$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: mx6wHKqAePAWgP54edCfxY42RkDdw9DhhbzYwfEhOqg= Subject key identifier: F6:91:98:9C:F8:6F:83:0A:1F:33:93:03:A0:66:92:9B:CF:F5:20:E4 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 3D9E48331FD88F6F89DBD9014C37C56650E9C51B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 07:57:22 +0000 Manifest this update: Mon 02 Nov 2026 07:52:22 +0000 Manifest next update: Tue 03 Nov 2026 08:26:22 +0000 Files and hashes: 1: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) 3: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: 9eyS8HXbfbCDXmygDtB3Dqjsvk9VgB9/LgKKOa87WW4=) 4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9e:48:33:1f:d8:8f:6f:89:db:d9:01:4c:37:c5:66:50:e9:c5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Nov 2 07:52:22 2026 GMT Not After : Nov 3 08:26:22 2026 GMT Subject: CN=F691989CF86F830A1F339303A066929BCFF520E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:e7:eb:f9:c3:e6:44:38:46:72:cc:3a:37: 5e:e7:31:d0:2a:ba:3a:5f:7f:33:f7:64:8f:7e:10: 33:15:ca:d3:53:6a:53:61:f1:ef:32:02:ec:16:d8: e1:94:d6:d3:7f:97:21:60:56:2c:55:92:c7:73:ab: 90:1b:7e:59:70:32:c2:3f:f7:4b:86:4d:09:b1:04: c2:27:af:d9:15:ca:5e:be:58:f8:58:ef:84:3a:db: ec:37:de:9e:6c:af:9f:3c:80:2c:57:5b:a7:78:3b: 97:1a:0a:52:39:22:b6:42:93:32:65:53:66:ef:1a: 1f:f8:d4:6d:51:4d:88:a8:ce:fe:35:8b:11:22:52: 8d:5c:fc:58:bc:75:0b:f6:10:44:67:97:50:ec:cd: 60:32:b0:ce:33:c8:e9:b6:cf:e5:2f:e1:a4:9d:d9: 9f:28:c1:c9:cc:8c:a1:af:64:b1:da:a5:eb:54:9a: e6:aa:4e:a3:c3:19:bd:5c:35:43:96:eb:0c:52:20: be:8b:c5:32:5a:d5:1a:c9:89:ee:37:11:eb:3e:b1: f4:8b:0d:5e:24:43:01:27:dc:f1:75:94:9d:47:b9: 90:5d:11:e2:b2:8d:70:20:2d:09:f1:cc:f0:b1:4f: 25:90:36:19:6b:ed:7a:cf:6f:97:d5:3f:5c:6e:ff: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:98:9C:F8:6F:83:0A:1F:33:93:03:A0:66:92:9B:CF:F5:20:E4 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:78:c3:58:fb:c3:28:76:53:e7:fe:03:22:57:1c:23:3a:1f: 26:1a:41:5d:81:f7:9e:91:53:1d:82:f5:64:ec:e9:26:46:ed: 6b:bc:f2:84:95:7c:c8:e4:d5:e9:1d:6f:77:d1:1c:fa:c3:dd: 46:f7:9e:65:ab:7b:1b:d1:0c:35:8b:da:68:e1:56:5e:d0:f3: b5:95:78:5c:70:7f:41:d2:a5:ab:fe:9e:38:7b:54:3e:52:20: 42:46:83:84:0c:42:e8:d7:d7:95:12:b8:8e:2c:86:b2:09:f5: b0:09:f5:26:d5:16:de:43:a5:32:49:5f:47:d4:06:3a:fb:8a: 04:23:9e:20:79:33:fe:81:ab:46:30:39:98:43:01:ad:58:78: f1:d7:0b:ac:46:fb:84:30:e1:84:a7:44:85:17:3e:3e:3d:ef: 99:ed:c9:f1:ee:23:34:99:b6:06:8b:04:49:85:74:73:bb:8a: f2:bb:da:c7:97:0e:aa:4b:68:c8:5c:b6:57:b0:16:56:f8:5a: d8:b0:9f:2f:f3:77:e1:a7:95:27:83:ac:75:ce:d2:6a:16:0f: 34:e2:fc:82:2f:fa:4c:b8:d7:a8:3f:d0:a9:8e:76:7a:28:67: 4b:0e:6c:57:c2:3b:31:f8:d7:23:04:4a:aa:51:c7:b6:7f:1f: 43:83:98:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZ5IMx/Yj2+J29kBTDfFZlDpxRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjExMDIwNzUyMjJaFw0yNjExMDMwODI2MjJaMDMxMTAvBgNV BAMTKEY2OTE5ODlDRjg2RjgzMEExRjMzOTMwM0EwNjY5MjlCQ0ZGNTIwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBufr+cPmRDhGcsw6N17nMdAq ujpffzP3ZI9+EDMVytNTalNh8e8yAuwW2OGU1tN/lyFgVixVksdzq5AbfllwMsI/ 90uGTQmxBMInr9kVyl6+WPhY74Q62+w33p5sr588gCxXW6d4O5caClI5IrZCkzJl U2bvGh/41G1RTYiozv41ixEiUo1c/Fi8dQv2EERnl1DszWAysM4zyOm2z+Uv4aSd 2Z8owcnMjKGvZLHapetUmuaqTqPDGb1cNUOW6wxSIL6LxTJa1RrJie43Ees+sfSL DV4kQwEn3PF1lJ1HuZBdEeKyjXAgLQnxzPCxTyWQNhlr7XrPb5fVP1xu/63BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9pGYnPhvgwofM5MDoGaSm8/1IOQwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ4w1j7wyh2U+f+AyJXHCM6HyYaQV2B956R Ux2C9WTs6SZG7Wu88oSVfMjk1ekdb3fRHPrD3Ub3nmWrexvRDDWL2mjhVl7Q87WV eFxwf0HSpav+njh7VD5SIEJGg4QMQujX15USuI4shrIJ9bAJ9SbVFt5DpTJJX0fU Bjr7igQjniB5M/6Bq0YwOZhDAa1YePHXC6xG+4Qw4YSnRIUXPj4975ntyfHuIzSZ tgaLBEmFdHO7ivK72seXDqpLaMhctlewFlb4Wtiwny/zd+GnlSeDrHXO0moWDzTi /IIv+ky416g/0KmOdnooZ0sObFfCOzH41yMESqpRx7Z/H0ODmMc= -----END CERTIFICATE-----Generated at Mon Nov 2 16:30:06 2026 by rpki-client