$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft File: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft (raw, json) Hash identifier: J5w7NZXWIHDb2JcGNOTnZsCyxBzlMw2Y1ZjN1IY+kcs= Subject key identifier: 01:12:60:51:B3:B1:EE:25:C7:8A:31:5A:A7:92:E1:79:8B:59:0F:D8 Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 Certificate issuer: /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Certificate serial: 2CB8541F32D7EED39DFBF694A1F29EA1CDC0EFE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:40:31 +0000 Manifest this update: Wed 23 Sep 2026 15:35:31 +0000 Manifest next update: Thu 24 Sep 2026 17:57:31 +0000 Files and hashes: 1: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl (hash: NR8bbPc7UWrsMNlFoHeteR8hZolxg90zsDkwHi2BxXM=) 2: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: 0XQ1YZo4kGL7Y3CIQczOPIPj1y3PxpdocpKouQW/EdQ=) 3: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: xat5QRgiDjEvf5+MHrIJqdczPQXPNnHqQPKuqIFalY0=) 4: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: O5O2bHjSgz5EaoYBjPQFvScfNgW4n1HG3kEQcg119Ng=) 5: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: uuKla2urFiVoLa1tj8NM3bGyRcKks2/aX+x/1D+sD6M=) 6: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: CjrhC79NpfmyHbjUbEINIlY/W8SS5iUE5Mpe2yHqTCk=) 7: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: A8Rj4cqXdcnsq+FLejpEUcmUwRFqYq1jFxwy+Q4EccA=) 8: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 0HclTm8jPdJ9pdLkBcx2iHTadXENhk0okUOb438P1GQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b8:54:1f:32:d7:ee:d3:9d:fb:f6:94:a1:f2:9e:a1:cd:c0:ef:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Validity Not Before: Sep 23 15:35:31 2026 GMT Not After : Sep 24 17:57:31 2026 GMT Subject: CN=01126051B3B1EE25C78A315AA792E1798B590FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:04:de:e1:2e:39:f4:a3:b9:a1:fe:52:59: 13:7b:74:e4:f4:78:82:9d:be:c8:30:9b:e4:ff:91: 63:26:d9:d1:0d:31:4c:ac:4c:36:78:e5:c2:37:cb: ac:44:b0:91:34:24:ae:d8:19:34:d5:aa:1d:a2:b8: 81:a4:86:01:9c:63:56:a0:93:e8:a1:2d:10:a9:f6: a6:0e:71:32:4f:88:13:98:aa:6f:93:10:bb:ec:aa: 6f:b7:91:94:ee:87:67:4c:92:2c:87:98:fe:99:fd: 4f:e3:58:58:34:6a:34:be:66:d7:93:93:81:d0:fe: e2:87:56:45:e7:8b:ff:5e:75:28:7e:55:11:2b:60: 96:a9:01:3d:57:6a:75:a7:f5:14:95:61:4c:45:22: 58:5a:00:e2:f8:d2:58:c6:e0:f2:1c:71:35:52:a9: e2:35:58:5c:f0:27:05:57:d2:41:f1:4f:a5:11:bf: c8:0e:2d:31:17:71:07:ca:66:42:83:fd:80:04:86: fd:e1:33:30:24:88:ba:86:03:c7:a8:7b:35:51:b4: 6f:a5:71:ed:9f:e2:30:ba:4b:f2:2e:fb:48:16:49: c0:a3:e2:39:e1:68:c9:2f:3e:ae:6d:0e:92:16:8b: 