$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft File: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft (raw, json) Hash identifier: t+lW3y2OFetL9kBiZSl+ksB9DvYqNMsyN4PJDAvdK1k= Subject key identifier: 11:E9:CA:3F:65:1E:9C:E9:7F:FF:01:DD:B0:3E:11:FD:9C:40:2B:78 Authority key identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 Certificate issuer: /CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Certificate serial: 1E6CD9F80D85D5EB4F1C52C5FF5D29C8328A9FEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:20:11 +0000 Manifest this update: Thu 17 Sep 2026 09:15:11 +0000 Manifest next update: Fri 18 Sep 2026 10:47:11 +0000 Files and hashes: 1: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: 0vy2z3MqKAODbU17bPVUXjhaDQ2sCkp7BN40wqS+aK4=) 2: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl (hash: HgviBqsxQDyp0K3HCrl8uRYgCinjhpm7LfdoUBOCm7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6c:d9:f8:0d:85:d5:eb:4f:1c:52:c5:ff:5d:29:c8:32:8a:9f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Validity Not Before: Sep 17 09:15:11 2026 GMT Not After : Sep 18 10:47:11 2026 GMT Subject: CN=11E9CA3F651E9CE97FFF01DDB03E11FD9C402B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:ea:0a:c2:ba:6a:af:9c:5c:5e:f8:a5:e3: cb:a5:e0:25:47:05:e2:43:3a:f6:6f:dc:20:e3:69: 4b:6e:62:56:8d:75:ad:52:22:2c:aa:af:c2:24:94: 47:0e:5c:7a:41:4e:e9:02:f0:1e:c4:f3:87:93:2a: f9:5f:54:a6:83:d3:27:05:3c:e3:2e:8f:c2:4e:b8: c0:59:e4:0a:a4:b0:9b:7b:b5:ae:86:fd:40:33:35: 06:79:23:2e:9e:3f:73:1a:2f:d9:a5:21:3c:d4:20: e8:b5:88:07:83:75:ad:70:a2:18:af:08:bb:1f:8a: 62:21:f5:e9:c5:c4:18:cb:07:3a:19:a9:20:f3:9c: 54:18:07:10:32:c5:81:35:a5:8f:ca:f7:9e:3f:4a: 39:fc:4b:e9:6d:67:97:dd:1e:24:d9:6b:d6:21:1e: 72:06:11:93:71:64:21:2b:83:a0:84:7c:84:b7:d1: 0b:04:09:09:16:0b:f7:29:5f:9e:07:d7:3d:70:c5: 50:4e:13:42:81:df:a4:f6:33:63:a0:d5:2e:1c:c4: b2:d8:15:48:f7:77:f7:4b:f7:21:70:39:fe:60:ff: e7:0b:1b:28:50:df:d4:b9:49:77:ba:85:8e:ca:f7: b6:cc:0e:48:40:d8:31:40:fa:fa:cd:64:42:61:d0: ac:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E9:CA:3F:65:1E:9C:E9:7F:FF:01:DD:B0:3E:11:FD:9C:40:2B:78 X509v3 Authority Key Identifier: keyid:19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0f:f3:c6:5a:f4:c9:ff:6d:07:44:6a:5b:a7:32:31:76:4b: bb:53:23:6b:1c:62:cd:cd:61:08:4e:04:f7:0c:0c:45:71:51: b0:63:8b:9d:67:65:7f:28:83:71:45:9a:58:cd:87:18:e9:3e: 4e:0c:25:60:3e:38:78:06:79:99:78:44:3a:74:b7:1a:20:eb: 91:c7:0d:4e:58:62:66:55:0f:6c:b3:75:b7:37:4e:bc:1b:31: 71:16:a9:ff:58:6f:3a:0f:c5:6b:36:b7:67:9d:9b:1d:26:a5: 91:39:52:25:2d:50:91:53:19:e9:47:81:c2:2a:27:68:9b:f2: e9:df:93:88:ac:a2:f2:86:05:f3:34:15:01:b2:73:9e:60:6a: a9:9b:44:01:f1:1f:36:e1:f0:08:b4:d6:46:18:4d:b8:5a:45: 77:c1:0b:c5:e8:66:0f:bf:f0:93:60:bf:24:1c:92:53:bb:ea: f4:84:ac:38:65:13:88:f0:96:3d:4c:bf:d3:5c:76:ac:01:0d: f7:16:ad:ff:6b:c2:a9:83:ad:14:74:6c:79:9e:99:69:8c:a7: 90:0d:08:fc:f4:31:8a:dc:d3:07:02:f9:39:62:02:a1:45:4e: a8:77:7a:00:d7:e8:67:db:03:20:ec:bc:9f:f3:c5:e1:63:00: 3f:3c:9a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmzZ+A2F1etPHFLF/10pyDKKn+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3 Qzg0RkRDMTAeFw0yNjA5MTcwOTE1MTFaFw0yNjA5MTgxMDQ3MTFaMDMxMTAvBgNV BAMTKDExRTlDQTNGNjUxRTlDRTk3RkZGMDFEREIwM0UxMUZEOUM0MDJCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMOoKwrpqr5xcXvil48ul4CVH BeJDOvZv3CDjaUtuYlaNda1SIiyqr8IklEcOXHpBTukC8B7E84eTKvlfVKaD0ycF POMuj8JOuMBZ5AqksJt7ta6G/UAzNQZ5Iy6eP3MaL9mlITzUIOi1iAeDda1wohiv CLsfimIh9enFxBjLBzoZqSDznFQYBxAyxYE1pY/K954/Sjn8S+ltZ5fdHiTZa9Yh HnIGEZNxZCErg6CEfIS30QsECQkWC/cpX54H1z1wxVBOE0KB36T2M2Og1S4cxLLY FUj3d/dL9yFwOf5g/+cLGyhQ39S5SXe6hY7K97bMDkhA2DFA+vrNZEJh0Kz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEenKP2UenOl//wHdsD4R/ZxAK3gwHwYDVR0j BBgwFoAUGQkc40uoIPlqvC+djCTZXHyE/cEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAzMzYyZTItOTc2NS00MmJkLWI1OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0 QkE4MjBGOTZBQkMyRjlEOEMyNEQ5NUM3Qzg0RkRDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTA5MUNFMzRCQTgyMEY5NkFCQzJGOUQ4QzI0RDk1QzdDODRG REMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTkwOTFDRTM0QkE4MjBGOTZBQkMyRjlEOEMyNEQ5 NUM3Qzg0RkRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgP88Za9Mn/bQdEalunMjF2S7tTI2scYs3N YQhOBPcMDEVxUbBji51nZX8og3FFmljNhxjpPk4MJWA+OHgGeZl4RDp0txog65HH DU5YYmZVD2yzdbc3TrwbMXEWqf9YbzoPxWs2t2edmx0mpZE5UiUtUJFTGelHgcIq J2ib8unfk4isovKGBfM0FQGyc55gaqmbRAHxHzbh8Ai01kYYTbhaRXfBC8XoZg+/ 8JNgvyQcklO76vSErDhlE4jwlj1Mv9NcdqwBDfcWrf9rwqmDrRR0bHmemWmMp5AN CPz0MYrc0wcC+TliAqFFTqh3egDX6GfbAyDsvJ/zxeFjAD88mt0= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:41 2026 by rpki-client