$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json) Hash identifier: SdPeXgcWpPtLYox17QTo9N/EuoeDOmEHVcRM+rrjyJ4= Subject key identifier: FA:FB:B5:0F:43:56:A3:C5:7E:9B:8F:A4:AE:AA:80:03:40:36:EA:A6 Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Certificate serial: 1B83E1A802B4F59D2DDA0A60C5A65B6232EC8140 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:41:31 +0000 Manifest this update: Thu 24 Sep 2026 00:36:31 +0000 Manifest next update: Fri 25 Sep 2026 03:38:31 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=) 2: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=) 4: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=) 5: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: nDvxrzvV1CtWEEZOmGzIwwLoMNtFc4CkZqo/5w7lIIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:83:e1:a8:02:b4:f5:9d:2d:da:0a:60:c5:a6:5b:62:32:ec:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Validity Not Before: Sep 24 00:36:31 2026 GMT Not After : Sep 25 03:38:31 2026 GMT Subject: CN=FAFBB50F4356A3C57E9B8FA4AEAA80034036EAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:74:ad:8b:a1:15:45:36:06:a8:2f:5d:06: 79:3e:fb:8a:11:b1:d4:24:75:9e:84:58:c8:23:b9: f5:66:cf:e1:72:17:d7:ea:9d:28:5e:53:95:6e:8b: 16:ad:21:5a:0b:63:d6:a6:71:d6:f0:b8:f2:1c:52: 14:41:72:5c:ae:b3:68:3c:5e:d6:cd:60:fa:20:71: 3d:18:5a:8c:94:9f:11:6e:70:17:9d:28:89:7d:5c: f3:a6:10:5f:3e:8f:04:80:af:a2:dc:39:8f:da:cc: 7a:2f:40:a8:7c:62:38:e2:1b:c0:18:66:82:99:6c: 16:1d:01:7d:3e:80:5e:42:8c:3e:5f:62:d1:cc:aa: db:8f:03:ca:60:f0:fc:05:87:03:60:30:ea:ae:63: 10:b8:7f:60:d8:1e:22:76:c3:53:9c:79:2c:6b:9a: ce:b3:c2:39:f5:49:34:3d:2b:e5:74:9e:2c:eb:f6: 2e:29:1b:6c:a8:a0:cf:67:43:7f:30:f5:fb:f9:4d: a7:a3:a3:14:80:69:47:41:53:0b:16:01:88:d6:50: 96:4f:9a:16:7d:d5:0f:a4:5e:cc:ea:79:23:07:ec: 9b:a8:73:9f:13:15:44:f1:60:5b:b3:9e:17:70:9b: 03:db:24:f4:33:eb:08:23:7c:91:9f:17:09:f3:ec: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FB:B5:0F:43:56:A3:C5:7E:9B:8F:A4:AE:AA:80:03:40:36:EA:A6 X509v3 Authority Key Identifier: keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:63:22:84:be:b0:2b:ae:82:e3:bb:08:29:6d:9e:e6:b6:0e: b7:2f:67:6c:d7:4f:d6:2d:9b:6b:4c:e1:ac:cf:4a:bb:6f:0b: 86:ac:ce:45:9f:bf:b3:91:4e:2d:c1:0a:40:b7:35:46:54:59: 6c:6b:4a:6f:3f:55:8d:5e:bf:0a:ad:3f:6e:e4:d9:59:ca:78: 96:79:dc:61:8a:ce:66:39:49:e3:23:7c:66:83:6b:eb:f9:7c: 54:58:c8:38:1e:a7:20:a2:99:6d:27:ec:2f:f8:db:e8:d3:4c: 10:fb:20:06:52:62:b1:a4:b1:79:ac:89:ff:ee:e6:ba:f0:c8: bd:d4:1f:5a:b1:b4:44:f4:51:77:8f:7a:44:ae:44:1d:f2:0d: cc:87:42:09:d7:6a:10:0c:5a:62:96:c5:5b:36:e1:2e:0a:ad: 23:f8:2e:38:8c:6e:aa:df:86:e8:b5:78:02:b3:a9:f8:cf:bb: 3d:40:e8:6e:c1:64:d3:20:6e:59:80:c7:14:ff:06:f4:67:1a: 82:4f:19:a9:7e:10:2e:87:43:11:07:e1:1d:13:61:13:01:ab: 45:8d:c7:ce:a7:c5:26:dd:ab:ff:ac:47:df:21:52:f8:93:76: c0:a2:9d:61:4a:07:af:b7:26:0c:17:7a:f0:6e:38:ce:8d:5b: cc:b8:80:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4PhqAK09Z0t2gpgxaZbYjLsgUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3 MUU2MDhFOTAeFw0yNjA5MjQwMDM2MzFaFw0yNjA5MjUwMzM4MzFaMDMxMTAvBgNV BAMTKEZBRkJCNTBGNDM1NkEzQzU3RTlCOEZBNEFFQUE4MDAzNDAzNkVBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJ3Sti6EVRTYGqC9dBnk++4oR sdQkdZ6EWMgjufVmz+FyF9fqnSheU5VuixatIVoLY9amcdbwuPIcUhRBclyus2g8 XtbNYPogcT0YWoyUnxFucBedKIl9XPOmEF8+jwSAr6LcOY/azHovQKh8YjjiG8AY ZoKZbBYdAX0+gF5CjD5fYtHMqtuPA8pg8PwFhwNgMOquYxC4f2DYHiJ2w1OceSxr ms6zwjn1STQ9K+V0nizr9i4pG2yooM9nQ38w9fv5TaejoxSAaUdBUwsWAYjWUJZP mhZ91Q+kXszqeSMH7Juoc58TFUTxYFuznhdwmwPbJPQz6wgjfJGfFwnz7BJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vu1D0NWo8V+m4+krqqAA0A26qYwHwYDVR0j BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4 RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFD MTQ3MUU2MDhFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRjIoS+sCuuguO7CCltnua2DrcvZ2zXT9Yt m2tM4azPSrtvC4aszkWfv7ORTi3BCkC3NUZUWWxrSm8/VY1evwqtP27k2VnKeJZ5 3GGKzmY5SeMjfGaDa+v5fFRYyDgepyCimW0n7C/42+jTTBD7IAZSYrGksXmsif/u 5rrwyL3UH1qxtET0UXePekSuRB3yDcyHQgnXahAMWmKWxVs24S4KrSP4LjiMbqrf hui1eAKzqfjPuz1A6G7BZNMgblmAxxT/BvRnGoJPGal+EC6HQxEH4R0TYRMBq0WN x86nxSbdq/+sR98hUviTdsCinWFKB6+3JgwXevBuOM6NW8y4gK8= -----END CERTIFICATE-----Generated at Thu Sep 24 21:24:52 2026 by rpki-client