$ rpki-client -vvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft File: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft (raw, json) Hash identifier: v9NBYfgpUqZun79VZPtkKrSyjyRxYZu2Ps/RvVtGRNU= Subject key identifier: A3:E7:C2:96:CB:08:6A:2D:0C:B6:36:08:F7:74:64:2D:76:E2:82:F8 Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 Certificate issuer: /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Certificate serial: 312AB31F285B08B2502C2B473EC0B08DA19EC4CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:25:25 +0000 Manifest this update: Sat 20 Jun 2026 00:20:25 +0000 Manifest next update: Sun 21 Jun 2026 03:19:25 +0000 Files and hashes: 1: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: x6q8v1sq7gPnj36cQqjz3ENhVrIMCaudmUGFR0TJWTE=) 2: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: iaDIctPMB1cb8jRuozs+7fq0LvdviMyJlcS3OgZDYDM=) 3: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl (hash: s6buWwsS32fBZYrhccrV6M44WluzHz49gLVza0v8q9o=) 4: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: GZ2/sYXm8mn6l79+sWeTVBLDtiFjEldYgeqXYA/mkHs=) 5: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Ctn3mxVihWEQWfZTzb0YPQIateGW/rElkgUhKfXEfc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2a:b3:1f:28:5b:08:b2:50:2c:2b:47:3e:c0:b0:8d:a1:9e:c4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Validity Not Before: Jun 20 00:20:25 2026 GMT Not After : Jun 21 03:19:25 2026 GMT Subject: CN=A3E7C296CB086A2D0CB63608F774642D76E282F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:bb:95:7e:40:c6:73:31:55:90:9f:71:f8: e4:54:77:90:6a:03:ea:49:9a:8b:59:e3:a2:ac:20: 17:7b:58:e8:b4:44:07:66:7d:3a:68:24:41:84:4d: 9f:55:88:81:59:3e:07:6e:7b:70:f4:64:ee:63:86: 91:9f:3d:67:72:e3:e9:17:59:3a:91:d7:57:05:29: b0:c6:f4:33:a9:94:2b:97:c2:f7:d0:46:f3:73:81: 32:cd:0b:bf:4c:1d:2d:b5:00:f8:fe:f1:2d:24:43: 5a:21:98:3e:08:e7:7a:f8:69:df:28:2e:94:27:9f: a0:2a:06:b8:31:78:6a:3f:05:0e:bd:2e:a1:df:c4: e7:c6:75:64:f5:01:6f:45:4b:4a:28:10:fa:3d:5e: 6e:f6:cc:13:fa:60:e1:54:78:b6:d6:22:98:d7:7b: fa:47:12:23:db:79:ab:1d:97:92:2d:46:ba:41:d3: 8d:96:56:25:a9:49:f5:ee:6d:3a:71:7e:e1:28:e0: b5:c3:18:4c:1b:e8:e1:be:99:ae:aa:2a:c8:a5:69: 2b:8b:fb:39:6c:8d:51:18:9c:d1:61:98:49:b6:14: a3:b6:40:d6:fc:98:ce:68:dc:04:19:aa:ee:47:a0: 6e:c0:f2:c2:26:2e:1f:71:5f:46:6f:8d:ac:96:70: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E7:C2:96:CB:08:6A:2D:0C:B6:36:08:F7:74:64:2D:76:E2:82:F8 X509v3 Authority Key Identifier: keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ac:19:95:d3:31:c7:dc:72:18:a1:0b:7a:e2:3b:a6:42:9c: b3:19:ce:fe:8b:0c:e4:fd:be:40:c9:38:75:36:82:98:52:b4: 98:15:a5:88:19:12:5b:c0:d5:87:04:36:87:ea:34:bb:fb:32: 2c:02:dd:ab:03:4c:9d:c7:71:34:bf:cf:87:8a:82:6d:66:50: 40:72:76:45:97:78:5d:8d:79:0f:c8:c4:1f:d1:d4:71:c4:35: f2:e2:68:30:e6:3a:17:3a:c7:b0:16:92:7a:e2:1e:1d:68:c7: 7b:de:2f:c0:9d:8a:94:7d:0d:08:41:18:97:d0:47:bc:6d:4a: 64:f8:4c:46:c9:c3:1a:0e:b8:b2:0e:58:93:67:6f:e1:fb:9b: d2:77:8b:27:79:e0:36:ef:77:00:da:dd:89:d5:e8:99:47:1b: 6f:b3:b2:84:16:4d:8a:16:4f:c1:f2:c5:7a:50:11:a0:cf:77: ce:52:e9:cb:fb:bc:a8:22:68:36:06:78:d4:14:20:eb:1a:83: 75:62:71:9f:06:6a:86:ce:1f:d7:74:80:fc:72:90:14:55:8e: 8d:99:b6:5b:05:a8:71:ae:65:cb:32:23:2a:e9:af:ce:b0:90: 29:16:0d:4b:10:6a:40:c6:6b:89:f9:08:e7:2e:74:f9:01:7b: 27:9d:a0:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSqzHyhbCLJQLCtHPsCwjaGexM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRF QjdBOUJEMDAeFw0yNjA2MjAwMDIwMjVaFw0yNjA2MjEwMzE5MjVaMDMxMTAvBgNV BAMTKEEzRTdDMjk2Q0IwODZBMkQwQ0I2MzYwOEY3NzQ2NDJENzZFMjgyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSLuVfkDGczFVkJ9x+ORUd5Bq A+pJmotZ46KsIBd7WOi0RAdmfTpoJEGETZ9ViIFZPgdue3D0ZO5jhpGfPWdy4+kX WTqR11cFKbDG9DOplCuXwvfQRvNzgTLNC79MHS21APj+8S0kQ1ohmD4I53r4ad8o LpQnn6AqBrgxeGo/BQ69LqHfxOfGdWT1AW9FS0ooEPo9Xm72zBP6YOFUeLbWIpjX e/pHEiPbeasdl5ItRrpB042WViWpSfXubTpxfuEo4LXDGEwb6OG+ma6qKsilaSuL +zlsjVEYnNFhmEm2FKO2QNb8mM5o3AQZqu5HoG7A8sImLh9xX0ZvjayWcGH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+fClssIai0MtjYI93RkLXbigvgwHwYDVR0j BBgwFoAUIkGb7IgZbKKlqr9UMEthBOt6m9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxYmMzZWMtODZiOC00YWZiLThhOGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4 ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRFQjdBOUJEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjQxOUJFQzg4MTk2Q0EyQTVBQUJGNTQzMDRCNjEwNEVCN0E5 QkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYx MDRFQjdBOUJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmsGZXTMcfcchihC3riO6ZCnLMZzv6LDOT9 vkDJOHU2gphStJgVpYgZElvA1YcENofqNLv7MiwC3asDTJ3HcTS/z4eKgm1mUEBy dkWXeF2NeQ/IxB/R1HHENfLiaDDmOhc6x7AWknriHh1ox3veL8CdipR9DQhBGJfQ R7xtSmT4TEbJwxoOuLIOWJNnb+H7m9J3iyd54DbvdwDa3YnV6JlHG2+zsoQWTYoW T8HyxXpQEaDPd85S6cv7vKgiaDYGeNQUIOsag3VicZ8GaobOH9d0gPxykBRVjo2Z tlsFqHGuZcsyIyrpr86wkCkWDUsQakDGa4n5COcudPkBeyedoHw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:59 2026 by rpki-client