$ rpki-client -vvf rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft File: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft (raw, json) Hash identifier: vFjEZnwFmElr5CNuZ9oD1kYte5okq/qahwJ2C0KSSTI= Subject key identifier: 28:D0:E9:D5:AA:C5:F2:7E:F5:68:6C:85:58:BD:B3:FA:BC:7B:6A:CB Authority key identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 Certificate issuer: /CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Certificate serial: 36C0929DC474FF64F8C6FA75DB545B8E58E97860 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:43:58 +0000 Manifest this update: Tue 02 Jun 2026 19:38:58 +0000 Manifest next update: Wed 03 Jun 2026 21:05:58 +0000 Files and hashes: 1: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: 0vy2z3MqKAODbU17bPVUXjhaDQ2sCkp7BN40wqS+aK4=) 2: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl (hash: yPy53OsbSBPubJy2P8Bi8U8Bl7SaCsG5kf22+caPdVI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c0:92:9d:c4:74:ff:64:f8:c6:fa:75:db:54:5b:8e:58:e9:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Validity Not Before: Jun 2 19:38:58 2026 GMT Not After : Jun 3 21:05:58 2026 GMT Subject: CN=28D0E9D5AAC5F27EF5686C8558BDB3FABC7B6ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:ac:47:95:19:00:18:97:58:50:cf:68:a8: 75:10:a8:91:86:b6:15:61:21:3f:4c:8b:5e:37:15: a5:8a:8c:8a:2b:fa:c3:77:d3:02:3d:4d:57:45:88: 4c:8b:0e:31:76:8f:56:63:f7:1c:9a:29:65:b8:c9: 8c:b6:15:b3:6b:00:b1:92:a2:2a:65:a3:dd:55:42: 48:1a:bd:7c:0e:95:94:f8:89:fc:0d:e8:60:30:e3: 80:7b:93:71:8e:4d:4d:44:ab:6d:62:9a:b8:ee:36: c3:39:55:81:9b:e8:38:2f:ec:ea:97:d6:49:70:76: 84:c7:80:5c:5f:9b:22:70:f1:58:57:9d:a4:f3:9f: e6:30:a5:71:6d:30:68:c4:db:39:b1:93:9f:45:4c: e3:c5:dd:fb:f7:cb:6f:c5:cd:99:bc:56:a4:d2:49: 4c:9b:1f:ef:ef:8e:af:84:ae:31:e5:cf:26:93:af: b6:28:aa:5a:31:7f:3e:04:03:b3:02:1b:41:13:a5: 29:bb:99:bc:58:66:ef:4f:92:0c:84:b1:22:0d:82: df:9b:73:86:b9:3b:9e:f1:6d:dc:8a:45:36:af:1b: 89:37:a7:46:84:52:7c:e9:db:c2:dd:fb:2b:82:49: ca:3c:56:97:4b:4b:9f:ca:f4:40:37:93:b3:a0:3d: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D0:E9:D5:AA:C5:F2:7E:F5:68:6C:85:58:BD:B3:FA:BC:7B:6A:CB X509v3 Authority Key Identifier: keyid:19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:85:47:4c:56:38:4c:31:24:9e:f3:50:28:8b:31:02:72:6f: 30:52:07:86:1f:8d:e0:1f:22:8c:2a:d6:8e:74:40:de:f0:78: c8:e1:88:ff:f6:4e:e6:b6:36:30:f2:78:09:e6:80:73:39:a4: 00:ef:57:f9:1d:c9:b5:1e:3a:f1:06:9e:0d:99:52:86:a1:55: f6:c3:2f:ce:11:28:05:57:37:d7:8b:45:cc:b2:32:06:dd:63: 88:be:25:80:01:4f:9c:12:ff:27:e7:68:e2:13:63:3e:36:60: 45:62:e6:a4:cc:0a:bc:6a:68:4f:ed:fb:df:15:35:e6:6a:dc: 7f:14:14:73:65:0d:fd:d6:bf:ce:e5:13:c8:5a:d5:73:b1:ba: 17:9a:eb:d3:5e:67:c0:dd:d5:7f:90:c3:18:af:df:3f:4b:23: 44:d0:86:5f:83:eb:98:b6:2f:fe:91:da:bb:f9:6d:4d:ff:53: 51:0d:05:f3:52:c8:6c:82:3e:80:f2:bd:e2:0f:87:2f:c9:99: 6f:f9:ef:8b:3d:06:f3:de:8d:e7:5d:96:e9:cf:d1:c9:de:ac: 31:5d:ed:8e:80:e9:b1:a8:a3:39:3c:03:0b:8e:5f:02:8e:49: a7:4b:9f:45:24:c6:5f:32:86:a9:47:83:81:1c:e8:73:0b:ef: 79:9c:c2:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsCSncR0/2T4xvp121RbjljpeGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3 Qzg0RkRDMTAeFw0yNjA2MDIxOTM4NThaFw0yNjA2MDMyMTA1NThaMDMxMTAvBgNV BAMTKDI4RDBFOUQ1QUFDNUYyN0VGNTY4NkM4NTU4QkRCM0ZBQkM3QjZBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOaxHlRkAGJdYUM9oqHUQqJGG thVhIT9Mi143FaWKjIor+sN30wI9TVdFiEyLDjF2j1Zj9xyaKWW4yYy2FbNrALGS oiplo91VQkgavXwOlZT4ifwN6GAw44B7k3GOTU1Eq21imrjuNsM5VYGb6Dgv7OqX 1klwdoTHgFxfmyJw8VhXnaTzn+YwpXFtMGjE2zmxk59FTOPF3fv3y2/FzZm8VqTS SUybH+/vjq+ErjHlzyaTr7Yoqloxfz4EA7MCG0ETpSm7mbxYZu9PkgyEsSINgt+b c4a5O57xbdyKRTavG4k3p0aEUnzp28Ld+yuCSco8VpdLS5/K9EA3k7OgPcBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNDp1arF8n71aGyFWL2z+rx7asswHwYDVR0j BBgwFoAUGQkc40uoIPlqvC+djCTZXHyE/cEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAzMzYyZTItOTc2NS00MmJkLWI1OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0 QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3Qzg0RkRDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA5MUNFMzRCQTgyMEY5NkFCQzJGOUQ4QzI0RDk1QzdDODRG REMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5 NUM3Qzg0RkRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiFR0xWOEwxJJ7zUCiLMQJybzBSB4YfjeAf Iowq1o50QN7weMjhiP/2Tua2NjDyeAnmgHM5pADvV/kdybUeOvEGng2ZUoahVfbD L84RKAVXN9eLRcyyMgbdY4i+JYABT5wS/yfnaOITYz42YEVi5qTMCrxqaE/t+98V NeZq3H8UFHNlDf3Wv87lE8ha1XOxuhea69NeZ8Dd1X+Qwxiv3z9LI0TQhl+D65i2 L/6R2rv5bU3/U1ENBfNSyGyCPoDyveIPhy/JmW/574s9BvPejeddlunP0cnerDFd 7Y6A6bGoozk8AwuOXwKOSadLn0Ukxl8yhqlHg4Ec6HML73mcwjc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:51 2026 by rpki-client