xDxsn2M0jc15KtfKPjWyOTMyLGaAjwu/XJIwBIw6ASNyVXcth+fNRg CzRX+fD78ddsuFaoC+xUlaAd8LpDY4rnUGMlv+DroX3nc0uQ0wUi8fwz5LuhDaCN a98Duv8ngUez4pMAyN266rSpmoCEwE1+FLBWJvx7vEb5BcmMfdDsBVLrqtxvgTVp uSDDZSLmyLrmECN3J8r5tYu0k81/fFsdlD8S5xjiqrKCsWzcp73c1k+oveu4N9k1 AGPfq9/bMFeT72GQqSjJvsM2podJsfSNa+Scu8ZPOzOhGLr97dQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:49 2026 by rpki-client