$ rpki-client -vvvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft File: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft (raw, json) Hash identifier: S80ArQsxr1q5PsCzHxWsyOHEltfPcdYCATCV+EBSltg= Subject key identifier: BE:C2:A6:73:9F:9B:1F:81:1C:0B:0F:7B:24:B6:C1:E7:91:68:1E:03 Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 Certificate issuer: /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Certificate serial: 20F61FC592661304795599DFA021B08071EC8068 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft Manifest number: DC Signing time: Tue 13 Oct 2026 01:28:18 +0000 Manifest this update: Tue 13 Oct 2026 01:23:18 +0000 Manifest next update: Wed 14 Oct 2026 01:42:18 +0000 Files and hashes: 1: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: rAfzEZvuHRI/Kzt1SmKQHwBtPJb8jdNpuP/cvt9qX+w=) 2: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl (hash: ED102uOAockChD3hJPtljErfJ9UZkdUIbFvq0G1A9yc=) 3: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: Ur2deLsRWDmCAqL8yUm8FNnfEGneYV45Th8VxPgH0qk=) 4: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: yUTHLwhvAH/MhoYaduOS14+07g6chdMoBPVYy5YJcX4=) 5: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: 7AkBTaxaVF6MfSYLN5bOMc9OzhJ7a78FUzJRaPwJ6kQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f6:1f:c5:92:66:13:04:79:55:99:df:a0:21:b0:80:71:ec:80:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Validity Not Before: Oct 13 01:23:18 2026 GMT Not After : Oct 14 01:42:18 2026 GMT Subject: CN=BEC2A6739F9B1F811C0B0F7B24B6C1E791681E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d8:42:26:9d:f1:04:ea:ea:2e:40:60:d7:78: e0:8b:7b:3f:19:fc:81:79:2d:95:f6:21:86:6e:d4: 40:6d:af:f1:7f:2e:1b:e4:87:ec:1f:de:55:fb:85: d0:0f:d1:ce:d4:3f:f5:96:ca:98:9d:3a:b9:db:9a: 58:1a:a1:1a:c4:84:42:a4:3d:79:38:ab:fe:6b:b1: 14:0d:60:c8:47:30:1e:9a:40:fc:88:52:19:69:f5: 4f:58:aa:f3:9e:27:dc:66:25:09:dc:47:69:f1:67: 0e:03:86:ce:56:5d:e7:fc:6b:26:c5:76:2e:c2:52: c7:89:ad:93:e9:c6:86:b0:04:e9:02:99:30:0c:02: 52:4a:e1:78:21:ca:ac:e1:4b:99:f0:c0:5a:17:ac: 24:04:c3:68:95:85:5c:ed:18:51:3e:0a:ac:77:70: 5f:70:1f:12:e4:cb:4f:c3:b2:0e:30:99:75:52:d5: 1f:ac:d4:1f:50:b3:a3:4b:65:62:e6:f9:2f:3c:49: a7:ca:b2:94:0f:ae:8c:23:0b:b8:fd:1c:d9:7d:51: b1:85:a5:a6:72:97:c3:d5:96:c2:ed:62:41:27:f5: 7c:e5:8e:f4:a3:a5:09:ac:3d:37:bd:84:04:c7:fb: 47:0d:7f:ba:d3:99:8c:78:da:a3:e8:36:f7:ec:9c: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C2:A6:73:9F:9B:1F:81:1C:0B:0F:7B:24:B6:C1:E7:91:68:1E:03 