$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft File: 19101281C951DCE434F1B713AE570F59EE413A09.mft (raw, json) Hash identifier: qpVlZ6YrUhdWVsluJ8G8ce9MYoweD9Tn0upsakuh/Uk= Subject key identifier: 15:7A:58:5B:43:EC:03:AA:B5:5B:A2:7D:51:F3:83:01:68:25:9D:AE Authority key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 Certificate issuer: /CN=19101281C951DCE434F1B713AE570F59EE413A09 Certificate serial: 58EF13C5445056D646F71D7155BCC3E1A8C33DDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:45:05 +0000 Manifest this update: Thu 24 Sep 2026 11:40:05 +0000 Manifest next update: Fri 25 Sep 2026 11:49:05 +0000 Files and hashes: 1: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: bgJcO1kAlUNDdjIqyEDrjwkCdWK+MIfy7MXbYHWX1YE=) 2: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: w5VnAqDMpxkCSyJK8a4JzBCfvPRADlp4Zd050ewYnlA=) 3: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: lsZJ+/dkSenhsqGfebfOtSdM0lXp316Uwu+8bQgCJfE=) 4: 19101281C951DCE434F1B713AE570F59EE413A09.crl (hash: zJRXU/6ARM2AZZcVLqgixbVhByY/PaZoCB6D3X0j/GM=) 5: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: pQnNBmBtFzueuc0/RAfPveu5rYMb0ariGWnKZ/WG/t8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ef:13:c5:44:50:56:d6:46:f7:1d:71:55:bc:c3:e1:a8:c3:3d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19101281C951DCE434F1B713AE570F59EE413A09 Validity Not Before: Sep 24 11:40:05 2026 GMT Not After : Sep 25 11:49:05 2026 GMT Subject: CN=157A585B43EC03AAB55BA27D51F3830168259DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:bf:64:8b:d9:d9:c5:e0:17:eb:c0:d9:a7: f2:0b:63:a4:62:12:31:f3:e5:dd:7f:75:c3:0d:aa: f5:b6:08:b7:e8:62:a2:62:f1:df:0a:49:5c:e1:7b: cf:c2:0f:9d:a4:d1:03:48:ee:b3:d0:48:ff:db:9c: a9:22:7c:1a:5a:ab:79:9d:bf:79:49:41:a0:b8:2e: e6:99:e5:4b:52:fa:30:53:a9:b9:00:3e:d6:93:f7: 53:ce:1a:e2:d6:a3:a3:ac:22:37:0e:8a:6c:fc:8f: eb:b5:7f:3f:8f:04:99:e7:5c:fc:a2:45:9c:01:72: 61:ac:0f:5b:f6:41:0f:9b:5c:22:ad:50:2f:3b:e5: 9c:20:cb:9e:2a:8e:5a:6a:b6:e5:a3:f2:54:18:87: 57:24:7a:45:f4:9d:bd:fd:de:61:58:19:ca:81:a9: 32:b2:c8:31:3e:2e:ee:ae:f4:bd:13:2f:8d:66:5b: 69:76:46:85:14:7b:a1:56:0c:f0:ec:25:91:9b:bd: 47:d6:eb:43:cb:b1:8b:fe:1c:63:da:f8:a8:0e:2f: 40:5b:ec:28:2a:40:0b:42:3c:1a:34:02:05:f8:1c: d2:61:4f:d5:d3:50:18:5c:c4:9c:07:ea:64:35:c4: 04:2b:cc:88:db:ef:1f:c9:8f:6d:ee:79:30:d7:09: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7A:58:5B:43:EC:03:AA:B5:5B:A2:7D:51:F3:83:01:68:25:9D:AE X509v3 Authority Key Identifier: