$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: hPnltNinqkNarZheAvokEfzP0pvukzV6gdoZeTneg30= Subject key identifier: 7C:E6:AA:B1:E7:43:62:5E:C8:40:73:72:A3:C4:C0:F9:DD:4D:DC:E2 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 47358F5244D7F7FD3134ABA49778112E265EB37E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:52:20 +0000 Manifest this update: Mon 21 Sep 2026 12:47:20 +0000 Manifest next update: Tue 22 Sep 2026 15:54:20 +0000 Files and hashes: 1: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) 2: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) 3: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: rt1DN3Nvh+sFMM/COF2cfyJG15ZGBf5aQVjxXEzH3aw=) 4: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:35:8f:52:44:d7:f7:fd:31:34:ab:a4:97:78:11:2e:26:5e:b3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Sep 21 12:47:20 2026 GMT Not After : Sep 22 15:54:20 2026 GMT Subject: CN=7CE6AAB1E743625EC8407372A3C4C0F9DD4DDCE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:81:10:37:b7:b5:a1:45:d1:fd:37:90:64: 08:b8:d6:19:ae:c5:6a:4c:87:23:9d:76:01:80:39: 3e:c5:47:37:eb:d5:f8:94:d9:31:03:22:56:9b:29: 8d:8f:e5:8a:7f:a4:fa:4a:73:63:ff:39:04:77:f0: 9f:03:58:56:fe:58:9e:08:37:b3:ba:34:82:cf:4c: 35:ef:a9:0f:03:ba:6b:b7:73:c0:9a:0d:aa:24:f0: 41:72:11:c9:d4:ac:9c:b1:93:3d:e1:6c:0e:98:dd: ce:55:98:0f:5a:9e:81:8e:f4:61:30:0d:61:e9:c7: a6:70:26:fc:d4:da:f8:b6:8a:8a:9b:36:c2:b1:f2: f4:5a:51:f9:33:28:af:99:d8:3b:f6:19:76:aa:6d: 82:7c:f7:26:de:ef:95:be:d1:52:23:01:db:05:56: ac:33:62:b0:3e:cc:3c:c5:e8:8e:b3:53:89:b9:1e: 96:6a:8c:94:24:63:c2:e2:32:bd:f9:d5:a7:3d:ea: b0:f9:b9:83:01:f7:63:4b:24:52:c4:aa:ef:93:66: 7e:60:45:36:b3:54:2c:3c:56:3f:8c:e6:7d:48:ee: 14:f4:d3:2f:5e:c9:f2:71:b2:18:2b:81:96:79:50: 04:ac:d7:64:eb:f4:10:fc:66:0f:f8:aa:22:df:58: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E6:AA:B1:E7:43:62:5E:C8:40:73:72:A3:C4:C0:F9:DD:4D:DC:E2 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:fd:31:e0:e0:87:24:b6:cd:8a:18:06:86:a9:58:db:80:64: c7:82:bf:2f:68:02:cf:9a:38:59:16:99:82:81:68:df:86:99: 3a:ee:f9:36:03:86:aa:2b:41:34:fe:4e:11:47:00:8b:a6:c3: ce:8e:7c:1c:ce:d5:e1:d8:17:fb:cc:43:cd:66:89:ea:6b:05: 79:b5:44:6d:94:59:e8:db:07:eb:5f:3a:a2:e3:4a:4d:90:0a: fa:0e:a9:eb:fc:bd:59:84:1c:04:14:5f:d0:26:54:3d:9f:b8: ad:4a:44:d3:6a:9e:aa:7a:36:8c:4b:25:76:b3:b5:3e:53:7e: 53:f5:e8:ae:05:30:f6:22:25:4f:c4:ef:a7:aa:51:6d:33:8d: 26:24:51:29:5b:bf:e6:24:77:6b:0e:2c:da:a0:bf:8c:05:58: 00:e5:e6:55:db:a3:8e:ed:78:61:49:12:8a:fa:03:b5:e4:f3: 4d:43:f2:35:e7:1d:90:26:6e:41:86:87:30:26:2f:b6:d1:4d: bc:e9:de:92:e9:28:11:2e:3e:01:ac:e4:96:d7:b4:6f:04:c8: 40:0e:80:33:42:d9:82:3f:10:10:06:57:0c:b6:24:3c:2d:36: f1:43:23:ee:a7:53:c9:bf:f8:20:b6:29:45:a3:2b:01:db:56: f4:b6:64:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzWPUkTX9/0xNKukl3gRLiZes34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA5MjExMjQ3MjBaFw0yNjA5MjIxNTU0MjBaMDMxMTAvBgNV BAMTKDdDRTZBQUIxRTc0MzYyNUVDODQwNzM3MkEzQzRDMEY5REQ0RERDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXYEQN7e1oUXR/TeQZAi41hmu xWpMhyOddgGAOT7FRzfr1fiU2TEDIlabKY2P5Yp/pPpKc2P/OQR38J8DWFb+WJ4I N7O6NILPTDXvqQ8Dumu3c8CaDaok8EFyEcnUrJyxkz3hbA6Y3c5VmA9anoGO9GEw DWHpx6ZwJvzU2vi2ioqbNsKx8vRaUfkzKK+Z2Dv2GXaqbYJ89ybe75W+0VIjAdsF VqwzYrA+zDzF6I6zU4m5HpZqjJQkY8LiMr351ac96rD5uYMB92NLJFLEqu+TZn5g RTazVCw8Vj+M5n1I7hT00y9eyfJxshgrgZZ5UASs12Tr9BD8Zg/4qiLfWJ35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfOaqsedDYl7IQHNyo8TA+d1N3OIwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET9MeDghyS2zYoYBoapWNuAZMeCvy9oAs+a OFkWmYKBaN+GmTru+TYDhqorQTT+ThFHAIumw86OfBzO1eHYF/vMQ81mieprBXm1 RG2UWejbB+tfOqLjSk2QCvoOqev8vVmEHAQUX9AmVD2fuK1KRNNqnqp6NoxLJXaz tT5TflP16K4FMPYiJU/E76eqUW0zjSYkUSlbv+Ykd2sOLNqgv4wFWADl5lXbo47t eGFJEor6A7Xk801D8jXnHZAmbkGGhzAmL7bRTbzp3pLpKBEuPgGs5JbXtG8EyEAO gDNC2YI/EBAGVwy2JDwtNvFDI+6nU8m/+CC2KUWjKwHbVvS2ZGk= -----END CERTIFICATE-----Generated at Mon Sep 21 23:57:49 2026 by rpki-client