$ rpki-client -vvvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft File: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft (raw, json) Hash identifier: 9eMaFYgp0xzS4Jp0zp6ppiQJxojn4Ltjs0D3gYkMftw= Subject key identifier: 5A:E2:B2:14:EF:E7:79:06:54:E5:2A:3F:DF:82:3E:E0:2B:DB:E3:13 Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 Certificate issuer: /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Certificate serial: 2B7FC321D26355BC3B9B6CABC11EA32E52019B4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft Manifest number: D9 Signing time: Sat 10 Oct 2026 21:54:13 +0000 Manifest this update: Sat 10 Oct 2026 21:49:13 +0000 Manifest next update: Sun 11 Oct 2026 22:30:13 +0000 Files and hashes: 1: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: rAfzEZvuHRI/Kzt1SmKQHwBtPJb8jdNpuP/cvt9qX+w=) 2: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl (hash: N9fQ8NajYZvrzW3CVFWN6XaW+YBXyFW2g/57bNP1KEc=) 3: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: 7AkBTaxaVF6MfSYLN5bOMc9OzhJ7a78FUzJRaPwJ6kQ=) 4: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: yUTHLwhvAH/MhoYaduOS14+07g6chdMoBPVYy5YJcX4=) 5: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: Ur2deLsRWDmCAqL8yUm8FNnfEGneYV45Th8VxPgH0qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7f:c3:21:d2:63:55:bc:3b:9b:6c:ab:c1:1e:a3:2e:52:01:9b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Validity Not Before: Oct 10 21:49:13 2026 GMT Not After : Oct 11 22:30:13 2026 GMT Subject: CN=5AE2B214EFE7790654E52A3FDF823EE02BDBE313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:28:a6:88:cc:90:15:2c:5d:20:8a:54:68:42: ad:dd:21:b3:ca:0b:ef:0b:63:4f:01:01:0a:b2:54: c7:b8:9c:d2:6f:c3:28:7e:2c:1f:57:8f:2b:14:74: 7a:66:95:7f:06:62:63:5a:d8:ba:6e:9a:2f:c4:d6: b4:ed:43:56:b2:ec:d6:3c:51:57:ba:b0:07:08:3c: 5a:e6:ae:a2:e1:22:67:b9:59:67:6d:67:2d:dd:a1: 6e:a1:44:ec:dc:a7:20:e4:1c:13:f7:41:17:7f:00: 97:e0:f3:ea:1e:61:18:1d:9e:cd:f9:60:e2:09:4b: 85:a6:2d:5d:ab:43:2a:e9:2d:e0:fd:7c:18:f3:11: e2:f2:fc:ef:bd:99:b2:e1:d8:af:b3:61:fb:a8:60: e0:d2:40:d5:96:b0:8b:2c:00:e9:94:ad:60:e7:3f: 42:e5:38:a1:9c:50:6b:5d:08:55:de:aa:64:36:99: 01:9b:30:56:ba:fd:d9:73:a7:59:c7:cd:a7:22:cc: 75:f9:1d:3a:d0:8a:95:ae:6b:48:4b:98:d1:09:84: f1:0a:3e:2c:7c:6d:d0:b9:dd:9e:e5:03:af:cc:6e: 29:f9:b6:62:58:5f:cb:c7:31:eb:74:b8:46:55:89: aa:2e:20:36:9c:5c:ce:69:e3:41:68:21:86:1f:02: d8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:B2:14:EF:E7:79:06:54:E5:2A:3F:DF:82:3E:E0:2B:DB:E3:13 