$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft File: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft (raw, json) Hash identifier: zkeS3lbjLEKPhs3rMJgjis5KzA6oSpdLsGYCsHFj2NM= Subject key identifier: F7:EE:E7:FA:1C:CD:6E:2A:BA:74:89:63:08:CE:94:88:AF:B2:22:0D Authority key identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 Certificate issuer: /CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Certificate serial: 1831AAFD5F09E38E8353F30D2A1B4B4443CAC779 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:36:47 +0000 Manifest this update: Wed 23 Sep 2026 12:31:47 +0000 Manifest next update: Thu 24 Sep 2026 13:28:47 +0000 Files and hashes: 1: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl (hash: 2A2Xa9r6IuwLrmdeQ96IyfwqsPQzayBW3CRtYdT+r/8=) 2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: 0vy2z3MqKAODbU17bPVUXjhaDQ2sCkp7BN40wqS+aK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:31:aa:fd:5f:09:e3:8e:83:53:f3:0d:2a:1b:4b:44:43:ca:c7:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Validity Not Before: Sep 23 12:31:47 2026 GMT Not After : Sep 24 13:28:47 2026 GMT Subject: CN=F7EEE7FA1CCD6E2ABA74896308CE9488AFB2220D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:9a:95:f8:00:a1:79:51:b7:f4:0e:f9:66: 88:44:ab:4a:71:e5:1f:a1:64:0f:6e:d8:07:9b:01: da:57:04:6e:6e:9b:91:59:8f:8e:a1:5b:42:3e:f4: 4b:a5:7b:4e:c3:f5:0b:4d:5f:0d:5a:8e:7a:00:f2: 1a:05:ba:99:af:59:ca:89:2f:51:3a:55:9f:63:12: 8b:ee:ff:04:18:04:c6:00:7c:e4:cb:c6:77:56:02: ab:b4:1b:ed:b8:56:c5:6c:87:62:e9:f1:70:cb:19: f1:1c:69:00:12:7f:46:cd:be:aa:03:04:3c:a0:30: 41:7a:db:40:28:52:8b:6e:8e:0a:c7:44:69:83:92: 60:09:7d:8b:ab:b7:7a:4f:34:8d:fb:1c:a3:7f:9f: 05:c5:bb:ad:88:75:27:15:6a:58:98:7b:38:ab:13: ae:e3:58:38:5c:b4:58:11:e3:53:18:02:81:86:09: 3b:7a:04:e9:17:15:03:9f:20:72:bb:6a:34:61:a7: 96:10:e2:89:3a:86:cc:34:0e:65:a0:b6:eb:a1:1f: d0:55:c8:9d:c7:f1:9e:35:0a:94:02:01:67:c9:64: 2d:55:32:a6:0a:ef:05:4a:14:ea:39:21:d3:5a:d7: 0e:19:fa:b0:d4:a3:30:e7:82:eb:ae:a6:a2:76:6a: 85:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:E7:FA:1C:CD:6E:2A:BA:74:89:63:08:CE:94:88:AF:B2:22:0D X509v3 Authority Key Identifier: keyid:19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:54:a4:f7:46:bf:bd:b1:63:46:d0:da:cf:66:92:fc:85:0f: 1b:9e:bb:a9:42:ee:5b:62:59:7a:4e:0e:bd:14:58:1c:24:89: 44:a8:e3:c6:26:2c:d1:e6:40:99:e4:eb:6b:8f:6a:05:26:61: 69:06:7b:58:97:1b:ca:44:c1:79:a2:57:61:45:a6:35:ec:99: 15:6b:ce:40:b5:e6:03:fd:59:7c:0c:94:98:07:c9:64:8a:5d: e7:ff:60:61:3c:ad:50:ba:ac:9f:9f:55:4c:05:7f:b7:26:91: 78:81:36:9a:c2:66:1b:74:9a:25:f1:1c:ab:e6:08:54:e1:82: 1f:fe:ef:5f:71:e4:0c:9a:ac:6b:ab:b4:75:bb:f4:46:4f:21: 10:1f:0d:12:f2:08:6a:44:11:21:cc:d3:b5:ea:8a:f2:08:ce: 27:a6:00:ca:e3:7c:e8:24:c9:30:89:8f:d8:21:24:6d:2b:3f: bd:6c:f5:a2:4a:7f:93:80:49:7b:a5:dc:de:02:08:b7:da:62: 56:aa:9c:85:8a:2d:c5:5f:b9:44:4e:09:d5:32:bd:4f:92:cb: d9:8c:75:cd:57:83:12:cc:f2:3c:8f:64:6b:07:b8:1e:fe:9f: 60:ba:b8:be:91:3c:d8:e7:e4:5f:2f:56:92:f3:26:6b:35:67: 46:4d:eb:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDGq/V8J446DU/MNKhtLREPKx3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3 Qzg0RkRDMTAeFw0yNjA5MjMxMjMxNDdaFw0yNjA5MjQxMzI4NDdaMDMxMTAvBgNV BAMTKEY3RUVFN0ZBMUNDRDZFMkFCQTc0ODk2MzA4Q0U5NDg4QUZCMjIyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnpqV+ACheVG39A75ZohEq0px 5R+hZA9u2AebAdpXBG5um5FZj46hW0I+9Eule07D9QtNXw1ajnoA8hoFupmvWcqJ L1E6VZ9jEovu/wQYBMYAfOTLxndWAqu0G+24VsVsh2Lp8XDLGfEcaQASf0bNvqoD BDygMEF620AoUotujgrHRGmDkmAJfYurt3pPNI37HKN/nwXFu62IdScValiYezir E67jWDhctFgR41MYAoGGCTt6BOkXFQOfIHK7ajRhp5YQ4ok6hsw0DmWgtuuhH9BV yJ3H8Z41CpQCAWfJZC1VMqYK7wVKFOo5IdNa1w4Z+rDUozDnguuupqJ2aoWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+7n+hzNbiq6dIljCM6UiK+yIg0wHwYDVR0j BBgwFoAUGQkc40uoIPlqvC+djCTZXHyE/cEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAzMzYyZTItOTc2NS00MmJkLWI1OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0 QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3Qzg0RkRDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA5MUNFMzRCQTgyMEY5NkFCQzJGOUQ4QzI0RDk1QzdDODRG REMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5 NUM3Qzg0RkRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9UpPdGv72xY0bQ2s9mkvyFDxueu6lC7lti WXpODr0UWBwkiUSo48YmLNHmQJnk62uPagUmYWkGe1iXG8pEwXmiV2FFpjXsmRVr zkC15gP9WXwMlJgHyWSKXef/YGE8rVC6rJ+fVUwFf7cmkXiBNprCZht0miXxHKvm CFThgh/+719x5AyarGurtHW79EZPIRAfDRLyCGpEESHM07XqivIIziemAMrjfOgk yTCJj9ghJG0rP71s9aJKf5OASXul3N4CCLfaYlaqnIWKLcVfuUROCdUyvU+Sy9mM dc1XgxLM8jyPZGsHuB7+n2C6uL6RPNjn5F8vVpLzJms1Z0ZN65U= -----END CERTIFICATE-----Generated at Wed Sep 23 20:14:53 2026 by rpki-client