$ rpki-client -vvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: dT11dqtNUGjGc5q40WtaW0mL5qeey5rOIWRvZ1oRNaQ= Subject key identifier: F9:11:80:DC:6A:DB:14:65:67:50:29:F8:26:95:9D:48:93:B3:23:FD Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 3467E3990742532CFB610E700A6978C37B66814E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 10:34:53 +0000 Manifest this update: Thu 18 Jun 2026 10:29:53 +0000 Manifest next update: Fri 19 Jun 2026 13:07:53 +0000 Files and hashes: 1: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) 3: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: pUHypc5ymbG/pZTeKE0UTHE87ymL/+H4ckgjC+MCiHE=) 4: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:67:e3:99:07:42:53:2c:fb:61:0e:70:0a:69:78:c3:7b:66:81:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Jun 18 10:29:53 2026 GMT Not After : Jun 19 13:07:53 2026 GMT Subject: CN=F91180DC6ADB1465675029F826959D4893B323FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:7a:b5:42:af:f1:65:d1:e5:6d:2f:49:1f: 81:3d:bf:7f:c1:20:bd:2f:99:1d:bd:58:49:67:ee: ba:f0:c2:cb:9f:1f:73:cd:03:b1:a4:88:22:a1:94: 69:88:c7:86:27:88:99:99:79:c7:8e:74:78:fc:b5: b6:51:1e:94:60:ad:51:75:c6:dc:ef:c3:d4:7d:ad: a5:1c:e6:0c:7e:7f:4c:78:42:49:04:ff:c0:3c:dc: 41:c4:e5:e3:a1:f7:a5:ce:57:8a:e1:6c:1b:9d:be: 7d:17:35:07:76:e9:d4:64:09:4c:2f:5a:2e:85:4d: 3e:d8:c7:51:4a:8e:d5:f0:6d:3e:80:7d:14:e2:bb: cd:e6:ad:f8:20:1f:99:19:94:4a:36:07:9f:46:79: 4f:95:70:a8:26:e6:c3:f1:b3:24:f6:10:24:b4:69: 37:1f:99:04:18:06:4d:7e:15:f4:3d:3d:d5:22:af: e4:ce:78:ba:76:92:ec:f7:1c:79:d1:9c:ab:f1:05: 10:3b:d7:d8:5f:35:c5:03:c5:57:06:2d:09:e3:05: 3e:a0:dd:d9:88:1c:15:0d:97:ea:c1:4a:bd:c5:b4: 55:12:14:ae:24:0f:6f:5f:be:06:9b:59:5f:58:33: be:1b:c3:95:36:ce:25:2a:08:24:12:eb:ab:99:58: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:80:DC:6A:DB:14:65:67:50:29:F8:26:95:9D:48:93:B3:23:FD X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a2:64:21:29:6b:e3:f0:e1:e9:d5:87:9e:d0:8d:f9:b9:63: 0d:7b:c7:4d:fd:b5:f0:4e:6e:aa:8e:5e:7f:37:a0:f7:91:45: 72:16:49:e4:ff:69:eb:c3:1f:ce:6e:7a:a2:d4:0d:dd:fe:84: 68:42:be:25:1c:9d:25:85:84:be:88:c7:fb:6f:55:2b:7b:37: 5d:21:4f:67:7d:55:26:06:83:79:59:0b:bf:ec:b1:b2:e1:28: b3:82:d8:8e:b9:9f:76:6b:5f:fc:5d:29:5d:37:c6:2b:04:86: b4:02:5f:d8:3c:9d:58:9b:82:a2:6c:b0:25:9b:92:36:23:85: fb:af:3b:37:73:50:c6:2a:75:fc:88:b4:d3:19:0c:0d:4b:47: 65:9c:67:ef:10:ec:66:09:15:ae:4b:07:99:f5:ea:77:10:7b: 8a:8c:30:63:d9:7a:7e:19:3b:a0:ee:c5:b9:33:05:83:d4:38: d0:53:29:23:15:f5:fa:4f:17:d9:41:a6:d2:a1:65:16:f8:a0: f6:b0:79:8e:9b:0f:1b:0b:bf:13:35:12:fe:ad:f7:65:9d:45: dd:09:b3:68:b3:a7:21:7e:8b:6a:29:ab:70:fc:74:17:7e:cb: 0d:a7:90:89:1a:fa:5c:52:8c:fd:38:f1:df:0a:6c:bc:a9:14: 20:a1:bd:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGfjmQdCUyz7YQ5wCml4w3tmgU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA2MTgxMDI5NTNaFw0yNjA2MTkxMzA3NTNaMDMxMTAvBgNV BAMTKEY5MTE4MERDNkFEQjE0NjU2NzUwMjlGODI2OTU5RDQ4OTNCMzIzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92Xq1Qq/xZdHlbS9JH4E9v3/B IL0vmR29WEln7rrwwsufH3PNA7GkiCKhlGmIx4YniJmZeceOdHj8tbZRHpRgrVF1 xtzvw9R9raUc5gx+f0x4QkkE/8A83EHE5eOh96XOV4rhbBudvn0XNQd26dRkCUwv Wi6FTT7Yx1FKjtXwbT6AfRTiu83mrfggH5kZlEo2B59GeU+VcKgm5sPxsyT2ECS0 aTcfmQQYBk1+FfQ9PdUir+TOeLp2kuz3HHnRnKvxBRA719hfNcUDxVcGLQnjBT6g 3dmIHBUNl+rBSr3FtFUSFK4kD29fvgabWV9YM74bw5U2ziUqCCQS66uZWOGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RGA3GrbFGVnUCn4JpWdSJOzI/0wHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmiZCEpa+Pw4enVh57Qjfm5Yw17x039tfBO bqqOXn83oPeRRXIWSeT/aevDH85ueqLUDd3+hGhCviUcnSWFhL6Ix/tvVSt7N10h T2d9VSYGg3lZC7/ssbLhKLOC2I65n3ZrX/xdKV03xisEhrQCX9g8nVibgqJssCWb kjYjhfuvOzdzUMYqdfyItNMZDA1LR2WcZ+8Q7GYJFa5LB5n16ncQe4qMMGPZen4Z O6DuxbkzBYPUONBTKSMV9fpPF9lBptKhZRb4oPaweY6bDxsLvxM1Ev6t92WdRd0J s2izpyF+i2opq3D8dBd+yw2nkIka+lxSjP048d8KbLypFCChvVk= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:52 2026 by rpki-client