$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft File: F31E15BE02A167AD0052555C4C55DC145AB53C32.mft (raw, json) Hash identifier: sERpoWya1uCZJvPDog8/5I8wlhCVTlboZRMbSalbMXc= Subject key identifier: DB:95:2A:3B:3F:EB:D5:78:86:06:39:AE:86:B6:28:66:09:70:54:0C Authority key identifier: F3:1E:15:BE:02:A1:67:AD:00:52:55:5C:4C:55:DC:14:5A:B5:3C:32 Certificate issuer: /CN=F31E15BE02A167AD0052555C4C55DC145AB53C32 Certificate serial: 15B1F620E6E6A05B76CE36802AACC880F1BF0BE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft Manifest number: BF Signing time: Wed 23 Sep 2026 19:45:20 +0000 Manifest this update: Wed 23 Sep 2026 19:40:20 +0000 Manifest next update: Thu 24 Sep 2026 22:06:20 +0000 Files and hashes: 1: F31E15BE02A167AD0052555C4C55DC145AB53C32.crl (hash: 3+a7MVOH27Ia25/IPmnTtxokkfrK7/KmHBp9+3qJGtE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.crl rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b1:f6:20:e6:e6:a0:5b:76:ce:36:80:2a:ac:c8:80:f1:bf:0b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31E15BE02A167AD0052555C4C55DC145AB53C32 Validity Not Before: Sep 23 19:40:20 2026 GMT Not After : Sep 24 22:06:20 2026 GMT Subject: CN=DB952A3B3FEBD578860639AE86B628660970540C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:af:ed:e1:6a:6d:16:88:c7:cb:8b:6d:0f: d4:f4:b0:31:75:f4:c5:4b:4b:4c:20:ee:a4:8a:90: 49:57:2f:3e:3a:f7:27:68:45:70:e9:d2:09:37:f0: fa:cc:36:61:2a:71:e3:a4:58:83:6a:28:2a:92:51: 3c:bc:ec:90:e9:3f:1c:8e:17:1e:38:a3:4e:f4:9b: db:e5:94:ae:fe:d8:5b:2c:a0:0d:66:d9:38:c7:19: 48:b5:c2:c2:de:b0:c8:de:21:bb:b3:9e:47:c0:ed: 2b:9a:cb:70:c7:ca:5f:92:3a:f6:81:b4:37:42:4e: 84:08:93:6d:fc:13:7f:68:2e:e7:56:ca:9b:79:ba: 4a:4f:e2:51:0b:10:5e:19:e0:ac:db:eb:34:86:b0: 39:96:5a:35:d2:84:37:30:38:46:91:3b:15:d2:6c: c1:57:c2:c5:4b:9c:3b:dc:d3:fe:ee:5f:c8:4c:4a: 1d:68:a6:57:d4:e4:fd:96:13:c4:7f:1c:2e:27:5f: 67:2e:df:62:4e:f0:ca:c5:04:20:df:5e:ba:37:fb: 62:20:6d:ca:19:d7:5b:35:79:7c:a9:31:f4:73:be: 75:e6:97:a5:0a:d0:06:aa:42:4c:54:0e:f0:b7:22: ff:1c:f9:0c:9a:75:e1:09:00:a2:c6:44:3a:8c:01: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:2A:3B:3F:EB:D5:78:86:06:39:AE:86:B6:28:66:09:70:54:0C X509v3 Authority Key Identifier: keyid:F3:1E:15:BE:02:A1:67:AD:00:52:55:5C:4C:55:DC:14:5A:B5:3C:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31E15BE02A167AD0052555C4C55DC145AB53C32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/F31E15BE02A167AD0052555C4C55DC145AB53C32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:34:fb:10:2e:6a:eb:42:0c:4c:06:31:e5:a2:b4:da:97:28: 