$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft File: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft (raw, json) Hash identifier: jTrO5Rmjq3wYYp0uK7bcDSFEhd+xzMBZxR+CCPhPbAA= Subject key identifier: 09:B6:A1:C7:90:4D:25:65:9A:38:1C:87:86:24:A6:58:BD:BF:EF:F5 Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B Certificate issuer: /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Certificate serial: 5A34F567D3120AA03C8DF5AEFD38400089B59AE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:54:17 +0000 Manifest this update: Tue 12 May 2026 07:49:17 +0000 Manifest next update: Wed 13 May 2026 08:40:17 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: VqHZLlF+lgynwiJKxLVryiJgltnho+ZAp8e5MraW8TY=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: x6TwTOh29XWvaL5ompdRKU75ZTX3qxSvsJNiDRmi0tk=) 3: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl (hash: Md8z+MZqiGKULnJ2Ado1Tyl9LNOIfVC4bXBSo0d26bU=) 4: 3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa (hash: j9TzpmBrkrC4dmhMn79OWPBXD1f+9PaIM7otVoOUOss=) 5: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: dovyd8zV7svzteoH3lZIvs7PVqS20CF/gTgXg/sP+cA=) 6: 3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa (hash: Dmtm9ctWPAGQ8tAxbP7cXaBST/4ZP/Kt6XHuhcipl8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:34:f5:67:d3:12:0a:a0:3c:8d:f5:ae:fd:38:40:00:89:b5:9a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Validity Not Before: May 12 07:49:17 2026 GMT Not After : May 13 08:40:17 2026 GMT Subject: CN=09B6A1C7904D25659A381C878624A658BDBFEFF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:65:2c:9f:46:09:03:79:7c:aa:f1:5c:ff: 98:3e:be:7f:66:b1:c6:68:8d:70:23:86:80:79:88: 85:72:d8:9e:5a:97:5f:7a:8a:9f:c4:50:00:43:dc: ac:20:64:6d:71:0f:22:25:f2:21:2b:94:34:ce:76: c1:74:be:30:ae:1b:48:02:0f:59:65:c8:2d:5c:76: 22:4b:f4:0e:63:c1:c7:e2:9c:9e:0c:c3:5e:60:1f: 1d:8f:30:0b:69:b4:c8:6c:1f:08:fb:e2:96:2e:16: c8:44:cb:6e:14:41:f9:61:6c:47:58:1b:96:e7:5f: ff:a0:c2:03:ea:ec:24:32:c8:6f:df:3b:df:43:69: 78:88:c3:15:a2:33:a9:e4:10:70:ac:94:84:d6:00: d0:65:cf:35:4e:32:17:60:b7:4d:c9:02:be:3a:d5: d6:57:7e:e8:29:a8:f5:58:df:7b:a3:4e:b9:cc:45: 4f:2e:e8:d9:bd:3b:59:1c:8e:18:fd:7e:b5:13:de: 61:03:ee:ab:9d:f8:ba:04:54:9b:24:63:14:bb:41: 92:f3:44:31:9b:82:34:bc:55:b3:4b:37:12:ec:3b: 23:2e:80:f8:02:83:1d:75:e4:7e:c7:8b:1a:eb:90: c5:83:94:f1:63:ab:44:5e:7d:d2:2a:8e:76:1c:cd: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B6:A1:C7:90:4D:25:65:9A:38:1C:87:86:24:A6:58:BD:BF:EF:F5 