$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: yRIcEO39kVLYBIwa8EjjwvanX55oz1LJb5+2ZVbgBHY= Subject key identifier: 7A:D0:B0:D8:32:22:C6:56:45:D1:29:9B:D4:AA:C1:B9:E8:7B:39:02 Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 307E83E6AFA86FEE5614EE0F4D36372DE3F36C15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 14:40:16 +0000 Manifest this update: Sun 02 Aug 2026 14:35:16 +0000 Manifest next update: Mon 03 Aug 2026 16:33:16 +0000 Files and hashes: 1: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) 2: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: V1M752WcEDESS4IEmdpnIVDPBA8p+aveEPXMCwmJ20I=) 3: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 16:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7e:83:e6:af:a8:6f:ee:56:14:ee:0f:4d:36:37:2d:e3:f3:6c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: Aug 2 14:35:16 2026 GMT Not After : Aug 3 16:33:16 2026 GMT Subject: CN=7AD0B0D83222C65645D1299BD4AAC1B9E87B3902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:ab:d9:d6:a7:2c:2a:17:93:73:6a:f5:e5: c7:56:0f:4e:b6:95:51:31:fd:21:bf:3d:c8:b6:b4: f7:3c:01:05:41:44:1c:20:03:f5:bd:e1:c3:90:f0: 27:b8:27:c3:af:22:89:39:21:90:03:de:7a:ff:6a: bf:d4:29:00:3b:38:be:12:0b:4f:e7:80:8b:bd:bf: 23:d0:52:38:b1:62:a8:de:6b:07:13:04:3f:00:1b: 88:38:49:bb:aa:b8:61:28:8c:aa:67:91:37:0f:35: 1e:bc:de:74:dd:1d:51:38:c4:18:f5:dc:89:c4:4e: ef:13:14:b7:2c:36:81:01:2f:14:4e:bf:a5:ef:b8: 9e:ea:84:b5:0f:7e:a6:1a:ea:e7:10:b4:ec:97:c6: 31:af:5a:b7:16:79:86:56:d3:65:c4:98:bd:6a:f3: 1b:35:e3:6b:7f:6a:c5:44:36:69:93:31:32:45:ac: d4:05:14:40:2b:57:4f:3a:dd:ab:b2:cc:e9:78:d7: eb:79:05:1c:0f:a4:6b:96:65:26:84:fc:ab:36:7c: 57:62:fc:89:66:34:74:76:e1:25:17:c8:ce:2f:35: ea:a8:cf:5a:33:39:ea:36:6b:4c:a2:9d:f8:d7:10: 45:53:5d:9f:41:47:07:85:97:2d:8d:92:14:10:40: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D0:B0:D8:32:22:C6:56:45:D1:29:9B:D4:AA:C1:B9:E8:7B:39:02 X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4e:5f:23:13:b2:b9:20:92:c4:2c:59:d7:4d:46:bb:5b:58: d8:60:31:97:a3:b5:38:fb:63:1b:22:3a:5f:3f:ee:b0:35:5c: f0:32:7a:33:40:c9:07:b0:7d:f2:f9:13:e4:09:f6:a8:64:70: 3c:b7:20:f7:49:92:40:09:a3:78:f3:a8:21:a5:59:3b:bf:86: 71:eb:eb:9f:55:8a:72:ac:43:67:66:15:80:c7:16:f1:bd:be: 48:4a:35:88:ea:22:10:26:d2:48:7d:ae:b4:6c:05:5e:f4:91: 53:9e:ce:b8:d9:cb:56:1c:fb:13:7f:83:7b:8b:2d:79:7e:b8: 11:49:e0:64:d5:70:ef:12:0e:50:1f:64:06:ed:d8:26:1a:74: 36:15:24:b7:d4:18:40:1f:54:96:92:3d:ae:c2:46:39:93:01: d7:b1:86:5b:af:da:bf:c2:e3:1d:e1:32:2b:c1:40:6f:28:70: 8b:15:b7:f3:12:df:69:67:a3:34:08:dc:af:69:d1:75:87:9c: 3c:c9:66:a8:cf:fd:d1:e3:0a:48:3d:51:1c:f6:82:18:47:d7: b3:11:76:18:97:a8:4b:88:38:b0:00:fe:25:59:47:76:7b:c9: 3d:23:10:d8:2e:89:18:bd:3e:70:c3:53:c7:35:6b:e6:4f:7a: 2a:42:29:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMH6D5q+ob+5WFO4PTTY3LePzbBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjA4MDIxNDM1MTZaFw0yNjA4MDMxNjMzMTZaMDMxMTAvBgNV BAMTKDdBRDBCMEQ4MzIyMkM2NTY0NUQxMjk5QkQ0QUFDMUI5RTg3QjM5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbY6vZ1qcsKheTc2r15cdWD062 lVEx/SG/Pci2tPc8AQVBRBwgA/W94cOQ8Ce4J8OvIok5IZAD3nr/ar/UKQA7OL4S C0/ngIu9vyPQUjixYqjeawcTBD8AG4g4SbuquGEojKpnkTcPNR683nTdHVE4xBj1 3InETu8TFLcsNoEBLxROv6XvuJ7qhLUPfqYa6ucQtOyXxjGvWrcWeYZW02XEmL1q 8xs142t/asVENmmTMTJFrNQFFEArV0863auyzOl41+t5BRwPpGuWZSaE/Ks2fFdi /IlmNHR24SUXyM4vNeqoz1ozOeo2a0yinfjXEEVTXZ9BRweFly2NkhQQQKJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUetCw2DIixlZF0Smb1KrBueh7OQIwHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBOXyMTsrkgksQsWddNRrtbWNhgMZejtTj7 YxsiOl8/7rA1XPAyejNAyQewffL5E+QJ9qhkcDy3IPdJkkAJo3jzqCGlWTu/hnHr 659VinKsQ2dmFYDHFvG9vkhKNYjqIhAm0kh9rrRsBV70kVOezrjZy1Yc+xN/g3uL LXl+uBFJ4GTVcO8SDlAfZAbt2CYadDYVJLfUGEAfVJaSPa7CRjmTAdexhluv2r/C 4x3hMivBQG8ocIsVt/MS32lnozQI3K9p0XWHnDzJZqjP/dHjCkg9URz2ghhH17MR dhiXqEuIOLAA/iVZR3Z7yT0jENguiRi9PnDDU8c1a+ZPeipCKQY= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:52 2026 by rpki-client