$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft File: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft (raw, json) Hash identifier: oS6CaJFf2wCiqPhpgmCMXn2ZXdzyS9u3wSVdtg7tEC8= Subject key identifier: D1:E3:CA:7E:2E:EF:A9:F7:A6:91:73:F9:DD:0C:F5:A6:21:20:88:F5 Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 Certificate issuer: /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Certificate serial: 61845E5333F51E83845DA3EBBAAD020735535230 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 03:44:50 +0000 Manifest this update: Fri 25 Sep 2026 03:39:50 +0000 Manifest next update: Sat 26 Sep 2026 06:55:50 +0000 Files and hashes: 1: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: wbDwlUlyFrGZQKl0gY5JTi07kDW91OicmcdUSy58sFE=) 2: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: 6osBaVpCEcyr4sPNLrXGO9OphhAYx5PHHXLqmm632lw=) 3: 19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl (hash: xX0+UJOiuLi/0Qujm1PfkYTD5w0tQoIy6caZ4inVRCs=) 4: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: HunPJtEqs/fqqsfQUOtU9B9wzUHewY8exb3L7KPploo=) 5: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 35qG3cZsKTQr56CXE5ASWwkKMND8Y/J6/M9bysYMszM=) 6: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: htKH4YuWIU36Hbp8yo72kjRU4hOcfi7XM5LsdSWMbvg=) 7: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: wUweDGGeMnbb7IWcYNeBY1oGGX+HDZ7VecKq2px9zPo=) 8: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: 8HqeGnG6uWiDbhlaJ6tLdsHXeZ7XmeYJjtOP51aVtq4=) 9: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: QiGX1QkZSjLaMXHZar4XrbmTjiSd8XSa/Ltq8nabR1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:84:5e:53:33:f5:1e:83:84:5d:a3:eb:ba:ad:02:07:35:53:52:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63 Validity Not Before: Sep 25 03:39:50 2026 GMT Not After : Sep 26 06:55:50 2026 GMT Subject: CN=D1E3CA7E2EEFA9F7A69173F9DD0CF5A6212088F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:86:12:86:82:d4:4f:cc:bd:3c:3e:e8:2c: 27:9f:73:c7:61:45:72:4a:d6:80:07:55:67:61:6f: 22:e0:c1:7d:01:13:11:56:8c:35:54:47:31:f0:cb: a1:3c:24:95:2e:fe:5f:80:de:b6:fe:9d:11:c9:ae: 6c:7b:5a:83:07:96:89:dc:87:f1:44:b9:92:30:ad: 1c:b6:de:73:03:48:3a:5e:1d:eb:a2:d6:3b:76:4a: 3c:c8:0a:57:ce:7e:34:a3:08:af:f9:0f:aa:60:16: 25:00:9c:51:20:46:5c:e5:c1:cb:aa:58:c3:35:b4: 89:7d:34:3d:97:17:6a:de:a3:ff:b0:a3:d7:32:01: 22:36:40:06:f7:bf:2a:c7:e5:4d:22:f2:31:b3:cd: e0:9b:35:84:25:22:34:57:66:f4:bb:14:7d:52:c1: 56:87:47:81:7b:a8:21:30:70:85:f4:1e:b7:89:1d: 39:fc:b0:60:23:98:b7:60:73:3f:1c:82:ee:d9:a0: db:dd:76:53:79:9a:e8:fe:0b:df:5d:4c:a9:ce:d9: 04:27:32:e4:f6:69:12:20:10:90:35:28:16:dc:3e: 4d:83:cb:4a:3b:55:62:3b:59:2c:46:10:24:66:90: 