$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft File: 819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft (raw, json) Hash identifier: KnqUzehUr8Pwc3hgUu/1664paBLMoBXUm/aaFxYXoOU= Subject key identifier: 09:18:72:9F:BD:91:12:B2:5F:0D:37:C3:0C:34:BF:77:11:47:38:17 Authority key identifier: 81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4 Certificate issuer: /CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4 Certificate serial: 3DFA1B831A9032DB88A7E11243BB787032A04A84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:15:05 +0000 Manifest this update: Wed 23 Sep 2026 11:10:05 +0000 Manifest next update: Thu 24 Sep 2026 13:12:05 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: qHmMyZbiN3k/cS5UVLVJqORSDX8DOjqv/PbL7rfrzl0=) 2: 819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl (hash: DUdIOYGgzz0P/OOsmu5b++RLFmHpvdswolNKDsKNW2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fa:1b:83:1a:90:32:db:88:a7:e1:12:43:bb:78:70:32:a0:4a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819B6689FDCEBAE502ADE7E77EA968CEEF011AD4 Validity Not Before: Sep 23 11:10:05 2026 GMT Not After : Sep 24 13:12:05 2026 GMT Subject: CN=0918729FBD9112B25F0D37C30C34BF7711473817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:2d:93:11:d3:2e:1f:8f:97:64:36:7f:e8: 92:01:1c:07:31:51:14:83:7c:10:10:d0:24:8f:d8: dd:94:e0:e6:af:b8:65:5d:e3:4c:8a:e8:68:11:5d: 51:8e:42:42:b0:46:0e:c4:6a:5a:b6:25:43:22:a7: 21:1b:4d:d7:d8:1e:45:e0:11:f6:e1:c2:e8:8d:c3: b8:fd:86:f4:9e:3e:80:78:d0:a2:fb:90:bc:69:86: f5:94:61:37:0d:d4:8a:52:8f:18:63:19:c5:dd:03: 46:ec:ff:2f:5a:bc:5f:2f:b2:42:12:da:49:c4:ce: e6:ef:1d:fb:38:df:9b:6f:ef:32:0b:ca:94:a9:43: 38:5c:24:cd:cc:11:2b:6e:ca:18:a8:6d:a9:27:fe: 89:ca:c5:f4:28:3c:41:7f:11:37:3e:00:39:99:1e: 33:36:f3:b6:99:cc:a5:d7:01:6b:aa:0d:c2:fa:df: 55:ea:d4:5b:22:bd:d8:6f:77:44:45:5d:e1:21:f6: fe:c4:37:87:5f:6b:51:16:1b:b2:e8:04:18:2e:2e: fb:0e:dd:fb:74:c4:03:ae:de:60:2c:52:80:3f:c1: d8:59:03:94:6b:ab:1d:08:93:38:ce:0a:bc:27:95: 9d:a6:96:e4:8e:dc:79:39:07:96:8d:4e:2d:75:21: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:72:9F:BD:91:12:B2:5F:0D:37:C3:0C:34:BF:77:11:47:38:17 X509v3 Authority Key Identifier: keyid:81:9B:66:89:FD:CE:BA:E5:02:AD:E7:E7:7E:A9:68:CE:EF:01:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/819B6689FDCEBAE502ADE7E77EA968CEEF011AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ae:11:49:55:2e:3c:36:bc:89:e1:19:8e:95:26:6a:3c:6b: