$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: LDdE8vioaSs8AAjnW2qMLjH/Ie/JZx5lOiWrID1LAPQ= Subject key identifier: AB:9A:35:D4:01:D2:87:5F:5E:B7:64:C6:D1:16:2B:66:C1:5C:9D:7D Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 35FF575E5F21F543E16E2341C7E6C2C15ABD59B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 21:06:43 +0000 Manifest this update: Fri 25 Sep 2026 21:01:43 +0000 Manifest next update: Sat 26 Sep 2026 23:26:43 +0000 Files and hashes: 1: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) 2: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: 5qImcDVL+w2AS90xYSAi4cMtDKzGckTH8eruJJzNFQ0=) 3: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ff:57:5e:5f:21:f5:43:e1:6e:23:41:c7:e6:c2:c1:5a:bd:59:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: Sep 25 21:01:43 2026 GMT Not After : Sep 26 23:26:43 2026 GMT Subject: CN=AB9A35D401D2875F5EB764C6D1162B66C15C9D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:df:10:2a:04:01:ba:f1:7d:8c:b8:79:b4: ad:40:f4:57:32:43:44:f9:3c:4e:9c:47:50:be:d4: fe:72:29:d0:39:7f:fb:31:bc:b2:d7:a4:c3:6a:39: c0:cb:05:11:f1:45:fa:7c:57:37:01:7b:45:19:b8: 69:7e:23:65:12:70:1d:9b:58:03:a5:ca:82:a3:fa: 4c:e2:0c:69:06:a3:9b:d3:11:c4:05:7d:bd:d8:06: ba:6e:6c:68:3f:bb:59:6b:83:be:66:70:f3:43:9b: 0a:ec:79:05:0f:79:75:5e:b6:7d:1e:d4:e3:3e:80: 51:61:41:a8:b5:b0:64:6d:bc:56:62:b5:47:67:86: 74:aa:e0:64:34:47:3b:27:4f:d3:0e:a7:b9:2b:a6: e2:20:a9:c9:e4:b6:52:80:3c:ce:40:4d:5e:94:78: 26:61:bf:1d:7e:da:03:e9:3a:42:59:e8:ad:8b:6f: 9b:70:e3:5f:14:ec:6e:9d:11:b5:28:09:ad:fc:ee: 73:e0:1d:fb:2e:fd:ce:41:8e:7e:19:5d:77:1e:d2: ab:f5:12:3c:1c:c9:4c:22:38:86:39:2f:14:ce:fe: 8c:b7:3d:fb:c7:86:76:3e:42:95:94:a1:cd:0a:ac: a4:3c:da:9d:1e:8e:fc:ab:c4:3e:bc:40:3c:a0:06: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:35:D4:01:D2:87:5F:5E:B7:64:C6:D1:16:2B:66:C1:5C:9D:7D X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d7:e0:ec:6d:a0:89:15:66:27:21:05:1b:30:ae:c6:7f:8c: 82:e6:df:d7:7b:ab:e8:9a:22:cc:c2:51:7a:f9:97:60:ea:23: a4:5f:da:fb:ec:f4:89:ee:6c:68:75:51:d6:f1:47:6b:14:71: a4:b8:6e:2c:7f:1e:a2:8e:a7:ef:29:8f:bf:25:f0:58:8f:6f: a5:d4:29:c2:dc:a1:08:c6:b8:62:e8:a9:83:97:69:20:cf:e7: 92:d9:95:38:19:8f:e9:93:e5:d0:46:14:ea:68:cd:0a:98:d8: 34:75:24:8b:08:18:00:ba:c7:9b:74:7a:4f:d2:48:2f:80:c1: 1e:58:5f:75:93:c4:b6:53:e4:52:23:cf:d7:56:5e:f7:51:e7: 9f:41:1d:8c:86:6b:ba:97:89:21:41:c0:07:b9:78:38:49:9d: 06:92:4c:03:3b:c4:8c:c0:f5:df:c9:d3:67:44:a7:08:64:48: 64:93:e7:11:38:c6:3a:75:93:bf:5a:27:a2:1c:6c:de:0d:0a: 9a:90:f1:ff:db:7f:42:0e:9a:aa:53:e0:6d:13:a7:37:cf:5b: 17:30:9f:83:64:6c:04:41:48:7e:15:22:50:ec:e3:d2:dd:a0: 7c:fc:e9:b4:b6:7a:8b:82:e0:56:ce:94:d3:91:ba:c5:b6:69: 48:7b:d0:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNf9XXl8h9UPhbiNBx+bCwVq9WbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjA5MjUyMTAxNDNaFw0yNjA5MjYyMzI2NDNaMDMxMTAvBgNV BAMTKEFCOUEzNUQ0MDFEMjg3NUY1RUI3NjRDNkQxMTYyQjY2QzE1QzlEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVPt8QKgQBuvF9jLh5tK1A9Fcy Q0T5PE6cR1C+1P5yKdA5f/sxvLLXpMNqOcDLBRHxRfp8VzcBe0UZuGl+I2UScB2b WAOlyoKj+kziDGkGo5vTEcQFfb3YBrpubGg/u1lrg75mcPNDmwrseQUPeXVetn0e 1OM+gFFhQai1sGRtvFZitUdnhnSq4GQ0RzsnT9MOp7krpuIgqcnktlKAPM5ATV6U eCZhvx1+2gPpOkJZ6K2Lb5tw418U7G6dEbUoCa387nPgHfsu/c5Bjn4ZXXce0qv1 EjwcyUwiOIY5LxTO/oy3PfvHhnY+QpWUoc0KrKQ82p0ejvyrxD68QDygBnOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5o11AHSh19et2TG0RYrZsFcnX0wHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnX4OxtoIkVZichBRswrsZ/jILm39d7q+ia IszCUXr5l2DqI6Rf2vvs9InubGh1UdbxR2sUcaS4bix/HqKOp+8pj78l8FiPb6XU KcLcoQjGuGLoqYOXaSDP55LZlTgZj+mT5dBGFOpozQqY2DR1JIsIGAC6x5t0ek/S SC+AwR5YX3WTxLZT5FIjz9dWXvdR559BHYyGa7qXiSFBwAe5eDhJnQaSTAM7xIzA 9d/J02dEpwhkSGST5xE4xjp1k79aJ6IcbN4NCpqQ8f/bf0IOmqpT4G0TpzfPWxcw n4NkbARBSH4VIlDs49LdoHz86bS2eouC4FbOlNORusW2aUh70E8= -----END CERTIFICATE-----Generated at Sat Sep 26 12:36:45 2026 by rpki-client