$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft File: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft (raw, json) Hash identifier: 3CwUv2Dc7dtYngWrKeOed/AFxPP38+PZXgyTLbs4TMY= Subject key identifier: 9B:F1:62:AF:BF:D4:62:A7:E4:8B:74:4C:29:BA:E3:F7:E5:A5:AE:9E Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 Certificate issuer: /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Certificate serial: 2FEA8FB0F7EB9985F8B24EF1B1228EEB896F1FF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:36:42 +0000 Manifest this update: Wed 03 Jun 2026 01:31:42 +0000 Manifest next update: Thu 04 Jun 2026 02:57:42 +0000 Files and hashes: 1: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: 0XQ1YZo4kGL7Y3CIQczOPIPj1y3PxpdocpKouQW/EdQ=) 2: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: O5O2bHjSgz5EaoYBjPQFvScfNgW4n1HG3kEQcg119Ng=) 3: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: CjrhC79NpfmyHbjUbEINIlY/W8SS5iUE5Mpe2yHqTCk=) 4: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 0HclTm8jPdJ9pdLkBcx2iHTadXENhk0okUOb438P1GQ=) 5: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl (hash: hC67a7DfynbSv4lRzbs3OqcU4APT4Zj6SnE2/lhJ0GI=) 6: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: xat5QRgiDjEvf5+MHrIJqdczPQXPNnHqQPKuqIFalY0=) 7: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: uuKla2urFiVoLa1tj8NM3bGyRcKks2/aX+x/1D+sD6M=) 8: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: A8Rj4cqXdcnsq+FLejpEUcmUwRFqYq1jFxwy+Q4EccA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ea:8f:b0:f7:eb:99:85:f8:b2:4e:f1:b1:22:8e:eb:89:6f:1f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Validity Not Before: Jun 3 01:31:42 2026 GMT Not After : Jun 4 02:57:42 2026 GMT Subject: CN=9BF162AFBFD462A7E48B744C29BAE3F7E5A5AE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:ed:48:5f:f1:2c:97:a3:db:fd:86:8e:72: d7:77:07:82:d9:41:17:c7:75:63:16:9a:05:29:c8: cf:0a:9d:c5:31:b7:f9:7a:f0:5f:71:cc:3a:58:fc: ad:d1:a3:9f:e3:38:c7:bd:8d:3e:d3:60:f1:cb:9f: ce:1e:0b:fa:9e:6a:22:a8:cc:f1:2b:b9:28:ed:6e: e5:25:95:8f:86:21:25:d8:cb:51:fb:af:bd:d8:af: 00:72:ba:93:4b:fa:b8:f7:ec:01:56:12:7e:44:af: 3b:c2:89:d6:b9:2e:69:51:29:1c:fd:a1:83:c6:2f: 86:aa:f7:b1:88:7b:af:7e:40:60:d8:ed:89:70:65: 14:99:f0:6f:80:04:91:53:7c:16:9b:b0:f6:46:d9: eb:fb:1f:0e:de:a6:8b:a6:ba:69:b9:a4:32:cf:a1: d3:44:11:9a:58:7c:5d:41:a9:9d:de:e7:d1:cc:02: 7c:5a:ff:eb:64:d9:bc:b5:8e:de:e5:da:78:5e:3c: 2c:fa:94:fb:43:e7:20:80:c9:69:ec:a5:9f:6a:dd: a1:20:3c:97:e0:8a:ac:a8:4f:b6:b0:a5:ca:33:c4: c2:da:c1:0d:a4:93:d5:74:42:b0:ee:33:b2:a2:0f: b7:4f:2d:b4:a3:49:c1:c6:5c:af:56:cf:81:ae:32: 