$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json) Hash identifier: 2YmkEkLvUb96fZT8FU2oJfkedFDBvMIHzMXYK4rQQ+w= Subject key identifier: 24:87:79:AC:13:58:AE:AE:4C:98:68:5D:B7:B0:01:CF:61:70:D5:12 Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Certificate serial: 4D13852EAD566F8D9A025A924E2E29FDA6DCF08F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 05:44:49 +0000 Manifest this update: Mon 02 Nov 2026 05:39:49 +0000 Manifest next update: Tue 03 Nov 2026 09:37:49 +0000 Files and hashes: 1: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=) 2: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=) 3: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=) 4: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=) 5: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: P7AZLoy1VVZQcfUL5vgyYQJ5xPl4hnMw9V9jZl8YOEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:13:85:2e:ad:56:6f:8d:9a:02:5a:92:4e:2e:29:fd:a6:dc:f0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Validity Not Before: Nov 2 05:39:49 2026 GMT Not After : Nov 3 09:37:49 2026 GMT Subject: CN=248779AC1358AEAE4C98685DB7B001CF6170D512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:2c:50:36:6c:cd:a3:43:83:f9:0d:88:8f: fb:0c:5f:e8:18:1c:6d:5a:22:85:8a:20:b6:53:8c: 63:a1:e9:14:26:57:a7:3f:79:b7:60:42:e1:d1:10: f6:dd:20:3e:00:e2:3c:50:80:f5:0b:b7:1c:91:02: ae:43:1a:b9:52:b4:9a:5b:8a:47:16:6e:35:87:0e: 77:fc:4e:03:c0:f5:53:a8:62:6d:86:1e:b2:1a:6e: 58:bb:3e:67:4f:ed:cc:22:b3:aa:ae:8d:87:c0:2c: d1:68:c1:d4:cd:1a:5f:66:7b:05:6b:25:48:b9:84: f2:3f:e7:0b:03:6b:65:b9:1a:61:de:da:34:27:ca: f2:76:0e:7d:c4:59:d4:17:f9:ff:d7:00:2b:a4:5b: 07:1c:2e:c6:4d:30:69:72:82:9d:d3:64:2a:9e:67: ae:7f:69:0b:1b:cc:fd:ce:28:ef:38:74:da:12:58: cd:1e:b1:2f:b6:15:d1:69:65:88:e3:6a:f4:4d:4d: cd:41:be:c5:08:22:6f:40:76:31:c2:4e:80:c3:73: b2:c8:9b:f0:92:46:da:70:37:15:1e:41:13:0c:ae: 81:db:56:2a:0d:9b:06:92:a9:d4:ad:f5:1d:51:83: 44:6a:2e:cd:b1:4a:4e:2c:86:e6:f6:cf:08:5a:68: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:87:79:AC:13:58:AE:AE:4C:98:68:5D:B7:B0:01:CF:61:70:D5:12 X509v3 Authority Key Identifier: keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:49:78:eb:38:24:b8:5c:30:95:b3:91:3b:86:5e:34:42:e4: a5:4f:59:ff:47:fc:e3:82:40:d7:82:12:0c:58:8f:56:33:3d: 0f:72:15:35:f4:23:88:b1:da:b3:e1:ef:e7:85:40:41:9d:82: bc:77:04:a8:52:16:42:e4:54:ed:5f:bd:73:71:83:5a:e0:19: 77:57:3a:99:b8:b0:0f:f1:8b:bc:46:88:95:40:1b:20:29:f8: ba:ac:06:e3:60:50:eb:3a:fd:21:ea:d1:15:dc:06:d9:8e:59: 63:56:d4:d5:69:84:b8:cd:ae:49:0a:15:d4:e8:c6:e2:85:19: db:f9:10:45:c4:7b:54:bf:8f:87:b5:5a:6a:0a:c2:d7:87:2a: 98:69:ef:4c:c3:fa:c8:0e:3a:06:46:da:97:8f:c1:dc:b3:79: 61:93:d4:ac:98:d8:54:04:84:73:50:fa:df:26:10:16:4f:a5: 0c:e9:c3:fb:dc:f1:53:24:b3:eb:fb:36:bd:72:4b:54:25:f0: 1c:05:b0:d1:4b:a9:30:f5:c4:7f:20:d8:77:0c:f0:0b:ff:ab: 85:29:14:e6:1c:22:0a:77:2a:28:62:ad:64:34:03:5c:4f:30: 0a:80:9f:58:3c:0e:1e:79:88:aa:08:ea:0c:a6:2b:11:a4:47: 49:1a:5a:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTROFLq1Wb42aAlqSTi4p/abc8I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUz OTM1NTA3QjAeFw0yNjExMDIwNTM5NDlaFw0yNjExMDMwOTM3NDlaMDMxMTAvBgNV BAMTKDI0ODc3OUFDMTM1OEFFQUU0Qzk4Njg1REI3QjAwMUNGNjE3MEQ1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lyxQNmzNo0OD+Q2Ij/sMX+gY HG1aIoWKILZTjGOh6RQmV6c/ebdgQuHREPbdID4A4jxQgPULtxyRAq5DGrlStJpb ikcWbjWHDnf8TgPA9VOoYm2GHrIabli7PmdP7cwis6qujYfALNFowdTNGl9mewVr JUi5hPI/5wsDa2W5GmHe2jQnyvJ2Dn3EWdQX+f/XACukWwccLsZNMGlygp3TZCqe Z65/aQsbzP3OKO84dNoSWM0esS+2FdFpZYjjavRNTc1BvsUIIm9AdjHCToDDc7LI m/CSRtpwNxUeQRMMroHbVioNmwaSqdSt9R1Rg0RqLs2xSk4shub2zwhaaB6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJId5rBNYrq5MmGhdt7ABz2Fw1RIwHwYDVR0j BBgwFoAUgZo4tFtP6n+YtyoxC3Lbjjk1UHswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGEyZTViNjktYWRiZC00ZTJkLTg0N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1 QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUzOTM1NTA3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTlBMzhCNDVCNEZFQTdGOThCNzJBMzEwQjcyREI4RTM5MzU1 MDdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRC OEUzOTM1NTA3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtJeOs4JLhcMJWzkTuGXjRC5KVPWf9H/OOC QNeCEgxYj1YzPQ9yFTX0I4ix2rPh7+eFQEGdgrx3BKhSFkLkVO1fvXNxg1rgGXdX Opm4sA/xi7xGiJVAGyAp+LqsBuNgUOs6/SHq0RXcBtmOWWNW1NVphLjNrkkKFdTo xuKFGdv5EEXEe1S/j4e1WmoKwteHKphp70zD+sgOOgZG2pePwdyzeWGT1KyY2FQE hHNQ+t8mEBZPpQzpw/vc8VMks+v7Nr1yS1Ql8BwFsNFLqTD1xH8g2HcM8Av/q4Up FOYcIgp3KihirWQ0A1xPMAqAn1g8Dh55iKoI6gymKxGkR0kaWrg= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:48 2026 by rpki-client