$ rpki-client -vvvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft File: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft (raw, json) Hash identifier: pPjQvLHePGymoH1fHxFhr4UTxcOrbKxNgkq+4CvZCJI= Subject key identifier: F1:83:8B:B5:4B:12:A4:FC:B2:D6:E1:CB:6B:A4:4A:D0:EE:53:E5:50 Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Certificate serial: 1828A68F1E2E759963165089F75B80AF10D3536B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:59:47 +0000 Manifest this update: Thu 17 Sep 2026 00:54:47 +0000 Manifest next update: Fri 18 Sep 2026 04:40:47 +0000 Files and hashes: 1: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=) 2: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: bOwhqsRdU2z4t+zScIcD9uS9UewO9FSu5iy5ahd23Rg=) 3: 219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl (hash: sHSSrekReM+iLz49vS2vecwuocAnWxnxeiFC8tcKDwE=) 4: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: Kz5hnZVq/K186z6qssglPHGkqEQOWNb/p+k3bONz3g8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:28:a6:8f:1e:2e:75:99:63:16:50:89:f7:5b:80:af:10:d3:53:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3 Validity Not Before: Sep 17 00:54:47 2026 GMT Not After : Sep 18 04:40:47 2026 GMT Subject: CN=F1838BB54B12A4FCB2D6E1CB6BA44AD0EE53E550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:e4:fe:d9:d9:cb:b0:0e:dc:60:02:42:80: 29:54:66:d8:da:e7:2b:12:16:ef:f1:6d:3a:7d:15: 4b:d4:f4:3f:56:17:4f:50:25:f2:5e:04:88:cd:54: 3d:7c:3f:37:70:db:4a:e5:f7:2b:ab:35:a8:02:dc: 5b:e0:2a:b2:a5:1c:ac:c2:b7:ac:2b:dc:46:ce:98: 67:2f:ee:b4:e2:f7:55:de:35:e6:e0:8e:63:51:dc: 94:cf:ed:57:ac:43:74:9b:44:24:0f:13:ca:ef:2e: fe:42:92:2e:8a:84:fe:a8:17:5b:da:8d:df:8a:e0: 14:95:e9:5c:b6:3b:92:69:76:a3:9c:ec:95:99:8b: 27:8d:1b:ec:5c:40:ff:fb:c0:71:f4:61:8a:65:cf: 66:65:7b:fc:a0:c9:41:41:b4:4d:08:45:23:eb:b3: f7:f0:6c:42:99:5d:c3:17:27:63:9f:02:53:7d:da: dc:14:16:95:72:48:70:49:f0:d7:f5:01:95:e6:f1: d7:54:e6:35:ad:44:14:09:2c:d5:a9:2c:4f:d9:bc: ff:b2:2b:15:aa:51:86:a5:ca:b3:6c:43:c3:d7:8c: 40:93:ce:67:1b:04:b2:ee:d2:2d:0b:82:63:6e:71: 5d:fc:be:5f:b2:f0:5d:fc:91:7d:0c:5d:11:59:d9: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:83:8B:B5:4B:12:A4:FC:B2:D6:E1:CB:6B:A4:4A:D0:EE:53:E5:50 X509v3 Authority Key Identifier: keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:86:03:bb:1a:c6:ec:a0:60:ed:f0:fa:6b:c8:f2:88:ee:28: d2:7f:9c:9c:1b:68:eb:d9:dd:34:24:54:f6:17:85:0a:81:2b: 6c:22:0c:b8:cb:2c:d9:61:43:26:39:c6:cb:9c:b5:e0:e0:55: ea:f6:dd:b9:ae:4d:8e:7d:71:db:09:ad:40:23:2f:31:25:56: ef:6f:b7:62:f8:74:23:5e:6b:76:52:c5:6e:cc:c3:f7:08:94: ae:02:14:8a:33:08:ab:4e:c5:5b:ba:97:c6:82:be:6d:1d:44: 8f:ad:48:69:8c:de:be:3b:b8:bf:f7:73:16:9d:59:59:ea:61: 89:54:aa:cd:a2:7b:de:57:75:04:b5:7b:9a:f6:b3:03:f5:14: 54:93:5b:e5:f3:86:fa:8e:f8:4c:04:ff:95:66:fa:90:f3:00: da:70:cc:d8:ef:aa:90:e4:42:19:e3:0a:0f:ee:5b:6e:24:26: ea:63:0a:47:36:9c:31:1d:86:ed:fd:79:80:52:d6:fe:c9:9c: fe:51:df:c4:e3:2c:d0:e1:aa:ae:4a:6f:fd:fd:3d:ef:58:4b: 00:ce:9d:0b:52:c9:68:23:e0:88:c8:5c:6d:ff:bb:a9:95:28: b8:5b:1e:31:42:58:c4:69:f3:0a:c0:82:3a:85:fc:0d:9c:b4: c1:6f:23:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCimjx4udZljFlCJ91uArxDTU2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3 QUFBNzZFMzAeFw0yNjA5MTcwMDU0NDdaFw0yNjA5MTgwNDQwNDdaMDMxMTAvBgNV BAMTKEYxODM4QkI1NEIxMkE0RkNCMkQ2RTFDQjZCQTQ0QUQwRUU1M0U1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXOT+2dnLsA7cYAJCgClUZtja 5ysSFu/xbTp9FUvU9D9WF09QJfJeBIjNVD18Pzdw20rl9yurNagC3FvgKrKlHKzC t6wr3EbOmGcv7rTi91XeNebgjmNR3JTP7VesQ3SbRCQPE8rvLv5Cki6KhP6oF1va jd+K4BSV6Vy2O5JpdqOc7JWZiyeNG+xcQP/7wHH0YYplz2Zle/ygyUFBtE0IRSPr s/fwbEKZXcMXJ2OfAlN92twUFpVySHBJ8Nf1AZXm8ddU5jWtRBQJLNWpLE/ZvP+y KxWqUYalyrNsQ8PXjECTzmcbBLLu0i0LgmNucV38vl+y8F38kX0MXRFZ2YdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8YOLtUsSpPyy1uHLa6RK0O5T5VAwHwYDVR0j BBgwFoAUIZoJ5eMHKGoOrKWHwbgq1nqqduMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTk0ZDFmNjItODQ4OC00MDg2LThkNGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVF MzA3Mjg2QTBFQUNBNTg3QzFCODJBRDY3QUFBNzZFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMTlBMDlFNUUzMDcyODZBMEVBQ0E1ODdDMUI4MkFENjdBQUE3 NkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvMjE5QTA5RTVFMzA3Mjg2QTBFQUNBNTg3QzFCODJB RDY3QUFBNzZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaGA7saxuygYO3w+mvI8ojuKNJ/nJwbaOvZ 3TQkVPYXhQqBK2wiDLjLLNlhQyY5xsucteDgVer23bmuTY59cdsJrUAjLzElVu9v t2L4dCNea3ZSxW7Mw/cIlK4CFIozCKtOxVu6l8aCvm0dRI+tSGmM3r47uL/3cxad WVnqYYlUqs2ie95XdQS1e5r2swP1FFSTW+XzhvqO+EwE/5Vm+pDzANpwzNjvqpDk QhnjCg/uW24kJupjCkc2nDEdhu39eYBS1v7JnP5R38TjLNDhqq5Kb/39Pe9YSwDO nQtSyWgj4IjIXG3/u6mVKLhbHjFCWMRp8wrAgjqF/A2ctMFvIwA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:18 2026 by rpki-client