X509v3 Authority Key Identifier: keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:06:04:72:73:86:2e:c1:80:25:81:24:70:e2:29:dc:bf:7c: c3:e1:76:7b:e2:44:fc:65:a3:bb:16:14:55:98:77:ee:e0:3e: d4:5f:cf:d5:d0:85:27:ab:2b:ac:e0:71:80:e8:07:a2:a8:8f: eb:28:00:63:e5:8e:69:36:c0:e9:3b:07:bc:c7:b0:a3:7e:1a: a9:d3:2d:5f:22:65:b5:20:e9:f2:9f:96:b0:26:51:a7:51:81: 19:a7:64:d8:c3:c8:ae:ff:1d:33:7a:16:4e:07:77:60:ef:17: 8f:16:e9:42:fa:13:bc:59:b5:4b:af:68:52:c2:d2:40:a0:88: 5a:94:40:0b:86:a9:ec:84:43:b4:17:74:f6:d8:c6:fe:34:ea: 38:8b:26:5a:e8:ef:06:84:8c:f5:10:3c:b8:e6:5a:ce:7b:eb: 7e:9f:c4:b9:75:87:2d:e6:d1:c9:7c:61:2e:9b:af:e1:50:e7: 9a:bd:65:24:b9:b6:5d:a6:a0:45:95:0f:af:fa:49:2f:53:83: f3:ab:35:53:4a:e9:ec:78:38:16:4b:d0:fd:2e:14:e9:a7:1f: b1:27:ab:d8:3f:03:b1:51:f0:82:90:44:89:3c:08:f5:41:c5: 15:b2:f5:66:7f:ee:c1:40:7f:6b:95:e3:a8:84:b0:4c:ee:47: 69:ec:2c:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3/DIdJjVbw7m2yrwR6jLlIBm04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0MEFE RjFCQkIzNzAeFw0yNjEwMTAyMTQ5MTNaFw0yNjEwMTEyMjMwMTNaMDMxMTAvBgNV BAMTKDVBRTJCMjE0RUZFNzc5MDY1NEU1MkEzRkRGODIzRUUwMkJEQkUzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvKKaIzJAVLF0gilRoQq3dIbPK C+8LY08BAQqyVMe4nNJvwyh+LB9XjysUdHpmlX8GYmNa2Lpumi/E1rTtQ1ay7NY8 UVe6sAcIPFrmrqLhIme5WWdtZy3doW6hROzcpyDkHBP3QRd/AJfg8+oeYRgdns35 YOIJS4WmLV2rQyrpLeD9fBjzEeLy/O+9mbLh2K+zYfuoYODSQNWWsIssAOmUrWDn P0LlOKGcUGtdCFXeqmQ2mQGbMFa6/dlzp1nHzacizHX5HTrQipWua0hLmNEJhPEK Pix8bdC53Z7lA6/Mbin5tmJYX8vHMet0uEZViaouIDacXM5p40FoIYYfAthjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuKyFO/neQZU5So/34I+4Cvb4xMwHwYDVR0j BBgwFoAUGafSRz+qa3LjmaShD0tkCt8buzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQxZTA4ZWYtM2FlNi00YjkwLWI0NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDcz RkFBNkI3MkUzOTlBNEExMEY0QjY0MEFERjFCQkIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUE3RDI0NzNGQUE2QjcyRTM5OUE0QTEwRjRCNjQwQURGMUJC QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0 MEFERjFCQkIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0GBHJzhi7BgCWBJHDiKdy/fMPhdnviRPxl o7sWFFWYd+7gPtRfz9XQhSerK6zgcYDoB6Koj+soAGPljmk2wOk7B7zHsKN+GqnT LV8iZbUg6fKflrAmUadRgRmnZNjDyK7/HTN6Fk4Hd2DvF48W6UL6E7xZtUuvaFLC 0kCgiFqUQAuGqeyEQ7QXdPbYxv406jiLJlro7waEjPUQPLjmWs57636fxLl1hy3m 0cl8YS6br+FQ55q9ZSS5tl2moEWVD6/6SS9Tg/OrNVNK6ex4OBZL0P0uFOmnH7En q9g/A7FR8IKQRIk8CPVBxRWy9WZ/7sFAf2uV46iEsEzuR2nsLBI= -----END CERTIFICATE-----Generated at Sun Oct 11 10:27:03 2026 by rpki-client