$ rpki-client -vvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft File: 19101281C951DCE434F1B713AE570F59EE413A09.mft (raw, json) Hash identifier: 5ZOUXeywgl/iTEPlty3+eFc/35EQYyS8HGupHGAGXYg= Subject key identifier: 5D:6D:60:BF:B2:EF:C1:39:77:75:A2:02:B3:9D:69:43:33:2F:AA:80 Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09 Certificate serial: 20FFDDE08AC7DAF948F7F51B529FDE92FFA848E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:29:13 +0000 Manifest this update: Tue 02 Jun 2026 11:24:13 +0000 Manifest next update: Wed 03 Jun 2026 13:00:13 +0000 Files and hashes: 1: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: w5VnAqDMpxkCSyJK8a4JzBCfvPRADlp4Zd050ewYnlA=) 2: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: pQnNBmBtFzueuc0/RAfPveu5rYMb0ariGWnKZ/WG/t8=) 3: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE=) 4: 19101281C951DCE434F1B713AE570F59EE413A09.crl (hash: MxyxxVZxWL8lga4fVBiOzvdXOq5z31TcYw1kuuTfF88=) 5: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: lsZJ+/dkSenhsqGfebfOtSdM0lXp316Uwu+8bQgCJfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ff:dd:e0:8a:c7:da:f9:48:f7:f5:1b:52:9f:de:92:ff:a8:48:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09 Validity Not Before: Jun 2 11:24:13 2026 GMT Not After : Jun 3 13:00:13 2026 GMT Subject: CN=5D6D60BFB2EFC1397775A202B39D6943332FAA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:7d:ec:65:5d:ae:3f:b7:12:61:2f:a7:ac: 4b:e3:2f:3c:05:8d:80:c7:15:e0:4d:82:6d:f6:f0: fe:4e:60:bc:e9:c8:6b:76:cb:11:cf:68:69:7d:e8: 02:10:70:7d:40:81:94:47:38:73:03:67:c3:58:04: 86:5e:66:dd:fc:6e:b8:6b:74:10:7c:27:3c:30:cb: ba:3b:ec:6f:f0:f2:49:5b:f3:92:fa:c4:b5:06:b1: f1:3b:22:20:70:c0:6f:08:a3:1d:82:d6:95:54:5b: 19:53:fc:8e:9b:e6:00:de:09:06:51:8d:56:54:e0: 11:5a:19:b2:91:89:ef:50:a7:fe:7c:26:63:02:3b: 39:68:e3:f1:58:af:45:7c:c9:8d:12:b4:a1:eb:d6: 53:14:8c:6c:59:b7:79:5c:1c:6e:c5:d5:5f:d4:3a: 7a:ef:69:bb:9f:10:75:10:a7:53:49:a9:bd:be:3b: 26:a3:3c:42:15:a1:33:2e:51:dd:9a:38:1d:08:a2: b2:1f:b9:4e:1b:fb:1f:f2:b8:2a:85:8a:9c:8e:2f: fb:cc:28:1d:0a:fb:79:6c:f2:e0:2d:7c:63:ef:b1: 6d:2a:34:c9:67:61:8c:88:90:6f:0f:b5:44:7f:98: ef:46:f3:75:ad:c7:51:ad:f8:ef:a9:fc:2c:30:c7: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6D:60:BF:B2:EF:C1:39:77:75:A2:02:B3:9D:69:43:33:2F:AA:80 X509v3 Authority Key Identifier: keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:cb:1a:df:0b:5c:db:03:18:83:c9:5d:7d:b3:9a:ea:a5:9b: a7:91:e7:51:b8:c8:e7:c9:1b:04:f7:4a:5b:ef:dd:1d:ce:d9: 7f:e6:ce:fe:a1:96:37:58:66:d4:58:da:aa:dc:3c:1c:e0:52: 37:9b:db:e9:2c:70:ae:ff:6a:a5:a9:d6:d8:63:f7:8d:eb:97: 64:12:99:40:57:82:d9:00:41:6b:bd:f0:50:49:fe:fc:18:f4: c4:73:1e:37:d9:c4:a0:2a:54:df:94:f4:b5:7d:b4:a4:37:50: b3:ee:6f:8b:62:dc:72:7f:38:44:e0:c1:9f:70:81:1e:9e:dc: 52:e4:2d:f7:7a:c9:34:04:82:48:b8:7b:cb:6e:b5:af:e0:3f: d9:ec:25:a7:55:23:d5:c5:14:88:fe:cd:6a:00:8c:79:39:35: ad:2f:40:2b:3d:19:41:a2:be:7a:18:74:46:69:f8:4b:74:1c: 4c:8c:c3:3d:94:e5:2a:7f:75:2c:b0:b3:96:e5:e2:04:e5:21: 06:c0:e8:af:90:28:61:7a:53:93:cf:17:dd:74:01:61:56:0e: 28:b1:fb:b4:a0:3a:10:4f:58:c0:f9:57:e2:01:f3:7d:b0:e7: 16:9b:99:6f:61:39:2e:41:42:03:0e:ff:b9:31:58:35:a3:e4: f7:3c:85:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIP/d4IrH2vlI9/UbUp/ekv+oSOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMDEyODFDOTUxRENFNDM0RjFCNzEzQUU1NzBGNTlF RTQxM0EwOTAeFw0yNjA2MDIxMTI0MTNaFw0yNjA2MDMxMzAwMTNaMDMxMTAvBgNV BAMTKDVENkQ2MEJGQjJFRkMxMzk3Nzc1QTIwMkIzOUQ2OTQzMzMyRkFBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIr33sZV2uP7cSYS+nrEvjLzwF jYDHFeBNgm328P5OYLzpyGt2yxHPaGl96AIQcH1AgZRHOHMDZ8NYBIZeZt38brhr dBB8Jzwwy7o77G/w8klb85L6xLUGsfE7IiBwwG8Iox2C1pVUWxlT/I6b5gDeCQZR jVZU4BFaGbKRie9Qp/58JmMCOzlo4/FYr0V8yY0StKHr1lMUjGxZt3lcHG7F1V/U OnrvabufEHUQp1NJqb2+OyajPEIVoTMuUd2aOB0IorIfuU4b+x/yuCqFipyOL/vM KB0K+3ls8uAtfGPvsW0qNMlnYYyIkG8PtUR/mO9G83Wtx1Gt+O+p/Cwwx+2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXW1gv7LvwTl3daICs51pQzMvqoAwHwYDVR0j BBgwFoAUGRASgclR3OQ08bcTrlcPWe5BOgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJjNjk0NDAtOGIxNy00YTY4LWEwZmEtNjYxNTllMjE2MmUwLzAvMTkxMDEyODFD OTUxRENFNDM0RjFCNzEzQUU1NzBGNTlFRTQxM0EwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTEwMTI4MUM5NTFEQ0U0MzRGMUI3MTNBRTU3MEY1OUVFNDEz QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvMTkxMDEyODFDOTUxRENFNDM0RjFCNzEzQUU1NzBG NTlFRTQxM0EwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXLGt8LXNsDGIPJXX2zmuqlm6eR51G4yOfJ GwT3Slvv3R3O2X/mzv6hljdYZtRY2qrcPBzgUjeb2+kscK7/aqWp1thj943rl2QS mUBXgtkAQWu98FBJ/vwY9MRzHjfZxKAqVN+U9LV9tKQ3ULPub4ti3HJ/OETgwZ9w gR6e3FLkLfd6yTQEgki4e8tuta/gP9nsJadVI9XFFIj+zWoAjHk5Na0vQCs9GUGi vnoYdEZp+Et0HEyMwz2U5Sp/dSyws5bl4gTlIQbA6K+QKGF6U5PPF910AWFWDiix +7SgOhBPWMD5V+IB832w5xabmW9hOS5BQgMO/7kxWDWj5Pc8hcs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:55 2026 by rpki-client