$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft File: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft (raw, json) Hash identifier: ZDbx+QyRaV9uNkjXKWJ6Gj1DUe53Q5yHYrozdeO4qVg= Subject key identifier: E7:1C:0E:BA:3D:92:33:6D:E4:39:DE:F9:04:E3:AE:5E:D8:24:E6:50 Authority key identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 Certificate issuer: /CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Certificate serial: 617FB293742AB54B49854847147D6EF791BAE9A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft Manifest number: FF Signing time: Mon 09 Nov 2026 18:59:25 +0000 Manifest this update: Mon 09 Nov 2026 18:54:25 +0000 Manifest next update: Tue 10 Nov 2026 19:13:25 +0000 Files and hashes: 1: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: 0vy2z3MqKAODbU17bPVUXjhaDQ2sCkp7BN40wqS+aK4=) 2: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl (hash: weZCWcKHSt4cu9ywf0y1oJB4vJiFnnC8ypIN2JFMpMo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 19:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7f:b2:93:74:2a:b5:4b:49:85:48:47:14:7d:6e:f7:91:ba:e9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Validity Not Before: Nov 9 18:54:25 2026 GMT Not After : Nov 10 19:13:25 2026 GMT Subject: CN=E71C0EBA3D92336DE439DEF904E3AE5ED824E650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:8b:2c:3f:bd:0f:e2:eb:d7:c6:bc:ea:c6: c1:40:77:72:23:41:37:b3:c5:d8:57:c9:e1:4e:b6: 7e:fc:92:5c:fd:63:b5:20:1f:6b:bd:ba:ab:d9:da: 37:4c:45:8a:98:0b:81:34:8b:34:e0:1d:7f:6a:03: ad:56:f9:f0:a6:a4:cd:b6:0d:bc:27:73:bd:21:bb: 88:67:f0:d7:56:04:20:4e:90:a4:d2:fb:f3:6b:cb: 61:25:ad:6b:df:d5:a5:02:54:53:bf:02:1a:48:47: 2e:17:8b:15:d3:9a:84:ba:08:2b:45:44:b5:8c:1f: 60:32:ee:fa:10:59:19:94:9e:3b:01:5b:ff:a6:a2: a9:b5:b1:45:b5:e4:27:ae:cb:25:1c:d1:28:ea:91: d1:a5:5d:26:ea:7f:82:29:20:e2:53:c5:9a:85:f2: 89:48:32:2f:70:f4:0a:b0:fb:8a:a9:e0:d6:7c:bc: 85:c1:fd:92:cf:ed:35:e6:fc:81:90:f2:9a:a2:b9: 98:e8:0e:af:eb:7c:4d:bb:6d:f7:71:a8:2b:9c:fd: a8:58:b2:68:06:b8:66:3e:2c:98:3a:02:1e:dd:f2: 76:bc:30:4b:65:f3:63:2f:62:11:59:6c:28:73:35: df:a2:77:83:f7:2e:a0:9e:d7:6b:18:9d:4e:16:61: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1C:0E:BA:3D:92:33:6D:E4:39:DE:F9:04:E3:AE:5E:D8:24:E6:50 X509v3 Authority Key Identifier: keyid:19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c3:33:36:69:3c:05:51:81:16:49:cf:24:e6:b8:6f:bc:25: a9:58:d1:67:28:e2:16:e8:f9:f4:d8:91:c2:46:d3:9c:7d:32: 19:8c:62:2f:e8:65:c0:3b:a6:22:b7:da:07:18:75:47:18:1b: ce:c6:6e:8a:f0:d5:71:b8:6d:d6:05:28:cc:a3:69:78:2d:27: 57:89:76:9f:02:7c:9d:9d:ca:e3:e6:14:fb:68:94:54:29:e7: 95:b0:3d:f6:bf:be:12:30:d5:7e:e7:2d:77:e4:92:3d:10:22: 22:03:3a:02:8d:75:ad:fe:b8:d4:2c:85:d6:99:81:a6:78:bb: a3:de:fe:b7:82:a9:0a:25:3f:b5:83:61:5c:4d:d6:6a:bc:b0: d9:1f:01:29:6d:b4:d0:dc:a3:0a:43:4e:56:96:e2:f7:7e:a6: ed:c5:c8:d9:7f:7b:6b:8d:ef:ae:8b:df:82:f0:a2:74:8b:21: fb:39:08:b4:13:6e:06:f0:c2:00:0c:ee:2c:52:7f:a2:e3:cb: 5f:bd:6e:d5:bc:27:c6:fc:8f:7d:3c:1e:d6:a1:92:93:80:67: d9:04:02:30:6d:4d:d2:04:92:30:ec:f9:e1:d7:f9:db:e8:31: 8b:56:fe:e8:7f:2b:a4:ee:c2:f2:89:40:47:cf:1a:87:f4:27: db:d7:2e:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYX+yk3QqtUtJhUhHFH1u95G66agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3 Qzg0RkRDMTAeFw0yNjExMDkxODU0MjVaFw0yNjExMTAxOTEzMjVaMDMxMTAvBgNV BAMTKEU3MUMwRUJBM0Q5MjMzNkRFNDM5REVGOTA0RTNBRTVFRDgyNEU2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vIssP70P4uvXxrzqxsFAd3Ij QTezxdhXyeFOtn78klz9Y7UgH2u9uqvZ2jdMRYqYC4E0izTgHX9qA61W+fCmpM22 Dbwnc70hu4hn8NdWBCBOkKTS+/Nry2ElrWvf1aUCVFO/AhpIRy4XixXTmoS6CCtF RLWMH2Ay7voQWRmUnjsBW/+moqm1sUW15CeuyyUc0SjqkdGlXSbqf4IpIOJTxZqF 8olIMi9w9Aqw+4qp4NZ8vIXB/ZLP7TXm/IGQ8pqiuZjoDq/rfE27bfdxqCuc/ahY smgGuGY+LJg6Ah7d8na8MEtl82MvYhFZbChzNd+id4P3LqCe12sYnU4WYX0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xwOuj2SM23kOd75BOOuXtgk5lAwHwYDVR0j BBgwFoAUGQkc40uoIPlqvC+djCTZXHyE/cEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAzMzYyZTItOTc2NS00MmJkLWI1OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0 QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3Qzg0RkRDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA5MUNFMzRCQTgyMEY5NkFCQzJGOUQ4QzI0RDk1QzdDODRG REMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5 NUM3Qzg0RkRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/DMzZpPAVRgRZJzyTmuG+8JalY0Wco4hbo +fTYkcJG05x9MhmMYi/oZcA7piK32gcYdUcYG87Gborw1XG4bdYFKMyjaXgtJ1eJ dp8CfJ2dyuPmFPtolFQp55WwPfa/vhIw1X7nLXfkkj0QIiIDOgKNda3+uNQshdaZ gaZ4u6Pe/reCqQolP7WDYVxN1mq8sNkfASlttNDcowpDTlaW4vd+pu3FyNl/e2uN 766L34LwonSLIfs5CLQTbgbwwgAM7ixSf6Ljy1+9btW8J8b8j308HtahkpOAZ9kE AjBtTdIEkjDs+eHX+dvoMYtW/uh/K6TuwvKJQEfPGof0J9vXLi0= -----END CERTIFICATE-----Generated at Tue Nov 10 03:54:45 2026 by rpki-client