X509v3 Authority Key Identifier: keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d0:eb:93:fc:40:fc:60:fe:b7:a5:04:3b:61:34:cc:7d:86: 37:a2:01:d9:f2:4b:5e:d1:d1:03:f3:2e:fb:d6:c9:7d:4d:d2: 3d:b0:0f:be:03:64:23:5d:a4:d6:09:83:0b:b7:22:17:3a:7e: 2b:63:b0:a5:13:99:b2:79:56:1a:4d:9e:5c:28:df:f7:89:c7: cb:3f:b0:a0:06:8d:bf:b8:d0:c4:2c:50:cb:75:bf:78:8f:63: cf:67:3d:b1:53:62:d7:22:af:00:68:71:1e:23:f4:18:bc:97: f1:ed:99:fd:b5:f9:78:9d:03:eb:15:9e:b8:f4:68:fe:cf:5f: 87:18:52:d3:1c:fe:de:0a:ff:ee:b5:cf:3b:90:c1:88:4e:ee: 1b:c8:b2:fa:09:42:f0:fa:00:c7:ec:23:d8:03:9c:91:c3:00: 50:e3:8b:cf:c2:56:f3:dc:1c:bc:c9:04:fe:ff:30:7e:37:49: 9b:71:13:cc:fc:a8:9a:cf:71:69:cd:39:c4:3a:70:4e:9e:40: da:e1:04:4f:9a:27:a9:f3:9f:14:fb:b2:81:12:5e:6d:b1:fe: d0:9f:50:9e:f0:73:e8:59:e4:ce:db:9f:77:b0:a9:49:ff:d8: 23:a9:8e:5e:c8:fc:68:b3:6e:a1:1d:ee:3b:62:03:6f:25:57: c9:c9:47:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjT1Z9MSCqA8jfWu/ThAAIm1mucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5RkIz RDMyNTkwQjAeFw0yNjA1MTIwNzQ5MTdaFw0yNjA1MTMwODQwMTdaMDMxMTAvBgNV BAMTKDA5QjZBMUM3OTA0RDI1NjU5QTM4MUM4Nzg2MjRBNjU4QkRCRkVGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkDGUsn0YJA3l8qvFc/5g+vn9m scZojXAjhoB5iIVy2J5al196ip/EUABD3KwgZG1xDyIl8iErlDTOdsF0vjCuG0gC D1llyC1cdiJL9A5jwcfinJ4Mw15gHx2PMAtptMhsHwj74pYuFshEy24UQflhbEdY G5bnX/+gwgPq7CQyyG/fO99DaXiIwxWiM6nkEHCslITWANBlzzVOMhdgt03JAr46 1dZXfugpqPVY33ujTrnMRU8u6Nm9O1kcjhj9frUT3mED7qud+LoEVJskYxS7QZLz RDGbgjS8VbNLNxLsOyMugPgCgx115H7HixrrkMWDlPFjq0RefdIqjnYczVIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCbahx5BNJWWaOByHhiSmWL2/7/UwHwYDVR0j BBgwFoAU8xFzsQXduJ+99aHZ4jsZ+z0yWQswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOGNmNjUtZDQ2OC00MzA5LTlmMzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEw NUREQjg5RkJERjVBMUQ5RTIzQjE5RkIzRDMyNTkwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzExNzNCMTA1RERCODlGQkRGNUExRDlFMjNCMTlGQjNEMzI1 OTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5 RkIzRDMyNTkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbQ65P8QPxg/relBDthNMx9hjeiAdnyS17R 0QPzLvvWyX1N0j2wD74DZCNdpNYJgwu3Ihc6fitjsKUTmbJ5VhpNnlwo3/eJx8s/ sKAGjb+40MQsUMt1v3iPY89nPbFTYtcirwBocR4j9Bi8l/Htmf21+XidA+sVnrj0 aP7PX4cYUtMc/t4K/+61zzuQwYhO7hvIsvoJQvD6AMfsI9gDnJHDAFDji8/CVvPc HLzJBP7/MH43SZtxE8z8qJrPcWnNOcQ6cE6eQNrhBE+aJ6nznxT7soESXm2x/tCf UJ7wc+hZ5M7bn3ewqUn/2COpjl7I/GizbqEd7jtiA28lV8nJRxQ= -----END CERTIFICATE-----Generated at Wed May 13 00:45:05 2026 by rpki-client