$ rpki-client -vvvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft File: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft (raw, json) Hash identifier: YNPlGBAwNFpa9tXlnP+nKZ8TtypW9YD3oHrHFQXi/bM= Subject key identifier: 81:BE:58:41:71:4E:62:15:F6:79:B3:90:DC:FA:99:16:1D:48:D6:FC Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 Certificate issuer: /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Certificate serial: 38620A1E396EF8E9D4D8A554CD11C627E74B67FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft Manifest number: BA Signing time: Thu 17 Sep 2026 03:43:04 +0000 Manifest this update: Thu 17 Sep 2026 03:38:04 +0000 Manifest next update: Fri 18 Sep 2026 07:07:04 +0000 Files and hashes: 1: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl (hash: 0pwOtqV3Gqkfk9ei0WO76c5fHKkXb445tpb8RkN8a8A=) 2: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: Ur2deLsRWDmCAqL8yUm8FNnfEGneYV45Th8VxPgH0qk=) 3: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: rAfzEZvuHRI/Kzt1SmKQHwBtPJb8jdNpuP/cvt9qX+w=) 4: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: yUTHLwhvAH/MhoYaduOS14+07g6chdMoBPVYy5YJcX4=) 5: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: 7AkBTaxaVF6MfSYLN5bOMc9OzhJ7a78FUzJRaPwJ6kQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:62:0a:1e:39:6e:f8:e9:d4:d8:a5:54:cd:11:c6:27:e7:4b:67:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Validity Not Before: Sep 17 03:38:04 2026 GMT Not After : Sep 18 07:07:04 2026 GMT Subject: CN=81BE5841714E6215F679B390DCFA99161D48D6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:fd:28:b6:4e:3e:74:da:dc:a6:ba:f4:e7: c2:16:bb:6b:be:14:92:ce:4f:77:35:f4:96:44:ab: be:39:70:cd:cc:1b:53:c3:5a:42:ef:e1:1d:37:3f: 75:d1:2a:93:8d:e3:6d:44:37:e2:3b:f3:e3:2c:59: 27:65:30:58:f7:12:71:dc:2a:9d:3d:76:c2:af:73: 55:db:1f:01:aa:42:cf:b7:3a:a3:3a:f1:7d:ac:f9: 17:61:2c:ff:7a:1a:19:3e:6f:86:d1:63:e3:7e:f5: 88:74:c6:a8:a8:d7:f9:de:5e:cb:d9:7d:66:ff:ab: b5:d9:db:41:9d:cb:c8:f9:14:d4:e6:1c:2b:81:97: 17:db:1e:35:52:87:05:b6:36:d3:78:0f:28:a6:ec: 29:b1:8e:b2:0b:e0:60:95:ca:fe:1a:79:c9:10:aa: 3a:28:f3:b8:b1:6e:7e:ee:f9:43:68:81:c9:a2:c8: 53:a4:77:98:a8:25:8a:e8:48:5f:8b:8f:d3:8c:7d: 67:8e:5f:8b:63:2f:9a:df:f0:f6:19:c9:8a:2c:eb: 8a:c4:0e:31:66:48:0a:7d:c3:50:15:39:ec:af:3e: 57:e3:13:4a:1f:aa:b6:a2:bb:9d:26:e4:be:e2:2e: c7:28:c9:3e:82:b9:cc:ae:1a:c6:ba:db:c9:81:7e: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BE:58:41:71:4E:62:15:F6:79:B3:90:DC:FA:99:16:1D:48:D6:FC X509v3 Authority