4d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:62:AF:BF:D4:62:A7:E4:8B:74:4C:29:BA:E3:F7:E5:A5:AE:9E X509v3 Authority Key Identifier: keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:41:9b:23:7e:c2:eb:0c:7a:c4:35:59:dd:35:53:18:3e:13: ed:b0:9a:31:b9:4b:aa:ac:d4:46:54:d5:8f:b9:a2:dd:ad:38: ea:82:35:0c:2d:d0:5f:3a:6c:1a:df:4c:8c:dc:55:8b:c9:d0: 62:32:24:a6:51:9b:20:d1:a9:17:7f:57:46:1b:74:3e:93:86: ce:16:f2:65:53:38:43:d3:db:81:51:1c:a8:68:8c:01:6c:f9: 6b:b9:84:3f:af:d7:4f:39:1b:32:90:59:df:48:9d:cb:e3:2e: 32:95:ec:71:35:c9:0a:42:10:6b:69:46:1f:4b:1f:c1:ec:c9: 0b:8e:5a:2e:4e:9c:ea:af:6a:9e:3b:a2:72:1a:e9:4f:1e:8f: 06:41:25:99:89:8f:bd:c7:b7:fb:81:75:89:85:50:95:cc:c1: be:7c:22:7c:5e:26:72:a7:f7:75:2d:a5:ca:ff:4b:9b:95:c2: 87:ad:4d:d4:8c:2f:33:74:eb:a3:9f:73:7a:aa:79:d7:ec:aa: 1f:5c:81:34:39:f5:3b:ef:88:7b:ef:37:7e:13:b2:53:b1:e6: 0e:f2:b7:d4:63:9d:15:b9:9f:48:ab:d7:b6:9d:74:8b:dd:c4: 53:06:e9:71:ee:1d:af:4c:af:6e:66:50:14:53:c1:2e:23:64: d5:7c:3d:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+qPsPfrmYX4sk7xsSKO64lvH/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1 RUVEODhEMTAeFw0yNjA2MDMwMTMxNDJaFw0yNjA2MDQwMjU3NDJaMDMxMTAvBgNV BAMTKDlCRjE2MkFGQkZENDYyQTdFNDhCNzQ0QzI5QkFFM0Y3RTVBNUFFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvO1IX/Esl6Pb/YaOctd3B4LZ QRfHdWMWmgUpyM8KncUxt/l68F9xzDpY/K3Ro5/jOMe9jT7TYPHLn84eC/qeaiKo zPEruSjtbuUllY+GISXYy1H7r73YrwByupNL+rj37AFWEn5ErzvCida5LmlRKRz9 oYPGL4aq97GIe69+QGDY7YlwZRSZ8G+ABJFTfBabsPZG2ev7Hw7epoumumm5pDLP odNEEZpYfF1BqZ3e59HMAnxa/+tk2by1jt7l2nhePCz6lPtD5yCAyWnspZ9q3aEg PJfgiqyoT7awpcozxMLawQ2kk9V0QrDuM7KiD7dPLbSjScHGXK9Wz4GuMk33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/Fir7/UYqfki3RMKbrj9+Wlrp4wHwYDVR0j BBgwFoAUsZxlaC0ReE19Kr2NS+vHxF7tiNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdmNDkwNjgtYzBjYS00YTIxLTlhOGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1Njgy RDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1RUVEODhEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlDNjU2ODJEMTE3ODREN0QyQUJEOEQ0QkVCQzdDNDVFRUQ4 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3 QzQ1RUVEODhEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxBmyN+wusMesQ1Wd01Uxg+E+2wmjG5S6qs 1EZU1Y+5ot2tOOqCNQwt0F86bBrfTIzcVYvJ0GIyJKZRmyDRqRd/V0YbdD6Ths4W 8mVTOEPT24FRHKhojAFs+Wu5hD+v1085GzKQWd9IncvjLjKV7HE1yQpCEGtpRh9L H8HsyQuOWi5OnOqvap47onIa6U8ejwZBJZmJj73Ht/uBdYmFUJXMwb58InxeJnKn 93Utpcr/S5uVwoetTdSMLzN066Ofc3qqedfsqh9cgTQ59TvviHvvN34TslOx5g7y t9RjnRW5n0ir17addIvdxFMG6XHuHa9Mr25mUBRTwS4jZNV8PRs= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:56 2026 by rpki-client