cf:5d:06:12:a8:bc:de:72:1d:bb:ed:ba:34:70:d4:24:06:d6: 0a:44:e7:7b:87:4b:77:0a:90:42:0e:ec:91:f0:69:3e:77:4f: 87:f2:3a:d4:46:69:60:4b:fd:55:58:c6:3d:0f:23:58:78:e9: f4:18:48:6e:8c:c4:d4:5b:7d:6a:44:4d:b5:0a:7e:46:04:30: 2f:d0:3b:21:96:28:74:59:ad:1e:07:bb:8c:c3:c8:66:26:7b: 1b:c1:7d:a5:e0:b3:5b:f9:3e:e0:a8:8f:87:8b:f0:18:e3:5b: ed:d8:bd:1e:1e:32:d0:a7:0e:e4:29:03:c2:ac:5e:f0:39:61: ec:4b:39:0d:25:b5:91:dc:59:5a:69:d0:e8:7f:a3:ae:a0:f5: 8f:2f:3f:b2:8e:8c:7e:e3:8a:6e:ca:7e:a2:e5:5e:57:a4:fa: 24:0e:6c:45:88:d0:6a:13:6a:d5:7a:11:b5:7a:7c:e5:d4:52: a7:7e:13:86:c3:43:5a:41:c0:f5:63:10:10:de:fc:f7:b8:45: f9:e2:57:70:55:73:3e:28:0e:68:65:f6:59:c3:bb:14:5f:2a: 8a:e1:51:7f:ec:bb:77:59:64:38:db:f5:15:75:03:cb:a9:8d: d1:35:ed:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfobgxqQMtuIp+ESQ7t4cDKgSoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QjY2ODlGRENFQkFFNTAyQURFN0U3N0VBOTY4Q0VF RjAxMUFENDAeFw0yNjA5MjMxMTEwMDVaFw0yNjA5MjQxMzEyMDVaMDMxMTAvBgNV BAMTKDA5MTg3MjlGQkQ5MTEyQjI1RjBEMzdDMzBDMzRCRjc3MTE0NzM4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUpy2TEdMuH4+XZDZ/6JIBHAcx URSDfBAQ0CSP2N2U4OavuGVd40yK6GgRXVGOQkKwRg7Ealq2JUMipyEbTdfYHkXg EfbhwuiNw7j9hvSePoB40KL7kLxphvWUYTcN1IpSjxhjGcXdA0bs/y9avF8vskIS 2knEzubvHfs435tv7zILypSpQzhcJM3MEStuyhiobakn/onKxfQoPEF/ETc+ADmZ HjM287aZzKXXAWuqDcL631Xq1Fsivdhvd0RFXeEh9v7EN4dfa1EWG7LoBBguLvsO 3ft0xAOu3mAsUoA/wdhZA5Rrqx0IkzjOCrwnlZ2mluSO3Hk5B5aNTi11IfxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCRhyn72RErJfDTfDDDS/dxFHOBcwHwYDVR0j BBgwFoAUgZtmif3OuuUCrefnfqlozu8BGtQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmQ0ZmJmYjAtOTNlZS00ZWE2LWI0Y2YtMDdkNzY5Yjg4YTIyLzAvODE5QjY2ODlG RENFQkFFNTAyQURFN0U3N0VBOTY4Q0VFRjAxMUFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTlCNjY4OUZEQ0VCQUU1MDJBREU3RTc3RUE5NjhDRUVGMDEx QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvODE5QjY2ODlGRENFQkFFNTAyQURFN0U3N0VBOTY4 Q0VFRjAxMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGuEUlVLjw2vInhGY6VJmo8a89dBhKovN5y HbvtujRw1CQG1gpE53uHS3cKkEIO7JHwaT53T4fyOtRGaWBL/VVYxj0PI1h46fQY SG6MxNRbfWpETbUKfkYEMC/QOyGWKHRZrR4Hu4zDyGYmexvBfaXgs1v5PuCoj4eL 8BjjW+3YvR4eMtCnDuQpA8KsXvA5YexLOQ0ltZHcWVpp0Oh/o66g9Y8vP7KOjH7j im7KfqLlXlek+iQObEWI0GoTatV6EbV6fOXUUqd+E4bDQ1pBwPVjEBDe/Pe4Rfni V3BVcz4oDmhl9lnDuxRfKorhUX/su3dZZDjb9RV1A8upjdE17W4= -----END CERTIFICATE-----Generated at Thu Sep 24 03:43:49 2026 by rpki-client