$ rpki-client -vvvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: tndpaLcWot8ouChqO4RsJgNpxjrGSQoNvzUH7q5Annw= Subject key identifier: B8:97:9A:1B:54:9C:B4:D5:15:4C:C9:E6:95:09:57:07:23:70:8B:B5 Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 4C01476D03ECA256F0D9472D901E7148AAC27571 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: FF Signing time: Mon 09 Nov 2026 20:56:52 +0000 Manifest this update: Mon 09 Nov 2026 20:51:52 +0000 Manifest next update: Wed 11 Nov 2026 00:19:52 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 3: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: eQkso3DP7IFJxNN+Pjq43SzsT2VpKgNssDvbthNrQm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 00:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:01:47:6d:03:ec:a2:56:f0:d9:47:2d:90:1e:71:48:aa:c2:75:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Nov 9 20:51:52 2026 GMT Not After : Nov 11 00:19:52 2026 GMT Subject: CN=B8979A1B549CB4D5154CC9E69509570723708BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:85:17:30:e8:ce:aa:ab:e9:22:be:08:ad: 9b:02:c7:83:e9:1c:17:8b:f0:60:36:14:10:65:b7: 76:da:d3:ca:4c:4f:84:4e:41:b2:ff:37:be:33:8c: 53:fb:7a:64:b2:61:16:af:98:dc:21:18:db:d5:4a: fc:fe:03:90:f8:bf:a7:98:5e:57:fe:5d:46:3b:d5: e5:a4:a0:19:3f:eb:2b:c5:b0:34:8a:d9:63:c9:41: 01:10:ff:0a:70:5c:c3:38:5c:c0:c2:79:4b:96:a1: a0:2c:5e:70:7e:95:2a:bc:6d:3f:42:0e:da:34:59: 5e:47:ee:b4:bb:a8:4a:5b:01:5f:52:38:1f:16:ee: bb:f7:09:e7:c8:c7:78:7c:f0:18:bf:34:b6:9c:b6: 53:0d:f7:c2:bc:30:b3:2c:ea:20:5a:76:85:fe:9e: 43:ca:34:76:f6:a3:cb:b0:38:6a:d8:bf:20:0c:ac: d7:9e:08:96:13:65:6f:e8:b2:bc:54:97:16:fe:66: 3a:c6:98:0c:9a:3b:9e:76:25:7b:55:9f:76:89:5c: ca:55:3b:b9:8c:44:ca:ce:ca:1f:5f:4d:9d:01:21: 3a:f2:a6:97:74:dc:56:ef:2e:04:46:39:a9:da:54: 1b:14:22:cf:5b:03:36:55:90:90:36:68:51:45:9d: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:97:9A:1B:54:9C:B4:D5:15:4C:C9:E6:95:09:57:07:23:70:8B:B5 X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:56:7a:6d:46:de:1e:7a:e5:dd:22:ee:cb:9e:34:64:b8:cb: 58:e3:d4:04:2e:f1:80:a9:f1:74:c7:d3:9d:35:76:7f:5c:44: 7b:a9:19:99:5b:cf:62:b0:f6:50:38:6f:47:c4:4d:5f:ac:e3: 89:77:ee:92:28:e6:7e:70:99:f7:67:95:a5:5c:61:08:22:10: b0:87:3e:9c:9f:c1:93:85:4b:bd:9d:f7:ac:36:08:98:b9:9c: dc:87:26:36:4a:28:4f:d8:9e:97:56:30:bf:ed:2e:e8:db:e4: a3:97:67:95:e8:87:59:dd:1c:08:48:f4:f1:1b:e6:3e:a3:e8: a1:02:c7:e5:71:84:10:2e:1e:81:60:8a:64:98:0f:5b:23:b0: bf:a9:de:8f:7b:5e:22:d8:6b:14:ea:7d:cd:27:a6:b3:ad:4f: fc:50:47:0f:cd:b8:8d:09:2f:15:7b:4c:ea:88:56:62:be:5e: 42:02:f6:2c:ca:b7:13:cc:09:63:57:0a:ba:5a:00:d3:44:a9: f4:31:13:f7:6c:83:6a:05:c5:f0:53:c0:96:5a:69:8d:4e:06: 14:5e:ef:c9:a4:22:d2:2b:ce:da:28:1e:27:87:4f:b5:81:71: 37:06:dd:c2:f7:19:f1:a1:4f:78:7d:f4:83:ce:d6:24:d2:d4: cd:4f:32:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAFHbQPsolbw2UctkB5xSKrCdXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjExMDkyMDUxNTJaFw0yNjExMTEwMDE5NTJaMDMxMTAvBgNV BAMTKEI4OTc5QTFCNTQ5Q0I0RDUxNTRDQzlFNjk1MDk1NzA3MjM3MDhCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhIUXMOjOqqvpIr4IrZsCx4Pp HBeL8GA2FBBlt3ba08pMT4ROQbL/N74zjFP7emSyYRavmNwhGNvVSvz+A5D4v6eY Xlf+XUY71eWkoBk/6yvFsDSK2WPJQQEQ/wpwXMM4XMDCeUuWoaAsXnB+lSq8bT9C Dto0WV5H7rS7qEpbAV9SOB8W7rv3CefIx3h88Bi/NLactlMN98K8MLMs6iBadoX+ nkPKNHb2o8uwOGrYvyAMrNeeCJYTZW/osrxUlxb+ZjrGmAyaO552JXtVn3aJXMpV O7mMRMrOyh9fTZ0BITryppd03FbvLgRGOanaVBsUIs9bAzZVkJA2aFFFnc99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJeaG1SctNUVTMnmlQlXByNwi7UwHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVWem1G3h565d0i7sueNGS4y1jj1AQu8YCp 8XTH0501dn9cRHupGZlbz2Kw9lA4b0fETV+s44l37pIo5n5wmfdnlaVcYQgiELCH PpyfwZOFS72d96w2CJi5nNyHJjZKKE/YnpdWML/tLujb5KOXZ5Xoh1ndHAhI9PEb 5j6j6KECx+VxhBAuHoFgimSYD1sjsL+p3o97XiLYaxTqfc0nprOtT/xQRw/NuI0J LxV7TOqIVmK+XkIC9izKtxPMCWNXCrpaANNEqfQxE/dsg2oFxfBTwJZaaY1OBhRe 78mkItIrztooHieHT7WBcTcG3cL3GfGhT3h99IPO1iTS1M1PMoU= -----END CERTIFICATE-----Generated at Tue Nov 10 16:32:04 2026 by rpki-client