$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft File: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft (raw, json) Hash identifier: C9Q2IHa9nB3jYQ7/VVO+ZX2z+1SAsL8CGP1pwwcS/lY= Subject key identifier: 61:FF:AF:C7:1C:75:14:B0:AE:AF:97:AF:3A:3A:73:EA:4A:84:1E:86 Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 Certificate issuer: /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Certificate serial: 2E8B2E8D7E21F1436F15D84DC48D7D24AFDBA00B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:07:16 +0000 Manifest this update: Thu 17 Sep 2026 07:02:16 +0000 Manifest next update: Fri 18 Sep 2026 08:30:16 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: xzNU/vlOf3TfA9hg5oEM5XxH528y493JULwxnNfsViI=) 2: 19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl (hash: 5lCpINokQt36K2XOmFwtKWfrkw+2AkL/82I7cCYFfXs=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: uA8oOUmwBAgrgbzVE7TBrqVu5fFTSKpBcYjOkH1eMWI=) 4: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: OwnxfPLeUrtNm40iRIXJAgj10Ula0MR83EXj/2YtNZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8b:2e:8d:7e:21:f1:43:6f:15:d8:4d:c4:8d:7d:24:af:db:a0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9 Validity Not Before: Sep 17 07:02:16 2026 GMT Not After : Sep 18 08:30:16 2026 GMT Subject: CN=61FFAFC71C7514B0AEAF97AF3A3A73EA4A841E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:0f:91:38:e8:af:9b:58:b1:df:7d:c3:3c: a0:f1:f9:5e:20:15:4a:9e:e0:2b:1a:73:7f:d3:3d: c4:62:41:84:b4:11:e0:ac:6b:ad:d2:81:5b:f7:85: 57:8a:a1:c2:69:24:91:6e:07:af:cd:f3:18:00:b9: 37:50:7f:40:e6:a5:ca:09:b0:bd:1f:34:40:d9:21: 9f:2b:ab:ea:94:ce:16:8c:4e:7d:3a:07:e6:67:65: 09:7d:c6:e9:d9:89:08:d6:90:8c:4b:f7:d3:36:9c: d8:0f:76:38:b6:f9:57:42:36:38:69:17:ab:7a:b8: a0:ee:69:13:20:c9:95:f4:65:d5:c9:99:95:f1:5a: 98:fb:ab:ce:6d:7a:5d:c9:a7:f6:35:99:37:86:b3: 0f:84:41:40:38:64:62:f2:36:7f:1c:72:23:6e:e5: 9f:d4:5e:38:25:23:6a:8b:65:c5:4a:6c:68:3c:f7: 75:88:4f:cf:2c:41:cf:7b:40:53:df:f6:e1:17:88: 89:90:f4:2c:ec:1c:2e:d2:99:cc:91:7c:aa:b9:70: e2:bb:eb:0f:e3:bb:f1:c8:9e:67:55:5f:88:ba:e9: f0:5a:3e:d9:54:78:5f:e8:68:64:45:e0:50:b4:12: 76:98:95:87:ee:8b:5e:02:54:68:93:68:40:cf:a9: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FF:AF:C7:1C:75:14:B0:AE:AF:97:AF:3A:3A:73:EA:4A:84:1E:86 X509v3 Authority Key Identifier: keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a5:d6:61:1b:4a:1e:95:99:1b:2e:92:ae:53:e9:b3:75:6f: b6:1d:c4:44:c2:93:57:22:2c:5d:bf:06:5b:a8:f2:8c:7d:99: 2f:91:d8:96:72:6c:f3:c9:3b:6d:06:ef:96:c7:f0:ed:21:5c: ad:91:24:a0:94:46:95:dd:25:25:8f:50:23:90:83:1f:e1:55: 0e:8c:6f:9c:6b:ad:7c:5a:68:5e:3d:8e:a6:e9:fc:a2:f9:30: 4e:49:ce:33:c5:62:99:e8:58:1a:e3:a6:ce:93:c2:50:65:81: b1:d7:26:c4:46:67:c9:6f:20:be:b6:60:5c:36:e3:46:c2:7f: 3b:3a:d6:38:36:41:5b:b1:f6:b3:48:b9:25:0c:be:ac:5c:d5: 01:1d:b4:c5:05:97:21:0f:08:bc:fa:bf:ff:3f:c5:05:44:3a: 29:5b:8c:00:fb:07:4d:58:09:7f:4e:5b:f9:30:3a:df:89:dd: 4e:d3:00:77:0b:89:f8:94:e9:94:c5:d9:c0:58:7a:f9:05:9c: 2d:c7:14:51:2f:20:34:0b:32:1e:9c:6b:d1:43:8e:85:fd:9d: 1d:0a:75:40:88:d9:1a:9d:e5:85:5d:b1:a9:b2:11:3b:04:6c: e2:d7:ac:9a:49:39:8e:9c:e0:2b:e1:18:00:a3:e7:f6:c9:2f: 19:52:ed:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULosujX4h8UNvFdhNxI19JK/boAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3 MUU2MDhFOTAeFw0yNjA5MTcwNzAyMTZaFw0yNjA5MTgwODMwMTZaMDMxMTAvBgNV BAMTKDYxRkZBRkM3MUM3NTE0QjBBRUFGOTdBRjNBM0E3M0VBNEE4NDFFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaw+ROOivm1ix333DPKDx+V4g FUqe4Csac3/TPcRiQYS0EeCsa63SgVv3hVeKocJpJJFuB6/N8xgAuTdQf0DmpcoJ sL0fNEDZIZ8rq+qUzhaMTn06B+ZnZQl9xunZiQjWkIxL99M2nNgPdji2+VdCNjhp F6t6uKDuaRMgyZX0ZdXJmZXxWpj7q85tel3Jp/Y1mTeGsw+EQUA4ZGLyNn8cciNu 5Z/UXjglI2qLZcVKbGg893WIT88sQc97QFPf9uEXiImQ9CzsHC7SmcyRfKq5cOK7 6w/ju/HInmdVX4i66fBaPtlUeF/oaGRF4FC0EnaYlYfui14CVGiTaEDPqREbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYf+vxxx1FLCur5evOjpz6kqEHoYwHwYDVR0j BBgwFoAUGQRfho4J6MxuCWOaunscFHHmCOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZhOWRkZjctNTc2YS00YTU4LTg5YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4 RTA5RThDQzZFMDk2MzlBQkE3QjFDMTQ3MUU2MDhFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA0NUY4NjhFMDlFOENDNkUwOTYzOUFCQTdCMUMxNDcxRTYw OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvMTkwNDVGODY4RTA5RThDQzZFMDk2MzlBQkE3QjFD MTQ3MUU2MDhFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGml1mEbSh6VmRsukq5T6bN1b7YdxETCk1ci LF2/Bluo8ox9mS+R2JZybPPJO20G75bH8O0hXK2RJKCURpXdJSWPUCOQgx/hVQ6M b5xrrXxaaF49jqbp/KL5ME5JzjPFYpnoWBrjps6TwlBlgbHXJsRGZ8lvIL62YFw2 40bCfzs61jg2QVux9rNIuSUMvqxc1QEdtMUFlyEPCLz6v/8/xQVEOilbjAD7B01Y CX9OW/kwOt+J3U7TAHcLifiU6ZTF2cBYevkFnC3HFFEvIDQLMh6ca9FDjoX9nR0K dUCI2Rqd5YVdsamyETsEbOLXrJpJOY6c4CvhGACj5/bJLxlS7R4= -----END CERTIFICATE-----Generated at Thu Sep 17 16:24:07 2026 by rpki-client