$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json) Hash identifier: vHWh0lf+jQoZuad8j66MvxwYK+DtsO5wMhHZQ4FaWfw= Subject key identifier: C8:3C:41:12:AE:C8:63:9D:A3:32:42:A0:B7:E8:C5:BA:E2:5F:40:A2 Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Certificate serial: 38AAA5CAADE941D57E6A6946BC313243B779C9AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:01:39 +0000 Manifest this update: Tue 02 Jun 2026 17:56:39 +0000 Manifest next update: Wed 03 Jun 2026 21:03:39 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=) 2: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=) 3: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: CY3yfLrleNpxV06X7SrewHQXRGcGWRcH9hTry2/cqBc=) 4: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:aa:a5:ca:ad:e9:41:d5:7e:6a:69:46:bc:31:32:43:b7:79:c9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Validity Not Before: Jun 2 17:56:39 2026 GMT Not After : Jun 3 21:03:39 2026 GMT Subject: CN=C83C4112AEC8639DA33242A0B7E8C5BAE25F40A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:7a:85:6d:19:2f:e4:ad:76:93:5b:c7:35: 23:45:a5:d4:43:d4:f3:fa:66:a3:a9:43:dc:02:2a: 19:e0:18:7c:79:b2:b7:36:ab:81:5f:35:ee:6a:fd: bc:6a:03:de:26:91:4c:22:fd:9e:25:08:1a:41:3d: 75:58:4e:05:d0:ba:80:0d:15:44:5d:9f:c6:1f:db: e5:87:fc:03:1c:0d:bc:a4:61:06:1e:1d:c5:81:ba: 4a:af:73:7e:a7:bd:65:b7:15:1b:48:f7:90:57:0b: a1:d1:46:fa:3a:ad:09:0d:58:72:44:63:4b:6f:68: ae:13:bb:36:31:c8:12:46:9c:ec:2e:5a:46:3c:35: 89:f9:ab:66:16:1c:41:1f:59:66:38:25:ec:f1:24: 68:a9:4e:48:89:ed:d9:77:d6:51:86:ef:e9:58:ad: 54:2c:7d:d7:fc:d2:d1:ff:ff:36:98:dd:e2:10:19: d3:7e:bc:4c:e3:03:e2:c6:3c:11:a4:01:51:27:8e: d8:3e:dd:2f:a9:2d:ee:a1:94:3c:38:42:80:76:e3: ab:23:3c:b3:2d:b9:a7:27:b0:f9:4e:d3:ae:bb:e8: 9e:93:b5:aa:07:9b:fb:5a:18:b9:b3:6f:b9:e7:14: f4:ee:c8:e5:3a:8d:a6:7f:af:b5:7a:4d:5c:10:f7: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3C:41:12:AE:C8:63:9D:A3:32:42:A0:B7:E8:C5:BA:E2:5F:40:A2 X509v3 Authority Key Identifier: keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b9:a3:70:a0:af:b0:c1:ab:e8:57:a0:16:2c:ae:9d:f1:6d: db:51:85:e2:24:0f:79:56:1c:4c:65:f0:00:fd:0a:b5:5f:7c: d5:be:58:12:f0:4c:f8:73:20:d3:74:f7:9c:3c:2d:59:bb:8a: 62:b4:d5:cf:2a:51:6a:8b:8d:7c:36:9c:9f:97:61:47:88:3a: b4:b3:b2:7f:3d:ad:ca:93:ae:f5:c8:2b:b4:48:53:ea:23:f3: cc:c9:03:30:87:4f:8f:f6:f4:b3:c5:90:5a:f6:76:34:52:31: 92:83:f7:0b:d7:4a:80:16:14:cf:a0:2f:8d:af:f4:82:1a:c9: ac:c5:ee:ad:86:32:0f:8d:3c:93:2c:b7:38:8d:b1:e3:a1:e4: c2:7a:50:9d:85:a5:e2:f4:bf:1b:ec:6c:d9:74:18:5d:f6:d2: d3:1c:5c:fb:c4:e3:00:ef:fc:e1:04:d4:3c:f6:fc:2e:ab:8e: 23:f4:f7:0c:c0:e8:fe:34:d3:24:9c:af:24:0a:ac:f8:e4:4d: cd:f0:dd:17:d8:77:75:d8:8e:4f:45:98:94:d1:6a:a0:09:35: 54:3e:46:6f:36:61:4b:ae:e3:3c:eb:97:e8:69:9f:63:67:c1: 89:84:a0:fa:b7:6a:f2:49:5d:23:46:e1:ac:3d:e9:d8:88:6f: fe:98:a2:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKqlyq3pQdV+amlGvDEyQ7d5ya4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3 MUU2MDhFOTAeFw0yNjA2MDIxNzU2MzlaFw0yNjA2MDMyMTAzMzlaMDMxMTAvBgNV BAMTKEM4M0M0MTEyQUVDODYzOURBMzMyNDJBMEI3RThDNUJBRTI1RjQwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2E3qFbRkv5K12k1vHNSNFpdRD 1PP6ZqOpQ9wCKhngGHx5src2q4FfNe5q/bxqA94mkUwi/Z4lCBpBPXVYTgXQuoAN FURdn8Yf2+WH/AMcDbykYQYeHcWBukqvc36nvWW3FRtI95BXC6HRRvo6rQkNWHJE Y0tvaK4TuzYxyBJGnOwuWkY8NYn5q2YWHEEfWWY4JezxJGipTkiJ7dl31lGG7+lY rVQsfdf80tH//zaY3eIQGdN+vEzjA+LGPBGkAVEnjtg+3S+pLe6hlDw4QoB246sj PLMtuacnsPlO06676J6TtaoHm/taGLmzb7nnFPTuyOU6jaZ/r7V6TVwQ9yuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyDxBEq7IY52jMkKgt+jFuuJfQKIwHwYDVR0j BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4 RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFD MTQ3MUU2MDhFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKK5o3Cgr7DBq+hXoBYsrp3xbdtRheIkD3lW HExl8AD9CrVffNW+WBLwTPhzINN095w8LVm7imK01c8qUWqLjXw2nJ+XYUeIOrSz sn89rcqTrvXIK7RIU+oj88zJAzCHT4/29LPFkFr2djRSMZKD9wvXSoAWFM+gL42v 9IIayazF7q2GMg+NPJMstziNseOh5MJ6UJ2FpeL0vxvsbNl0GF320tMcXPvE4wDv /OEE1Dz2/C6rjiP09wzA6P400yScryQKrPjkTc3w3RfYd3XYjk9FmJTRaqAJNVQ+ Rm82YUuu4zzrl+hpn2NnwYmEoPq3avJJXSNG4aw96diIb/6YomU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:02 2026 by rpki-client