$ rpki-client -vvf rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft File: 19B95601293E4FA827B74012327843B2622893C0.mft (raw, json) Hash identifier: tsMKzWmWBcnmM1IUeNPmddkTICHqHGKF1zi+EP28wTY= Subject key identifier: 2F:D6:47:A0:DD:7E:BC:9B:B2:1D:B6:05:08:5A:67:C4:4C:DB:04:50 Authority key identifier: 19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0 Certificate issuer: /CN=19B95601293E4FA827B74012327843B2622893C0 Certificate serial: 64A03DD44463D3D5F5583C2552E8606BCEC0B849 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft Manifest number: 05 Signing time: Tue 05 May 2026 10:30:35 +0000 Manifest this update: Tue 05 May 2026 10:25:35 +0000 Manifest next update: Wed 06 May 2026 13:43:35 +0000 Files and hashes: 1: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: L38/YdqvarzKfk9ZAVR4ViiHPDNisQEln+Vb1lB1n1A=) 2: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: zy5sZmIYWuhArw5qUK3omGx2zQq1A547YaMk3Zf3tqs=) 3: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: zSTZmjwwvstpM097HDN5CyNHXwexcoEZ8IJmEdlxEdw=) 4: 19B95601293E4FA827B74012327843B2622893C0.crl (hash: EC+nT4vHI3k4G2w2LzjT7Lo4RQbqe01EOqKYXy24Wsk=) 5: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: imeoim0Itr5K8y7gaKtgjv1BiBeHuQq2+wE2kJiHl5Y=) 6: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: mL3JvRfInyNlngozqPKuUfXwB9P8QvGYEg+WLcDaUuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a0:3d:d4:44:63:d3:d5:f5:58:3c:25:52:e8:60:6b:ce:c0:b8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B95601293E4FA827B74012327843B2622893C0 Validity Not Before: May 5 10:25:35 2026 GMT Not After : May 6 13:43:35 2026 GMT Subject: CN=2FD647A0DD7EBC9BB21DB605085A67C44CDB0450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:63:4f:f0:4b:43:3c:db:22:a5:43:f5:16: 4a:25:38:c7:95:e4:1e:5c:95:52:2c:b4:5e:12:fe: 9a:87:45:79:44:ff:5c:08:6e:eb:e7:38:8b:1f:94: 7d:0e:d5:1d:ba:a8:9a:4b:79:04:01:31:2e:5b:5e: 0b:b4:2b:e2:ce:b4:86:d6:fa:2a:ae:54:3c:14:9c: a0:5f:48:57:02:38:26:a8:ed:36:30:a7:a7:ad:80: 08:2f:cb:21:b9:f5:33:d8:5c:52:f2:44:53:93:a2: a2:2d:64:4c:15:49:71:99:4e:32:4e:98:96:0e:64: b9:6d:e2:72:dd:fe:34:3d:c5:91:2a:9b:a8:4c:9b: 1d:94:95:3d:a4:dd:0f:7b:d3:6b:02:e9:49:17:7e: 69:a0:35:8f:fe:89:0d:53:c0:32:40:ca:d5:ff:74: 92:90:56:fa:cb:cf:65:cc:ed:01:ab:7d:9b:88:a9: 05:ff:e4:7e:75:44:70:34:e7:b6:c3:b1:ae:74:0b: 4f:7f:34:50:2f:04:3e:d5:e4:28:9f:e3:f4:c5:99: f0:4e:bf:57:00:b3:ed:53:6e:7d:6e:7b:cd:4b:f7: bb:eb:1d:8e:50:13:fa:5a:ff:45:c9:1c:2a:fb:ce: a9:eb:ff:52:be:19:bb:d0:14:3a:45:c1:bb:f2:85: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:47:A0:DD:7E:BC:9B:B2:1D:B6:05:08:5A:67:C4:4C:DB:04:50 