$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft (raw, json) Hash identifier: IEd8idbNlL5TQh6hGJeTaudC9V4XFagDDZmYGyXuzBg= Subject key identifier: AB:5F:3A:6D:DB:B6:A1:E9:C1:D5:38:DC:B0:65:24:AE:DA:A4:A4:D2 Authority key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Certificate issuer: /CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Certificate serial: 271D5A3CD4DDAD09E3CAA1719E5F49ECB8964E39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:46:45 +0000 Manifest this update: Wed 23 Sep 2026 16:41:45 +0000 Manifest next update: Thu 24 Sep 2026 19:52:45 +0000 Files and hashes: 1: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: UTfVl36IBhOzG0Z82kRsRWQYHXTuWdTZ5yU2IO9JgDg=) 2: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: UMQrtxzU7bwTSmrEo5CM/EREbdAjBsi84Zf8mlGLlNk=) 3: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl (hash: SVQFztjiCWDlyvZbws41m1flzjKysIZbIXPCZ+Y9gF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1d:5a:3c:d4:dd:ad:09:e3:ca:a1:71:9e:5f:49:ec:b8:96:4e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Validity Not Before: Sep 23 16:41:45 2026 GMT Not After : Sep 24 19:52:45 2026 GMT Subject: CN=AB5F3A6DDBB6A1E9C1D538DCB06524AEDAA4A4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:76:d3:9e:27:b5:c1:f6:27:97:39:cb:b3: 0d:9d:5a:28:c8:48:f7:58:1a:31:c8:9d:dd:8a:09: 50:e0:30:c5:b5:ee:1b:bf:f3:98:c1:fc:bf:eb:8b: 49:ad:10:d5:40:2b:7c:d3:96:1e:a6:b8:80:9b:dd: 95:39:ff:cd:95:89:72:e2:5f:43:92:a2:a4:84:52: 97:0f:8a:a8:00:7a:2a:ad:32:1a:7e:3f:a9:4d:ed: e7:f9:7e:59:6f:5d:9f:91:3f:13:87:c0:9a:04:4a: 21:46:ef:28:21:94:77:84:c3:b0:ce:cd:f7:48:2f: 38:97:7e:bd:c2:56:34:35:6e:b8:48:ba:5c:1d:44: d4:88:7e:1b:72:cc:17:f1:ee:ad:ed:4e:9c:95:f6: ef:db:5d:71:67:12:1d:25:4c:37:bb:82:66:87:56: e2:3c:0d:36:46:8d:e2:28:15:28:69:f5:9f:89:d1: 95:5f:14:e9:db:64:bd:d0:65:6e:d3:39:b5:b4:3c: 3c:06:6b:44:e9:0e:a0:90:9d:ef:f6:79:3d:05:61: 2d:9b:a5:8e:1a:1e:dd:e1:c0:8d:16:65:10:36:bf: b7:24:2a:8b:e5:4c:4e:8d:26:2a:74:94:d5:22:5e: bc:8d:38:c0:cc:ec:a5:f0:5b:07:2c:67:ae:14:6a: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:3A:6D:DB:B6:A1:E9:C1:D5:38:DC:B0:65:24:AE:DA:A4:A4:D2 X509v3 Authority Key Identifier: keyid:70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8e:ef:8a:bc:65:95:38:d8:e4:78:4a:3b:a9:c7:79:e5:98: 3e:d7:9a:8b:75:23:a9:2e:92:40:a2:20:bf:d4:40:96:4f:1c: 68:d5:2b:52:52:af:63:73:59:9a:db:e3:8d:88:9a:e9:f1:11: af:eb:bf:95:ee:d6:4e:7e:1b:ca:a0:2c:84:30:30:1e:18:86: 23:60:e3:9f:01:2e:c6:6b:01:4d:9a:09:12:c4:10:12:07:7d: 56:9f:fc:87:a6:53:91:8c:ff:6f:ff:f5:e2:84:c9:2d:c7:28: 81:cf:09:83:ea:6a:b4:0f:5a:96:d0:26:71:e4:12:20:c3:6c: a6:50:d5:1a:30:5b:d9:45:a8:09:02:c5:15:fb:de:1e:9f:f2: 74:bc:15:d6:55:cf:6f:11:30:fd:94:59:8b:e5:07:76:2c:71: 09:a7:3f:3d:6d:03:41:5c:29:e5:ac:a9:c2:70:76:06:ee:fd: 89:63:5e:4a:1b:dd:4f:a0:2a:af:cc:74:72:ba:c5:8f:b1:c2: b6:91:f5:37:82:b0:29:13:32:09:3f:b4:83:83:12:0c:4a:a0: bc:48:3b:b6:8b:e7:bf:7d:9e:57:bf:25:55:ff:ed:1f:13:2c: 54:d8:3f:36:90:77:80:7f:55:2b:5c:36:19:95:2f:54:16:48: 3a:9c:34:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJx1aPNTdrQnjyqFxnl9J7LiWTjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFC NEE0RkI0MjAeFw0yNjA5MjMxNjQxNDVaFw0yNjA5MjQxOTUyNDVaMDMxMTAvBgNV BAMTKEFCNUYzQTZEREJCNkExRTlDMUQ1MzhEQ0IwNjUyNEFFREFBNEE0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCnbTnie1wfYnlznLsw2dWijI SPdYGjHInd2KCVDgMMW17hu/85jB/L/ri0mtENVAK3zTlh6muICb3ZU5/82ViXLi X0OSoqSEUpcPiqgAeiqtMhp+P6lN7ef5fllvXZ+RPxOHwJoESiFG7yghlHeEw7DO zfdILziXfr3CVjQ1brhIulwdRNSIfhtyzBfx7q3tTpyV9u/bXXFnEh0lTDe7gmaH VuI8DTZGjeIoFShp9Z+J0ZVfFOnbZL3QZW7TObW0PDwGa0TpDqCQne/2eT0FYS2b pY4aHt3hwI0WZRA2v7ckKovlTE6NJip0lNUiXryNOMDM7KXwWwcsZ64UarTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq186bdu2oenB1TjcsGUkrtqkpNIwHwYDVR0j BBgwFoAUcDEQT/y04dBGNHZEW9/YqrSk+0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJiZTY4MTUtMzEwZS00MjA2LWE1MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZG Q0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFCNEE0RkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDMxMTA0RkZDQjRFMUQwNDYzNDc2NDQ1QkRGRDhBQUI0QTRG QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4 QUFCNEE0RkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiO74q8ZZU42OR4Sjupx3nlmD7Xmot1I6ku kkCiIL/UQJZPHGjVK1JSr2NzWZrb442ImunxEa/rv5Xu1k5+G8qgLIQwMB4YhiNg 458BLsZrAU2aCRLEEBIHfVaf/IemU5GM/2//9eKEyS3HKIHPCYPqarQPWpbQJnHk EiDDbKZQ1RowW9lFqAkCxRX73h6f8nS8FdZVz28RMP2UWYvlB3YscQmnPz1tA0Fc KeWsqcJwdgbu/YljXkob3U+gKq/MdHK6xY+xwraR9TeCsCkTMgk/tIODEgxKoLxI O7aL5799nle/JVX/7R8TLFTYPzaQd4B/VStcNhmVL1QWSDqcNNc= -----END CERTIFICATE-----Generated at Wed Sep 23 23:42:29 2026 by rpki-client