$ rpki-client -vvf rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft File: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft (raw, json) Hash identifier: YjXu0aVgbkjAH6WVGO5rj5svkMUn+TlSN1h9uJnRF+w= Subject key identifier: AF:74:10:43:5D:8A:66:B1:38:3A:64:00:43:48:83:28:97:49:EE:6D Authority key identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 Certificate issuer: /CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Certificate serial: 55051D82D420DE5C3C4D3FA62F4DC8AF7D1A7E4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:03:53 +0000 Manifest this update: Mon 20 Jul 2026 17:58:53 +0000 Manifest next update: Tue 21 Jul 2026 20:55:53 +0000 Files and hashes: 1: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl (hash: ZZF0JjNTbXUDs3v76Suc4WFfTUiFgRnjpM0eUaUt+UQ=) 2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: 0vy2z3MqKAODbU17bPVUXjhaDQ2sCkp7BN40wqS+aK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:05:1d:82:d4:20:de:5c:3c:4d:3f:a6:2f:4d:c8:af:7d:1a:7e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Validity Not Before: Jul 20 17:58:53 2026 GMT Not After : Jul 21 20:55:53 2026 GMT Subject: CN=AF7410435D8A66B1383A6400434883289749EE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:1d:16:97:e6:8b:a0:3d:9f:0a:75:bf:18: 47:92:95:07:3e:bd:9b:0d:4a:db:17:95:ea:1e:b4: 93:24:f7:75:be:ae:f2:18:e4:1b:cf:b4:82:d8:0f: 09:b9:a7:2a:5f:48:81:4a:05:40:42:69:39:18:1c: a6:0f:28:15:93:cf:14:17:ab:b7:10:fe:d6:47:3d: 5a:d5:5c:4e:91:1d:16:1f:7c:69:e0:7d:db:80:b1: ed:3d:3c:17:77:3d:78:b7:c8:51:4c:e7:9d:00:c8: 7c:ff:61:76:7c:d5:78:48:f2:67:7e:95:83:40:c7: 9e:cf:a5:15:9c:e0:5b:cc:17:7f:6d:1e:13:ae:f7: 50:56:79:4d:52:af:15:e9:ec:b5:c6:69:c4:84:0d: 6d:03:36:ad:e8:f2:d6:c3:8a:46:82:71:d6:31:26: e0:6f:a7:8e:e5:53:41:c2:e5:9b:83:0a:eb:a6:59: b7:b2:da:a4:5a:93:17:0f:7c:b6:ea:93:37:5c:70: 0b:ad:e7:61:ee:f3:0d:3f:80:33:41:b1:43:33:28: 5a:c6:ea:32:bb:78:18:db:98:25:57:34:b7:5f:fc: 8d:ee:d2:d1:aa:d6:4e:fc:60:5f:d4:ed:98:6f:25: 30:cc:54:a4:a3:7d:8c:55:0e:9f:97:26:54:51:30: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:74:10:43:5D:8A:66:B1:38:3A:64:00:43:48:83:28:97:49:EE:6D X509v3 Authority Key Identifier: keyid:19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:08:85:95:5f:5b:94:4c:0e:12:19:8e:77:c1:af:d5:98: 63:4f:a6:a3:87:33:7f:9e:ee:53:d9:23:84:db:be:3e:33:e5: 44:3a:f6:30:0e:cd:b2:9a:00:ad:cf:87:c6:b9:04:92:9c:49: c6:f3:07:01:b6:06:7b:e5:1d:22:b2:40:51:29:20:eb:77:72: 98:7c:b2:65:88:1a:b4:5d:41:b1:e4:d5:75:76:a4:f5:57:c3: b3:03:3e:dd:3f:b7:6f:44:5f:ce:63:68:0f:4c:42:98:4f:87: b9:f1:dd:ee:ba:2e:38:b1:ab:a8:a9:fd:e9:c2:66:b8:7a:82: 9a:34:bd:fc:d0:e9:63:59:df:53:19:7d:34:69:72:e0:45:1f: ca:e6:e3:6e:47:3b:dd:51:d1:53:b4:44:34:de:31:aa:46:66: a1:ea:57:e0:99:40:09:78:af:2e:50:95:ef:cd:fb:55:d1:7a: 3f:db:83:8c:ef:d4:56:76:c3:fc:1f:33:26:93:55:da:53:f0: 86:cd:37:17:f1:00:22:de:29:06:da:0b:6b:ca:80:74:58:0c: ab:21:b5:d3:1c:39:03:39:30:d6:28:07:2b:65:af:13:fb:dc: 19:dc:ee:a8:67:84:71:75:6d:c0:9e:09:34:1c:60:ae:c6:7a: 12:c6:6a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQUdgtQg3lw8TT+mL03Ir30afkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3 Qzg0RkRDMTAeFw0yNjA3MjAxNzU4NTNaFw0yNjA3MjEyMDU1NTNaMDMxMTAvBgNV BAMTKEFGNzQxMDQzNUQ4QTY2QjEzODNBNjQwMDQzNDg4MzI4OTc0OUVFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3h0Wl+aLoD2fCnW/GEeSlQc+ vZsNStsXleoetJMk93W+rvIY5BvPtILYDwm5pypfSIFKBUBCaTkYHKYPKBWTzxQX q7cQ/tZHPVrVXE6RHRYffGngfduAse09PBd3PXi3yFFM550AyHz/YXZ81XhI8md+ lYNAx57PpRWc4FvMF39tHhOu91BWeU1SrxXp7LXGacSEDW0DNq3o8tbDikaCcdYx JuBvp47lU0HC5ZuDCuumWbey2qRakxcPfLbqkzdccAut52Hu8w0/gDNBsUMzKFrG 6jK7eBjbmCVXNLdf/I3u0tGq1k78YF/U7ZhvJTDMVKSjfYxVDp+XJlRRMGV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr3QQQ12KZrE4OmQAQ0iDKJdJ7m0wHwYDVR0j BBgwFoAUGQkc40uoIPlqvC+djCTZXHyE/cEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAzMzYyZTItOTc2NS00MmJkLWI1OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0 QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3Qzg0RkRDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA5MUNFMzRCQTgyMEY5NkFCQzJGOUQ4QzI0RDk1QzdDODRG REMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5 NUM3Qzg0RkRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIBCIWVX1uUTA4SGY53wa/VmGNPpqOHM3+e 7lPZI4Tbvj4z5UQ69jAOzbKaAK3Ph8a5BJKcScbzBwG2BnvlHSKyQFEpIOt3cph8 smWIGrRdQbHk1XV2pPVXw7MDPt0/t29EX85jaA9MQphPh7nx3e66Ljixq6ip/enC Zrh6gpo0vfzQ6WNZ31MZfTRpcuBFH8rm425HO91R0VO0RDTeMapGZqHqV+CZQAl4 ry5Qle/N+1XRej/bg4zv1FZ2w/wfMyaTVdpT8IbNNxfxACLeKQbaC2vKgHRYDKsh tdMcOQM5MNYoBytlrxP73Bnc7qhnhHF1bcCeCTQcYK7GehLGaiM= -----END CERTIFICATE-----Generated at Tue Jul 21 08:30:07 2026 by rpki-client