$ rpki-client -vvvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft File: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft (raw, json) Hash identifier: scppqictQOAI7vsQEJYE6umz0wbyGr8aJX85NSpzR6g= Subject key identifier: 15:9C:B0:72:09:3C:FC:3D:29:D4:18:0A:FC:A8:A9:84:2F:C6:CC:68 Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 Certificate issuer: /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Certificate serial: 27070DD1BD00BA7D49A80C3B31A529D2805F8CC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 17:32:26 +0000 Manifest this update: Thu 24 Sep 2026 17:27:26 +0000 Manifest next update: Fri 25 Sep 2026 19:28:26 +0000 Files and hashes: 1: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: x6q8v1sq7gPnj36cQqjz3ENhVrIMCaudmUGFR0TJWTE=) 2: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: iaDIctPMB1cb8jRuozs+7fq0LvdviMyJlcS3OgZDYDM=) 3: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: GZ2/sYXm8mn6l79+sWeTVBLDtiFjEldYgeqXYA/mkHs=) 4: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Ctn3mxVihWEQWfZTzb0YPQIateGW/rElkgUhKfXEfc0=) 5: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl (hash: Lhqlb+ctTkI0jJgO/T7rOWFN+PyfRVHagbkCJMEcksU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:07:0d:d1:bd:00:ba:7d:49:a8:0c:3b:31:a5:29:d2:80:5f:8c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Validity Not Before: Sep 24 17:27:26 2026 GMT Not After : Sep 25 19:28:26 2026 GMT Subject: CN=159CB072093CFC3D29D4180AFCA8A9842FC6CC68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:56:81:06:12:52:b6:79:53:45:54:66:72: ef:fe:54:c4:83:aa:2d:12:af:34:e9:ec:8a:13:6b: 07:d7:60:98:d0:02:c5:7b:09:7a:a9:3c:39:51:97: 85:1b:5e:a7:79:d3:83:2a:3d:03:7b:4a:c4:fe:20: ff:b8:19:d4:41:b3:58:0a:40:53:7b:d6:b4:bf:c9: 32:61:38:94:9e:ae:7a:d9:e4:ee:62:6c:9a:9d:f3: ab:aa:d5:48:27:a7:0f:36:45:3d:fe:d3:2a:fa:79: d3:af:34:d2:bd:61:b1:1b:64:dd:6e:2c:76:d3:ff: f6:fa:ff:d9:60:96:42:db:34:2a:e1:d5:08:df:97: 1e:a0:49:c9:d5:c6:14:0a:b3:a6:b2:dc:39:47:ae: e2:bc:3e:f7:cb:99:4b:c5:a7:d0:95:e7:05:4c:fc: 86:43:b4:b2:b8:a5:8c:ce:dd:7b:4c:dc:c0:db:4f: 6f:f4:b0:e7:1e:09:20:a1:04:85:32:1a:f3:01:98: bf:fb:02:64:3b:25:ef:e2:fe:c6:a0:68:84:d8:65: 27:73:b0:44:ed:42:82:35:0b:c0:1d:c5:49:bf:0f: 2e:f1:84:0e:6d:b6:32:ba:16:dc:73:44:aa:67:52: b6:f7:67:37:95:d6:f0:c2:d7:c0:39:cf:0e:5e:b8: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9C:B0:72:09:3C:FC:3D:29:D4:18:0A:FC:A8:A9:84:2F:C6:CC:68 X509v3 Authority Key Identifier: keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ef:64:4a:e2:c8:93:32:0b:59:7c:e3:57:b4:8d:10:d4:f7: 9f:7c:f1:f1:8c:8e:27:bf:e4:44:f7:a4:b2:bf:d7:cd:6e:53: 44:a8:97:2d:0d:25:92:ce:17:ee:d7:87:18:81:f6:d5:46:b3: 25:44:9d:59:b5:fd:4f:94:09:77:50:07:fd:1e:e2:b2:8b:ba: 65:d7:47:2e:2e:72:3f:21:3c:71:25:25:c4:7a:7d:4b:2a:25: 7b:a2:eb:b6:a6:4f:e8:3d:0e:dd:17:7f:10:d6:09:25:21:01: 95:51:24:79:56:38:fb:e5:50:81:46:ec:65:95:e1:3c:ae:94: 00:22:ea:c4:f0:2b:c4:f3:53:76:f1:33:5c:83:f7:eb:99:59: 14:a0:bf:08:89:7b:e9:d5:26:76:c9:93:06:59:59:08:74:7e: 6e:8a:ce:5f:ad:c0:46:01:c6:51:fb:00:be:33:04:2c:09:f2: aa:93:fc:6e:5f:83:0b:2c:39:cd:81:de:09:6f:34:d4:7e:84: 3a:70:b4:05:52:de:67:b4:84:c4:eb:0e:de:66:b0:d9:58:81: d6:32:87:ba:a8:e1:88:bf:f7:d8:fc:8c:e4:00:e8:95:70:df: a2:76:0a:dd:86:9a:3b:fd:9e:6f:43:d2:72:2e:5e:3e:85:37: 59:28:e7:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwcN0b0Aun1JqAw7MaUp0oBfjMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRF QjdBOUJEMDAeFw0yNjA5MjQxNzI3MjZaFw0yNjA5MjUxOTI4MjZaMDMxMTAvBgNV BAMTKDE1OUNCMDcyMDkzQ0ZDM0QyOUQ0MTgwQUZDQThBOTg0MkZDNkNDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyVaBBhJStnlTRVRmcu/+VMSD qi0SrzTp7IoTawfXYJjQAsV7CXqpPDlRl4UbXqd504MqPQN7SsT+IP+4GdRBs1gK QFN71rS/yTJhOJSernrZ5O5ibJqd86uq1Ugnpw82RT3+0yr6edOvNNK9YbEbZN1u LHbT//b6/9lglkLbNCrh1Qjflx6gScnVxhQKs6ay3DlHruK8PvfLmUvFp9CV5wVM /IZDtLK4pYzO3XtM3MDbT2/0sOceCSChBIUyGvMBmL/7AmQ7Je/i/sagaITYZSdz sETtQoI1C8AdxUm/Dy7xhA5ttjK6FtxzRKpnUrb3ZzeV1vDC18A5zw5euOuZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFZywcgk8/D0p1BgK/KiphC/GzGgwHwYDVR0j BBgwFoAUIkGb7IgZbKKlqr9UMEthBOt6m9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxYmMzZWMtODZiOC00YWZiLThhOGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4 ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRFQjdBOUJEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjQxOUJFQzg4MTk2Q0EyQTVBQUJGNTQzMDRCNjEwNEVCN0E5 QkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYx MDRFQjdBOUJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPvZEriyJMyC1l841e0jRDU95988fGMjie/ 5ET3pLK/181uU0Soly0NJZLOF+7XhxiB9tVGsyVEnVm1/U+UCXdQB/0e4rKLumXX Ry4ucj8hPHElJcR6fUsqJXui67amT+g9Dt0XfxDWCSUhAZVRJHlWOPvlUIFG7GWV 4TyulAAi6sTwK8TzU3bxM1yD9+uZWRSgvwiJe+nVJnbJkwZZWQh0fm6Kzl+twEYB xlH7AL4zBCwJ8qqT/G5fgwssOc2B3glvNNR+hDpwtAVS3me0hMTrDt5msNlYgdYy h7qo4Yi/99j8jOQA6JVw36J2Ct2Gmjv9nm9D0nIuXj6FN1ko5+Q= -----END CERTIFICATE-----Generated at Thu Sep 24 23:36:08 2026 by rpki-client