$ rpki-client -vvvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: Ba6SffqehfpOCzhLZw0UtUi+BDcAllECKuMwuDVbMqU= Subject key identifier: 99:96:8F:39:D1:B7:4D:E2:30:9D:42:BB:CC:43:F1:66:3A:12:B6:8F Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 07CB7641085A5F78E364FC2393F82250E8275E98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:26:59 +0000 Manifest this update: Mon 21 Sep 2026 08:21:59 +0000 Manifest next update: Tue 22 Sep 2026 08:31:59 +0000 Files and hashes: 1: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: ufFR00fl8rKjysRVdjpOpG8mZ3FrycDKRnl7WuizJ6Q=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cb:76:41:08:5a:5f:78:e3:64:fc:23:93:f8:22:50:e8:27:5e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Sep 21 08:21:59 2026 GMT Not After : Sep 22 08:31:59 2026 GMT Subject: CN=99968F39D1B74DE2309D42BBCC43F1663A12B68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:df:32:94:d2:7f:e5:12:bd:de:e2:50:eb: 79:de:11:ca:fc:a8:16:53:74:00:de:92:c8:79:47: 6a:39:b8:a5:ec:4d:0e:84:56:82:82:bd:a5:b6:2b: 50:cd:27:fa:0e:23:29:3f:b7:20:11:f8:a7:92:5f: 17:b6:4c:49:0e:54:7a:27:ff:8e:83:2f:d9:00:82: 4b:20:cd:9f:e9:61:d0:27:45:41:14:6d:af:46:7c: 84:88:32:f5:75:1c:b7:ab:a3:4f:0b:04:41:6e:b9: 3b:cd:48:db:a0:25:31:51:8f:08:a5:2b:da:1a:e6: 1f:c9:8e:8a:6c:30:0a:e5:37:17:79:3b:1b:61:44: f1:2d:be:d0:c4:9d:85:36:00:45:3c:1d:eb:c2:2c: ca:62:bf:31:77:d1:d1:aa:22:d5:52:d9:e0:76:8c: 86:7f:ad:82:22:0e:9f:0a:56:3a:eb:2f:85:2f:e4: c5:4c:31:29:be:fe:0c:f8:5e:fc:7d:a8:94:fd:30: 6a:b1:97:4d:24:10:f3:51:e0:37:2d:84:68:8c:c0: 5b:75:fe:a0:7b:b5:05:2b:b9:0d:8f:a7:1c:74:99: b4:19:de:df:8d:db:c5:18:96:bb:6b:c5:3b:20:ff: c2:80:9b:c1:3b:58:3d:68:13:b8:76:31:ce:ec:f4: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:96:8F:39:D1:B7:4D:E2:30:9D:42:BB:CC:43:F1:66:3A:12:B6:8F X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:27:8c:52:4f:5a:a0:5a:55:63:fb:5a:3f:2d:9e:04:07:ea: c1:c6:24:57:85:9e:13:0a:4d:9a:99:b0:72:59:ca:2c:82:6e: ae:ed:63:f5:52:32:97:7f:bd:ba:a1:32:f9:e4:5a:14:24:98: ec:1a:a1:cc:c1:c5:98:3e:f3:7d:d9:6b:ee:b3:98:54:b7:a7: 56:ff:ed:76:f5:68:d9:77:94:72:52:7c:95:cd:12:4d:a6:32: 33:69:7e:d0:81:6f:82:dd:4c:16:ca:a5:b9:bd:2c:89:7c:09: c5:92:b2:04:90:56:56:14:d0:7f:09:3e:85:a8:68:23:6c:69: bf:33:cf:7d:d3:cf:86:c4:d0:5a:64:38:c4:ae:34:ee:7e:b9: a9:6e:ca:cb:f5:18:bc:91:e4:2d:48:d2:6f:b0:0b:19:1d:d6: 0a:47:10:cb:83:dd:ec:a8:e1:39:fe:b0:3d:1a:c2:4f:20:9d: b8:6f:e1:ca:50:8a:38:a5:be:49:b3:c7:b1:20:18:05:df:76: 33:fe:98:0d:3a:b3:17:b8:7c:db:bf:22:96:5a:3f:aa:ee:f9: 2f:f3:6e:0c:d1:30:68:0f:0d:72:51:fd:9b:20:0f:0c:07:e7: 8f:e5:bc:6d:92:81:5e:9d:b2:22:35:89:08:5b:a7:ca:f0:b7: 9b:8c:29:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8t2QQhaX3jjZPwjk/giUOgnXpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA5MjEwODIxNTlaFw0yNjA5MjIwODMxNTlaMDMxMTAvBgNV BAMTKDk5OTY4RjM5RDFCNzRERTIzMDlENDJCQkNDNDNGMTY2M0ExMkI2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3d8ylNJ/5RK93uJQ63neEcr8 qBZTdADeksh5R2o5uKXsTQ6EVoKCvaW2K1DNJ/oOIyk/tyAR+KeSXxe2TEkOVHon /46DL9kAgksgzZ/pYdAnRUEUba9GfISIMvV1HLero08LBEFuuTvNSNugJTFRjwil K9oa5h/JjopsMArlNxd5OxthRPEtvtDEnYU2AEU8HevCLMpivzF30dGqItVS2eB2 jIZ/rYIiDp8KVjrrL4Uv5MVMMSm+/gz4Xvx9qJT9MGqxl00kEPNR4DcthGiMwFt1 /qB7tQUruQ2Ppxx0mbQZ3t+N28UYlrtrxTsg/8KAm8E7WD1oE7h2Mc7s9DA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZaPOdG3TeIwnUK7zEPxZjoSto8wHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALonjFJPWqBaVWP7Wj8tngQH6sHGJFeFnhMK TZqZsHJZyiyCbq7tY/VSMpd/vbqhMvnkWhQkmOwaoczBxZg+833Za+6zmFS3p1b/ 7Xb1aNl3lHJSfJXNEk2mMjNpftCBb4LdTBbKpbm9LIl8CcWSsgSQVlYU0H8JPoWo aCNsab8zz33Tz4bE0FpkOMSuNO5+ualuysv1GLyR5C1I0m+wCxkd1gpHEMuD3eyo 4Tn+sD0awk8gnbhv4cpQijilvkmzx7EgGAXfdjP+mA06sxe4fNu/IpZaP6ru+S/z bgzRMGgPDXJR/ZsgDwwH54/lvG2SgV6dsiI1iQhbp8rwt5uMKeQ= -----END CERTIFICATE-----Generated at Mon Sep 21 12:28:43 2026 by rpki-client