X509v3 Authority Key Identifier: keyid:19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:37:f4:a3:70:81:ec:e4:21:c9:0e:26:22:b1:10:a8:28:c1: 06:f9:f2:2e:4c:7d:9f:14:be:c8:c4:4d:8f:68:28:5b:21:39: ad:5b:42:ae:63:d6:e1:59:3f:39:07:2c:4e:12:78:a8:33:56: eb:b7:a2:0c:49:3d:0c:bf:e6:07:9f:db:78:a2:6e:91:cd:21: 60:38:ee:b5:4b:33:ab:47:6b:60:59:80:17:c3:ba:a3:58:cb: 3d:b8:3f:c8:db:86:2f:d2:4b:eb:9d:76:0e:c8:6a:ea:1e:d1: ca:6b:c5:bb:46:b2:d5:7e:b2:d2:d8:3d:f3:02:5e:8d:99:c7: 57:7b:55:ea:33:33:f8:29:fd:4b:ab:5c:2c:48:37:f2:b5:b3: c6:b6:2b:d7:10:b8:67:e2:4a:f3:46:df:18:14:1f:4f:a8:e1: d5:1c:ac:2f:09:3f:99:84:91:ca:b6:1b:fc:e4:11:c1:43:65: 2b:89:19:55:3c:df:6c:ed:82:ba:f0:3d:3b:1c:d2:1b:23:c6: d0:89:60:e7:36:ba:ef:3d:fb:6f:83:a0:db:e4:bf:50:e4:62: 1e:d0:60:c6:32:bb:bb:89:7f:c2:30:df:e3:1c:16:7d:d3:f7: 10:29:d3:49:77:2e:cd:0c:d2:98:4d:4a:0f:67:f7:fe:ac:f7: 94:bf:f1:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKA91ERj09X1WDwlUuhga87AuEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTU2MDEyOTNFNEZBODI3Qjc0MDEyMzI3ODQzQjI2 MjI4OTNDMDAeFw0yNjA1MDUxMDI1MzVaFw0yNjA1MDYxMzQzMzVaMDMxMTAvBgNV BAMTKDJGRDY0N0EwREQ3RUJDOUJCMjFEQjYwNTA4NUE2N0M0NENEQjA0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CmNP8EtDPNsipUP1FkolOMeV 5B5clVIstF4S/pqHRXlE/1wIbuvnOIsflH0O1R26qJpLeQQBMS5bXgu0K+LOtIbW +iquVDwUnKBfSFcCOCao7TYwp6etgAgvyyG59TPYXFLyRFOToqItZEwVSXGZTjJO mJYOZLlt4nLd/jQ9xZEqm6hMmx2UlT2k3Q9702sC6UkXfmmgNY/+iQ1TwDJAytX/ dJKQVvrLz2XM7QGrfZuIqQX/5H51RHA057bDsa50C09/NFAvBD7V5Cif4/TFmfBO v1cAs+1Tbn1ue81L97vrHY5QE/pa/0XJHCr7zqnr/1K+GbvQFDpFwbvyhXGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL9ZHoN1+vJuyHbYFCFpnxEzbBFAwHwYDVR0j BBgwFoAUGblWASk+T6gnt0ASMnhDsmIok8AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzhlNzhlZTAtMDAwMi00YTY3LWE3MzktMzAzM2Q1YjViYTYxLzAvMTlCOTU2MDEy OTNFNEZBODI3Qjc0MDEyMzI3ODQzQjI2MjI4OTNDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUI5NTYwMTI5M0U0RkE4MjdCNzQwMTIzMjc4NDNCMjYyMjg5 M0MwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvMTlCOTU2MDEyOTNFNEZBODI3Qjc0MDEyMzI3ODQz QjI2MjI4OTNDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI439KNwgezkIckOJiKxEKgowQb58i5MfZ8U vsjETY9oKFshOa1bQq5j1uFZPzkHLE4SeKgzVuu3ogxJPQy/5gef23iibpHNIWA4 7rVLM6tHa2BZgBfDuqNYyz24P8jbhi/SS+uddg7Iauoe0cprxbtGstV+stLYPfMC Xo2Zx1d7VeozM/gp/UurXCxIN/K1s8a2K9cQuGfiSvNG3xgUH0+o4dUcrC8JP5mE kcq2G/zkEcFDZSuJGVU832ztgrrwPTsc0hsjxtCJYOc2uu89+2+DoNvkv1DkYh7Q YMYyu7uJf8Iw3+McFn3T9xAp00l3Ls0M0phNSg9n9/6s95S/8RI= -----END CERTIFICATE-----Generated at Tue May 5 17:55:21 2026 by rpki-client