$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft File: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft (raw, json) Hash identifier: XHY1G9agep97TUY9NplFcN8ECWe0X9QlqR1j05QWjug= Subject key identifier: B4:33:EC:6C:05:A8:5E:F4:59:13:B7:68:7A:85:BB:50:D2:3C:32:F7 Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 Certificate issuer: /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Certificate serial: 385F8472BFCE33D2BA0A3F4BE540E80A4B32918C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:23:06 +0000 Manifest this update: Mon 21 Sep 2026 13:18:06 +0000 Manifest next update: Tue 22 Sep 2026 15:25:06 +0000 Files and hashes: 1: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl (hash: B6jgMbvS57mZtj5YSOOC9a1r60cITiWz9Exn4MqMTn8=) 2: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: 0XQ1YZo4kGL7Y3CIQczOPIPj1y3PxpdocpKouQW/EdQ=) 3: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 0HclTm8jPdJ9pdLkBcx2iHTadXENhk0okUOb438P1GQ=) 4: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: O5O2bHjSgz5EaoYBjPQFvScfNgW4n1HG3kEQcg119Ng=) 5: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: uuKla2urFiVoLa1tj8NM3bGyRcKks2/aX+x/1D+sD6M=) 6: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: xat5QRgiDjEvf5+MHrIJqdczPQXPNnHqQPKuqIFalY0=) 7: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: CjrhC79NpfmyHbjUbEINIlY/W8SS5iUE5Mpe2yHqTCk=) 8: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: A8Rj4cqXdcnsq+FLejpEUcmUwRFqYq1jFxwy+Q4EccA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5f:84:72:bf:ce:33:d2:ba:0a:3f:4b:e5:40:e8:0a:4b:32:91:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Validity Not Before: Sep 21 13:18:06 2026 GMT Not After : Sep 22 15:25:06 2026 GMT Subject: CN=B433EC6C05A85EF45913B7687A85BB50D23C32F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:ea:ba:35:ce:3f:fe:d1:9b:aa:9f:0c:de: f9:55:60:cc:cf:13:0a:15:ab:a5:41:ea:e4:86:7e: d6:af:45:56:68:85:6b:53:19:ad:59:12:bc:10:5e: b2:4a:ab:d2:61:d7:8f:02:60:11:4c:fe:98:6b:21: 33:a0:28:90:bb:dd:e6:ca:94:f8:b1:ff:5f:e7:1c: 76:ee:5d:e8:37:7d:80:93:fb:d1:5d:79:b5:85:7d: 5e:d3:cc:a7:7e:54:0a:7c:ed:02:3c:d3:20:67:10: f1:6d:af:4d:f7:33:4c:e6:db:69:57:a4:58:6a:b7: 6e:74:bc:00:63:1e:6d:a0:8a:af:5e:c9:36:ca:22: 15:fc:b5:2c:85:ae:7b:35:85:be:e8:47:49:cc:5e: 85:82:04:52:e6:5a:46:46:c2:79:97:22:74:08:5d: ef:7f:3d:49:1c:6e:a2:b4:9d:e6:f9:93:37:ea:34: 2f:f0:01:a7:02:65:93:52:eb:f3:28:9e:6e:63:81: 70:cf:7a:78:f1:fe:68:2a:93:5a:e7:e5:8b:b7:78: 35:68:e9:db:36:60:d8:04:cb:7e:c1:38:cb:46:a9: d8:6b:56:f0:77:c7:fd:a7:ee:39:2a:f2:26:25:e9: 