$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: MvjmxoKxmaE8nLi0aBthiuN3zUBDixhLRycZyTokEJE= Subject key identifier: DD:75:36:33:70:01:A9:8B:50:64:A1:B0:5F:F0:4C:A9:3A:0C:8D:23 Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 6C97986E9BE77723460C3B5381536AF41680C9AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 06:15:29 +0000 Manifest this update: Mon 02 Nov 2026 06:10:29 +0000 Manifest next update: Tue 03 Nov 2026 06:32:29 +0000 Files and hashes: 1: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) 2: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: VwxzaInZhJVtJf6cwRplhnCC6DTigkiNznVE7QNsSaQ=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:97:98:6e:9b:e7:77:23:46:0c:3b:53:81:53:6a:f4:16:80:c9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: Nov 2 06:10:29 2026 GMT Not After : Nov 3 06:32:29 2026 GMT Subject: CN=DD7536337001A98B5064A1B05FF04CA93A0C8D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b6:a3:9e:0a:25:aa:80:e6:aa:d7:40:88:93: ba:1c:ae:f9:e9:ae:bb:c2:f2:02:ca:b8:59:df:ad: 8b:52:f0:b4:04:82:a4:f8:01:a0:b3:bf:a6:bc:f4: 2e:c8:66:8c:9f:e3:c0:a2:be:db:2b:39:14:20:d1: 67:7d:57:6e:fb:e2:d9:7c:d4:9d:d1:ab:45:03:7b: 6c:91:f2:53:bb:28:7d:7f:6e:06:a5:bf:3b:d6:1e: c0:fe:ad:91:ab:03:94:59:be:94:cd:22:e2:09:12: af:0a:c2:d3:e8:4d:0b:7c:26:ad:1a:00:10:60:34: 7d:3e:77:02:ce:ad:fd:20:e4:42:c8:57:3b:06:53: e8:dd:66:a8:e9:68:80:87:7c:86:14:77:00:da:59: 6c:23:7c:c5:ba:3b:cc:35:88:9d:b9:27:e2:8c:85: 47:e9:a2:a3:2a:83:42:33:31:df:e2:fd:b0:75:37: 24:5b:12:e2:97:db:30:f9:20:02:a5:c7:b4:d2:e5: 51:70:1f:90:1c:0d:3b:ae:3f:f1:af:eb:15:56:2f: ae:2d:31:8b:5a:69:d1:d6:d0:10:98:71:05:8e:0c: 62:d3:cc:d2:f7:2a:69:1f:ef:d2:49:d7:b3:6d:89: e1:dd:80:f7:8f:77:e8:09:27:ba:69:d2:65:f3:24: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:36:33:70:01:A9:8B:50:64:A1:B0:5F:F0:4C:A9:3A:0C:8D:23 X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cb:ec:8d:9c:79:db:af:8e:d5:44:b7:aa:a2:5d:e8:0f:f2: 9e:9d:b7:93:fe:57:19:8c:28:26:29:1a:43:a2:a8:24:c0:f9: 89:ba:34:ea:bc:d3:84:ad:1f:d3:e9:41:79:04:60:f9:4e:5e: c9:d3:b8:b3:8b:c7:df:1d:3d:af:3b:ac:45:2f:20:79:1b:bb: 5a:49:c1:53:65:71:21:38:9b:27:bd:82:fb:b7:c0:09:a6:fe: e6:e9:af:a9:7d:b0:d5:70:47:5c:40:6c:b3:51:79:90:98:2e: f4:f2:ce:dd:ca:76:29:19:cf:57:be:e6:e0:46:3d:c0:81:f2: 51:d2:aa:46:11:78:60:72:71:5b:d8:ce:b1:0c:7e:d9:19:80: c9:57:02:7d:69:01:d1:c2:de:25:1d:f9:fd:ac:2d:72:90:70: 48:2a:47:59:a2:f0:54:83:1d:cc:fe:3b:dd:3c:df:47:6a:12: ea:47:b5:42:7c:0b:54:fc:95:2a:32:3a:73:1e:2b:ea:f8:71: 3d:73:e1:14:72:a4:95:f1:9c:ed:97:15:0c:7c:1f:c3:55:c7: d7:18:6e:a4:e0:62:ae:c7:be:24:08:89:c8:7f:e2:0d:ca:47: ba:94:10:2c:8e:58:3f:92:e4:c8:98:a3:48:02:30:29:bf:c6: 30:28:11:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJeYbpvndyNGDDtTgVNq9BaAyawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjExMDIwNjEwMjlaFw0yNjExMDMwNjMyMjlaMDMxMTAvBgNV BAMTKERENzUzNjMzNzAwMUE5OEI1MDY0QTFCMDVGRjA0Q0E5M0EwQzhEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLtqOeCiWqgOaq10CIk7ocrvnp rrvC8gLKuFnfrYtS8LQEgqT4AaCzv6a89C7IZoyf48CivtsrORQg0Wd9V2774tl8 1J3Rq0UDe2yR8lO7KH1/bgalvzvWHsD+rZGrA5RZvpTNIuIJEq8KwtPoTQt8Jq0a ABBgNH0+dwLOrf0g5ELIVzsGU+jdZqjpaICHfIYUdwDaWWwjfMW6O8w1iJ25J+KM hUfpoqMqg0IzMd/i/bB1NyRbEuKX2zD5IAKlx7TS5VFwH5AcDTuuP/Gv6xVWL64t MYtaadHW0BCYcQWODGLTzNL3Kmkf79JJ17NtieHdgPePd+gJJ7pp0mXzJMzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XU2M3ABqYtQZKGwX/BMqToMjSMwHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILL7I2ceduvjtVEt6qiXegP8p6dt5P+VxmM KCYpGkOiqCTA+Ym6NOq804StH9PpQXkEYPlOXsnTuLOLx98dPa87rEUvIHkbu1pJ wVNlcSE4mye9gvu3wAmm/ubpr6l9sNVwR1xAbLNReZCYLvTyzt3KdikZz1e+5uBG PcCB8lHSqkYReGBycVvYzrEMftkZgMlXAn1pAdHC3iUd+f2sLXKQcEgqR1mi8FSD Hcz+O90830dqEupHtUJ8C1T8lSoyOnMeK+r4cT1z4RRypJXxnO2XFQx8H8NVx9cY bqTgYq7HviQIich/4g3KR7qUECyOWD+S5MiYo0gCMCm/xjAoEW8= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:21 2026 by rpki-client