$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json) Hash identifier: PotoGXey4jDMLjmMmtBayXNSei7LfUNb+ejDKA+BT7Q= Subject key identifier: 42:0D:AC:41:98:FF:DB:2D:FD:5E:73:D5:06:D3:86:3A:04:B4:2A:47 Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Certificate serial: 2F519A77C9F31BFAA3E9FC3981FAF660E72884E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 17:49:52 +0000 Manifest this update: Tue 03 Nov 2026 17:44:52 +0000 Manifest next update: Wed 04 Nov 2026 21:16:52 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=) 2: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=) 3: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: IxDQPOowd4Y1mi1JIqebyiOnOZKgQHsvvgSSRihIFLI=) 4: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=) 5: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:51:9a:77:c9:f3:1b:fa:a3:e9:fc:39:81:fa:f6:60:e7:28:84:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Validity Not Before: Nov 3 17:44:52 2026 GMT Not After : Nov 4 21:16:52 2026 GMT Subject: CN=420DAC4198FFDB2DFD5E73D506D3863A04B42A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:74:3b:fe:2d:9b:c7:00:5a:5b:0f:a4:9f: 9d:05:9c:6b:3f:71:1c:77:50:ef:f7:91:9e:ae:6b: 24:10:2d:55:5e:36:b9:72:98:d8:0b:2c:b0:be:de: 6d:d1:29:97:1b:40:1c:99:4f:e8:9a:ba:31:cd:f2: 46:7b:d5:e4:17:1c:4d:e9:01:88:53:46:63:28:4b: 34:7d:7b:87:26:e5:79:5f:da:a4:88:ba:ec:b4:47: 15:10:57:66:7f:43:b6:ac:9a:e0:5a:4e:e1:6e:c5: 38:27:c9:c4:04:33:e0:8a:5a:42:6e:96:17:ba:3a: b7:89:7a:d5:51:53:d4:5c:1c:c6:a9:f8:f5:3f:bf: 91:d9:3d:48:a7:50:93:1a:ed:bc:91:bb:6c:1f:94: a9:22:e6:b2:d8:93:2c:5c:a1:e4:0f:c8:0e:34:d5: d9:80:ee:d9:90:48:53:3b:35:c7:bb:78:64:6d:e5: 81:4a:4b:98:8d:3c:f2:92:62:e8:62:ae:f2:ea:f0: a8:1e:9e:be:5c:d4:a4:f4:37:26:ca:b3:57:c9:1c: 82:68:2b:38:74:3b:d0:d5:4e:1d:81:24:6c:6f:f7: 55:e3:11:7b:24:02:9a:0f:1e:f6:48:31:6f:61:1a: 7b:e6:04:56:bd:72:ca:b0:73:e0:1c:d4:c5:7f:a0: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:AC:41:98:FF:DB:2D:FD:5E:73:D5:06:D3:86:3A:04:B4:2A:47 X509v3 Authority Key Identifier: keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ab:74:50:a2:c2:dd:ec:fc:d5:e0:b5:ec:be:55:74:13:76: 28:5e:25:73:fe:33:7e:77:05:20:b2:c0:7f:9a:60:0f:a0:67: 48:9d:68:cd:c3:86:4f:31:69:bc:c0:f1:0e:ab:fb:c3:42:fc: 07:4f:1f:93:67:0f:b8:43:ce:ea:16:81:95:a1:41:99:71:3f: 92:7e:5c:32:ae:b3:4a:be:25:5c:8e:7a:4b:e2:5f:d9:61:53: f4:ae:bc:54:09:18:0c:31:78:cb:77:9a:22:a6:0d:37:54:e2: 91:e0:f1:e5:e6:3b:64:c8:9f:7e:ab:53:24:78:5d:64:ca:c4: b5:d9:44:7b:48:1f:e3:43:e5:2c:e5:1f:25:25:15:22:d8:28: ab:12:f2:61:35:05:8a:33:ff:2b:75:d1:84:79:56:42:61:65: 18:f2:6e:44:bd:dc:1b:b5:3f:9a:9f:ad:74:93:0c:f0:28:d5: f9:74:be:a2:f9:ea:12:b2:40:5d:2d:e5:e5:e0:41:af:6c:2b: bc:a5:b8:26:63:ee:b1:d1:94:6a:70:db:4f:0b:09:1e:fb:a7: fb:ec:02:8a:c2:05:c4:47:6f:df:a2:1f:11:f6:61:51:b0:84: a1:48:b2:9b:15:ea:8a:bd:f4:ed:7f:f6:bf:20:96:82:89:4d: 0e:3a:5e:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1Gad8nzG/qj6fw5gfr2YOcohOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3 MUU2MDhFOTAeFw0yNjExMDMxNzQ0NTJaFw0yNjExMDQyMTE2NTJaMDMxMTAvBgNV BAMTKDQyMERBQzQxOThGRkRCMkRGRDVFNzNENTA2RDM4NjNBMDRCNDJBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYXQ7/i2bxwBaWw+kn50FnGs/ cRx3UO/3kZ6uayQQLVVeNrlymNgLLLC+3m3RKZcbQByZT+iaujHN8kZ71eQXHE3p AYhTRmMoSzR9e4cm5Xlf2qSIuuy0RxUQV2Z/Q7asmuBaTuFuxTgnycQEM+CKWkJu lhe6OreJetVRU9RcHMap+PU/v5HZPUinUJMa7byRu2wflKki5rLYkyxcoeQPyA40 1dmA7tmQSFM7Nce7eGRt5YFKS5iNPPKSYuhirvLq8Kgenr5c1KT0NybKs1fJHIJo Kzh0O9DVTh2BJGxv91XjEXskApoPHvZIMW9hGnvmBFa9csqwc+Ac1MV/oFq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQg2sQZj/2y39XnPVBtOGOgS0KkcwHwYDVR0j BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4 RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFD MTQ3MUU2MDhFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEurdFCiwt3s/NXgtey+VXQTdiheJXP+M353 BSCywH+aYA+gZ0idaM3Dhk8xabzA8Q6r+8NC/AdPH5NnD7hDzuoWgZWhQZlxP5J+ XDKus0q+JVyOekviX9lhU/SuvFQJGAwxeMt3miKmDTdU4pHg8eXmO2TIn36rUyR4 XWTKxLXZRHtIH+ND5SzlHyUlFSLYKKsS8mE1BYoz/yt10YR5VkJhZRjybkS93Bu1 P5qfrXSTDPAo1fl0vqL56hKyQF0t5eXgQa9sK7yluCZj7rHRlGpw208LCR77p/vs AorCBcRHb9+iHxH2YVGwhKFIspsV6oq99O1/9r8gloKJTQ46XiA= -----END CERTIFICATE-----Generated at Wed Nov 4 05:40:52 2026 by rpki-client