$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft File: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft (raw, json) Hash identifier: JYaQkDHAIalCOS0oc0ipDl/Jdun2lfefhhci4jxsSBc= Subject key identifier: BA:9A:55:5F:2C:C0:68:8E:E8:6E:64:4B:81:F7:48:C0:01:D7:91:BA Authority key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 Certificate issuer: /CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Certificate serial: 6803B394068931C8DC9A8926B9ECAD02F0B177C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft Manifest number: FF Signing time: Mon 09 Nov 2026 10:54:14 +0000 Manifest this update: Mon 09 Nov 2026 10:49:14 +0000 Manifest next update: Tue 10 Nov 2026 11:36:14 +0000 Files and hashes: 1: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: 0XQ1YZo4kGL7Y3CIQczOPIPj1y3PxpdocpKouQW/EdQ=) 2: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: A8Rj4cqXdcnsq+FLejpEUcmUwRFqYq1jFxwy+Q4EccA=) 3: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: O5O2bHjSgz5EaoYBjPQFvScfNgW4n1HG3kEQcg119Ng=) 4: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl (hash: xea4lMrk30pitK0Sr40CCS0tKK41D8ecOdR29NhmZNE=) 5: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: uuKla2urFiVoLa1tj8NM3bGyRcKks2/aX+x/1D+sD6M=) 6: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 0HclTm8jPdJ9pdLkBcx2iHTadXENhk0okUOb438P1GQ=) 7: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: xat5QRgiDjEvf5+MHrIJqdczPQXPNnHqQPKuqIFalY0=) 8: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: CjrhC79NpfmyHbjUbEINIlY/W8SS5iUE5Mpe2yHqTCk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 11:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:03:b3:94:06:89:31:c8:dc:9a:89:26:b9:ec:ad:02:f0:b1:77:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Validity Not Before: Nov 9 10:49:14 2026 GMT Not After : Nov 10 11:36:14 2026 GMT Subject: CN=BA9A555F2CC0688EE86E644B81F748C001D791BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:87:10:81:51:99:f6:82:0d:61:da:3e:52: a8:c7:76:fd:19:7c:b6:40:7e:c6:94:ee:fd:c3:73: 0d:32:1f:da:04:08:72:53:31:9a:bc:ba:5d:f2:5c: e3:be:c5:bc:39:2a:f5:0c:23:d2:53:8f:9b:82:8e: 9f:40:4a:0d:f8:d0:8a:24:35:7f:be:82:2f:f9:a3: 22:39:c2:27:60:67:db:63:80:91:fc:19:ac:5c:6e: 8b:bd:0c:97:0f:77:8f:ac:53:f2:01:f0:2a:5b:f4: 97:9c:68:de:c0:86:e0:2b:b6:c8:c4:7c:e0:6c:ae: c0:37:43:bf:c8:8a:f0:87:d0:2e:e7:90:70:54:87: 52:2c:74:1d:33:e2:d9:b4:02:fc:75:1d:51:4f:3f: ae:29:8b:86:08:e1:3e:82:9b:65:ff:97:8a:d7:ca: 5c:5e:3b:ea:45:24:63:48:56:98:8e:a8:eb:35:62: 84:d8:a6:35:b0:d2:b9:49:62:01:1c:18:ac:fc:9f: 69:5f:56:86:ba:e2:e3:5b:d3:18:41:2f:62:fc:85: ac:a4:f0:a2:d4:df:63:db:d4:b4:9b:1c:e4:a7:2f: 5e:79:69:83:cf:89:04:23:2c:0d:25:4b:ec:de:78: 