$ rpki-client -vvvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft (raw, json) Hash identifier: WOA3TrntGtm7r88fRfm3bmesTj3KGqPjv0OZ5KY4SYM= Subject key identifier: ED:C5:B1:38:64:0E:B1:77:DA:84:41:78:A2:3E:14:79:E8:05:38:AF Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Certificate issuer: /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Certificate serial: 4476A4A3D6FA8EB84C9DC11667A9AABD3495B563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:50:54 +0000 Manifest this update: Wed 16 Sep 2026 21:45:54 +0000 Manifest next update: Fri 18 Sep 2026 01:17:54 +0000 Files and hashes: 1: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl (hash: FuPKERlI7DfN61eC0CExhr4onIVFU0kNHDu6Uw6sR34=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: 57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: ebsbFpwP6d3fIBo+fLqzGpd0+qy00iUK8c0JJxLvFRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:76:a4:a3:d6:fa:8e:b8:4c:9d:c1:16:67:a9:aa:bd:34:95:b5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Validity Not Before: Sep 16 21:45:54 2026 GMT Not After : Sep 18 01:17:54 2026 GMT Subject: CN=EDC5B138640EB177DA844178A23E1479E80538AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:ea:ef:fe:8d:f5:b1:f1:c1:9f:de:37:f8: f3:b1:58:0e:43:b4:6d:c3:d4:88:b3:28:85:0e:12: c1:2f:85:44:26:64:b6:05:0f:6a:bf:34:30:f2:ae: c1:53:53:b8:af:46:96:55:0e:45:73:3e:76:4a:b8: 5d:93:a3:66:94:80:48:ec:e4:39:cb:1a:bb:f5:98: 12:5d:1c:4f:26:e0:7a:0b:2e:fa:fd:1c:21:f7:61: c2:08:d6:aa:16:ed:36:43:95:a4:98:43:5a:2d:bd: b4:0b:8f:6b:1c:fd:c3:9a:c0:7c:7d:02:96:02:5a: 7a:83:75:3d:3b:b3:8f:dc:48:95:92:20:22:1f:95: b8:a7:25:5d:8c:1b:6d:e0:51:fa:89:1b:d5:f5:63: 1c:37:da:e6:a8:a8:50:33:d5:93:a0:34:d5:fb:dd: 95:4f:2b:80:68:ec:48:07:39:a3:34:d9:31:4b:40: 06:30:6f:12:12:2d:5c:56:c0:f8:ce:bf:00:0b:db: c6:23:95:54:fa:f6:dd:26:eb:d0:01:b7:54:5d:09: 95:ca:f7:dc:01:01:bc:82:b5:0f:32:42:f4:15:0a: 0b:7c:de:fa:9d:ce:98:b1:05:c5:21:f3:a7:6e:fe: af:cc:5d:58:1a:32:b9:86:87:34:46:77:90:7f:10: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:B1:38:64:0E:B1:77:DA:84:41:78:A2:3E:14:79:E8:05:38:AF X509v3 Authority Key Identifier: keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:53:00:e5:f4:cf:7b:c1:da:6b:30:34:a8:3c:06:44:2f:c8: 29:3d:9a:39:09:46:b1:65:7f:bf:cf:f2:41:8d:5c:68:55:f4: 32:26:75:e1:d9:ba:7d:50:22:0c:79:35:01:d9:5d:d6:1b:60: 85:e2:a2:0c:17:53:25:02:b7:45:4a:d1:a9:eb:1f:23:be:23: 55:cc:88:4f:16:d2:6b:d2:93:37:68:1f:a4:79:37:53:fd:1f: d2:c0:b7:32:f6:8c:47:39:86:c7:61:33:bd:13:ea:98:40:10: 4d:b5:fe:7e:69:a1:bb:76:ff:51:65:8a:83:6f:d7:da:4c:ad: 42:57:dc:cb:09:2f:14:cd:f3:19:c1:5f:e0:d6:1b:e2:e5:ea: d6:04:e1:93:20:1a:b4:e8:88:c1:6e:ab:9b:24:4b:0f:f0:88: 2a:bb:02:90:e0:13:cb:26:e6:bd:c0:92:ad:34:e6:e1:1f:b0: 2c:ac:89:34:65:4b:3c:f5:f1:c1:71:a4:04:3d:2d:b5:b2:28: 5b:e8:c4:9b:91:2f:2b:bb:f2:30:c5:fc:a8:39:e5:fc:3f:57: ca:9f:b7:48:8c:d5:20:4c:f6:99:57:15:96:22:6c:41:25:78: 27:97:07:50:46:c5:b1:e1:54:52:5c:6f:1d:6e:9d:a6:c8:88: f3:ef:c4:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHako9b6jrhMncEWZ6mqvTSVtWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VE RjUyM0FCNTAeFw0yNjA5MTYyMTQ1NTRaFw0yNjA5MTgwMTE3NTRaMDMxMTAvBgNV BAMTKEVEQzVCMTM4NjQwRUIxNzdEQTg0NDE3OEEyM0UxNDc5RTgwNTM4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsF+rv/o31sfHBn943+POxWA5D tG3D1IizKIUOEsEvhUQmZLYFD2q/NDDyrsFTU7ivRpZVDkVzPnZKuF2To2aUgEjs 5DnLGrv1mBJdHE8m4HoLLvr9HCH3YcII1qoW7TZDlaSYQ1otvbQLj2sc/cOawHx9 ApYCWnqDdT07s4/cSJWSICIflbinJV2MG23gUfqJG9X1Yxw32uaoqFAz1ZOgNNX7 3ZVPK4Bo7EgHOaM02TFLQAYwbxISLVxWwPjOvwAL28YjlVT69t0m69ABt1RdCZXK 99wBAbyCtQ8yQvQVCgt83vqdzpixBcUh86du/q/MXVgaMrmGhzRGd5B/EGwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cWxOGQOsXfahEF4oj4UeegFOK8wHwYDVR0j BBgwFoAUsZ9PmzTZCIuM8qzjsKVqft9SOrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjI4ZGU4NmItYTI2ZS00YjBmLWE4M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIz NEQ5MDg4QjhDRjJBQ0UzQjBBNTZBN0VERjUyM0FCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTlGNEY5QjM0RDkwODhCOENGMkFDRTNCMEE1NkE3RURGNTIz QUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvQjE5RjRGOUIzNEQ5MDg4QjhDRjJBQ0UzQjBBNTZB N0VERjUyM0FCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhTAOX0z3vB2mswNKg8BkQvyCk9mjkJRrFl f7/P8kGNXGhV9DImdeHZun1QIgx5NQHZXdYbYIXiogwXUyUCt0VK0anrHyO+I1XM iE8W0mvSkzdoH6R5N1P9H9LAtzL2jEc5hsdhM70T6phAEE21/n5pobt2/1FlioNv 19pMrUJX3MsJLxTN8xnBX+DWG+Ll6tYE4ZMgGrToiMFuq5skSw/wiCq7ApDgE8sm 5r3Akq005uEfsCysiTRlSzz18cFxpAQ9LbWyKFvoxJuRLyu78jDF/Kg55fw/V8qf t0iM1SBM9plXFZYibEEleCeXB1BGxbHhVFJcbx1unabIiPPvxG8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:21 2026 by rpki-client