Key Identifier: keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d6:51:fc:20:47:07:62:cb:84:89:ef:6f:7d:6d:e5:9a:22: 9f:b8:a1:1f:fe:c8:49:5d:5e:e8:c8:46:01:ab:18:e7:e8:ad: 8f:a1:4e:33:71:0b:e4:1c:6d:2c:3e:82:ae:b0:12:bf:04:1d: 71:d2:29:e0:7b:52:d4:90:47:43:83:d2:17:87:8b:ec:9d:1f: cb:f9:95:a3:57:4a:60:a5:fb:d9:79:66:a9:a9:04:ef:8a:31: 82:6c:f2:63:d6:2a:3f:01:c4:a5:88:8d:1d:1a:21:df:13:3b: a2:68:0e:86:e4:09:8b:bd:2f:4a:44:4f:8d:9c:80:e3:1f:33: 0d:76:23:8e:94:e8:b1:97:35:eb:02:8e:ac:6e:7e:3e:73:bd: a0:58:a7:ab:03:ed:54:78:0f:83:bc:9b:58:0a:2f:53:0c:f9: ea:e4:e0:b9:80:3b:87:c7:ce:56:c8:cf:db:f5:5d:e6:54:99: 9a:ca:21:9e:4e:eb:e5:57:9c:8a:5f:5f:11:1f:4e:19:ec:9d: ea:8f:fa:99:47:12:3c:44:31:13:f6:20:4c:ff:57:0c:b5:cf: 6c:b7:89:13:78:8e:f5:a6:32:cd:4c:dc:15:f3:45:67:5b:06: 6d:5f:73:b4:e2:b1:99:7d:27:16:d8:23:5c:3e:b6:60:f4:b8: cb:3c:84:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGIKHjlu+OnU2KVUzRHGJ+dLZ/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0MEFE RjFCQkIzNzAeFw0yNjA5MTcwMzM4MDRaFw0yNjA5MTgwNzA3MDRaMDMxMTAvBgNV BAMTKDgxQkU1ODQxNzE0RTYyMTVGNjc5QjM5MERDRkE5OTE2MUQ0OEQ2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzP0otk4+dNrcprr058IWu2u+ FJLOT3c19JZEq745cM3MG1PDWkLv4R03P3XRKpON421EN+I78+MsWSdlMFj3EnHc Kp09dsKvc1XbHwGqQs+3OqM68X2s+RdhLP96Ghk+b4bRY+N+9Yh0xqio1/neXsvZ fWb/q7XZ20Gdy8j5FNTmHCuBlxfbHjVShwW2NtN4Dyim7CmxjrIL4GCVyv4aeckQ qjoo87ixbn7u+UNogcmiyFOkd5ioJYroSF+Lj9OMfWeOX4tjL5rf8PYZyYos64rE DjFmSAp9w1AVOeyvPlfjE0ofqraiu50m5L7iLscoyT6CucyuGsa628mBfl5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgb5YQXFOYhX2ebOQ3PqZFh1I1vwwHwYDVR0j BBgwFoAUGafSRz+qa3LjmaShD0tkCt8buzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQxZTA4ZWYtM2FlNi00YjkwLWI0NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDcz RkFBNkI3MkUzOTlBNEExMEY0QjY0MEFERjFCQkIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOUE3RDI0NzNGQUE2QjcyRTM5OUE0QTEwRjRCNjQwQURGMUJC QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvMTlBN0QyNDczRkFBNkI3MkUzOTlBNEExMEY0QjY0 MEFERjFCQkIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7WUfwgRwdiy4SJ7299beWaIp+4oR/+yEld XujIRgGrGOforY+hTjNxC+QcbSw+gq6wEr8EHXHSKeB7UtSQR0OD0heHi+ydH8v5 laNXSmCl+9l5ZqmpBO+KMYJs8mPWKj8BxKWIjR0aId8TO6JoDobkCYu9L0pET42c gOMfMw12I46U6LGXNesCjqxufj5zvaBYp6sD7VR4D4O8m1gKL1MM+erk4LmAO4fH zlbIz9v1XeZUmZrKIZ5O6+VXnIpfXxEfThnsneqP+plHEjxEMRP2IEz/Vwy1z2y3 iRN4jvWmMs1M3BXzRWdbBm1fc7TisZl9JxbYI1w+tmD0uMs8hK4= -----END CERTIFICATE-----Generated at Thu Sep 17 14:15:18 2026 by rpki-client