$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json) Hash identifier: aARmAwD+V9utU8icf2UKnz3icf6rrnhGQ/rKI0x8tS4= Subject key identifier: 76:69:FE:CE:0F:47:E0:F3:12:37:36:71:0A:D6:6F:71:F9:BA:3C:5C Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Certificate serial: 36D6BE98859F9DCB7BAC3375CEE29E60E560A309 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:35:40 +0000 Manifest this update: Tue 02 Jun 2026 08:30:40 +0000 Manifest next update: Wed 03 Jun 2026 10:02:40 +0000 Files and hashes: 1: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=) 2: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: lgbbiTWhIfRGRGWtLK1/Qv9HDeTOCAFn39K6Bck/iy0=) 3: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=) 4: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=) 5: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d6:be:98:85:9f:9d:cb:7b:ac:33:75:ce:e2:9e:60:e5:60:a3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Validity Not Before: Jun 2 08:30:40 2026 GMT Not After : Jun 3 10:02:40 2026 GMT Subject: CN=7669FECE0F47E0F3123736710AD66F71F9BA3C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:d4:34:11:9c:5f:3b:96:04:61:c2:be:fd: fe:3b:64:2a:48:fe:f5:3e:8d:97:f1:7e:4f:1e:2a: c5:d2:fd:d1:07:67:ab:d0:91:66:81:7e:7e:cb:4e: 73:5d:f3:1b:96:3b:0f:80:49:97:0c:d4:76:ac:ec: f9:39:6f:9b:18:7a:c6:d5:c5:60:54:dd:6d:1b:3e: fc:46:63:36:4b:68:d7:5a:3d:fe:af:37:94:dc:71: ad:38:d0:d3:20:19:2a:d9:03:be:7a:58:81:8a:94: 14:d1:69:35:37:3f:20:88:e1:9e:56:ba:31:ff:70: 74:c7:19:89:5d:2f:4e:57:6c:99:b3:39:c5:e9:33: 60:14:76:58:1b:c7:84:f7:c0:48:1c:0e:c4:e5:82: 03:35:5f:59:6f:db:06:ba:b8:c1:dd:0b:b8:15:26: d0:1b:73:8d:68:5c:10:e7:9e:5d:30:f7:7d:76:e1: b1:02:f9:b7:56:dc:9d:cf:a7:02:62:e4:95:c5:d1: b7:79:22:93:7e:5e:c3:4d:c4:93:90:90:86:a5:0d: 90:70:77:2d:cb:e5:80:47:21:fe:d5:8b:78:22:48: 0a:4b:38:b3:a8:6d:47:a6:ef:f5:8c:60:c3:59:5f: a2:dd:b8:9c:71:cd:8c:e1:75:45:8d:8d:d9:ad:ab: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:69:FE:CE:0F:47:E0:F3:12:37:36:71:0A:D6:6F:71:F9:BA:3C:5C X509v3 Authority Key Identifier: keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:1d:f7:39:3f:44:d1:53:51:52:a1:31:ac:31:ab:c5:b8: 40:43:6a:57:b3:45:a9:59:7c:3a:d8:55:b2:a4:7b:f3:b9:6d: e4:6a:0c:da:22:c8:2d:19:01:e6:eb:f3:2e:08:3b:4e:7c:5d: 2b:8d:e5:62:9c:de:74:d9:c9:b7:c5:97:5f:1e:4d:c7:93:12: 58:dc:9b:01:f5:d8:73:24:be:59:8e:12:18:c1:65:e4:ed:08: fc:fd:e0:c2:45:13:47:e5:0c:3a:15:5f:16:b1:a6:6a:72:d8: 02:cc:92:26:3c:7a:20:3a:3b:76:ad:ea:d5:90:e3:1a:ad:52: 81:cb:c2:65:cd:95:a0:0c:01:ce:71:5b:d9:15:38:16:50:16: 14:c1:a7:60:16:5b:15:94:51:d9:82:fe:6a:61:42:2d:a6:ec: 6a:6d:67:1f:6f:53:0c:c9:bf:93:f4:f4:75:3c:32:3a:f4:51: ee:f8:c7:12:f3:b5:d3:f9:39:7b:99:00:0a:df:b5:66:ce:76: fc:0f:07:32:30:4f:4e:52:4d:dd:53:96:46:b9:be:65:43:71: ad:7c:63:dc:10:52:21:e8:ee:6b:3b:bc:a0:3e:4d:02:cc:bf: 11:ab:d7:5c:9f:70:0e:3a:fd:f5:d0:58:16:02:30:2c:27:31: be:c8:bc:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNta+mIWfnct7rDN1zuKeYOVgowkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUz OTM1NTA3QjAeFw0yNjA2MDIwODMwNDBaFw0yNjA2MDMxMDAyNDBaMDMxMTAvBgNV BAMTKDc2NjlGRUNFMEY0N0UwRjMxMjM3MzY3MTBBRDY2RjcxRjlCQTNDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYONQ0EZxfO5YEYcK+/f47ZCpI /vU+jZfxfk8eKsXS/dEHZ6vQkWaBfn7LTnNd8xuWOw+ASZcM1Has7Pk5b5sYesbV xWBU3W0bPvxGYzZLaNdaPf6vN5Tcca040NMgGSrZA756WIGKlBTRaTU3PyCI4Z5W ujH/cHTHGYldL05XbJmzOcXpM2AUdlgbx4T3wEgcDsTlggM1X1lv2wa6uMHdC7gV JtAbc41oXBDnnl0w93124bEC+bdW3J3PpwJi5JXF0bd5IpN+XsNNxJOQkIalDZBw dy3L5YBHIf7Vi3giSApLOLOobUem7/WMYMNZX6LduJxxzYzhdUWNjdmtqxdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmn+zg9H4PMSNzZxCtZvcfm6PFwwHwYDVR0j BBgwFoAUgZo4tFtP6n+YtyoxC3Lbjjk1UHswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGEyZTViNjktYWRiZC00ZTJkLTg0N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1 QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUzOTM1NTA3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTlBMzhCNDVCNEZFQTdGOThCNzJBMzEwQjcyREI4RTM5MzU1 MDdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRC OEUzOTM1NTA3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7fHfc5P0TRU1FSoTGsMavFuEBDalezRalZ fDrYVbKke/O5beRqDNoiyC0ZAebr8y4IO058XSuN5WKc3nTZybfFl18eTceTEljc mwH12HMkvlmOEhjBZeTtCPz94MJFE0flDDoVXxaxpmpy2ALMkiY8eiA6O3at6tWQ 4xqtUoHLwmXNlaAMAc5xW9kVOBZQFhTBp2AWWxWUUdmC/mphQi2m7GptZx9vUwzJ v5P09HU8Mjr0Ue74xxLztdP5OXuZAArftWbOdvwPBzIwT05STd1Tlka5vmVDca18 Y9wQUiHo7ms7vKA+TQLMvxGr11yfcA46/fXQWBYCMCwnMb7IvDE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:53 2026 by rpki-client