$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json) Hash identifier: p3vro+pUvuX44uVwm0Ex+dMxgivKZwQI6YGF+RbG0t0= Subject key identifier: A9:15:B0:C3:51:29:7D:22:86:0E:1A:CB:43:00:94:00:0D:12:80:37 Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Certificate serial: 5A2C434E3158FC35787CDC065E1E6AB9BFB8EB89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft Manifest number: 0559 Signing time: Thu 19 Mar 2026 00:52:39 +0000 Manifest this update: Thu 19 Mar 2026 00:47:39 +0000 Manifest next update: Sun 22 Mar 2026 02:32:39 +0000 Files and hashes: 1: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: NNtL2MF5pXbBQ4uKfiYGvQFViRVg6GBJISkk/HSCvJ4=) 2: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 02:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2c:43:4e:31:58:fc:35:78:7c:dc:06:5e:1e:6a:b9:bf:b8:eb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Validity Not Before: Mar 19 00:47:39 2026 GMT Not After : Mar 22 02:32:39 2026 GMT Subject: CN=A915B0C351297D22860E1ACB430094000D128037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:d7:02:04:9c:5c:bb:c2:d1:f2:73:22:c0: 10:21:9d:aa:10:1d:c8:5e:29:79:e2:15:64:04:5d: a1:50:fc:6b:fb:8b:c2:6e:ba:4b:f9:dc:40:b9:d1: fe:ef:93:51:d5:f7:c9:cb:76:c2:00:c9:b2:67:4d: 38:10:25:19:16:4b:b1:0e:f8:37:7e:e2:31:81:d6: eb:f9:75:dc:af:28:25:f1:04:99:d1:ac:70:fc:8c: e9:41:c0:72:63:3c:70:e1:ac:8e:4b:4d:93:c4:18: b8:7a:e3:90:a2:de:15:82:4a:59:40:dd:34:12:62: fa:1e:01:bf:3e:8a:5e:b9:02:3b:4b:d9:b9:02:8a: 37:24:8d:81:ce:ba:ab:43:a6:74:18:cd:a7:6b:2e: 99:8c:a5:08:e3:8c:27:2e:19:78:93:53:66:85:0b: 57:f4:e2:08:dc:65:40:b8:20:e4:31:c2:98:78:07: c6:ca:ce:fb:03:70:1f:55:ee:7e:a8:81:43:f7:03: a1:ba:8b:dc:c8:10:cb:7b:58:f7:ce:c1:90:c5:bb: 67:4b:a3:ae:f8:3a:13:bd:0e:96:73:61:4c:3b:79: 30:3f:b5:80:ab:a9:72:50:c0:d9:00:03:49:9b:93: 84:7d:df:27:ef:69:b0:7d:ba:76:ab:f9:65:13:77: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:15:B0:C3:51:29:7D:22:86:0E:1A:CB:43:00:94:00:0D:12:80:37 X509v3 Authority Key Identifier: keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:bc:8f:67:bb:a5:fe:66:ff:40:81:a3:c0:68:84:55:18:50: 28:5c:2d:8b:00:34:4c:57:7d:7e:72:63:8b:f5:75:ed:da:8b: 84:c4:0e:04:79:eb:73:91:24:8c:29:30:dc:11:4d:07:f5:96: 15:71:0d:65:3c:e1:1b:45:b1:50:08:c2:46:72:28:6d:cb:97: 87:b3:5a:f7:1f:40:a1:ce:4b:28:1c:4e:ce:3b:e1:e4:61:64: f8:14:7b:8e:28:c5:f1:84:88:03:00:1e:72:a2:3c:74:e2:9c: dc:b7:c8:a3:71:97:4b:f0:9b:40:23:61:b4:6d:d1:75:91:07: f3:41:29:20:83:c6:80:ca:c3:5e:bd:e5:ba:b4:b5:2b:b4:17: 38:a7:18:c5:4b:16:3d:91:ee:41:b2:c5:6c:69:aa:a0:1b:2c: 8c:1d:13:f3:a5:cc:b9:4d:cd:92:cb:6b:7a:83:fe:10:b8:42: 72:5b:ec:5f:5e:ee:d2:87:1e:f2:ff:da:4c:55:5e:7c:2c:8f: 3f:ac:55:ec:2a:a2:a8:aa:7b:99:32:b9:4f:76:ed:d1:2f:08: 87:66:f4:e8:be:7f:0a:a4:ed:c7:a1:a5:fc:a2:91:60:8d:47: 11:3a:38:48:53:31:8f:4c:33:15:63:17:e0:d2:7c:62:3d:65: 0b:7b:74:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWixDTjFY/DV4fNwGXh5qub+464kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1 QkYwNDk0MzAeFw0yNjAzMTkwMDQ3MzlaFw0yNjAzMjIwMjMyMzlaMDMxMTAvBgNV BAMTKEE5MTVCMEMzNTEyOTdEMjI4NjBFMUFDQjQzMDA5NDAwMEQxMjgwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxtcCBJxcu8LR8nMiwBAhnaoQ HcheKXniFWQEXaFQ/Gv7i8Juukv53EC50f7vk1HV98nLdsIAybJnTTgQJRkWS7EO +Dd+4jGB1uv5ddyvKCXxBJnRrHD8jOlBwHJjPHDhrI5LTZPEGLh645Ci3hWCSllA 3TQSYvoeAb8+il65AjtL2bkCijckjYHOuqtDpnQYzadrLpmMpQjjjCcuGXiTU2aF C1f04gjcZUC4IOQxwph4B8bKzvsDcB9V7n6ogUP3A6G6i9zIEMt7WPfOwZDFu2dL o674OhO9DpZzYUw7eTA/tYCrqXJQwNkAA0mbk4R93yfvabB9unar+WUTdzBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqRWww1EpfSKGDhrLQwCUAA0SgDcwHwYDVR0j BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5 NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIe8j2e7pf5m/0CBo8BohFUYUChcLYsANExX fX5yY4v1de3ai4TEDgR563ORJIwpMNwRTQf1lhVxDWU84RtFsVAIwkZyKG3Ll4ez WvcfQKHOSygcTs474eRhZPgUe44oxfGEiAMAHnKiPHTinNy3yKNxl0vwm0AjYbRt 0XWRB/NBKSCDxoDKw1695bq0tSu0FzinGMVLFj2R7kGyxWxpqqAbLIwdE/OlzLlN zZLLa3qD/hC4QnJb7F9e7tKHHvL/2kxVXnwsjz+sVewqoqiqe5kyuU927dEvCIdm 9Oi+fwqk7cehpfyikWCNRxE6OEhTMY9MMxVjF+DSfGI9ZQt7dHE= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:05 2026 by rpki-client