52:d4:ab:e9:53:d6:88:06:c3:14:03:7a:5d:ff:9d: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:60:51:B3:B1:EE:25:C7:8A:31:5A:A7:92:E1:79:8B:59:0F:D8 X509v3 Authority Key Identifier: keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:db:28:c5:47:60:90:5a:82:11:60:1d:6d:00:b4:89:6e:04: bc:d6:65:df:55:18:95:1c:7b:59:72:c0:59:01:8d:4b:85:7f: 97:5e:d7:da:13:0d:d3:bb:0b:e1:5a:82:e4:d4:aa:24:2d:66: cf:ef:95:61:3c:55:f8:2e:1d:d2:54:03:d9:90:7b:2d:87:79: 6f:24:e9:a8:c5:6a:ae:2e:67:ad:46:a7:20:f5:7e:97:2d:69: 6a:9a:40:0d:40:c5:a9:77:aa:75:83:7a:26:a8:e2:eb:64:bf: d7:2b:d6:62:4f:8c:0c:53:68:dd:f3:88:a8:75:65:e1:f9:e4: 6c:c5:17:dc:cb:0d:75:e8:00:e2:e5:51:ad:77:02:b8:d7:77: 20:7a:42:49:3c:db:3f:8b:03:59:85:89:6a:e4:8d:a9:e8:94: 2e:97:09:ae:d2:17:7a:49:ff:81:3d:8a:08:f6:3a:70:e2:90: 02:dc:75:50:2c:33:73:1c:4b:57:a6:db:c4:f5:7d:78:a6:b4: e4:6c:1f:dc:5b:e9:39:7a:74:a5:dc:66:24:d6:f9:53:74:cd: d8:21:0f:7d:5d:e6:ec:ca:ba:5b:91:9e:df:74:cd:24:ca:d8: d9:68:79:82:d9:35:76:b2:6c:ab:35:59:53:6b:21:70:48:5c: 47:75:d6:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLhUHzLX7tOd+/aUofKeoc3A7+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1 RUVEODhEMTAeFw0yNjA5MjMxNTM1MzFaFw0yNjA5MjQxNzU3MzFaMDMxMTAvBgNV BAMTKDAxMTI2MDUxQjNCMUVFMjVDNzhBMzE1QUE3OTJFMTc5OEI1OTBGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWQTe4S459KO5of5SWRN7dOT0 eIKdvsgwm+T/kWMm2dENMUysTDZ45cI3y6xEsJE0JK7YGTTVqh2iuIGkhgGcY1ag k+ihLRCp9qYOcTJPiBOYqm+TELvsqm+3kZTuh2dMkiyHmP6Z/U/jWFg0ajS+ZteT k4HQ/uKHVkXni/9edSh+VRErYJapAT1XanWn9RSVYUxFIlhaAOL40ljG4PIccTVS qeI1WFzwJwVX0kHxT6URv8gOLTEXcQfKZkKD/YAEhv3hMzAkiLqGA8eoezVRtG+l ce2f4jC6S/Iu+0gWScCj4jnhaMkvPq5tDpIWi1LUq+lT1ogGwxQDel3/nfA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARJgUbOx7iXHijFap5LheYtZD9gwHwYDVR0j BBgwFoAUsZxlaC0ReE19Kr2NS+vHxF7tiNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdmNDkwNjgtYzBjYS00YTIxLTlhOGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1Njgy RDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1RUVEODhEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlDNjU2ODJEMTE3ODREN0QyQUJEOEQ0QkVCQzdDNDVFRUQ4 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3 QzQ1RUVEODhEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTbKMVHYJBaghFgHW0AtIluBLzWZd9VGJUc e1lywFkBjUuFf5de19oTDdO7C+FaguTUqiQtZs/vlWE8VfguHdJUA9mQey2HeW8k 6ajFaq4uZ61GpyD1fpctaWqaQA1Axal3qnWDeiao4utkv9cr1mJPjAxTaN3ziKh1 ZeH55GzFF9zLDXXoAOLlUa13ArjXdyB6Qkk82z+LA1mFiWrkjanolC6XCa7SF3pJ /4E9igj2OnDikALcdVAsM3McS1em28T1fXimtORsH9xb6Tl6dKXcZiTW+VN0zdgh D31d5uzKuluRnt90zSTK2NloeYLZNXaybKs1WVNrIXBIXEd11ok= -----END CERTIFICATE-----Generated at Wed Sep 23 23:08:53 2026 by rpki-client