$ rpki-client -vvvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft File: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft (raw, json) Hash identifier: llbAJl5c+Hcdse1T9gmvaAPFt/bVcQQIX2zyJIsbep0= Subject key identifier: 53:2A:A7:DD:7D:53:AA:49:BF:5F:87:5B:44:31:B8:6B:52:5E:8F:AA Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 Certificate issuer: /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Certificate serial: 3F0D34E39ADFCE99E287E3CB7D367B0D2AD32170 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 19:26:52 +0000 Manifest this update: Tue 03 Nov 2026 19:21:52 +0000 Manifest next update: Wed 04 Nov 2026 21:39:52 +0000 Files and hashes: 1: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: rAfzEZvuHRI/Kzt1SmKQHwBtPJb8jdNpuP/cvt9qX+w=) 2: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: 7AkBTaxaVF6MfSYLN5bOMc9OzhJ7a78FUzJRaPwJ6kQ=) 3: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl (hash: IdubojzSYOaiqyigkGTDhMsZtIkBc8Y/iiMOFuFIQ0g=) 4: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: Ur2deLsRWDmCAqL8yUm8FNnfEGneYV45Th8VxPgH0qk=) 5: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: yUTHLwhvAH/MhoYaduOS14+07g6chdMoBPVYy5YJcX4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0d:34:e3:9a:df:ce:99:e2:87:e3:cb:7d:36:7b:0d:2a:d3:21:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Validity Not Before: Nov 3 19:21:52 2026 GMT Not After : Nov 4 21:39:52 2026 GMT Subject: CN=532AA7DD7D53AA49BF5F875B4431B86B525E8FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:54:ef:05:56:3e:aa:c3:8e:51:48:b6:8e:20: 89:f3:f5:29:01:07:5f:b3:b1:a7:68:0a:9f:7c:ed: fb:e6:af:ad:96:7e:05:62:e7:f2:56:39:bd:81:38: e6:58:7c:a6:8d:b0:e5:f2:8b:09:6a:f2:60:db:ec: 51:d0:42:9a:68:1d:32:77:ed:b1:2d:16:21:fb:00: 6f:01:e2:c5:cd:13:d1:5a:8c:73:24:3e:e4:0f:5b: c6:23:82:82:f7:29:88:e0:04:9a:94:57:7d:ff:6e: ed:37:50:b7:89:a2:38:41:19:7b:8b:26:6b:f0:07: a9:ff:1d:e5:c2:1a:2e:f2:f2:a9:4c:4b:57:88:28: 30:4f:ef:2f:8c:ef:ae:0e:b2:ab:91:d2:72:7b:91: bb:5b:dd:48:82:4e:6b:54:65:71:eb:e6:a9:b8:d4: fd:0b:87:e8:e3:0f:09:2f:e2:83:dd:7c:3f:a2:62: 18:2b:05:24:d9:57:46:63:3d:19:88:20:ed:f8:84: c5:73:53:c8:1c:1f:4e:a2:28:72:90:65:ff:7d:0e: a6:15:68:d9:c5:cf:3c:f5:c2:e9:f7:5f:f8:8b:05: 7f:03:48:85:08:71:af:d8:f2:e0:19:9c:51:0b:a7: aa:40:3e:d2:c5:ea:53:c6:f4:26:7c:bf:cf:c4:c0: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:A7:DD:7D:53:AA:49:BF:5F:87:5B:44:31:B8:6B:52:5E:8F:AA X509v3 Authority Key