$ rpki-client -vvf rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft File: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft (raw, json) Hash identifier: TcMY0nZbaWe4CIr4v0kYftGgOFbNwG4S8yN4adDawTU= Subject key identifier: 58:68:4F:55:77:80:50:74:5F:E3:6F:D6:9D:61:74:56:0D:86:C4:57 Authority key identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 Certificate issuer: /CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Certificate serial: 51EBA887761FD2A8852DF94CA43541CD61771CD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:38:44 +0000 Manifest this update: Wed 17 Jun 2026 00:33:44 +0000 Manifest next update: Thu 18 Jun 2026 03:28:44 +0000 Files and hashes: 1: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl (hash: N4KeDHlSdNs2wmFWvRGkUtl9l/JVTW69aPQUs032XDY=) 2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: 0vy2z3MqKAODbU17bPVUXjhaDQ2sCkp7BN40wqS+aK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:eb:a8:87:76:1f:d2:a8:85:2d:f9:4c:a4:35:41:cd:61:77:1c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Validity Not Before: Jun 17 00:33:44 2026 GMT Not After : Jun 18 03:28:44 2026 GMT Subject: CN=58684F55778050745FE36FD69D6174560D86C457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:f4:35:24:fe:71:39:a9:96:ce:c5:00:f5: 92:6e:0a:24:5b:72:f1:d5:ee:ac:5a:0a:00:f4:f4: 0c:a8:f5:5c:94:c4:eb:4e:d6:83:78:ac:fc:9d:65: d0:59:5c:6a:17:85:22:90:06:be:57:50:ed:01:5d: fd:22:a7:25:c8:08:b6:39:30:7c:7b:13:3e:fe:ce: 7f:9a:68:10:14:ce:0c:18:ec:8b:c1:3c:6f:42:4d: fc:55:7b:bb:5f:e3:bc:10:95:c0:d3:ff:31:23:68: b8:9e:27:12:8d:26:9e:0e:bb:5e:0a:9c:f4:e5:98: 15:20:d0:7d:2b:89:2c:4a:57:10:23:1f:73:0c:ec: 22:4e:ce:31:37:43:16:5b:5e:67:e1:3d:2f:4b:47: f3:73:49:9b:6b:8f:94:a2:4d:d3:57:ac:ca:76:0b: 5a:07:ec:34:75:87:22:77:ec:5f:58:a6:4d:a0:56: dd:91:16:8c:67:30:ca:5e:03:69:5d:16:f5:bf:0e: b5:2a:69:d1:f0:6a:48:fc:ca:a7:bf:95:95:59:88: 1c:de:cf:75:40:dc:cb:dd:60:e3:bf:f8:35:67:06: 7d:fa:dd:8a:68:c1:b8:b7:29:bb:20:23:22:1b:f5: 21:b7:c4:0e:c8:6f:f1:46:a1:70:35:aa:24:c5:44: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:68:4F:55:77:80:50:74:5F:E3:6F:D6:9D:61:74:56:0D:86:C4:57 X509v3 Authority Key Identifier: keyid:19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:71:a6:bf:59:1d:eb:3d:47:ef:bd:f5:b4:4a:09:1a:24:00: 3f:0b:8e:59:fa:c6:37:19:d7:3a:64:1b:76:df:4a:58:d8:10: 97:dc:c4:ce:eb:4c:61:62:47:d2:02:81:e0:bc:b6:d4:e8:31: 9c:85:a9:f1:5b:27:48:3c:bc:db:2d:2c:ac:ab:06:32:18:4d: 37:b4:f4:c4:9e:d6:76:ba:e2:14:30:3b:72:73:88:5c:f5:18: b6:a1:2c:5c:f3:e0:b4:40:f8:e8:e0:b1:a9:f7:76:4e:d6:45: d8:1d:4f:3a:c3:87:46:8c:e6:db:d7:dc:d7:6e:04:ac:51:27: d2:73:43:a6:a6:bd:1f:18:f2:cc:72:79:89:aa:94:ee:ee:c0: 9f:b3:4d:38:94:85:4f:e3:12:5e:30:bc:6e:bb:fd:03:3f:37: dc:42:06:53:04:33:66:4a:a5:09:76:23:37:be:e3:ed:bb:40: a1:96:af:35:33:05:ce:61:cc:cd:2f:c1:ec:84:c5:23:8d:22: a9:18:5a:93:f5:d0:45:1e:5a:1c:84:4f:dc:22:30:cf:ee:42: 07:22:e3:37:f1:10:27:52:cd:4e:64:e2:27:e6:6d:a8:72:b7: ca:48:fe:87:a4:de:9d:76:7c:ce:24:55:ec:90:08:4f:50:d6: a9:1b:a9:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeuoh3Yf0qiFLflMpDVBzWF3HNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3 Qzg0RkRDMTAeFw0yNjA2MTcwMDMzNDRaFw0yNjA2MTgwMzI4NDRaMDMxMTAvBgNV BAMTKDU4Njg0RjU1Nzc4MDUwNzQ1RkUzNkZENjlENjE3NDU2MEQ4NkM0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZE/Q1JP5xOamWzsUA9ZJuCiRb cvHV7qxaCgD09Ayo9VyUxOtO1oN4rPydZdBZXGoXhSKQBr5XUO0BXf0ipyXICLY5 MHx7Ez7+zn+aaBAUzgwY7IvBPG9CTfxVe7tf47wQlcDT/zEjaLieJxKNJp4Ou14K nPTlmBUg0H0riSxKVxAjH3MM7CJOzjE3QxZbXmfhPS9LR/NzSZtrj5SiTdNXrMp2 C1oH7DR1hyJ37F9Ypk2gVt2RFoxnMMpeA2ldFvW/DrUqadHwakj8yqe/lZVZiBze z3VA3MvdYOO/+DVnBn363Ypowbi3KbsgIyIb9SG3xA7Ib/FGoXA1qiTFRG2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWGhPVXeAUHRf42/WnWF0Vg2GxFcwHwYDVR0j BBgwFoAUGQkc40uoIPlqvC+djCTZXHyE/cEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAzMzYyZTItOTc2NS00MmJkLWI1OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0 QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3Qzg0RkRDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA5MUNFMzRCQTgyMEY5NkFCQzJGOUQ4QzI0RDk1QzdDODRG REMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5 NUM3Qzg0RkRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpxpr9ZHes9R++99bRKCRokAD8Ljln6xjcZ 1zpkG3bfSljYEJfcxM7rTGFiR9ICgeC8ttToMZyFqfFbJ0g8vNstLKyrBjIYTTe0 9MSe1na64hQwO3JziFz1GLahLFzz4LRA+Ojgsan3dk7WRdgdTzrDh0aM5tvX3Ndu BKxRJ9JzQ6amvR8Y8sxyeYmqlO7uwJ+zTTiUhU/jEl4wvG67/QM/N9xCBlMEM2ZK pQl2Ize+4+27QKGWrzUzBc5hzM0vweyExSONIqkYWpP10EUeWhyET9wiMM/uQgci 4zfxECdSzU5k4ifmbahyt8pI/oek3p12fM4kVeyQCE9Q1qkbqdY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:21 2026 by rpki-client