36:ed:71:bb:da:4c:11:f2:85:22:c9:f2:db:ab:b7: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:33:EC:6C:05:A8:5E:F4:59:13:B7:68:7A:85:BB:50:D2:3C:32:F7 X509v3 Authority Key Identifier: keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:00:6e:31:aa:4f:4f:70:1c:46:69:17:2c:2d:a6:b0:c8:e3: e6:c3:b0:9c:40:ed:70:47:11:4f:5a:63:e1:10:d6:be:b0:62: 3c:2c:ad:0d:84:a4:5d:53:f7:92:4c:39:c8:f2:36:eb:55:97: 71:a4:da:9a:b0:90:71:05:9e:af:b3:c6:14:a2:df:eb:0e:f9: 4b:04:2b:36:ce:56:3c:9f:ea:46:6d:71:6a:cc:bd:10:0b:5c: 88:ec:03:d9:75:6d:6e:e3:a6:6c:6e:af:7a:b3:49:47:bf:4e: bd:3e:5e:05:08:88:d7:08:4b:8e:6d:42:5c:70:9b:40:63:37: 29:ec:b4:d2:28:32:a2:15:26:0c:f6:13:50:9a:df:81:e4:53: c0:59:f9:40:44:5e:4b:09:bd:f3:46:6b:1f:c6:1e:c1:74:0f: 46:9f:c4:2d:07:32:10:55:7f:9d:99:00:78:5d:ac:e8:b9:9c: 60:c3:7c:a2:e1:8f:54:01:14:a0:fa:a2:25:48:89:3e:2d:12: 90:45:e1:de:e0:b7:02:da:81:de:9d:d7:3f:72:af:03:8c:79: df:b3:5e:a5:29:3f:9a:a7:e9:10:4e:35:8b:30:eb:f3:4d:3d: 89:d4:dc:7a:12:ac:9c:2d:a2:03:43:a5:00:7f:95:fb:00:27: d8:53:16:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOF+Ecr/OM9K6Cj9L5UDoCksykYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1 RUVEODhEMTAeFw0yNjA5MjExMzE4MDZaFw0yNjA5MjIxNTI1MDZaMDMxMTAvBgNV BAMTKEI0MzNFQzZDMDVBODVFRjQ1OTEzQjc2ODdBODVCQjUwRDIzQzMyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLE+q6Nc4//tGbqp8M3vlVYMzP EwoVq6VB6uSGftavRVZohWtTGa1ZErwQXrJKq9Jh148CYBFM/phrITOgKJC73ebK lPix/1/nHHbuXeg3fYCT+9FdebWFfV7TzKd+VAp87QI80yBnEPFtr033M0zm22lX pFhqt250vABjHm2giq9eyTbKIhX8tSyFrns1hb7oR0nMXoWCBFLmWkZGwnmXInQI Xe9/PUkcbqK0neb5kzfqNC/wAacCZZNS6/Monm5jgXDPenjx/mgqk1rn5Yu3eDVo 6ds2YNgEy37BOMtGqdhrVvB3x/2n7jkq8iYl6TbtcbvaTBHyhSLJ8turtxWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDPsbAWoXvRZE7doeoW7UNI8MvcwHwYDVR0j BBgwFoAUsZxlaC0ReE19Kr2NS+vHxF7tiNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdmNDkwNjgtYzBjYS00YTIxLTlhOGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1Njgy RDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1RUVEODhEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlDNjU2ODJEMTE3ODREN0QyQUJEOEQ0QkVCQzdDNDVFRUQ4 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3 QzQ1RUVEODhEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwAbjGqT09wHEZpFywtprDI4+bDsJxA7XBH EU9aY+EQ1r6wYjwsrQ2EpF1T95JMOcjyNutVl3Gk2pqwkHEFnq+zxhSi3+sO+UsE KzbOVjyf6kZtcWrMvRALXIjsA9l1bW7jpmxur3qzSUe/Tr0+XgUIiNcIS45tQlxw m0BjNynstNIoMqIVJgz2E1Ca34HkU8BZ+UBEXksJvfNGax/GHsF0D0afxC0HMhBV f52ZAHhdrOi5nGDDfKLhj1QBFKD6oiVIiT4tEpBF4d7gtwLagd6d1z9yrwOMed+z XqUpP5qn6RBONYsw6/NNPYnU3HoSrJwtogNDpQB/lfsAJ9hTFi4= -----END CERTIFICATE-----Generated at Mon Sep 21 19:39:06 2026 by rpki-client