$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft File: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft (raw, json) Hash identifier: 8DVLkiGtMwusATBKbJIBHuI5+jDR+UA4b2BVXGJEMSQ= Subject key identifier: E8:5D:EB:5C:C1:EB:4C:04:45:1C:4B:F5:9C:8C:4E:BE:5C:02:69:1B Authority key identifier: B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B Certificate issuer: /CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B Certificate serial: 2049D3C3CCCDDAFF52570EC44A45C4BD97CC0C09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 17:27:21 +0000 Manifest this update: Thu 24 Sep 2026 17:22:21 +0000 Manifest next update: Fri 25 Sep 2026 19:22:21 +0000 Files and hashes: 1: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl (hash: rkSpI+wP/vAZMEO7SJfro9i6pkfovChBACZugpW10BQ=) 2: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: 5fm1VV66aIhuu/oPeZZw27kiviKlDXlW5aL6SC7t08E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:49:d3:c3:cc:cd:da:ff:52:57:0e:c4:4a:45:c4:bd:97:cc:0c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B Validity Not Before: Sep 24 17:22:21 2026 GMT Not After : Sep 25 19:22:21 2026 GMT Subject: CN=E85DEB5CC1EB4C04451C4BF59C8C4EBE5C02691B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:db:0a:87:2e:13:c5:ca:07:b8:b0:0d:06: b5:2b:ba:db:61:bf:b9:a1:7d:00:cd:6e:8a:88:e1: 5f:de:a1:76:42:71:f7:10:c5:4f:b3:16:9c:2c:b8: 09:41:fe:e8:85:fe:3a:77:0d:9d:df:7f:d1:b5:ad: 38:cc:25:91:ae:3c:79:0a:d1:76:b8:d5:92:ee:46: 5d:05:33:f3:8e:95:d5:bd:8f:30:69:14:ce:b3:41: ca:21:0b:a6:f4:3c:2b:a2:a4:6f:bb:d6:50:00:45: 03:e3:90:a1:e3:71:4a:25:b2:0f:74:80:3d:69:d3: db:9b:2d:2b:b9:4f:b9:7b:82:ce:bc:3b:f4:12:08: af:25:d2:d5:05:a9:73:4b:e8:01:19:45:f4:2f:10: 28:e7:13:00:b3:d2:2a:7b:77:db:b0:63:cf:ed:1a: a0:00:7e:da:65:01:01:67:bd:01:c2:05:8e:95:c2: 26:63:97:5b:35:02:cb:a9:86:69:f2:8f:9c:9b:ce: 2c:d0:ee:c3:dd:88:b4:43:6d:07:b1:be:91:f4:26: ad:00:cb:11:c5:c5:15:52:ed:a9:0f:34:a1:c7:55: c6:58:95:dc:29:05:92:4d:36:b2:a9:86:4a:c0:ac: 97:2b:9d:73:e7:97:fe:90:cc:6e:22:95:15:3d:c9: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5D:EB:5C:C1:EB:4C:04:45:1C:4B:F5:9C:8C:4E:BE:5C:02:69:1B X509v3 Authority Key Identifier: keyid:B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e1:ee:76:43:b3:2b:4f:02:27:1a:3f:88:39:e9:cd:98:34: f8:e3:72:8c:d7:ae:d0:8c:dd:6a:64:0b:88:50:bc:43:7b:a1: e3:5c:af:cf:f2:a4:1e:71:c3:2a:3e:64:87:e3:44:f2:0b:fa: 8f:0d:34:3c:88:37:35:a2:77:ac:54:d8:5e:a7:43:6c:f6:b9: 48:dd:12:62:39:50:70:7e:42:0e:dc:ee:f2:62:d3:dc:37:e0: 58:d7:ec:19:52:ad:09:f6:d1:2b:65:65:3a:88:84:3c:9a:f7: 02:12:8a:5b:be:3c:07:c6:42:a9:d0:a4:37:18:e3:1d:06:8c: 91:e3:e2:bd:dc:5f:4f:d6:53:86:18:bc:e2:ae:0a:4e:be:c5: 1f:2e:ef:87:ba:bc:81:8d:38:d0:95:03:98:ed:f9:a1:11:1a: 29:e6:ff:b3:42:0e:f5:80:05:28:cb:28:34:2e:73:6c:e3:4f: e6:f5:35:8d:6e:fa:9c:d8:09:54:00:dc:f7:3a:1a:bd:31:48: 19:06:8c:16:c6:6f:29:c6:df:02:70:6b:1e:8d:b3:4d:71:f2: 92:32:c1:68:b7:09:75:82:10:9a:c4:34:f4:e7:cb:14:65:7e: 8c:72:11:34:4b:59:5f:9f:44:94:4f:4b:04:29:7f:b2:96:4a: d3:f8:73:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEnTw8zN2v9SVw7ESkXEvZfMDAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxREY2MzU3OTNBNzRDN0RGNUE4RTNFNTlGRTFEOEYz OTA3NDI4QjAeFw0yNjA5MjQxNzIyMjFaFw0yNjA5MjUxOTIyMjFaMDMxMTAvBgNV BAMTKEU4NURFQjVDQzFFQjRDMDQ0NTFDNEJGNTlDOEM0RUJFNUMwMjY5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyp9sKhy4TxcoHuLANBrUrutth v7mhfQDNboqI4V/eoXZCcfcQxU+zFpwsuAlB/uiF/jp3DZ3ff9G1rTjMJZGuPHkK 0Xa41ZLuRl0FM/OOldW9jzBpFM6zQcohC6b0PCuipG+71lAARQPjkKHjcUolsg90 gD1p09ubLSu5T7l7gs68O/QSCK8l0tUFqXNL6AEZRfQvECjnEwCz0ip7d9uwY8/t GqAAftplAQFnvQHCBY6VwiZjl1s1Asuphmnyj5ybzizQ7sPdiLRDbQexvpH0Jq0A yxHFxRVS7akPNKHHVcZYldwpBZJNNrKphkrArJcrnXPnl/6QzG4ilRU9ycLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6F3rXMHrTARFHEv1nIxOvlwCaRswHwYDVR0j BBgwFoAUsx32NXk6dMffWo4+Wf4djzkHQoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIyMWFkNjctZDM1Yy00NTU5LTlhNzMtN2M3NGY1MGRjZmZhLzAvQjMxREY2MzU3 OTNBNzRDN0RGNUE4RTNFNTlGRTFEOEYzOTA3NDI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzFERjYzNTc5M0E3NEM3REY1QThFM0U1OUZFMUQ4RjM5MDc0 MjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIyMWFkNjctZDM1Yy00NTU5LTlh NzMtN2M3NGY1MGRjZmZhLzAvQjMxREY2MzU3OTNBNzRDN0RGNUE4RTNFNTlGRTFE OEYzOTA3NDI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDh7nZDsytPAicaP4g56c2YNPjjcozXrtCM 3WpkC4hQvEN7oeNcr8/ypB5xwyo+ZIfjRPIL+o8NNDyINzWid6xU2F6nQ2z2uUjd EmI5UHB+Qg7c7vJi09w34FjX7BlSrQn20StlZTqIhDya9wISilu+PAfGQqnQpDcY 4x0GjJHj4r3cX0/WU4YYvOKuCk6+xR8u74e6vIGNONCVA5jt+aERGinm/7NCDvWA BSjLKDQuc2zjT+b1NY1u+pzYCVQA3Pc6Gr0xSBkGjBbGbynG3wJwax6Ns01x8pIy wWi3CXWCEJrENPTnyxRlfoxyETRLWV+fRJRPSwQpf7KWStP4cxo= -----END CERTIFICATE-----Generated at Thu Sep 24 20:54:42 2026 by rpki-client