$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft File: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft (raw, json) Hash identifier: lNFi6z9+FZVOjqGYe/Pskj0HQmM1Z7aAcJF1iWeRECE= Subject key identifier: 62:21:56:DB:C5:75:D6:C3:B5:66:57:28:68:E5:75:E3:B0:BD:C1:0E Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B Certificate issuer: /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Certificate serial: 6AFA31C76282124A0B856A74A6BD74FDF5B59466 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft Manifest number: 010C Signing time: Sun 15 Nov 2026 06:11:50 +0000 Manifest this update: Sun 15 Nov 2026 06:06:50 +0000 Manifest next update: Mon 16 Nov 2026 09:55:50 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: VqHZLlF+lgynwiJKxLVryiJgltnho+ZAp8e5MraW8TY=) 2: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl (hash: DXug0iiwL0MbhTLbToMpChHNT7Zk6+slZIM+g+FJQNY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fa:31:c7:62:82:12:4a:0b:85:6a:74:a6:bd:74:fd:f5:b5:94:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Validity Not Before: Nov 15 06:06:50 2026 GMT Not After : Nov 16 09:55:50 2026 GMT Subject: CN=622156DBC575D6C3B566572868E575E3B0BDC10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:84:54:4b:b6:4f:ac:d0:fa:7b:18:af:3a: 10:44:e7:c8:08:8d:77:50:81:72:0c:d7:68:a2:5e: e0:f0:ac:25:c9:64:fb:c7:b8:c4:87:9a:46:7d:a0: 5d:02:68:dc:14:fa:25:e9:d7:72:f4:be:1d:ff:f7: 22:24:f5:1d:2d:c3:80:0b:71:77:cd:e4:ed:f7:10: 1e:ad:09:5e:ea:13:fd:3c:b4:01:60:74:e9:91:1e: 52:b9:c9:8c:0b:1b:96:de:21:30:50:bb:9e:17:7e: 9a:0d:9d:9d:7c:6f:4e:79:ef:b1:22:d1:97:08:83: ee:9a:f8:1b:5b:3d:0f:f1:3d:ba:e9:81:51:e7:ba: df:f6:9f:25:e2:2b:ee:7c:32:24:7c:20:5c:5b:3a: f9:8f:9c:fd:ae:b3:7e:3c:1a:6c:93:98:e1:f1:16: 68:7a:4e:f5:e0:ff:fc:7d:cf:74:ef:46:62:02:dd: 2c:02:76:65:47:53:9c:63:eb:b1:13:3d:6b:ff:20: e3:ae:f7:5f:45:23:c1:b9:b8:df:08:69:4a:20:2e: 5a:25:cc:e9:53:bc:d4:a4:21:15:9f:53:55:94:f2: 13:3a:c1:7c:25:19:4a:3f:aa:a5:22:68:6d:13:54: f5:a0:2a:c5:c8:fd:63:3e:5a:2c:c0:88:3f:6f:53: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:21:56:DB:C5:75:D6:C3:B5:66:57:28:68:E5:75:E3:B0:BD:C1:0E X509v3 Authority Key Identifier: keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e7:0a:e1:9e:e2:5b:9b:74:73:d4:1c:ad:d3:f9:da:57:7a: e9:14:99:bc:49:89:eb:d5:cd:c5:00:d1:48:a4:09:29:91:66: 11:ec:54:ee:4d:76:c7:04:b7:1e:26:25:35:44:c6:98:ed:d9: 8f:2c:b9:a0:30:db:e4:bd:d9:4e:80:a2:74:e5:d8:f0:23:79: 64:1e:e8:a1:01:5d:64:26:b9:a4:bd:53:3e:ce:af:8b:bf:76: 8f:0a:28:b4:f4:8c:21:3f:0a:47:d3:67:3d:a8:17:d7:9f:f4: 0b:b8:45:48:45:bf:be:c2:1d:aa:a3:b6:ac:a9:81:80:b0:95: ee:51:ad:0a:e9:6a:9a:0f:4d:82:1b:07:0e:f4:f0:61:51:d1: 02:95:03:f2:57:9a:11:37:09:c3:96:cf:50:d4:b6:f6:c2:a6: 82:ca:e1:97:50:f9:08:b4:c5:4d:a6:18:a0:49:41:0e:29:f9: ad:27:96:13:02:7f:16:9a:bf:90:ff:85:6a:87:9b:6a:e9:3c: b4:f7:a8:17:ef:8e:4e:17:42:e3:fa:e2:b1:01:0c:86:fb:a6: 00:74:09:50:7e:90:c9:e3:e5:5c:5c:f2:c7:7c:cb:17:e9:9d: a4:7e:9d:25:ec:6c:33:05:64:ff:df:d7:4c:ee:c4:0e:c5:df: 2f:c7:12:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavoxx2KCEkoLhWp0pr10/fW1lGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5RkIz RDMyNTkwQjAeFw0yNjExMTUwNjA2NTBaFw0yNjExMTYwOTU1NTBaMDMxMTAvBgNV BAMTKDYyMjE1NkRCQzU3NUQ2QzNCNTY2NTcyODY4RTU3NUUzQjBCREMxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBW4RUS7ZPrND6exivOhBE58gI jXdQgXIM12iiXuDwrCXJZPvHuMSHmkZ9oF0CaNwU+iXp13L0vh3/9yIk9R0tw4AL cXfN5O33EB6tCV7qE/08tAFgdOmRHlK5yYwLG5beITBQu54XfpoNnZ18b05577Ei 0ZcIg+6a+BtbPQ/xPbrpgVHnut/2nyXiK+58MiR8IFxbOvmPnP2us348GmyTmOHx Fmh6TvXg//x9z3TvRmIC3SwCdmVHU5xj67ETPWv/IOOu919FI8G5uN8IaUogLlol zOlTvNSkIRWfU1WU8hM6wXwlGUo/qqUiaG0TVPWgKsXI/WM+WizAiD9vU7rzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYiFW28V11sO1ZlcoaOV147C9wQ4wHwYDVR0j BBgwFoAU8xFzsQXduJ+99aHZ4jsZ+z0yWQswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOGNmNjUtZDQ2OC00MzA5LTlmMzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEw NUREQjg5RkJERjVBMUQ5RTIzQjE5RkIzRDMyNTkwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzExNzNCMTA1RERCODlGQkRGNUExRDlFMjNCMTlGQjNEMzI1 OTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5 RkIzRDMyNTkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/nCuGe4lubdHPUHK3T+dpXeukUmbxJievV zcUA0UikCSmRZhHsVO5NdscEtx4mJTVExpjt2Y8suaAw2+S92U6AonTl2PAjeWQe 6KEBXWQmuaS9Uz7Or4u/do8KKLT0jCE/CkfTZz2oF9ef9Au4RUhFv77CHaqjtqyp gYCwle5RrQrpapoPTYIbBw708GFR0QKVA/JXmhE3CcOWz1DUtvbCpoLK4ZdQ+Qi0 xU2mGKBJQQ4p+a0nlhMCfxaav5D/hWqHm2rpPLT3qBfvjk4XQuP64rEBDIb7pgB0 CVB+kMnj5Vxc8sd8yxfpnaR+nSXsbDMFZP/f10zuxA7F3y/HErk= -----END CERTIFICATE-----Generated at Sun Nov 15 14:42:46 2026 by rpki-client