$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft File: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft (raw, json) Hash identifier: wHRS4ZqN5k5rrWCwe+K/3X7TnY8WaDX1FS7fe3DGkxo= Subject key identifier: 4B:C5:0D:79:B2:9B:60:B1:3B:74:2B:75:B8:9A:75:BC:34:D3:F4:84 Authority key identifier: 81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B Certificate issuer: /CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Certificate serial: 024D00A66CFE046A5E812F65BC0D2F9056114AB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:10:29 +0000 Manifest this update: Wed 16 Sep 2026 17:05:29 +0000 Manifest next update: Thu 17 Sep 2026 19:04:29 +0000 Files and hashes: 1: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: C4VhfRzKoT9ksZvdL8CPzP9K+3FYQAaDgMeeFvQaFx4=) 2: 819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl (hash: omjgxfPNaTo6sXJsFvFV2t9Y784maJJgKViCAlv4Duk=) 3: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: +rTucgGLiY8uqL8eF3DTMn/pET3ZcxtiVlAUU6weN/o=) 4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: 33Yh92al19b28Gnrtu4qIdUOBoZECAqIchLAQkEaJ/I=) 5: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: S09DylQ/yldBJCxeAdZuhd1EyaS2Xybcb8te/eWM2dM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4d:00:a6:6c:fe:04:6a:5e:81:2f:65:bc:0d:2f:90:56:11:4a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819A38B45B4FEA7F98B72A310B72DB8E3935507B Validity Not Before: Sep 16 17:05:29 2026 GMT Not After : Sep 17 19:04:29 2026 GMT Subject: CN=4BC50D79B29B60B13B742B75B89A75BC34D3F484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:a3:43:f8:11:0a:08:c3:08:ad:70:b4:cb: 85:22:8b:18:3e:64:92:55:51:a9:ac:8c:52:88:48: 33:a4:ae:67:34:81:49:30:b8:04:41:43:e2:15:f8: 0b:c7:24:47:45:bb:d9:1a:db:5d:fb:41:5b:0d:bd: 41:1f:69:56:1e:71:4f:37:b1:5a:c2:37:8b:2e:ee: 0b:a4:b3:2a:db:84:43:f1:37:9b:89:f3:23:11:10: 92:12:64:c5:38:ea:65:9c:d2:f3:20:d2:96:c9:1e: 28:4f:da:c2:52:72:92:7c:a8:11:b5:b5:ad:9c:67: b9:55:fb:05:36:d0:a5:cb:6c:51:65:ac:e9:0e:3e: 06:bc:38:55:09:85:54:0e:da:46:46:e8:0c:c2:9c: e8:08:30:25:ff:31:0c:9f:08:a2:db:52:66:5b:5d: fc:dc:ec:8d:cf:ce:8f:81:34:54:62:3b:b2:d4:7f: a4:f8:8c:82:c5:c3:e7:94:36:c0:07:9d:94:7b:41: 17:04:f1:31:1b:96:0b:d2:bc:c2:34:09:6f:9f:2d: 30:b8:75:47:b9:2c:59:a1:57:e2:af:77:aa:78:51: 1a:2f:a6:f5:f5:19:05:ca:c5:42:9a:62:79:83:14: c4:21:38:39:c3:18:91:c7:20:b5:4b:84:32:81:a7: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:0D:79:B2:9B:60:B1:3B:74:2B:75:B8:9A:75:BC:34:D3:F4:84 X509v3 Authority Key Identifier: keyid:81:9A:38:B4:5B:4F:EA:7F:98:B7:2A:31:0B:72:DB:8E:39:35:50:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/819A38B45B4FEA7F98B72A310B72DB8E3935507B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/819A38B45B4FEA7F98B72A310B72DB8E3935507B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4f:48:2a:32:dd:9a:e4:b1:4d:65:15:47:26:69:66:8b:73: 7e:5c:6d:4e:8d:95:83:02:db:23:a9:d5:79:62:5c:4b:c7:30: 10:8a:dd:18:af:38:70:f4:23:f2:5a:4a:b2:68:f9:e3:e6:29: f8:70:64:8b:34:21:74:02:eb:e4:af:6e:13:40:c2:38:15:c7: 30:b8:b0:33:8a:6e:c7:34:27:17:b7:de:f1:cf:a1:b9:ff:32: 3c:04:f8:3a:5f:4b:ae:95:db:d4:97:78:a8:b7:08:63:da:28: 00:e3:03:60:15:df:a4:8f:a0:97:48:4e:a6:54:9e:56:0f:07: 9b:23:96:e4:f3:d6:14:8c:56:16:50:cc:23:2a:14:0d:5b:50: f5:13:e2:60:e5:52:e7:81:0f:44:6f:45:52:81:93:17:f5:f3: 10:46:4a:a6:ba:15:22:ef:a3:43:32:c2:9d:6b:d0:48:7d:ff: 13:ed:a5:ed:3b:09:39:d2:8b:62:07:af:fd:c0:a7:ae:32:ce: 10:49:1b:a9:84:1c:99:5b:8e:9f:91:66:b1:19:e0:17:34:9f: 37:42:6a:89:36:68:81:0a:87:9f:fa:d2:5d:5d:31:08:f8:13: 08:d3:69:df:10:51:9a:bc:19:93:4a:bf:69:c5:ae:b5:b5:a1: 67:21:6e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAk0Apmz+BGpegS9lvA0vkFYRSrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUz OTM1NTA3QjAeFw0yNjA5MTYxNzA1MjlaFw0yNjA5MTcxOTA0MjlaMDMxMTAvBgNV BAMTKDRCQzUwRDc5QjI5QjYwQjEzQjc0MkI3NUI4OUE3NUJDMzREM0Y0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZKND+BEKCMMIrXC0y4Uiixg+ ZJJVUamsjFKISDOkrmc0gUkwuARBQ+IV+AvHJEdFu9ka2137QVsNvUEfaVYecU83 sVrCN4su7guksyrbhEPxN5uJ8yMREJISZMU46mWc0vMg0pbJHihP2sJScpJ8qBG1 ta2cZ7lV+wU20KXLbFFlrOkOPga8OFUJhVQO2kZG6AzCnOgIMCX/MQyfCKLbUmZb Xfzc7I3Pzo+BNFRiO7LUf6T4jILFw+eUNsAHnZR7QRcE8TEblgvSvMI0CW+fLTC4 dUe5LFmhV+Kvd6p4URovpvX1GQXKxUKaYnmDFMQhODnDGJHHILVLhDKBpxQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8UNebKbYLE7dCt1uJp1vDTT9IQwHwYDVR0j BBgwFoAUgZo4tFtP6n+YtyoxC3Lbjjk1UHswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGEyZTViNjktYWRiZC00ZTJkLTg0N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1 QjRGRUE3Rjk4QjcyQTMxMEI3MkRCOEUzOTM1NTA3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTlBMzhCNDVCNEZFQTdGOThCNzJBMzEwQjcyREI4RTM5MzU1 MDdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvODE5QTM4QjQ1QjRGRUE3Rjk4QjcyQTMxMEI3MkRC OEUzOTM1NTA3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5PSCoy3ZrksU1lFUcmaWaLc35cbU6NlYMC 2yOp1XliXEvHMBCK3RivOHD0I/JaSrJo+ePmKfhwZIs0IXQC6+SvbhNAwjgVxzC4 sDOKbsc0Jxe33vHPobn/MjwE+DpfS66V29SXeKi3CGPaKADjA2AV36SPoJdITqZU nlYPB5sjluTz1hSMVhZQzCMqFA1bUPUT4mDlUueBD0RvRVKBkxf18xBGSqa6FSLv o0Mywp1r0Eh9/xPtpe07CTnSi2IHr/3Ap64yzhBJG6mEHJlbjp+RZrEZ4Bc0nzdC aok2aIEKh5/60l1dMQj4EwjTad8QUZq8GZNKv2nFrrW1oWchbsU= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:04 2026 by rpki-client