7f:6e:cc:f4:07:b2:a1:d4:50:3e:de:5c:e6:d7:4a: 22:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9A:55:5F:2C:C0:68:8E:E8:6E:64:4B:81:F7:48:C0:01:D7:91:BA X509v3 Authority Key Identifier: keyid:B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:96:a7:3d:8b:07:22:0f:34:46:d1:22:af:75:5c:a9:d8:d6: 23:2c:58:da:8a:e2:5f:bb:56:56:ea:4f:27:dc:e8:50:22:8e: 88:eb:f1:f6:92:47:a0:94:b4:b3:cd:79:65:e8:3b:d7:32:e8: 12:e0:9b:11:9d:c3:61:3e:ea:eb:48:e0:e8:e3:42:51:70:c2: 7d:a7:50:45:5d:17:7f:c3:a7:98:c2:ad:21:47:82:14:6f:97: ad:14:ab:82:66:24:f2:26:4d:cd:2d:54:08:be:dd:4b:61:61: de:e5:70:4c:89:b7:fd:68:a9:67:80:34:4c:74:45:b5:19:74: 55:7c:df:c4:c2:88:66:80:4a:01:b2:bb:51:98:80:76:d7:ac: ed:13:cc:15:7a:8f:c3:33:cf:10:fa:ce:d4:74:f8:d3:4f:d3: 9a:bd:bf:97:4e:e6:10:9b:1a:c1:06:17:43:65:5d:39:74:70: 87:27:d5:4f:d6:be:c3:65:21:61:59:67:66:f7:dd:1f:53:51: f9:d5:a5:4e:fc:20:9d:a5:b8:d7:ce:56:55:af:10:b4:a1:12: 43:38:0e:4b:3e:d1:7f:0d:30:53:b3:5d:75:d0:19:0d:a3:86: 3b:6f:e4:73:9e:91:e9:25:bc:ce:b0:ca:74:05:5a:47:c7:c8: b1:08:d4:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAOzlAaJMcjcmokmueytAvCxd8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1 RUVEODhEMTAeFw0yNjExMDkxMDQ5MTRaFw0yNjExMTAxMTM2MTRaMDMxMTAvBgNV BAMTKEJBOUE1NTVGMkNDMDY4OEVFODZFNjQ0QjgxRjc0OEMwMDFENzkxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v4cQgVGZ9oINYdo+UqjHdv0Z fLZAfsaU7v3Dcw0yH9oECHJTMZq8ul3yXOO+xbw5KvUMI9JTj5uCjp9ASg340Iok NX++gi/5oyI5widgZ9tjgJH8Gaxcbou9DJcPd4+sU/IB8Cpb9JecaN7AhuArtsjE fOBsrsA3Q7/IivCH0C7nkHBUh1IsdB0z4tm0Avx1HVFPP64pi4YI4T6Cm2X/l4rX ylxeO+pFJGNIVpiOqOs1YoTYpjWw0rlJYgEcGKz8n2lfVoa64uNb0xhBL2L8hayk 8KLU32Pb1LSbHOSnL155aYPPiQQjLA0lS+zeeH9uzPQHsqHUUD7eXObXSiLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuppVXyzAaI7obmRLgfdIwAHXkbowHwYDVR0j BBgwFoAUsZxlaC0ReE19Kr2NS+vHxF7tiNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdmNDkwNjgtYzBjYS00YTIxLTlhOGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1Njgy RDExNzg0RDdEMkFCRDhENEJFQkM3QzQ1RUVEODhEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlDNjU2ODJEMTE3ODREN0QyQUJEOEQ0QkVCQzdDNDVFRUQ4 OEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE5QzY1NjgyRDExNzg0RDdEMkFCRDhENEJFQkM3 QzQ1RUVEODhEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6Wpz2LByIPNEbRIq91XKnY1iMsWNqK4l+7 VlbqTyfc6FAijojr8faSR6CUtLPNeWXoO9cy6BLgmxGdw2E+6utI4OjjQlFwwn2n UEVdF3/Dp5jCrSFHghRvl60Uq4JmJPImTc0tVAi+3UthYd7lcEyJt/1oqWeANEx0 RbUZdFV838TCiGaASgGyu1GYgHbXrO0TzBV6j8MzzxD6ztR0+NNP05q9v5dO5hCb GsEGF0NlXTl0cIcn1U/WvsNlIWFZZ2b33R9TUfnVpU78IJ2luNfOVlWvELShEkM4 Dks+0X8NMFOzXXXQGQ2jhjtv5HOekeklvM6wynQFWkfHyLEI1Ec= -----END CERTIFICATE-----Generated at Tue Nov 10 03:16:44 2026 by rpki-client