$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft File: 31F5B417659DF6EE03991B6AB5E72A24009BC769.mft (raw, json) Hash identifier: 5+fdk0tQlG/C2xKOkDOMxAlTPQP9y3/IdsIu1m4klxg= Subject key identifier: EF:40:11:F3:D0:AD:2E:FD:80:18:1A:8B:B1:20:E8:16:C5:6D:84:D6 Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Certificate serial: 7B49F127DD523263BA52D29842B0B57409912AEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:33:43 +0000 Manifest this update: Thu 24 Sep 2026 10:28:43 +0000 Manifest next update: Fri 25 Sep 2026 10:49:43 +0000 Files and hashes: 1: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=) 2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=) 3: 31F5B417659DF6EE03991B6AB5E72A24009BC769.crl (hash: e3On/NZMMQX6ij4wH3msOi+426pjXxQH/Mkwj+kxgZs=) 4: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:49:f1:27:dd:52:32:63:ba:52:d2:98:42:b0:b5:74:09:91:2a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Validity Not Before: Sep 24 10:28:43 2026 GMT Not After : Sep 25 10:49:43 2026 GMT Subject: CN=EF4011F3D0AD2EFD80181A8BB120E816C56D84D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:1e:8d:40:91:e4:1e:4b:98:e1:1f:86:bf: 3f:58:a5:f1:d7:78:cd:18:9a:3c:df:c1:a1:da:30: 48:d0:9a:18:53:16:0c:60:0d:a5:ae:af:cd:b1:27: aa:bd:6d:9a:6b:c3:a4:df:01:d9:c7:02:fe:55:d1: 4f:0d:e5:6c:54:70:9f:09:a5:35:56:a5:64:c2:0d: 5f:e5:51:c1:fc:ae:64:3c:02:f7:c4:f4:c7:89:43: b3:5d:d1:6f:3f:e9:ee:0d:07:1b:db:7f:dc:73:ae: 8b:71:9e:f9:67:a5:0c:a3:57:e6:90:11:17:46:dc: 7e:60:8f:e6:6f:97:72:97:d2:fa:d5:66:a3:e9:70: 3b:20:92:12:64:90:d3:fb:59:45:04:79:0c:8d:60: 9e:dc:7c:5c:0a:f8:b2:9a:84:c9:20:31:dc:a0:59: df:c3:15:88:47:0f:28:eb:b9:a9:10:30:e9:82:b4: 6c:33:f5:5b:d3:4c:74:52:b8:c2:39:81:20:d8:18: 1d:6a:3c:7a:e2:82:19:b3:d9:89:72:5d:7c:2c:7b: 48:b0:ab:fa:ed:8f:9f:3c:e7:1e:a9:b8:2c:50:c5: e0:62:66:2c:e6:2d:48:72:21:cf:ce:b7:59:31:4f: c9:02:85:96:6a:f7:92:fe:9b:69:98:2e:54:dc:22: 44:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:40:11:F3:D0:AD:2E:FD:80:18:1A:8B:B1:20:E8:16:C5:6D:84:D6 X509v3 Authority Key Identifier: keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fa:01:d8:7a:8f:49:0b:2e:e2:09:24:44:99:7c:70:95:bf: 8b:36:ca:07:aa:ff:ad:b6:27:12:4a:09:06:98:29:7f:d8:a5: b1:da:7d:90:b6:51:2b:97:6e:bd:db:09:73:83:0e:65:39:95: b3:00:a3:6e:75:43:5f:e7:4b:13:98:c7:7a:bf:a3:25:ea:a6: ad:5e:23:62:c3:c9:72:1a:ce:7b:0a:ee:7e:cc:ba:e4:5b:d7: fe:e5:57:be:bd:f3:0d:38:76:1a:f6:46:df:0c:3b:10:d8:82: 5f:1b:15:32:e6:30:8d:b5:2e:88:8e:1b:f0:3d:fa:b0:48:86: c4:fa:5d:a6:77:13:12:4e:b0:67:ea:c7:5f:4a:b1:db:40:a7: f8:7d:2e:d6:cf:8a:f1:96:54:9a:fd:3c:e8:a4:8b:d2:a5:db: cf:57:06:e0:0f:f7:12:2d:e2:e2:f2:16:1d:35:91:5a:fa:72: cb:4b:65:ae:70:ae:22:dd:b0:1c:63:af:95:35:a4:1d:59:ac: 9e:7c:c7:33:b0:26:a3:ea:e2:20:d2:ec:0d:27:c4:c0:c0:97: 07:e9:6f:3e:a3:c5:d6:df:f4:8b:f9:1a:1e:63:66:0e:15:cb: ce:af:6c:1c:24:d3:d1:cb:a2:52:5d:6d:94:d3:b0:04:e9:e5: 14:fb:d1:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0nxJ91SMmO6UtKYQrC1dAmRKu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQw MDlCQzc2OTAeFw0yNjA5MjQxMDI4NDNaFw0yNjA5MjUxMDQ5NDNaMDMxMTAvBgNV BAMTKEVGNDAxMUYzRDBBRDJFRkQ4MDE4MUE4QkIxMjBFODE2QzU2RDg0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmjh6NQJHkHkuY4R+Gvz9YpfHX eM0YmjzfwaHaMEjQmhhTFgxgDaWur82xJ6q9bZprw6TfAdnHAv5V0U8N5WxUcJ8J pTVWpWTCDV/lUcH8rmQ8AvfE9MeJQ7Nd0W8/6e4NBxvbf9xzrotxnvlnpQyjV+aQ ERdG3H5gj+Zvl3KX0vrVZqPpcDsgkhJkkNP7WUUEeQyNYJ7cfFwK+LKahMkgMdyg Wd/DFYhHDyjruakQMOmCtGwz9VvTTHRSuMI5gSDYGB1qPHrighmz2YlyXXwse0iw q/rtj5885x6puCxQxeBiZizmLUhyIc/Ot1kxT8kChZZq95L+m2mYLlTcIkSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70AR89CtLv2AGBqLsSDoFsVthNYwHwYDVR0j BBgwFoAUMfW0F2Wd9u4DmRtqtecqJACbx2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBjMjY2ZTYtMGI4NC00MzFmLTllNzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2 NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQwMDlCQzc2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMUY1QjQxNzY1OURGNkVFMDM5OTFCNkFCNUU3MkEyNDAwOUJD NzY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJB MjQwMDlCQzc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGv6Adh6j0kLLuIJJESZfHCVv4s2ygeq/622 JxJKCQaYKX/YpbHafZC2USuXbr3bCXODDmU5lbMAo251Q1/nSxOYx3q/oyXqpq1e I2LDyXIaznsK7n7MuuRb1/7lV7698w04dhr2Rt8MOxDYgl8bFTLmMI21LoiOG/A9 +rBIhsT6XaZ3ExJOsGfqx19KsdtAp/h9LtbPivGWVJr9POiki9Kl289XBuAP9xIt 4uLyFh01kVr6cstLZa5wriLdsBxjr5U1pB1ZrJ58xzOwJqPq4iDS7A0nxMDAlwfp bz6jxdbf9Iv5Gh5jZg4Vy86vbBwk09HLolJdbZTTsATp5RT70TI= -----END CERTIFICATE-----Generated at Thu Sep 24 19:49:44 2026 by rpki-client