$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: YWuwGEHUZF4MXpt4E6o6Eipwizk/YKIfklp1fkn59bQ= Subject key identifier: 71:06:29:21:7A:08:24:B1:07:B9:CC:BE:E0:C8:2C:42:6F:03:25:09 Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 22F747417467806D3A8BE9F6565051B9EBC47B1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:44:52 +0000 Manifest this update: Mon 21 Sep 2026 22:39:52 +0000 Manifest next update: Wed 23 Sep 2026 02:36:52 +0000 Files and hashes: 1: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) 2: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: 6MfIUKFGSgg45rkQWmJvql3LlrWSXArv4FZqESJ4FbQ=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f7:47:41:74:67:80:6d:3a:8b:e9:f6:56:50:51:b9:eb:c4:7b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: Sep 21 22:39:52 2026 GMT Not After : Sep 23 02:36:52 2026 GMT Subject: CN=710629217A0824B107B9CCBEE0C82C426F032509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:9b:77:d1:73:65:25:44:fb:2f:11:54:b1: a5:58:2e:3f:82:7d:fc:94:ca:25:f6:20:15:2a:6f: bf:9a:f7:1f:87:d2:1c:9e:55:58:fe:54:9f:20:60: fa:79:06:ca:7a:0a:8d:3a:f8:d0:22:b5:03:0a:3d: 24:20:9a:86:19:64:cd:d0:9b:f6:66:a7:e8:39:49: a2:85:a1:75:7f:38:fb:18:c9:3f:26:cc:75:39:4b: 77:50:88:85:21:d4:78:d8:9b:2c:68:89:73:01:5f: cb:93:aa:b4:fd:f5:9b:a5:9a:d7:c6:79:7c:c8:d4: 49:f0:76:bd:b6:10:32:dd:a9:e1:25:dc:22:f9:4a: 98:4e:3b:ec:05:91:58:bd:25:46:24:c8:34:90:cd: 45:f1:a3:1c:51:7e:b0:e0:6f:75:1b:16:c0:9f:65: 32:0b:3c:7a:e2:f5:4f:90:17:5d:39:f7:00:c2:d2: e3:46:d4:50:b9:95:df:f2:78:97:cd:ce:6e:b7:01: b1:11:b5:5d:80:dc:7a:55:da:8d:78:2c:0c:d1:4b: 9b:6e:41:bb:ec:96:64:fc:c6:0f:3a:4a:27:0c:cc: 60:9b:60:35:d2:f1:31:e4:2f:74:b9:37:46:8a:11: 16:e8:38:24:0c:a1:42:eb:e3:1d:33:8c:4b:80:cd: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:06:29:21:7A:08:24:B1:07:B9:CC:BE:E0:C8:2C:42:6F:03:25:09 X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bf:f7:43:58:8e:77:c5:26:64:2f:fe:d1:82:2f:08:34:07: 1e:e0:05:f7:09:1d:d1:b8:25:90:5f:a5:3f:a5:a1:bd:f4:53: fe:a3:8e:92:98:c1:e8:3a:91:7a:03:5b:30:9f:2b:2b:86:9a: 66:82:c0:2a:c6:55:36:ed:ea:90:ae:fb:e7:52:5a:e3:45:90: c6:80:9d:41:4f:2f:de:0d:a2:5b:c5:23:80:4f:34:4a:37:da: ef:12:ea:f6:79:7a:f9:5a:63:8a:9c:46:cc:87:22:35:9e:6e: b8:79:68:bb:09:fa:3a:00:b4:9d:12:dc:31:d8:e3:5e:94:1e: cf:84:b7:20:c6:c2:72:50:9c:eb:60:3b:f9:bf:45:64:ed:a2: b9:4e:d9:e2:36:a1:b6:93:97:8a:99:bc:10:de:a1:a3:3f:92: 73:b1:38:78:69:5f:1f:9f:c7:c5:a6:db:b5:dd:f9:69:76:bb: 5f:7b:e1:4b:d8:ac:b9:0f:b1:3d:d7:a6:9f:40:34:fa:8c:33: 31:b1:d1:1a:6b:92:01:c8:12:c9:d7:58:cc:03:2c:d1:f4:9b: 87:e1:cb:83:bc:5e:cf:21:80:15:20:5b:7d:f5:39:9b:55:4d: 4a:10:b5:7d:0b:6b:dd:e2:ef:9a:9d:3f:8e:60:30:2c:48:88: 61:6b:5c:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvdHQXRngG06i+n2VlBRuevEex4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjA5MjEyMjM5NTJaFw0yNjA5MjMwMjM2NTJaMDMxMTAvBgNV BAMTKDcxMDYyOTIxN0EwODI0QjEwN0I5Q0NCRUUwQzgyQzQyNkYwMzI1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCju5t30XNlJUT7LxFUsaVYLj+C ffyUyiX2IBUqb7+a9x+H0hyeVVj+VJ8gYPp5Bsp6Co06+NAitQMKPSQgmoYZZM3Q m/Zmp+g5SaKFoXV/OPsYyT8mzHU5S3dQiIUh1HjYmyxoiXMBX8uTqrT99ZulmtfG eXzI1Enwdr22EDLdqeEl3CL5SphOO+wFkVi9JUYkyDSQzUXxoxxRfrDgb3UbFsCf ZTILPHri9U+QF1059wDC0uNG1FC5ld/yeJfNzm63AbERtV2A3HpV2o14LAzRS5tu QbvslmT8xg86SicMzGCbYDXS8THkL3S5N0aKERboOCQMoULr4x0zjEuAzdKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQYpIXoIJLEHucy+4MgsQm8DJQkwHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK/90NYjnfFJmQv/tGCLwg0Bx7gBfcJHdG4 JZBfpT+lob30U/6jjpKYweg6kXoDWzCfKyuGmmaCwCrGVTbt6pCu++dSWuNFkMaA nUFPL94NolvFI4BPNEo32u8S6vZ5evlaY4qcRsyHIjWebrh5aLsJ+joAtJ0S3DHY 416UHs+EtyDGwnJQnOtgO/m/RWTtorlO2eI2obaTl4qZvBDeoaM/knOxOHhpXx+f x8Wm27Xd+Wl2u1974UvYrLkPsT3Xpp9ANPqMMzGx0RprkgHIEsnXWMwDLNH0m4fh y4O8Xs8hgBUgW331OZtVTUoQtX0La93i75qdP45gMCxIiGFrXKs= -----END CERTIFICATE-----Generated at Tue Sep 22 14:11:36 2026 by rpki-client