$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: wtdRVWr84WpaR2aDatUiCul2Es+1psW19YJ/90iTq5A= Subject key identifier: 9A:30:01:AE:DE:F8:16:E4:4F:E9:51:83:82:6F:F8:CA:EA:D2:90:74 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 547F8D05051FAECA40268982EC559202F8D32625 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 03:55:07 +0000 Manifest this update: Sat 26 Sep 2026 03:50:07 +0000 Manifest next update: Sun 27 Sep 2026 05:46:07 +0000 Files and hashes: 1: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: G2+PjfntLo6FxUW/DkXbE1BOoys2SPFe9lbllfvFS4M=) 2: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) 3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) 4: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7f:8d:05:05:1f:ae:ca:40:26:89:82:ec:55:92:02:f8:d3:26:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Sep 26 03:50:07 2026 GMT Not After : Sep 27 05:46:07 2026 GMT Subject: CN=9A3001AEDEF816E44FE95183826FF8CAEAD29074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:e7:c4:b5:26:32:1e:ce:c8:a7:ef:01:60: ea:6c:be:45:b7:8d:dc:9c:27:88:14:f5:9b:9a:5f: c2:4f:7e:d5:89:ee:96:1e:b9:9a:44:1d:af:b3:2e: a2:64:2f:57:a2:f1:50:73:47:97:e9:f5:ab:3a:af: 65:ed:e5:ef:72:87:10:1e:48:27:2e:85:45:9b:4a: 46:ce:0a:de:51:5e:13:c3:35:b1:58:05:89:35:14: b0:38:f5:32:ed:7d:f3:0a:94:e6:17:40:32:ce:71: 74:df:c7:ca:a4:9b:41:ad:2b:d2:9c:60:2d:02:d3: 78:0d:f7:64:23:94:5e:25:52:f9:be:a3:dc:2e:61: 69:88:30:f2:ce:98:56:e0:0d:9b:7f:5c:3a:ee:ef: d0:29:b6:b1:db:11:f0:c0:27:c7:58:12:a8:d6:e8: a7:ae:89:9b:cf:40:e5:ed:6e:c2:ed:4c:b9:ef:69: 50:d0:c5:f8:ca:2b:f5:5e:d2:7f:19:69:e6:99:f8: 45:7b:9f:8a:4a:91:1c:bf:0d:02:c9:73:86:58:fe: 15:8d:17:68:f0:19:8d:a5:fb:ab:97:9b:19:d9:d1: 84:a8:81:e6:da:67:f3:3b:98:14:79:2c:a4:72:7d: c0:a2:b4:1b:2b:12:84:36:4a:4c:fb:bc:82:e4:4c: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:01:AE:DE:F8:16:E4:4F:E9:51:83:82:6F:F8:CA:EA:D2:90:74 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:12:61:5c:a7:73:c3:fb:0a:2d:28:9c:11:10:09:26:37:4c: 56:01:0c:43:71:a7:0a:bb:a3:67:30:03:aa:cb:e8:cd:1d:0a: 8f:01:33:88:87:58:fb:a9:01:c1:51:d1:2d:b2:95:ee:84:2b: e2:ca:52:57:3a:61:f9:c9:8c:17:15:61:5c:48:f1:97:50:3f: 8f:24:f6:90:e0:be:b8:7c:82:b9:10:72:e1:76:af:06:ad:54: a4:0b:54:7a:04:fb:ae:3b:20:88:46:9a:7f:90:df:76:80:43: 4d:c2:07:17:79:de:97:8d:22:df:33:0c:94:f5:51:08:28:89: 1a:28:01:f8:a6:06:1b:62:c1:fe:c2:e1:ca:5e:25:d3:19:93: 88:7a:f6:34:cb:28:b7:d6:1a:c4:9c:70:bd:26:fc:08:9f:c3: d8:b6:8f:5b:47:fd:94:6a:10:03:d8:fe:bb:e6:96:c6:39:26: e9:42:81:fd:78:44:cc:ad:e1:21:2c:73:a7:75:3a:e2:1d:76: 27:5d:85:b0:da:40:5d:96:9c:73:52:0f:45:ee:d4:58:ca:6a: ff:d9:4f:c7:7f:93:5c:78:4f:b8:05:32:47:ca:6c:c9:3e:4f: 70:7c:7d:5f:ed:90:8a:3e:95:8d:fc:a5:87:9a:2d:6e:78:16: a2:68:31:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVH+NBQUfrspAJomC7FWSAvjTJiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA5MjYwMzUwMDdaFw0yNjA5MjcwNTQ2MDdaMDMxMTAvBgNV BAMTKDlBMzAwMUFFREVGODE2RTQ0RkU5NTE4MzgyNkZGOENBRUFEMjkwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpufEtSYyHs7Ip+8BYOpsvkW3 jdycJ4gU9ZuaX8JPftWJ7pYeuZpEHa+zLqJkL1ei8VBzR5fp9as6r2Xt5e9yhxAe SCcuhUWbSkbOCt5RXhPDNbFYBYk1FLA49TLtffMKlOYXQDLOcXTfx8qkm0GtK9Kc YC0C03gN92QjlF4lUvm+o9wuYWmIMPLOmFbgDZt/XDru79AptrHbEfDAJ8dYEqjW 6KeuiZvPQOXtbsLtTLnvaVDQxfjKK/Ve0n8ZaeaZ+EV7n4pKkRy/DQLJc4ZY/hWN F2jwGY2l+6uXmxnZ0YSogebaZ/M7mBR5LKRyfcCitBsrEoQ2Skz7vILkTHPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmjABrt74FuRP6VGDgm/4yurSkHQwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQSYVync8P7Ci0onBEQCSY3TFYBDENxpwq7 o2cwA6rL6M0dCo8BM4iHWPupAcFR0S2yle6EK+LKUlc6YfnJjBcVYVxI8ZdQP48k 9pDgvrh8grkQcuF2rwatVKQLVHoE+647IIhGmn+Q33aAQ03CBxd53peNIt8zDJT1 UQgoiRooAfimBhtiwf7C4cpeJdMZk4h69jTLKLfWGsSccL0m/Aifw9i2j1tH/ZRq EAPY/rvmlsY5JulCgf14RMyt4SEsc6d1OuIddiddhbDaQF2WnHNSD0Xu1FjKav/Z T8d/k1x4T7gFMkfKbMk+T3B8fV/tkIo+lY38pYeaLW54FqJoMYQ= -----END CERTIFICATE-----Generated at Sat Sep 26 07:56:03 2026 by rpki-client