$ rpki-client -vvvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: wAU9t5qhEH5ccafzWBxAzoSI4p9agf4xukd7mkeZF38= Subject key identifier: F6:07:38:1E:6D:8A:1F:A2:14:AD:A3:45:E1:21:94:59:F4:29:F4:D4 Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 247CB327BA20792A9437BB62618CEA07B959CAD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:55:49 +0000 Manifest this update: Wed 23 Sep 2026 11:50:49 +0000 Manifest next update: Thu 24 Sep 2026 15:04:49 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) 3: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: +j+WQd1ZnN6Bz9Hpac3Q9TdNs/3+K8Ns22BBPv9j49I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7c:b3:27:ba:20:79:2a:94:37:bb:62:61:8c:ea:07:b9:59:ca:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Sep 23 11:50:49 2026 GMT Not After : Sep 24 15:04:49 2026 GMT Subject: CN=F607381E6D8A1FA214ADA345E1219459F429F4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:ee:65:63:1c:40:51:08:6f:bd:27:c1:24: 7c:cf:91:fd:8a:8d:e8:b6:17:06:17:ef:ce:b3:28: 91:47:b2:70:84:90:da:55:38:d8:7a:7f:ae:27:82: d2:6e:fa:1a:d7:b1:30:0b:0f:9a:04:a8:dd:98:c2: cf:c0:a8:92:32:06:7b:6b:5a:a5:93:7a:41:f7:a8: f1:d2:a4:40:bd:2f:a6:3a:0f:c4:53:15:8e:4b:74: d3:fd:19:68:53:62:e9:c8:bb:f9:c5:3f:16:a3:ba: 92:08:c3:fe:8d:af:20:79:a6:df:c3:3b:bf:05:4f: 63:61:a3:cd:f8:22:47:b1:66:78:a4:3f:d9:62:76: f5:4f:d3:fd:9e:2e:8c:51:61:73:61:06:1e:a5:68: d0:4f:c4:06:37:ef:ac:20:50:f8:5a:c7:d4:8b:1e: 12:62:b4:8a:0a:3f:53:3e:76:04:72:2e:7a:67:fc: 43:e3:59:15:23:fe:fd:7b:15:8a:3f:f5:29:ff:c3: 53:f7:60:6e:95:77:19:98:fd:05:f7:f6:d7:e9:4d: ce:53:95:f0:70:fc:2a:6a:55:00:e6:e2:7d:e3:51: 32:e0:8c:b7:0f:99:de:aa:a4:3a:8a:2a:bb:e1:1d: 71:32:1d:cb:20:8b:a6:33:c6:e6:57:16:70:93:6e: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:07:38:1E:6D:8A:1F:A2:14:AD:A3:45:E1:21:94:59:F4:29:F4:D4 X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:fb:aa:e0:94:d4:ac:a6:19:03:3f:9b:d3:4d:95:6a:ec: 44:fa:86:dd:d0:07:56:b4:01:c5:a2:f9:65:55:96:51:7c:c3: d8:94:6a:3e:ae:8f:17:e9:e3:2f:0a:0b:81:a4:5e:e4:a1:52: 40:dc:15:ae:4a:84:b3:b6:c8:33:75:73:09:eb:30:81:85:06: 3a:68:d2:5b:7c:a0:08:cb:c3:4e:b2:2c:98:77:d3:83:18:a5: 64:6c:9a:89:2d:70:5b:85:be:a8:ca:9c:c2:a4:23:5c:ed:24: 24:be:62:6b:ea:d6:2d:5a:2a:45:93:38:d6:2b:7b:b6:b7:c1: 44:45:b1:5c:42:92:ff:42:cf:77:f8:7a:f8:2d:e6:e9:2f:e9: ab:03:4b:aa:1f:dc:88:d5:38:a4:87:08:21:14:5d:12:a6:fe: 00:5c:c8:27:6c:43:a2:e4:52:00:c9:2c:2d:19:ed:fc:b5:44: e3:81:22:60:55:ab:22:07:f7:26:8d:e9:36:b8:29:c6:d0:18: 38:19:43:fa:df:0e:7d:e2:12:91:c1:fa:a4:ac:f9:5d:df:ee: 99:89:bf:9d:d6:3f:83:09:a9:28:48:44:47:0d:ae:a5:ec:30: 59:06:1a:55:39:74:59:3b:aa:9b:a4:5d:6d:bf:6f:dd:61:ca: 92:25:7f:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHyzJ7ogeSqUN7tiYYzqB7lZytMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA5MjMxMTUwNDlaFw0yNjA5MjQxNTA0NDlaMDMxMTAvBgNV BAMTKEY2MDczODFFNkQ4QTFGQTIxNEFEQTM0NUUxMjE5NDU5RjQyOUY0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9U+5lYxxAUQhvvSfBJHzPkf2K jei2FwYX786zKJFHsnCEkNpVONh6f64ngtJu+hrXsTALD5oEqN2Yws/AqJIyBntr WqWTekH3qPHSpEC9L6Y6D8RTFY5LdNP9GWhTYunIu/nFPxajupIIw/6NryB5pt/D O78FT2Nho834IkexZnikP9lidvVP0/2eLoxRYXNhBh6laNBPxAY376wgUPhax9SL HhJitIoKP1M+dgRyLnpn/EPjWRUj/v17FYo/9Sn/w1P3YG6VdxmY/QX39tfpTc5T lfBw/CpqVQDm4n3jUTLgjLcPmd6qpDqKKrvhHXEyHcsgi6YzxuZXFnCTbqqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gc4Hm2KH6IUraNF4SGUWfQp9NQwHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaI+6rglNSsphkDP5vTTZVq7ET6ht3QB1a0 AcWi+WVVllF8w9iUaj6ujxfp4y8KC4GkXuShUkDcFa5KhLO2yDN1cwnrMIGFBjpo 0lt8oAjLw06yLJh304MYpWRsmoktcFuFvqjKnMKkI1ztJCS+Ymvq1i1aKkWTONYr e7a3wURFsVxCkv9Cz3f4evgt5ukv6asDS6of3IjVOKSHCCEUXRKm/gBcyCdsQ6Lk UgDJLC0Z7fy1ROOBImBVqyIH9yaN6Ta4KcbQGDgZQ/rfDn3iEpHB+qSs+V3f7pmJ v53WP4MJqShIREcNrqXsMFkGGlU5dFk7qpukXW2/b91hypIlf0k= -----END CERTIFICATE-----Generated at Thu Sep 24 07:24:45 2026 by rpki-client