keyid:19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:55:0f:2b:df:14:2c:21:d4:84:8f:42:68:6b:bc:2b:8e:0e: fe:4f:64:f5:d1:08:c1:04:65:da:0a:9b:d9:20:84:21:42:dd: 81:59:d8:67:50:e0:77:09:43:3e:78:a3:64:c9:dd:df:bf:96: f3:a3:32:e9:bb:b9:8e:8e:20:31:93:14:73:87:11:c7:33:bd: 11:cc:20:46:9b:9c:79:1c:33:0b:a4:f4:12:8b:08:5c:26:4a: fb:fd:69:31:3e:fa:71:95:5e:a2:4b:04:52:7f:d7:7b:90:b3: 6d:6e:0b:06:8a:7b:50:e5:c5:fe:d7:35:10:0d:59:6b:f0:50: 98:1e:b7:c4:36:86:66:82:04:99:63:ab:96:1e:7b:46:bd:26: 17:69:06:68:28:5a:5e:c1:c8:02:76:3b:9c:85:e8:0f:47:43: 0b:64:08:ce:3f:0f:8c:32:69:ce:3c:f5:c5:4c:79:f6:3c:87: 12:b1:05:08:f0:1a:c5:ad:ca:26:0e:38:46:f9:b0:99:02:d8: 62:68:97:bf:71:d2:17:49:86:bc:35:3c:6f:3d:47:16:98:58: ee:d7:b5:1a:a3:4f:27:39:4c:b5:86:e3:9b:db:0e:15:2f:74: 50:20:06:fa:fc:8a:4c:85:e5:2a:77:5c:74:db:5c:8e:8a:5e: 46:b0:56:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWO8TxURQVtZG9x1xVbzD4ajDPdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMDEyODFDOTUxRENFNDM0RjFCNzEzQUU1NzBGNTlF RTQxM0EwOTAeFw0yNjA5MjQxMTQwMDVaFw0yNjA5MjUxMTQ5MDVaMDMxMTAvBgNV BAMTKDE1N0E1ODVCNDNFQzAzQUFCNTVCQTI3RDUxRjM4MzAxNjgyNTlEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhb9ki9nZxeAX68DZp/ILY6Ri EjHz5d1/dcMNqvW2CLfoYqJi8d8KSVzhe8/CD52k0QNI7rPQSP/bnKkifBpaq3md v3lJQaC4LuaZ5UtS+jBTqbkAPtaT91POGuLWo6OsIjcOimz8j+u1fz+PBJnnXPyi RZwBcmGsD1v2QQ+bXCKtUC875Zwgy54qjlpqtuWj8lQYh1ckekX0nb393mFYGcqB qTKyyDE+Lu6u9L0TL41mW2l2RoUUe6FWDPDsJZGbvUfW60PLsYv+HGPa+KgOL0Bb 7CgqQAtCPBo0AgX4HNJhT9XTUBhcxJwH6mQ1xAQrzIjb7x/Jj23ueTDXCa93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFXpYW0PsA6q1W6J9UfODAWglna4wHwYDVR0j BBgwFoAUGRASgclR3OQ08bcTrlcPWe5BOgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJjNjk0NDAtOGIxNy00YTY4LWEwZmEtNjYxNTllMjE2MmUwLzAvMTkxMDEyODFD OTUxRENFNDM0RjFCNzEzQUU1NzBGNTlFRTQxM0EwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTEwMTI4MUM5NTFEQ0U0MzRGMUI3MTNBRTU3MEY1OUVFNDEz QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvMTkxMDEyODFDOTUxRENFNDM0RjFCNzEzQUU1NzBG NTlFRTQxM0EwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItVDyvfFCwh1ISPQmhrvCuODv5PZPXRCMEE ZdoKm9kghCFC3YFZ2GdQ4HcJQz54o2TJ3d+/lvOjMum7uY6OIDGTFHOHEcczvRHM IEabnHkcMwuk9BKLCFwmSvv9aTE++nGVXqJLBFJ/13uQs21uCwaKe1Dlxf7XNRAN WWvwUJget8Q2hmaCBJljq5Yee0a9JhdpBmgoWl7ByAJ2O5yF6A9HQwtkCM4/D4wy ac489cVMefY8hxKxBQjwGsWtyiYOOEb5sJkC2GJol79x0hdJhrw1PG89RxaYWO7X tRqjTyc5TLWG45vbDhUvdFAgBvr8ikyF5Sp3XHTbXI6KXkawVlk= -----END CERTIFICATE-----Generated at Thu Sep 24 15:14:24 2026 by rpki-client