$ rpki-client -vvvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft File: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft (raw, json) Hash identifier: FUTsNAg79aO4mhGT5BiYDCBaHyX5iPtzLsfuv73qOMk= Subject key identifier: 58:A5:86:6D:59:31:2A:1F:97:3F:6F:21:90:A4:7B:B0:B4:BA:32:74 Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 Certificate issuer: /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Certificate serial: 2AE40A427BA9B21CB09678A07DEE6BFA637F4563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 17:31:55 +0000 Manifest this update: Fri 25 Sep 2026 17:26:55 +0000 Manifest next update: Sat 26 Sep 2026 20:29:55 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=) 2: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl (hash: N4RLnZyzhzJfueUw2OA7Rl8nb63eCvxP9VRTv2F3dF8=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e4:0a:42:7b:a9:b2:1c:b0:96:78:a0:7d:ee:6b:fa:63:7f:45:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Validity Not Before: Sep 25 17:26:55 2026 GMT Not After : Sep 26 20:29:55 2026 GMT Subject: CN=58A5866D59312A1F973F6F2190A47BB0B4BA3274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:d4:cf:3f:75:58:7e:ae:38:9b:09:d0:47: 4b:bd:f9:38:86:33:3b:ac:6e:cb:a1:25:93:35:02: f4:ce:79:eb:ea:e4:1c:2f:95:7c:84:6f:53:ca:40: 95:d4:9a:11:3f:43:32:9c:7e:83:25:fb:41:9a:09: ae:2f:71:1b:35:20:b8:b4:63:21:69:d7:8e:5b:03: 2d:14:0a:55:67:22:17:3e:28:0a:20:09:39:64:0b: 3a:cc:a3:b4:2e:63:e2:a1:d5:c4:d3:11:d4:c8:d4: 32:b5:02:ad:18:35:44:3c:c1:ba:2f:64:85:75:5d: 99:73:b2:b5:bf:cc:76:28:d4:34:8b:7a:81:a5:b4: 9d:93:f0:41:ba:09:1b:26:69:58:3b:01:23:0c:88: f4:4b:fb:79:42:bd:0f:1c:4a:c2:f4:1d:38:8d:1f: fd:54:4d:f6:be:54:c2:05:6e:03:b2:c0:3b:af:88: 8a:ff:73:b3:03:d7:18:cd:4d:6c:fc:48:4a:c7:01: 95:c0:cf:f6:8f:52:40:87:7c:e1:9e:67:39:26:c8: 38:f8:79:08:55:d1:c7:16:49:27:77:05:45:7c:59: ae:3d:3c:cf:fb:c2:b0:ac:e0:90:0f:d6:a8:7c:24: 1c:1e:32:12:c9:a4:d2:51:f1:31:20:ad:84:08:bd: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A5:86:6D:59:31:2A:1F:97:3F:6F:21:90:A4:7B:B0:B4:BA:32:74 X509v3 Authority Key Identifier: keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7e:5b:9b:ee:54:09:52:ba:44:6e:22:0f:b6:ec:2a:56:5e: 0a:6a:5b:33:52:eb:08:3e:1e:75:fe:44:78:5e:ce:8b:bc:a9: ac:ff:7e:92:aa:0a:13:30:52:62:b9:10:74:60:9c:62:e3:76: fe:62:2c:d6:8c:e0:ad:50:2b:6f:f5:9f:5e:f1:55:10:09:3a: 4f:9d:eb:39:fb:dd:27:ec:5a:b0:5d:2d:88:99:a9:a2:9b:56: df:18:30:af:aa:c5:7b:95:d0:ca:23:9c:a6:43:65:d2:d5:19: 24:50:d6:87:fc:52:5c:bc:7c:93:cb:a9:e3:8b:14:97:72:27: cb:52:22:ea:97:b9:41:18:58:17:5c:7c:d8:d6:a1:87:d7:67: 14:30:ae:4c:82:5e:ea:c0:2c:c7:2e:da:f1:fe:7f:a2:50:c4: d0:ff:57:0e:61:c2:70:ec:14:ff:a2:fa:bb:3e:6f:ae:16:e9: 61:d1:be:70:df:70:88:7f:b9:b0:19:0a:44:60:ef:cc:09:9d: 05:08:6f:51:bb:96:6c:24:db:95:81:64:b1:d3:78:a4:b7:c6: d7:d6:61:7d:bf:ed:24:83:0b:08:38:ba:a3:be:e4:d1:dc:51: 18:17:8a:02:7e:8b:6b:b8:67:31:17:ec:f8:14:e9:7e:dd:43: 48:0b:42:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuQKQnupshywlnigfe5r+mN/RWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZF QUI5OTQzMDAeFw0yNjA5MjUxNzI2NTVaFw0yNjA5MjYyMDI5NTVaMDMxMTAvBgNV BAMTKDU4QTU4NjZENTkzMTJBMUY5NzNGNkYyMTkwQTQ3QkIwQjRCQTMyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6NTPP3VYfq44mwnQR0u9+TiG MzusbsuhJZM1AvTOeevq5BwvlXyEb1PKQJXUmhE/QzKcfoMl+0GaCa4vcRs1ILi0 YyFp145bAy0UClVnIhc+KAogCTlkCzrMo7QuY+Kh1cTTEdTI1DK1Aq0YNUQ8wbov ZIV1XZlzsrW/zHYo1DSLeoGltJ2T8EG6CRsmaVg7ASMMiPRL+3lCvQ8cSsL0HTiN H/1UTfa+VMIFbgOywDuviIr/c7MD1xjNTWz8SErHAZXAz/aPUkCHfOGeZzkmyDj4 eQhV0ccWSSd3BUV8Wa49PM/7wrCs4JAP1qh8JBweMhLJpNJR8TEgrYQIvQ5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKWGbVkxKh+XP28hkKR7sLS6MnQwHwYDVR0j BBgwFoAU0xSXvLFHLFWS5stq7Ys8v+q5lDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5MTY2YTEtMThjZC00NGQzLWE2ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNC MTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZFQUI5OTQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzE0OTdCQ0IxNDcyQzU1OTJFNkNCNkFFRDhCM0NCRkVBQjk5 NDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjND QkZFQUI5OTQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9+W5vuVAlSukRuIg+27CpWXgpqWzNS6wg+ HnX+RHhezou8qaz/fpKqChMwUmK5EHRgnGLjdv5iLNaM4K1QK2/1n17xVRAJOk+d 6zn73SfsWrBdLYiZqaKbVt8YMK+qxXuV0MojnKZDZdLVGSRQ1of8Uly8fJPLqeOL FJdyJ8tSIuqXuUEYWBdcfNjWoYfXZxQwrkyCXurALMcu2vH+f6JQxND/Vw5hwnDs FP+i+rs+b64W6WHRvnDfcIh/ubAZCkRg78wJnQUIb1G7lmwk25WBZLHTeKS3xtfW YX2/7SSDCwg4uqO+5NHcURgXigJ+i2u4ZzEX7PgU6X7dQ0gLQho= -----END CERTIFICATE-----Generated at Sat Sep 26 03:24:24 2026 by rpki-client