$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json) Hash identifier: YophJFBfeIvJCAFcjUNGgEs3Jsav/nZkAaQwhmc0N7w= Subject key identifier: B5:76:3B:5A:D6:39:5C:87:DA:B0:2A:12:1D:F5:14:17:14:8E:65:60 Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Certificate serial: 5598AD923DB74634347B767993CFDC6AD2230F76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:54:20 +0000 Manifest this update: Tue 21 Jul 2026 02:49:20 +0000 Manifest next update: Wed 22 Jul 2026 06:11:20 +0000 Files and hashes: 1: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=) 2: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=) 3: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=) 4: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=) 5: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: jWuRCtCn+PEu/fcyMN2lklV4hHe4yggV5HRoWs/+0yk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:98:ad:92:3d:b7:46:34:34:7b:76:79:93:cf:dc:6a:d2:23:0f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Validity Not Before: Jul 21 02:49:20 2026 GMT Not After : Jul 22 06:11:20 2026 GMT Subject: CN=B5763B5AD6395C87DAB02A121DF51417148E6560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b1:81:a1:4b:2d:d8:37:3f:8d:d8:9b:1c:6a: 7e:c9:48:64:0c:1a:f1:98:ed:88:40:da:37:25:25: 31:cc:92:9e:df:f6:73:de:bc:45:2f:13:53:40:3e: 31:ae:a4:44:99:d9:0b:bc:ba:f8:b9:e3:e7:db:b0: 51:5e:d4:65:fe:27:50:88:1b:eb:05:cf:2e:16:ee: 97:85:91:e9:89:93:0f:ea:71:ac:a2:1c:20:c2:80: 34:40:f1:d5:e3:85:a2:6d:22:ee:7d:7b:f8:ea:c3: ad:53:ba:a2:20:ac:e0:f5:dc:98:09:82:c8:a6:b7: f7:58:8a:83:9f:18:d1:1a:4c:cd:47:67:29:bd:fe: 39:c0:86:30:ee:86:6c:f9:f3:05:33:00:dd:f5:5c: ac:da:eb:33:c3:11:11:20:81:da:5e:d4:50:1e:fd: 8f:28:4b:ff:ec:2d:cc:8b:d0:e1:e6:21:d4:b1:05: 94:62:31:ca:36:11:3e:41:6a:48:81:c6:ed:27:68: bf:5d:f0:ee:90:ac:82:02:4a:6e:dc:7e:d2:44:1f: c6:97:bb:8f:1e:78:13:65:1e:2c:a0:33:c5:6e:be: f5:34:c1:9b:f3:25:e9:86:63:31:c8:32:ee:d3:66: 4f:a5:ff:20:5e:7f:41:54:c7:a7:de:e7:26:f4:4e: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:76:3B:5A:D6:39:5C:87:DA:B0:2A:12:1D:F5:14:17:14:8E:65:60 X509v3 Authority Key Identifier: keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:99:21:64:61:f7:99:be:ec:4d:07:0b:8c:97:30:bc:d9:1a: bd:7b:7d:4c:f4:b0:27:e8:dc:1a:f3:98:de:50:d7:4f:76:e8: b9:2a:4f:1c:71:c7:5d:26:68:45:8d:26:2d:4d:87:69:17:e7: b8:ce:09:72:30:57:ce:80:96:e4:78:38:a3:72:b1:ae:07:1f: da:21:37:14:b0:f3:74:59:4d:a4:97:80:e6:98:6c:86:60:dc: cf:1a:cd:63:c7:93:f2:d0:5c:3c:fe:98:fa:9a:ef:32:0e:3e: cd:a2:d3:4f:9a:bc:32:d0:57:7c:03:c9:ec:de:6b:dd:f5:84: 42:d1:80:0f:dd:8f:3c:0e:59:86:bf:50:24:c1:47:62:48:55: 6a:ee:fb:74:c5:8e:e8:31:60:ff:27:c5:ef:fe:54:a6:a2:ae: 41:ce:b1:5a:f2:63:ab:d5:2c:17:ec:df:6e:46:12:07:b3:91: 6b:59:2c:c9:77:78:cb:4b:8a:15:ab:01:83:ae:54:46:58:b0: b9:79:9b:69:1b:bf:77:a1:07:57:f0:f5:ac:75:6e:a6:f6:3d: 90:a1:26:8d:58:bb:5d:03:a6:6a:5d:b5:12:52:3c:eb:c8:da: 61:e1:08:30:ef:10:75:ce:23:1c:b7:41:64:2d:54:07:37:ef: 9e:fe:41:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZitkj23RjQ0e3Z5k8/catIjD3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3 MUU2MDhFOTAeFw0yNjA3MjEwMjQ5MjBaFw0yNjA3MjIwNjExMjBaMDMxMTAvBgNV BAMTKEI1NzYzQjVBRDYzOTVDODdEQUIwMkExMjFERjUxNDE3MTQ4RTY1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzsYGhSy3YNz+N2Jscan7JSGQM GvGY7YhA2jclJTHMkp7f9nPevEUvE1NAPjGupESZ2Qu8uvi54+fbsFFe1GX+J1CI G+sFzy4W7peFkemJkw/qcayiHCDCgDRA8dXjhaJtIu59e/jqw61TuqIgrOD13JgJ gsimt/dYioOfGNEaTM1HZym9/jnAhjDuhmz58wUzAN31XKza6zPDEREggdpe1FAe /Y8oS//sLcyL0OHmIdSxBZRiMco2ET5BakiBxu0naL9d8O6QrIICSm7cftJEH8aX u48eeBNlHiygM8VuvvU0wZvzJemGYzHIMu7TZk+l/yBef0FUx6fe5yb0TrHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtXY7WtY5XIfasCoSHfUUFxSOZWAwHwYDVR0j BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4 RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFD MTQ3MUU2MDhFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGZIWRh95m+7E0HC4yXMLzZGr17fUz0sCfo 3BrzmN5Q10926LkqTxxxx10maEWNJi1Nh2kX57jOCXIwV86AluR4OKNysa4HH9oh NxSw83RZTaSXgOaYbIZg3M8azWPHk/LQXDz+mPqa7zIOPs2i00+avDLQV3wDyeze a931hELRgA/djzwOWYa/UCTBR2JIVWru+3TFjugxYP8nxe/+VKairkHOsVryY6vV LBfs325GEgezkWtZLMl3eMtLihWrAYOuVEZYsLl5m2kbv3ehB1fw9ax1bqb2PZCh Jo1Yu10DpmpdtRJSPOvI2mHhCDDvEHXOIxy3QWQtVAc3757+Qdc= -----END CERTIFICATE-----Generated at Tue Jul 21 08:31:36 2026 by rpki-client