X509v3 Authority Key Identifier: keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:55:e2:e3:c5:11:5c:da:a8:11:cc:df:87:0f:a2:e5:f6:6c: 0b:99:1a:b9:e9:fa:e6:1a:29:d6:35:fb:ae:7e:f7:76:4f:40: 40:5b:ac:99:4b:ea:7d:6d:34:fe:c0:9e:fc:bb:bd:ca:9b:f3: de:2b:b4:1a:73:de:6a:13:ac:38:0f:fc:96:2c:6d:04:75:f9: 5e:ed:a5:df:59:f6:08:4e:db:dc:27:f9:c2:a4:ec:9e:45:c8: f6:c0:f5:ce:86:21:ab:9c:e2:92:88:6e:6f:38:28:37:c6:1b: b3:a9:fb:e2:b1:b2:50:e5:b5:a7:69:3d:92:af:d5:6f:f3:c8: 7c:1e:3d:59:1b:8c:23:1f:8d:f1:8f:e4:30:49:62:a8:50:d4: bd:3c:1b:e3:7b:1e:d3:9a:67:ec:38:0f:db:f3:b2:4e:9d:8d: c8:5e:fa:86:98:3d:54:de:71:20:f2:3e:83:95:a8:8b:97:bd: 78:19:23:6f:d7:62:b7:25:e5:47:3d:8a:40:21:98:a2:6d:51: 7c:cb:5c:af:65:4b:db:e7:b1:99:88:29:74:13:c1:85:c1:cb: 70:0b:5f:7d:6d:e3:db:99:2f:ba:06:00:5a:5d:69:4e:dc:8d: d7:4e:59:aa:9c:5e:8e:3b:cc:7f:3f:be:07:0f:33:25:56:3a: 63:8c:79:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIPYfxZJmEwR5VZnfoCGwgHHsgGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0MEFE RjFCQkIzNzAeFw0yNjEwMTMwMTIzMThaFw0yNjEwMTQwMTQyMThaMDMxMTAvBgNV BAMTKEJFQzJBNjczOUY5QjFGODExQzBCMEY3QjI0QjZDMUU3OTE2ODFFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq2EImnfEE6uouQGDXeOCLez8Z /IF5LZX2IYZu1EBtr/F/Lhvkh+wf3lX7hdAP0c7UP/WWypidOrnbmlgaoRrEhEKk PXk4q/5rsRQNYMhHMB6aQPyIUhlp9U9YqvOeJ9xmJQncR2nxZw4Dhs5WXef8aybF di7CUseJrZPpxoawBOkCmTAMAlJK4XghyqzhS5nwwFoXrCQEw2iVhVztGFE+Cqx3 cF9wHxLky0/Dsg4wmXVS1R+s1B9Qs6NLZWLm+S88SafKspQProwjC7j9HNl9UbGF paZyl8PVlsLtYkEn9XzljvSjpQmsPTe9hATH+0cNf7rTmYx42qPoNvfsnPenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsKmc5+bH4EcCw97JLbB55FoHgMwHwYDVR0j BBgwFoAUGafSRz+qa3LjmaShD0tkCt8buzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQxZTA4ZWYtM2FlNi00YjkwLWI0NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDcz RkFBNkI3MkUzOTlBNEExMEY0QjY0MEFERjFCQkIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUE3RDI0NzNGQUE2QjcyRTM5OUE0QTEwRjRCNjQwQURGMUJC QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0 MEFERjFCQkIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhV4uPFEVzaqBHM34cPouX2bAuZGrnp+uYa KdY1+65+93ZPQEBbrJlL6n1tNP7Anvy7vcqb894rtBpz3moTrDgP/JYsbQR1+V7t pd9Z9ghO29wn+cKk7J5FyPbA9c6GIauc4pKIbm84KDfGG7Op++KxslDltadpPZKv 1W/zyHwePVkbjCMfjfGP5DBJYqhQ1L08G+N7HtOaZ+w4D9vzsk6djche+oaYPVTe cSDyPoOVqIuXvXgZI2/XYrcl5Uc9ikAhmKJtUXzLXK9lS9vnsZmIKXQTwYXBy3AL X31t49uZL7oGAFpdaU7cjddOWaqcXo47zH8/vgcPMyVWOmOMebs= -----END CERTIFICATE-----Generated at Tue Oct 13 08:24:32 2026 by rpki-client