$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft File: AD19D226489003F092B69D57F2AEE4849BC2F21F.mft (raw, json) Hash identifier: SUGYA8EQKsV2p+z+zZiMF4agR9ivqprTiKmjmVj01Qo= Subject key identifier: 05:31:A3:C3:53:C3:B3:C3:26:1C:B2:8D:50:CF:0B:88:4D:24:9E:4B Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Certificate serial: 3F4FF4DD2FEFD0792DACC7CFFD716A908CE47933 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 15:35:24 +0000 Manifest this update: Wed 23 Sep 2026 15:30:24 +0000 Manifest next update: Thu 24 Sep 2026 19:19:24 +0000 Files and hashes: 1: AD19D226489003F092B69D57F2AEE4849BC2F21F.crl (hash: ysA0q2lScghQhQMYCNI3bQpg/E2Zt8FsXiueI8A92X4=) 2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: tfGxZeg6G3RP30OjCg19bX3KZubf0o0VM47f34HE4/Q=) 3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4f:f4:dd:2f:ef:d0:79:2d:ac:c7:cf:fd:71:6a:90:8c:e4:79:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F Validity Not Before: Sep 23 15:30:24 2026 GMT Not After : Sep 24 19:19:24 2026 GMT Subject: CN=0531A3C353C3B3C3261CB28D50CF0B884D249E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:05:b3:df:58:da:5f:e0:b9:49:7e:db:ef: dc:c5:42:32:d7:3a:83:e8:fc:f1:eb:37:02:81:72: c5:8c:bd:da:ca:9a:1f:e6:c6:d4:1a:dc:b4:48:43: 98:8b:d4:e7:79:4a:83:c9:62:55:8f:44:0d:09:24: 3c:28:70:5e:85:44:7c:e9:68:29:95:5b:f4:d3:55: e9:55:2b:ff:0f:82:ba:c2:f2:9a:fa:22:57:a9:40: dd:0c:42:7a:6c:d6:56:e0:d9:4a:ea:f7:ca:1a:ff: 7d:ae:14:bb:2a:15:11:48:73:f9:24:ec:0e:b1:f1: 59:d5:da:de:ae:1b:83:ed:24:3b:8f:d1:45:ee:68: 37:f5:aa:7d:63:74:e5:9d:b7:ea:e8:f4:15:99:ba: 38:5a:f7:80:82:ff:f5:86:c1:52:8b:54:00:c8:ac: c1:71:b8:8c:99:0f:f6:aa:68:44:c8:29:e8:5c:78: 12:e7:5a:87:f9:9d:87:a8:4c:5f:0f:e7:39:6e:5a: 2d:74:7e:41:6d:57:fd:20:7b:3d:a2:47:1a:88:98: ee:00:cf:4d:99:14:f2:73:16:71:5d:a3:c6:fb:8d: 48:1b:e5:f4:68:f2:80:57:22:9f:24:82:d2:4a:ae: 05:d3:b6:bb:51:af:99:04:df:34:52:84:e9:5f:25: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:31:A3:C3:53:C3:B3:C3:26:1C:B2:8D:50:CF:0B:88:4D:24:9E:4B X509v3 Authority Key Identifier: keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3b:e6:ec:a6:69:46:c3:db:e2:86:b2:c7:5a:56:72:8b:22: d7:26:9d:7f:61:ed:02:db:b2:cb:a4:fc:b1:c5:f0:79:d9:dd: 78:b0:a4:56:b3:21:bf:17:ea:61:34:ef:56:34:31:02:59:42: 9c:53:e7:e9:5e:c0:d4:e9:b5:2f:92:aa:e5:2c:88:ab:b8:5b: 0e:68:8e:5b:de:38:44:0b:17:8b:63:16:ca:93:95:52:82:1e: 6a:b4:e3:78:f2:69:70:2d:c7:0e:8a:7f:7f:39:e2:3d:81:e3: a6:ba:72:d3:39:a8:23:56:3d:27:ad:98:0c:c6:bf:35:69:f9: 63:cd:8d:d1:96:14:f9:b9:ec:85:ec:f8:aa:27:e1:30:70:7b: 0e:f8:62:7f:69:67:1a:73:3f:5e:4d:58:48:49:5d:7c:d8:39: f5:17:2a:bb:fc:83:38:8f:d5:08:4b:ae:e1:34:a2:13:e0:e9: 32:19:7f:c9:c5:24:61:f5:60:bc:ae:3f:c8:77:bc:dd:92:c0: df:5a:b6:82:78:6d:0a:6b:21:27:7b:33:d7:5c:8c:5c:6d:c8: ea:e5:8c:8b:18:e5:ff:ff:e2:ef:85:ee:88:3c:f1:a1:e4:66: b2:73:61:4f:36:68:cf:98:6f:70:d7:e2:48:92:f4:65:5f:b7: 1e:16:b5:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0/03S/v0HktrMfP/XFqkIzkeTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5 QkMyRjIxRjAeFw0yNjA5MjMxNTMwMjRaFw0yNjA5MjQxOTE5MjRaMDMxMTAvBgNV BAMTKDA1MzFBM0MzNTNDM0IzQzMyNjFDQjI4RDUwQ0YwQjg4NEQyNDlFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LQWz31jaX+C5SX7b79zFQjLX OoPo/PHrNwKBcsWMvdrKmh/mxtQa3LRIQ5iL1Od5SoPJYlWPRA0JJDwocF6FRHzp aCmVW/TTVelVK/8PgrrC8pr6IlepQN0MQnps1lbg2Urq98oa/32uFLsqFRFIc/kk 7A6x8VnV2t6uG4PtJDuP0UXuaDf1qn1jdOWdt+ro9BWZujha94CC//WGwVKLVADI rMFxuIyZD/aqaETIKehceBLnWof5nYeoTF8P5zluWi10fkFtV/0gez2iRxqImO4A z02ZFPJzFnFdo8b7jUgb5fRo8oBXIp8kgtJKrgXTtrtRr5kE3zRShOlfJRB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTGjw1PDs8MmHLKNUM8LiE0knkswHwYDVR0j BBgwFoAUrRnSJkiQA/CStp1X8q7khJvC8h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNiMTc4NTctYmUzZC00MTMyLThmMTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0 ODkwMDNGMDkyQjY5RDU3RjJBRUU0ODQ5QkMyRjIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRDE5RDIyNjQ4OTAwM0YwOTJCNjlENTdGMkFFRTQ4NDlCQzJG MjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvQUQxOUQyMjY0ODkwMDNGMDkyQjY5RDU3RjJBRUU0 ODQ5QkMyRjIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB875uymaUbD2+KGssdaVnKLItcmnX9h7QLb ssuk/LHF8HnZ3XiwpFazIb8X6mE071Y0MQJZQpxT5+lewNTptS+SquUsiKu4Ww5o jlveOEQLF4tjFsqTlVKCHmq043jyaXAtxw6Kf3854j2B46a6ctM5qCNWPSetmAzG vzVp+WPNjdGWFPm57IXs+Kon4TBwew74Yn9pZxpzP15NWEhJXXzYOfUXKrv8gziP 1QhLruE0ohPg6TIZf8nFJGH1YLyuP8h3vN2SwN9atoJ4bQprISd7M9dcjFxtyOrl jIsY5f//4u+F7og88aHkZrJzYU82aM+Yb3DX4kiS9GVftx4Wtag= -----END CERTIFICATE-----Generated at Thu Sep 24 10:26:35 2026 by rpki-client