$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft (raw, json) Hash identifier: YZyStTi1+tmNRC87jqlCY50HQciKaOOUVavASUvLh24= Subject key identifier: 32:BD:FD:B6:FF:CC:2F:3D:78:E6:EA:67:35:35:32:20:17:74:A0:B9 Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Certificate serial: 3EC7920FCA481A80C1C37CC209A0C3286F43BD6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:00:59 +0000 Manifest this update: Thu 17 Sep 2026 05:55:59 +0000 Manifest next update: Fri 18 Sep 2026 06:53:59 +0000 Files and hashes: 1: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl (hash: Sz9l8/UIbNflgcR4bQJxeKcV+jrM3+qQOI8uPKmdLV0=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: FD6DZLAD82J53Et9EbV2Xq3/qHjpIsW18vTg4xSoVFM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c7:92:0f:ca:48:1a:80:c1:c3:7c:c2:09:a0:c3:28:6f:43:bd:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Validity Not Before: Sep 17 05:55:59 2026 GMT Not After : Sep 18 06:53:59 2026 GMT Subject: CN=32BDFDB6FFCC2F3D78E6EA67353532201774A0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:bf:cd:4b:66:a2:31:ab:f6:a2:ee:a9:84: 75:eb:1e:48:22:74:57:d5:6c:44:e6:bc:48:4f:fa: f9:f3:ea:e1:ef:cd:68:b1:fb:4f:ba:c4:22:04:a4: b1:82:55:2b:f5:66:b2:2f:6f:2f:fd:91:fc:c5:a7: fa:bb:de:11:98:cd:e3:92:a0:ea:50:c1:f2:fa:e6: ad:d0:8b:0a:8a:d3:38:7f:6b:cd:91:be:c2:ae:a4: b3:cb:61:55:07:53:d8:57:c3:2e:c9:ae:c4:c7:7d: 60:ad:f1:e1:c7:6e:3e:d2:e2:7e:22:f7:30:32:f0: d0:72:45:12:c9:6d:45:a1:51:da:c4:b0:a8:84:c6: e6:74:1b:34:a2:43:3c:eb:ea:b6:c8:3d:48:8f:6e: b6:e1:ef:87:12:a3:c6:f3:1d:ab:fa:7b:56:2c:47: fa:a8:cb:e0:ac:91:e3:ef:c0:a6:b3:35:ab:16:db: c0:3b:ef:ca:1e:42:6c:65:ac:e4:08:95:c7:cf:62: dc:eb:cf:e0:27:7f:65:af:8f:4e:57:44:8b:41:89: 43:bf:56:e2:3b:2d:68:87:d2:c0:b8:5f:9e:1c:c8: c8:2f:c2:4f:c7:ef:e5:81:10:ad:cd:41:93:cf:4c: 90:5d:ff:38:4a:2f:1c:2a:b9:36:fa:a0:63:4b:77: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BD:FD:B6:FF:CC:2F:3D:78:E6:EA:67:35:35:32:20:17:74:A0:B9 X509v3 Authority Key Identifier: keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a7:a6:6d:7a:0a:68:2d:09:41:83:8f:77:83:5a:ce:00:cc: c9:64:d9:67:d5:1f:91:85:a2:d7:99:ff:74:0b:f0:5c:13:99: 02:34:c4:d8:1b:72:d0:a7:1b:64:e6:a7:44:9d:89:62:99:fb: 6a:ad:d2:d8:ac:34:20:80:f7:2e:9d:64:46:a0:33:33:61:20: a3:74:d7:c0:e6:87:7d:b8:c6:dc:57:7c:a9:be:3f:f3:97:1a: 43:ea:84:13:3d:d6:6c:c5:35:b9:7e:30:bf:65:80:04:0e:40: 94:cb:49:e0:33:a0:c7:3b:db:68:d7:ac:62:9f:9e:a7:16:e9: a8:7d:99:55:b6:ea:15:3b:97:24:de:a3:35:87:23:c7:58:9f: 15:e1:e8:96:46:3d:3c:8e:1f:55:ad:cb:b8:51:56:f8:ac:41: a1:79:09:32:81:94:b5:93:16:86:24:49:4d:0c:b4:88:aa:cf: 05:34:8b:f3:52:c9:8f:c2:d9:4b:23:9c:16:23:a9:c8:3c:f8: 32:0c:cc:bf:f5:0a:a8:ca:a3:80:b2:b0:33:2b:6a:ac:2d:cc: dc:37:86:68:ab:c8:1b:12:2c:12:02:ae:58:62:96:4c:3a:d3: 33:cf:a8:0d:38:1b:98:4c:fd:e8:01:0a:1e:df:62:13:1c:0f: ea:ae:f6:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPseSD8pIGoDBw3zCCaDDKG9DvWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYx QzZEN0FGNTAeFw0yNjA5MTcwNTU1NTlaFw0yNjA5MTgwNjUzNTlaMDMxMTAvBgNV BAMTKDMyQkRGREI2RkZDQzJGM0Q3OEU2RUE2NzM1MzUzMjIwMTc3NEEwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdb/NS2aiMav2ou6phHXrHkgi dFfVbETmvEhP+vnz6uHvzWix+0+6xCIEpLGCVSv1ZrIvby/9kfzFp/q73hGYzeOS oOpQwfL65q3QiwqK0zh/a82RvsKupLPLYVUHU9hXwy7JrsTHfWCt8eHHbj7S4n4i 9zAy8NByRRLJbUWhUdrEsKiExuZ0GzSiQzzr6rbIPUiPbrbh74cSo8bzHav6e1Ys R/qoy+CskePvwKazNasW28A778oeQmxlrOQIlcfPYtzrz+Anf2Wvj05XRItBiUO/ VuI7LWiH0sC4X54cyMgvwk/H7+WBEK3NQZPPTJBd/zhKLxwquTb6oGNLd8hFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMr39tv/MLz145upnNTUyIBd0oLkwHwYDVR0j BBgwFoAUBAGbGYRXYK6/+kszldzDDxxtevUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIyOWU5MTItMzVjNi00ODBmLWI4NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4 NDU3NjBBRUJGRkE0QjMzOTVEQ0MzMEYxQzZEN0FGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNDAxOUIxOTg0NTc2MEFFQkZGQTRCMzM5NURDQzMwRjFDNkQ3 QUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvMDQwMTlCMTk4NDU3NjBBRUJGRkE0QjMzOTVEQ0Mz MEYxQzZEN0FGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqnpm16CmgtCUGDj3eDWs4AzMlk2WfVH5GF oteZ/3QL8FwTmQI0xNgbctCnG2Tmp0SdiWKZ+2qt0tisNCCA9y6dZEagMzNhIKN0 18Dmh324xtxXfKm+P/OXGkPqhBM91mzFNbl+ML9lgAQOQJTLSeAzoMc722jXrGKf nqcW6ah9mVW26hU7lyTeozWHI8dYnxXh6JZGPTyOH1Wty7hRVvisQaF5CTKBlLWT FoYkSU0MtIiqzwU0i/NSyY/C2UsjnBYjqcg8+DIMzL/1CqjKo4CysDMraqwtzNw3 hmiryBsSLBICrlhilkw60zPPqA04G5hM/egBCh7fYhMcD+qu9ss= -----END CERTIFICATE-----Generated at Thu Sep 17 12:36:17 2026 by rpki-client