6a:ba:47:4a:e2:dd:d8:6c:37:3a:42:89:75:ea:97: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E3:CA:7E:2E:EF:A9:F7:A6:91:73:F9:DD:0C:F5:A6:21:20:88:F5 X509v3 Authority Key Identifier: keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c6:04:1e:97:92:08:cf:b5:db:6e:54:ec:33:4e:8e:8a:40: 65:53:8e:92:31:80:21:d1:51:37:bd:c9:a2:e8:b5:54:90:cc: 4b:e8:7a:1e:56:9d:4a:10:2c:43:f2:ed:32:55:a8:7c:3b:56: 8a:9d:49:e4:b8:c1:c4:97:f6:dd:b2:03:30:20:b2:03:dd:0f: d4:1a:72:c3:9b:8a:04:a2:be:43:dd:04:9b:3c:0c:16:8e:c1: f4:98:4c:9c:3d:85:59:c5:2b:40:50:03:6c:4a:80:80:c8:b6: e6:f9:1c:d4:06:05:d6:72:34:7b:11:c4:7b:91:04:f8:bf:b8: e7:ac:d5:1b:e8:52:85:28:80:c0:3d:b6:14:5c:3f:44:4f:0b: e7:0a:d0:da:42:8a:ba:1e:bc:9a:fd:b5:e1:c2:6f:35:4a:10: 82:d1:cc:a8:ce:b7:bd:41:f5:7d:f4:7c:e5:ca:80:1c:1f:d2: f5:46:0e:53:73:1f:9b:e9:8a:6e:ad:f5:4f:3e:16:11:34:09: a7:0c:b9:cc:1e:6f:a5:7a:73:2a:89:a5:eb:90:02:60:bc:d2: a3:e1:b8:d6:b3:0b:c0:1d:4e:49:57:f7:62:58:ba:bc:33:3a: f4:72:87:40:4b:82:81:d3:16:b7:b4:e5:41:41:3c:c7:82:70: 3c:3f:f9:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYReUzP1HoOEXaPruq0CBzVTUjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VF NkJEN0Y2MzAeFw0yNjA5MjUwMzM5NTBaFw0yNjA5MjYwNjU1NTBaMDMxMTAvBgNV BAMTKEQxRTNDQTdFMkVFRkE5RjdBNjkxNzNGOUREMENGNUE2MjEyMDg4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpYYShoLUT8y9PD7oLCefc8dh RXJK1oAHVWdhbyLgwX0BExFWjDVURzHwy6E8JJUu/l+A3rb+nRHJrmx7WoMHlonc h/FEuZIwrRy23nMDSDpeHeui1jt2SjzIClfOfjSjCK/5D6pgFiUAnFEgRlzlwcuq WMM1tIl9ND2XF2reo/+wo9cyASI2QAb3vyrH5U0i8jGzzeCbNYQlIjRXZvS7FH1S wVaHR4F7qCEwcIX0HreJHTn8sGAjmLdgcz8cgu7ZoNvddlN5muj+C99dTKnO2QQn MuT2aRIgEJA1KBbcPk2Dy0o7VWI7WSxGECRmkGq6R0ri3dhsNzpCiXXql9RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ePKfi7vqfemkXP53Qz1piEgiPUwHwYDVR0j BBgwFoAUGfWT+2CUpT0vVn+iPr0Azua9f2MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTgyNDlmYzMtNmM4NC00ZTkxLWIwNjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2 MDk0QTUzRDJGNTY3RkEyM0VCRDAwQ0VFNkJEN0Y2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUY1OTNGQjYwOTRBNTNEMkY1NjdGQTIzRUJEMDBDRUU2QkQ3 RjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvMTlGNTkzRkI2MDk0QTUzRDJGNTY3RkEyM0VCRDAw Q0VFNkJEN0Y2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTGBB6XkgjPtdtuVOwzTo6KQGVTjpIxgCHR UTe9yaLotVSQzEvoeh5WnUoQLEPy7TJVqHw7VoqdSeS4wcSX9t2yAzAgsgPdD9Qa csObigSivkPdBJs8DBaOwfSYTJw9hVnFK0BQA2xKgIDItub5HNQGBdZyNHsRxHuR BPi/uOes1RvoUoUogMA9thRcP0RPC+cK0NpCiroevJr9teHCbzVKEILRzKjOt71B 9X30fOXKgBwf0vVGDlNzH5vpim6t9U8+FhE0CacMucweb6V6cyqJpeuQAmC80qPh uNazC8AdTklX92JYurwzOvRyh0BLgoHTFre05UFBPMeCcDw/+VE= -----END CERTIFICATE-----Generated at Fri Sep 25 22:48:47 2026 by rpki-client