$ rpki-client -vvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: 0YDzmTVJu4W9ybG59ozUs6qPCo94Rh8bqPYP0GSQ7gY= Subject key identifier: 19:53:74:C5:C7:15:3F:A3:13:C6:DE:72:D0:29:76:46:64:B1:44:14 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 4A7B0CE5C6440812663D761DADFD94708FE96173 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 07:06:09 +0000 Manifest this update: Sun 02 Aug 2026 07:01:09 +0000 Manifest next update: Mon 03 Aug 2026 08:15:09 +0000 Files and hashes: 1: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: wpn/ByZBA1jsjWpkwOm67Jil9HUqYl7K1RRsf0FVAQE=) 2: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) 3: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7b:0c:e5:c6:44:08:12:66:3d:76:1d:ad:fd:94:70:8f:e9:61:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Aug 2 07:01:09 2026 GMT Not After : Aug 3 08:15:09 2026 GMT Subject: CN=195374C5C7153FA313C6DE72D029764664B14414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:dd:d5:1a:15:a3:d9:fd:b8:0c:de:2c:29: c8:97:30:bc:16:41:76:ce:c7:48:b4:4f:1a:5c:0c: 79:6c:88:5b:c8:ad:a4:f5:9e:5e:84:e6:62:5c:b7: f2:57:57:36:02:28:60:6c:8f:56:c4:cd:d1:a1:41: 57:a0:98:22:6d:94:8d:ad:d8:d2:71:3d:94:92:c6: 8b:a8:de:a8:bd:fa:e5:03:4d:30:0e:42:77:7d:e3: d1:48:df:fe:bd:21:56:c4:56:c1:65:a0:3e:0a:26: 2e:ab:f8:de:d6:80:3c:99:da:37:ad:e9:18:37:bc: f7:cf:52:d4:77:87:4a:07:a6:ce:68:a8:20:df:e0: b7:ad:5a:16:73:c7:1f:46:ab:d4:8d:d5:90:b0:e4: 12:1a:9c:7e:82:64:14:b5:9a:b6:85:30:88:aa:b7: f0:11:13:cc:32:13:64:89:bb:15:32:40:20:65:11: 7a:a9:cd:57:0f:02:07:29:20:2d:ed:d8:21:9b:b7: 00:7a:19:94:33:80:9e:0a:9b:ac:61:c3:57:c9:3a: 9a:76:11:09:13:1a:6c:54:ff:43:29:9e:b8:c3:8a: 85:dc:54:67:43:60:40:2f:0b:ae:c6:2d:1c:a0:6c: 80:a5:1a:40:67:69:ec:13:fe:92:08:0a:c6:ad:7d: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:53:74:C5:C7:15:3F:A3:13:C6:DE:72:D0:29:76:46:64:B1:44:14 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:13:65:35:3c:c2:19:38:50:3e:de:3c:a4:16:52:eb:8d:1a: 8c:f7:96:89:27:51:7c:64:fd:4a:77:cc:f2:f7:a7:82:80:e1: 15:9d:af:1b:1d:79:68:46:c5:71:d7:b9:7e:03:65:a7:5c:80: 38:5d:bb:28:2c:3a:ae:1d:3e:74:95:35:ee:24:46:12:a7:b8: 65:2f:5a:8d:49:06:5a:63:31:95:0e:3b:ab:55:10:eb:04:9a: d7:a7:90:ac:68:63:19:10:9a:55:ef:0b:14:d1:5e:1f:89:da: 11:15:e8:d0:06:00:94:02:2e:da:30:53:5b:8c:98:82:99:fa: f0:05:ab:a2:c5:0f:56:b2:69:08:5f:75:88:e4:00:1c:ab:26: fb:bb:3d:b9:6d:3d:e4:a9:a2:1b:3d:e7:d6:f2:24:03:fb:ec: 63:35:16:ee:e3:ab:37:18:30:a8:56:1a:f1:dd:42:91:5c:46: c2:93:81:68:86:0e:0f:df:74:03:9a:d5:47:6e:36:2f:e5:e3: 79:c5:16:a2:16:43:0f:88:af:4e:8d:16:8d:d4:24:9c:47:b2: 22:15:60:4c:0f:1b:95:66:c6:42:59:0f:a4:03:5e:8c:b5:99: 23:89:f3:6a:14:05:0e:dd:e1:e1:ca:88:2e:7a:80:34:29:4b: 03:e2:a0:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnsM5cZECBJmPXYdrf2UcI/pYXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA4MDIwNzAxMDlaFw0yNjA4MDMwODE1MDlaMDMxMTAvBgNV BAMTKDE5NTM3NEM1QzcxNTNGQTMxM0M2REU3MkQwMjk3NjQ2NjRCMTQ0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3d3VGhWj2f24DN4sKciXMLwW QXbOx0i0TxpcDHlsiFvIraT1nl6E5mJct/JXVzYCKGBsj1bEzdGhQVegmCJtlI2t 2NJxPZSSxouo3qi9+uUDTTAOQnd949FI3/69IVbEVsFloD4KJi6r+N7WgDyZ2jet 6Rg3vPfPUtR3h0oHps5oqCDf4LetWhZzxx9Gq9SN1ZCw5BIanH6CZBS1mraFMIiq t/ARE8wyE2SJuxUyQCBlEXqpzVcPAgcpIC3t2CGbtwB6GZQzgJ4Km6xhw1fJOpp2 EQkTGmxU/0MpnrjDioXcVGdDYEAvC67GLRygbIClGkBnaewT/pIICsatfa45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGVN0xccVP6MTxt5y0Cl2RmSxRBQwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUTZTU8whk4UD7ePKQWUuuNGoz3loknUXxk /Up3zPL3p4KA4RWdrxsdeWhGxXHXuX4DZadcgDhduygsOq4dPnSVNe4kRhKnuGUv Wo1JBlpjMZUOO6tVEOsEmtenkKxoYxkQmlXvCxTRXh+J2hEV6NAGAJQCLtowU1uM mIKZ+vAFq6LFD1ayaQhfdYjkAByrJvu7PbltPeSpohs959byJAP77GM1Fu7jqzcY MKhWGvHdQpFcRsKTgWiGDg/fdAOa1UduNi/l43nFFqIWQw+Ir06NFo3UJJxHsiIV YEwPG5VmxkJZD6QDXoy1mSOJ82oUBQ7d4eHKiC56gDQpSwPioIM= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:40 2026 by rpki-client