$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft File: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft (raw, json) Hash identifier: ks8HaT73PyhLz99JR8rl41hKnnT/XgV/VDlv3y2owYQ= Subject key identifier: CA:9A:09:07:B5:D6:92:88:0D:C4:C0:AE:3F:C7:11:27:CD:10:35:80 Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 Certificate issuer: /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Certificate serial: 650F58211A7CE00819999CA2F99D7C04D0BC22A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:06:04 +0000 Manifest this update: Tue 16 Jun 2026 18:01:04 +0000 Manifest next update: Wed 17 Jun 2026 19:36:04 +0000 Files and hashes: 1: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: CjrhC79NpfmyHbjUbEINIlY/W8SS5iUE5Mpe2yHqTCk=) 2: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: xat5QRgiDjEvf5+MHrIJqdczPQXPNnHqQPKuqIFalY0=) 3: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: A8Rj4cqXdcnsq+FLejpEUcmUwRFqYq1jFxwy+Q4EccA=) 4: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: 0XQ1YZo4kGL7Y3CIQczOPIPj1y3PxpdocpKouQW/EdQ=) 5: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: uuKla2urFiVoLa1tj8NM3bGyRcKks2/aX+x/1D+sD6M=) 6: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: O5O2bHjSgz5EaoYBjPQFvScfNgW4n1HG3kEQcg119Ng=) 7: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 0HclTm8jPdJ9pdLkBcx2iHTadXENhk0okUOb438P1GQ=) 8: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl (hash: qptcW53pZvvvfNH67LzSCdthcBetU33sSPB2n4Fx7L0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0f:58:21:1a:7c:e0:08:19:99:9c:a2:f9:9d:7c:04:d0:bc:22:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Validity Not Before: Jun 16 18:01:04 2026 GMT Not After : Jun 17 19:36:04 2026 GMT Subject: CN=CA9A0907B5D692880DC4C0AE3FC71127CD103580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:6c:dc:57:72:aa:50:96:af:07:ec:86:3d: d3:b6:bd:c1:7c:7f:b1:2f:04:9e:30:d7:3f:03:aa: f6:e7:bd:17:55:9e:89:53:4d:ce:95:fb:26:c9:5e: 2d:9f:df:b8:f8:07:15:7b:ce:1c:81:59:0a:d3:12: a0:80:6a:2d:49:42:0e:70:98:11:e9:0f:1f:ca:49: ed:5b:72:58:ee:41:be:d1:aa:e6:68:9d:7e:32:80: 3d:38:d0:54:22:b3:b3:ca:2b:ef:d1:bb:2f:02:13: e6:a1:2f:d8:eb:b4:61:f9:e5:22:ad:10:a0:77:1d: 5a:4a:58:79:19:0b:ed:bc:e1:7c:44:fc:c2:f4:ed: 74:12:a6:37:02:94:2a:fb:98:1f:fa:2d:04:47:0f: 06:64:e3:06:81:ab:d3:80:c3:e9:9a:af:5f:87:cb: 29:ae:e6:2b:03:d4:55:9c:25:4d:91:4a:a4:af:bd: da:ef:80:64:5a:e5:01:f9:f7:36:e6:21:d7:62:d1: 40:61:8a:ba:12:e2:1f:97:05:4f:64:0a:2d:e1:ce: a4:ba:1e:00:a5:1d:4e:00:3a:85:25:d5:c6:30:87: 13:35:a8:06:b3:5f:4c:fd:d9:1b:c3:e3:5e:3c:bf: 14:75:67:03:cb:4c:92:f3:23:ab:74:09:14:49:92: af:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:09:07:B5:D6:92:88:0D:C4:C0:AE:3F:C7:11:27:CD:10:35:80 X509v3 Authority Key Identifier: keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7d:bd:c5:3c:40:db:3a:06:f8:de:33:55:86:18:da:b2:36: f2:a0:32:30:f8:83:a2:58:2d:23:ea:46:b6:3b:42:61:10:e5: c4:4a:34:7f:ec:7d:09:4a:d8:6c:7c:65:01:3d:6c:75:02:6a: 94:f5:ee:a6:9f:29:8d:59:7d:2e:f8:a9:d7:20:1f:63:d4:64: bb:fe:88:80:f9:d2:8e:e8:46:99:a0:68:4e:5f:fe:3a:74:06: 8e:26:64:e0:51:94:84:4d:bb:3f:e1:9b:55:c6:e7:2c:94:11: c7:00:a4:15:bd:08:81:c8:a5:1f:37:13:c9:07:00:91:64:3d: 67:83:90:8a:d4:3f:39:2a:c1:26:01:86:bd:d0:46:f2:2a:26: 95:ba:bc:65:e5:bd:40:d0:b6:4b:c2:ea:65:9a:75:5b:c1:90: 22:49:2f:ac:ea:49:62:7b:bf:97:17:4b:0b:a9:52:10:b9:cd: f0:7b:ee:f3:0a:a6:d7:7c:27:67:9c:60:3f:68:25:bc:d0:53: 4d:80:b4:39:55:40:94:60:2d:98:ba:a1:1c:20:01:79:08:b4: 24:6b:ff:4b:15:bb:f3:48:88:a1:c0:50:fe:9e:34:38:61:4c: e6:74:2c:ab:56:e5:f3:2a:fc:b5:91:fa:0b:7e:d4:b9:88:60: b4:4f:20:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQ9YIRp84AgZmZyi+Z18BNC8IqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1 RUVEODhEMTAeFw0yNjA2MTYxODAxMDRaFw0yNjA2MTcxOTM2MDRaMDMxMTAvBgNV BAMTKENBOUEwOTA3QjVENjkyODgwREM0QzBBRTNGQzcxMTI3Q0QxMDM1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJn2zcV3KqUJavB+yGPdO2vcF8 f7EvBJ4w1z8DqvbnvRdVnolTTc6V+ybJXi2f37j4BxV7zhyBWQrTEqCAai1JQg5w mBHpDx/KSe1bcljuQb7RquZonX4ygD040FQis7PKK+/Ruy8CE+ahL9jrtGH55SKt EKB3HVpKWHkZC+284XxE/ML07XQSpjcClCr7mB/6LQRHDwZk4waBq9OAw+mar1+H yymu5isD1FWcJU2RSqSvvdrvgGRa5QH59zbmIddi0UBhiroS4h+XBU9kCi3hzqS6 HgClHU4AOoUl1cYwhxM1qAazX0z92RvD4148vxR1ZwPLTJLzI6t0CRRJkq9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypoJB7XWkogNxMCuP8cRJ80QNYAwHwYDVR0j BBgwFoAUsZxlaC0ReE19Kr2NS+vHxF7tiNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdmNDkwNjgtYzBjYS00YTIxLTlhOGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1Njgy RDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1RUVEODhEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlDNjU2ODJEMTE3ODREN0QyQUJEOEQ0QkVCQzdDNDVFRUQ4 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3 QzQ1RUVEODhEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA99vcU8QNs6BvjeM1WGGNqyNvKgMjD4g6JY LSPqRrY7QmEQ5cRKNH/sfQlK2Gx8ZQE9bHUCapT17qafKY1ZfS74qdcgH2PUZLv+ iID50o7oRpmgaE5f/jp0Bo4mZOBRlIRNuz/hm1XG5yyUEccApBW9CIHIpR83E8kH AJFkPWeDkIrUPzkqwSYBhr3QRvIqJpW6vGXlvUDQtkvC6mWadVvBkCJJL6zqSWJ7 v5cXSwupUhC5zfB77vMKptd8J2ecYD9oJbzQU02AtDlVQJRgLZi6oRwgAXkItCRr /0sVu/NIiKHAUP6eNDhhTOZ0LKtW5fMq/LWR+gt+1LmIYLRPIAQ= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:20 2026 by rpki-client