$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json) Hash identifier: IXCVIG3JsiZVcdIkMyYCtoHEdtzWLk5xR6th7WCcnVY= Subject key identifier: 51:63:E9:F3:86:B1:C6:58:D0:2D:5E:50:9C:37:25:76:77:3F:C6:D0 Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Certificate serial: 18C29B70B5A388FC75F1696C24FFC3B9528371E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 07:51:02 +0000 Manifest this update: Wed 23 Sep 2026 07:46:02 +0000 Manifest next update: Thu 24 Sep 2026 10:09:02 +0000 Files and hashes: 1: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=) 2: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=) 3: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: MmSh3wU+tvUjWrZUr5QWNNKcOQP1KAOJMTaFbc4rsyQ=) 4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=) 5: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c2:9b:70:b5:a3:88:fc:75:f1:69:6c:24:ff:c3:b9:52:83:71:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Validity Not Before: Sep 23 07:46:02 2026 GMT Not After : Sep 24 10:09:02 2026 GMT Subject: CN=5163E9F386B1C658D02D5E509C372576773FC6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:f2:d9:39:c6:9f:d3:9c:e4:41:f2:49:ec: 3d:5c:9f:cd:24:c5:c2:bc:bc:e8:ad:39:f4:53:3c: 99:d9:54:b1:cb:5c:fd:ac:0a:3f:9c:f8:d3:6f:d3: 8b:ad:80:ff:c2:36:b3:96:4a:74:41:5d:b5:5d:11: de:4f:9c:0b:56:f1:37:cc:59:3f:d9:86:ce:a4:0a: 5a:53:3a:e0:bf:b5:24:63:1b:58:91:a5:fd:5e:df: 97:bf:26:59:8f:5f:dd:7e:49:d6:7a:4e:f6:a5:b4: f8:47:18:43:47:88:74:de:c4:04:af:87:a9:bd:92: ea:d8:c6:b2:f3:01:ee:8b:7a:ad:16:44:8a:0e:df: 2b:a1:71:bd:b8:14:52:f8:0c:02:9b:ba:99:85:a9: 7a:c9:48:f5:30:1a:93:e9:08:9a:d7:ad:db:f4:36: 19:72:a9:67:bf:ab:ef:20:df:87:af:de:85:c3:e2: 5c:17:8c:41:ff:4a:dc:bc:fb:2c:0a:46:b4:44:9b: 33:09:f2:52:1e:4e:68:20:28:26:b7:ca:45:c4:81: c3:44:72:67:01:0f:b3:59:36:4c:e3:cb:90:68:82: 8e:2e:8b:a2:a3:42:a2:e7:7e:5f:ee:e5:db:a3:b4: 94:24:9e:95:ae:4b:76:58:35:92:e9:2a:13:33:be: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:63:E9:F3:86:B1:C6:58:D0:2D:5E:50:9C:37:25:76:77:3F:C6:D0 X509v3 Authority Key Identifier: keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4e:74:f4:9e:8a:6d:cc:42:0d:0d:43:88:fb:3d:e5:ff:a3: 1a:44:bb:93:39:2d:9a:60:d9:21:bd:21:fa:e6:e2:e4:ab:50: 2a:02:84:94:34:9d:28:4f:6b:5b:bd:7e:2b:82:2b:3f:f7:55: 1e:05:c4:ec:73:1c:aa:19:8c:95:9c:6d:d4:fc:6a:ec:d4:fa: de:f5:e6:a1:96:6f:a1:99:72:8e:f6:24:42:03:11:ea:cb:b7: ae:82:ba:4a:2e:4a:e9:4d:ef:8a:70:60:71:94:84:17:14:82: 84:57:f9:5f:0b:5c:45:0a:74:c0:e9:c3:e9:67:e1:e5:c8:2b: 8c:9c:dd:33:0f:7f:e4:3c:1c:40:14:8b:1c:54:03:ad:75:d6: b5:07:3c:15:05:fc:9b:e6:d7:78:22:36:77:16:1b:72:6c:45: 99:3e:af:6b:2d:7b:69:98:3c:a0:75:f9:ad:aa:1b:37:4b:bb: 93:40:0d:f6:a9:f9:19:9c:68:5f:4b:d6:af:9e:32:38:0b:a8: f3:3f:57:19:98:38:1a:fc:e3:21:00:4b:5d:9d:22:a1:65:ab: 9d:95:0e:aa:a7:61:02:89:ea:dc:97:a8:64:af:ee:42:19:ed: 82:f4:51:83:d9:0c:94:84:9b:af:55:a2:11:bf:a7:6d:68:20: f3:aa:ac:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMKbcLWjiPx18WlsJP/DuVKDcekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUz OTM1NTA3QjAeFw0yNjA5MjMwNzQ2MDJaFw0yNjA5MjQxMDA5MDJaMDMxMTAvBgNV BAMTKDUxNjNFOUYzODZCMUM2NThEMDJENUU1MDlDMzcyNTc2NzczRkM2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YPLZOcaf05zkQfJJ7D1cn80k xcK8vOitOfRTPJnZVLHLXP2sCj+c+NNv04utgP/CNrOWSnRBXbVdEd5PnAtW8TfM WT/Zhs6kClpTOuC/tSRjG1iRpf1e35e/JlmPX91+SdZ6TvaltPhHGENHiHTexASv h6m9kurYxrLzAe6Leq0WRIoO3yuhcb24FFL4DAKbupmFqXrJSPUwGpPpCJrXrdv0 NhlyqWe/q+8g34ev3oXD4lwXjEH/Sty8+ywKRrREmzMJ8lIeTmggKCa3ykXEgcNE cmcBD7NZNkzjy5Bogo4ui6KjQqLnfl/u5dujtJQknpWuS3ZYNZLpKhMzvti1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWPp84axxljQLV5QnDcldnc/xtAwHwYDVR0j BBgwFoAUgZo4tFtP6n+YtyoxC3Lbjjk1UHswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGEyZTViNjktYWRiZC00ZTJkLTg0N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1 QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUzOTM1NTA3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTlBMzhCNDVCNEZFQTdGOThCNzJBMzEwQjcyREI4RTM5MzU1 MDdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRC OEUzOTM1NTA3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9OdPSeim3MQg0NQ4j7PeX/oxpEu5M5LZpg 2SG9Ifrm4uSrUCoChJQ0nShPa1u9fiuCKz/3VR4FxOxzHKoZjJWcbdT8auzU+t71 5qGWb6GZco72JEIDEerLt66CukouSulN74pwYHGUhBcUgoRX+V8LXEUKdMDpw+ln 4eXIK4yc3TMPf+Q8HEAUixxUA6111rUHPBUF/Jvm13giNncWG3JsRZk+r2ste2mY PKB1+a2qGzdLu5NADfap+RmcaF9L1q+eMjgLqPM/VxmYOBr84yEAS12dIqFlq52V DqqnYQKJ6tyXqGSv7kIZ7YL0UYPZDJSEm69VohG/p21oIPOqrBg= -----END CERTIFICATE-----Generated at Wed Sep 23 10:16:59 2026 by rpki-client