55:16:a1:f3:11:c8:fd:4c:76:1a:26:91:e9:dd:65:ba:aa:2f: 87:b6:37:12:aa:19:77:08:0b:26:f4:ac:31:2e:e7:22:60:79: f5:63:34:27:c0:92:aa:42:d8:4f:02:0d:1f:63:78:6d:50:49: 07:b4:c9:da:41:c3:dd:e4:a6:ca:69:5a:66:a0:08:fa:16:d1: f0:3a:71:97:ee:d1:86:2d:fb:e1:6c:d0:4a:4a:15:18:dd:67: 2c:2f:54:66:bc:b8:f3:9c:bf:40:a9:47:6f:ef:ee:34:01:2d: bc:7d:b1:d3:1c:36:a0:7a:70:b3:8e:14:67:59:0d:ed:35:4a: c9:99:ab:bd:28:ab:7d:4f:4d:ae:9c:2d:41:1b:b3:1d:25:61: ca:1d:69:ce:68:df:74:aa:05:d2:01:8f:a4:86:5b:de:c1:c4: 3e:6b:a9:c1:11:e4:e7:83:6c:e5:bb:2a:6c:71:d7:48:eb:ee: 48:79:da:ab:df:8e:82:5c:02:fc:d1:ba:79:f6:43:52:ff:b3: 0b:dc:51:ef:54:9c:97:15:cf:90:2c:3f:85:5f:ed:24:6a:45: 7c:00:31:f4:d6:15:6e:e8:20:62:bf:7d:88:42:a2:e4:3a:33: 24:10:29:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbH2IObmoFt2zjaAKqzIgPG/C+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxRTE1QkUwMkExNjdBRDAwNTI1NTVDNEM1NURDMTQ1 QUI1M0MzMjAeFw0yNjA5MjMxOTQwMjBaFw0yNjA5MjQyMjA2MjBaMDMxMTAvBgNV BAMTKERCOTUyQTNCM0ZFQkQ1Nzg4NjA2MzlBRTg2QjYyODY2MDk3MDU0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXnK/t4WptFojHy4ttD9T0sDF1 9MVLS0wg7qSKkElXLz469ydoRXDp0gk38PrMNmEqceOkWINqKCqSUTy87JDpPxyO Fx44o070m9vllK7+2FssoA1m2TjHGUi1wsLesMjeIbuznkfA7Suay3DHyl+SOvaB tDdCToQIk238E39oLudWypt5ukpP4lELEF4Z4Kzb6zSGsDmWWjXShDcwOEaROxXS bMFXwsVLnDvc0/7uX8hMSh1oplfU5P2WE8R/HC4nX2cu32JO8MrFBCDfXro3+2Ig bcoZ11s1eXypMfRzvnXml6UK0AaqQkxUDvC3Iv8c+QyadeEJAKLGRDqMAb2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25UqOz/r1XiGBjmuhrYoZglwVAwwHwYDVR0j BBgwFoAU8x4VvgKhZ60AUlVcTFXcFFq1PDIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzMzBkMDYtZjkyZC00OTViLTliYTAtYWNkZDgxN2IxNDgzLzAvRjMxRTE1QkUw MkExNjdBRDAwNTI1NTVDNEM1NURDMTQ1QUI1M0MzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzFFMTVCRTAyQTE2N0FEMDA1MjU1NUM0QzU1REMxNDVBQjUz QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvRjMxRTE1QkUwMkExNjdBRDAwNTI1NTVDNEM1NURD MTQ1QUI1M0MzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC00+xAuautCDEwGMeWitNqXKFUWofMRyP1M dhomkendZbqqL4e2NxKqGXcICyb0rDEu5yJgefVjNCfAkqpC2E8CDR9jeG1QSQe0 ydpBw93kpsppWmagCPoW0fA6cZfu0YYt++Fs0EpKFRjdZywvVGa8uPOcv0CpR2/v 7jQBLbx9sdMcNqB6cLOOFGdZDe01SsmZq70oq31PTa6cLUEbsx0lYcodac5o33Sq BdIBj6SGW97BxD5rqcER5OeDbOW7Kmxx10jr7kh52qvfjoJcAvzRunn2Q1L/swvc Ue9UnJcVz5AsP4Vf7SRqRXwAMfTWFW7oIGK/fYhCouQ6MyQQKSE= -----END CERTIFICATE-----Generated at Thu Sep 24 08:54:19 2026 by rpki-client