Identifier: keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:12:bf:40:6a:0c:20:ad:bb:d6:07:46:9f:0f:16:bc:88:b2: 15:d7:8a:87:a0:76:35:d5:1f:96:79:75:eb:20:73:b9:28:e7: b8:91:d0:66:cb:a5:27:06:50:cc:a5:d3:77:79:ee:aa:66:a2: ac:5f:dd:88:59:c9:89:43:45:e3:f6:52:fb:0e:7a:5b:e2:ca: 73:37:32:e7:e3:3d:38:60:c8:5f:7c:78:55:7f:1b:21:03:76: 79:25:f3:54:aa:a9:45:f2:56:44:c0:e0:c2:71:29:6a:6c:ec: 4a:27:07:f6:97:c1:95:2d:64:aa:f8:48:bf:65:bd:ff:93:69: 29:d2:ae:c4:17:79:97:b0:0c:41:5f:46:90:0f:ed:ab:2f:9b: f3:e1:b7:d2:2a:67:55:9c:7d:42:dc:a8:37:c7:ef:cf:e9:c1: bf:e2:86:b0:71:c5:30:77:fa:f5:16:88:b3:48:41:dd:0e:16: eb:f0:11:6a:4b:b8:4f:9d:64:5b:91:0d:0b:c1:f2:4b:50:3f: 78:4b:b0:00:de:6b:41:4e:dd:91:90:3a:31:3d:fe:bb:9e:f5: 4c:26:f9:79:49:e1:03:a5:cf:d7:1f:0d:23:af:c1:d0:e4:9e: b3:4c:b6:ce:7b:c6:c7:28:92:d9:5c:89:2d:cf:24:ed:4f:13: e5:51:40:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPw0045rfzpnih+PLfTZ7DSrTIXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0MEFE RjFCQkIzNzAeFw0yNjExMDMxOTIxNTJaFw0yNjExMDQyMTM5NTJaMDMxMTAvBgNV BAMTKDUzMkFBN0REN0Q1M0FBNDlCRjVGODc1QjQ0MzFCODZCNTI1RThGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVO8FVj6qw45RSLaOIInz9SkB B1+zsadoCp987fvmr62WfgVi5/JWOb2BOOZYfKaNsOXyiwlq8mDb7FHQQppoHTJ3 7bEtFiH7AG8B4sXNE9FajHMkPuQPW8YjgoL3KYjgBJqUV33/bu03ULeJojhBGXuL JmvwB6n/HeXCGi7y8qlMS1eIKDBP7y+M764OsquR0nJ7kbtb3UiCTmtUZXHr5qm4 1P0Lh+jjDwkv4oPdfD+iYhgrBSTZV0ZjPRmIIO34hMVzU8gcH06iKHKQZf99DqYV aNnFzzz1wun3X/iLBX8DSIUIca/Y8uAZnFELp6pAPtLF6lPG9CZ8v8/EwOGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUyqn3X1Tqkm/X4dbRDG4a1Jej6owHwYDVR0j BBgwFoAUGafSRz+qa3LjmaShD0tkCt8buzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQxZTA4ZWYtM2FlNi00YjkwLWI0NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDcz RkFBNkI3MkUzOTlBNEExMEY0QjY0MEFERjFCQkIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUE3RDI0NzNGQUE2QjcyRTM5OUE0QTEwRjRCNjQwQURGMUJC QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0 MEFERjFCQkIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMSv0BqDCCtu9YHRp8PFryIshXXioegdjXV H5Z5desgc7ko57iR0GbLpScGUMyl03d57qpmoqxf3YhZyYlDReP2UvsOelviynM3 MufjPThgyF98eFV/GyEDdnkl81SqqUXyVkTA4MJxKWps7EonB/aXwZUtZKr4SL9l vf+TaSnSrsQXeZewDEFfRpAP7asvm/Pht9IqZ1WcfULcqDfH78/pwb/ihrBxxTB3 +vUWiLNIQd0OFuvwEWpLuE+dZFuRDQvB8ktQP3hLsADea0FO3ZGQOjE9/rue9Uwm +XlJ4QOlz9cfDSOvwdDknrNMts57xscoktlciS3PJO1PE+VRQF8= -----END CERTIFICATE-----Generated at Wed Nov 4 05:58:14 2026 by rpki-client