$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json) Hash identifier: f5PGW4VVJEynUCQfCjahd16zbRhLfqIzzbfTwxNPNYw= Subject key identifier: 20:99:76:8D:35:7A:4E:66:D8:AA:9E:2A:F0:43:DB:58:91:DA:05:E4 Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Certificate serial: 15E0738F8CB1E2209EBFF71ADF8CB72B96768F65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:11:34 +0000 Manifest this update: Wed 17 Jun 2026 07:06:34 +0000 Manifest next update: Thu 18 Jun 2026 10:20:34 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=) 2: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: DKDG4tdd/n639bhOIMXv1itZZZxeRpP7xVc8tJGIpWo=) 3: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=) 4: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=) 5: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e0:73:8f:8c:b1:e2:20:9e:bf:f7:1a:df:8c:b7:2b:96:76:8f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Validity Not Before: Jun 17 07:06:34 2026 GMT Not After : Jun 18 10:20:34 2026 GMT Subject: CN=2099768D357A4E66D8AA9E2AF043DB5891DA05E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:34:83:11:31:ca:35:0b:d8:5b:06:fb:42: cd:d3:e7:1c:11:fb:fe:65:5c:97:f6:a4:09:bd:fc: 04:49:38:0f:be:f6:34:9a:76:3a:6c:b6:e7:16:c1: 08:63:dc:20:54:9b:fd:85:45:72:c2:73:27:76:e5: 77:3b:d2:c2:20:46:80:10:02:06:e2:49:0b:14:6b: 1d:f1:9f:85:5f:06:85:f2:3a:8b:70:ce:29:2f:04: 50:f5:96:bc:bc:2d:6b:cd:0b:7d:41:b4:ce:5e:ae: 61:27:38:46:43:d3:4a:b5:b5:5b:2b:7d:7e:e3:f8: 48:99:be:37:9c:1e:a0:20:c7:48:ad:22:66:c4:a8: 13:f8:31:88:fc:d5:a5:15:8c:70:44:63:b9:75:49: f3:6a:39:76:bb:51:61:6f:5b:9f:1e:4f:87:c0:a3: 58:92:40:dc:ff:c2:34:76:a4:0e:48:18:11:87:ba: a7:68:f6:90:32:fa:c2:b3:53:6d:4e:23:b8:11:ef: 16:a4:d7:ad:04:d6:a5:6e:6c:43:6b:99:4f:ea:44: 5b:2d:0a:07:72:2a:90:69:76:c8:61:42:86:92:3c: da:26:f4:22:4b:c9:2a:c0:57:b7:4c:5e:9c:c9:00: 6a:62:48:2c:b2:75:48:91:b2:fd:0b:29:3f:48:51: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:76:8D:35:7A:4E:66:D8:AA:9E:2A:F0:43:DB:58:91:DA:05:E4 X509v3 Authority Key Identifier: keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ac:20:61:c1:79:30:2b:81:51:41:d3:cf:b6:58:66:94:e7: f2:62:2a:2f:36:de:1f:34:45:d9:26:27:83:73:5d:40:e3:8f: f8:53:1d:1d:5d:15:73:21:8e:16:c4:7e:59:08:ce:2d:35:99: 11:e0:30:33:0a:79:62:99:26:a5:e7:03:73:0e:78:ef:4f:0e: 99:9d:5a:8f:b1:b1:53:5c:bf:14:eb:60:fd:5c:cb:38:27:35: 7e:98:1e:5c:68:9b:aa:ac:11:e3:e5:8a:21:56:46:a8:b4:6c: 90:7c:a2:0d:43:97:0f:1d:38:4a:89:01:59:68:f9:55:d1:82: 86:a8:3c:f7:62:01:f2:8c:9e:de:e5:48:ea:a6:47:e7:3a:43: ea:24:5f:a5:c9:2e:e3:8d:0c:a9:fa:18:f1:66:c7:49:26:87: b5:c8:3f:a2:1b:8c:59:77:33:18:28:de:d4:11:65:ad:81:b7: ff:e1:50:71:b3:04:de:ec:e5:d4:54:e6:12:6a:ef:06:2d:99: 40:04:4d:5b:e1:82:e6:53:0b:f4:62:f9:5f:7e:41:f8:30:85: 97:ef:39:75:94:6c:e4:52:a7:24:65:a8:9b:1b:1e:09:28:2d: 80:65:7a:69:55:2d:a8:42:32:1c:ad:39:22:a5:d9:66:3e:cd: 0d:6c:ed:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeBzj4yx4iCev/ca34y3K5Z2j2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3 MUU2MDhFOTAeFw0yNjA2MTcwNzA2MzRaFw0yNjA2MTgxMDIwMzRaMDMxMTAvBgNV BAMTKDIwOTk3NjhEMzU3QTRFNjZEOEFBOUUyQUYwNDNEQjU4OTFEQTA1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoTSDETHKNQvYWwb7Qs3T5xwR +/5lXJf2pAm9/ARJOA++9jSadjpstucWwQhj3CBUm/2FRXLCcyd25Xc70sIgRoAQ AgbiSQsUax3xn4VfBoXyOotwzikvBFD1lry8LWvNC31BtM5ermEnOEZD00q1tVsr fX7j+EiZvjecHqAgx0itImbEqBP4MYj81aUVjHBEY7l1SfNqOXa7UWFvW58eT4fA o1iSQNz/wjR2pA5IGBGHuqdo9pAy+sKzU21OI7gR7xak160E1qVubENrmU/qRFst CgdyKpBpdshhQoaSPNom9CJLySrAV7dMXpzJAGpiSCyydUiRsv0LKT9IUV0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJl2jTV6TmbYqp4q8EPbWJHaBeQwHwYDVR0j BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4 RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFD MTQ3MUU2MDhFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2sIGHBeTArgVFB08+2WGaU5/JiKi823h80 RdkmJ4NzXUDjj/hTHR1dFXMhjhbEflkIzi01mRHgMDMKeWKZJqXnA3MOeO9PDpmd Wo+xsVNcvxTrYP1cyzgnNX6YHlxom6qsEePliiFWRqi0bJB8og1Dlw8dOEqJAVlo +VXRgoaoPPdiAfKMnt7lSOqmR+c6Q+okX6XJLuONDKn6GPFmx0kmh7XIP6IbjFl3 Mxgo3tQRZa2Bt//hUHGzBN7s5dRU5hJq7wYtmUAETVvhguZTC/Ri+V9+QfgwhZfv OXWUbORSpyRlqJsbHgkoLYBlemlVLahCMhytOSKl2WY+zQ1s7Qc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:37 2026 by rpki-client