$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft File: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft (raw, json) Hash identifier: b5TBjI5Icuk2xi+mCYX4JZ/e8OzrG1SGJJhoL880z/8= Subject key identifier: 5F:A6:6D:3F:22:A6:AE:D3:71:79:58:DC:75:B6:15:DF:57:8B:E0:76 Authority key identifier: 73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 Certificate issuer: /CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Certificate serial: 25DDB5C6C6CE9924CC71F48035482E1735B28EC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:26:16 +0000 Manifest this update: Wed 23 Sep 2026 20:21:16 +0000 Manifest next update: Thu 24 Sep 2026 20:30:16 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: +l7H6IXgAvTv+3glkvk8VLjCw4Za7qX1HwAcAg3brR0=) 2: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl (hash: opWwbV+RKcs8wEUc+KhGHJ/vqAU1i0TrvwUI43nnmPs=) 3: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: J0CxZDsJ9hK/vFJkCmlYVTK0Hkphd/z0nczFHp0XF3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:dd:b5:c6:c6:ce:99:24:cc:71:f4:80:35:48:2e:17:35:b2:8e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Validity Not Before: Sep 23 20:21:16 2026 GMT Not After : Sep 24 20:30:16 2026 GMT Subject: CN=5FA66D3F22A6AED3717958DC75B615DF578BE076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:fb:dc:10:79:fb:6f:11:71:69:c9:da:2c: 75:30:52:0c:3d:d9:70:fe:8d:c4:46:b1:87:6e:db: 19:2b:c9:70:08:2e:cc:64:81:f5:8e:01:fd:06:22: b4:4c:3e:e2:44:58:9c:12:fe:94:95:b2:7d:c0:11: 1a:89:a1:ee:33:34:66:32:ee:42:4a:64:09:10:3c: f2:18:f3:f2:fd:8e:b2:28:74:94:ba:cd:04:ac:95: 89:f7:6d:04:14:82:0f:97:35:bd:9e:fd:7b:6d:88: 1a:1f:aa:c1:94:72:4d:b8:9e:10:82:31:05:b1:fb: 87:fc:69:3e:1f:84:50:38:8f:f2:d0:45:b8:36:a7: 21:3b:f2:b3:7f:c6:4e:41:25:80:ca:6b:c4:e4:3c: 29:35:77:e1:81:e8:84:fc:71:45:16:c4:ff:3f:b3: f4:03:24:24:d5:ed:56:01:4a:00:5b:e5:c2:0e:1a: b0:87:47:0f:3b:0d:72:8d:90:b0:a3:cd:8e:13:8b: 64:5b:24:a0:2f:73:66:08:58:23:a1:82:34:40:86: 75:cc:3d:55:42:22:0d:f7:df:a2:48:87:7f:79:03: e6:d2:46:b3:b8:42:58:a9:66:c3:26:7f:34:be:97: 45:3b:7c:1d:ae:39:d4:3d:d6:41:be:6b:26:86:d5: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:6D:3F:22:A6:AE:D3:71:79:58:DC:75:B6:15:DF:57:8B:E0:76 X509v3 Authority Key Identifier: keyid:73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:2c:6a:97:f2:df:32:85:8d:4a:b4:cf:92:88:2e:8c:51:4d: c3:d4:51:e0:43:da:93:4d:3c:a9:24:56:c0:4a:81:ef:7c:3c: c7:e1:ca:21:5e:5f:df:78:b6:4b:c8:ff:b9:38:bd:ac:9c:04: 5b:a2:ec:94:98:a8:a0:3b:7c:6e:92:7d:56:59:e8:3e:93:16: 67:e5:67:4f:e3:6c:1f:c3:ca:9a:d3:85:84:1d:40:4f:00:20: 47:40:af:cb:7d:9c:ef:cd:17:61:da:7d:39:cb:02:24:99:62: ce:fd:79:04:16:f1:ba:e3:28:55:bf:27:c1:87:d6:50:9d:e7: 7b:a2:58:24:45:4e:2e:68:02:18:cc:a8:e5:b2:a1:80:bb:b3: cc:f9:7b:0f:b0:1f:e4:37:ce:71:1b:a7:bb:8e:32:7d:65:da: 81:d5:62:95:5b:48:28:96:b3:45:a5:0c:d9:8b:2b:c0:1f:99: 8d:51:fb:90:67:d5:87:fe:6d:70:9b:60:49:9f:21:58:96:7c: b8:5d:5e:d3:c5:ad:41:4d:a5:91:ac:54:92:c8:24:92:60:f1: d5:29:c5:62:f2:78:ff:c2:cc:50:e6:b0:e8:0b:92:e0:a5:3a: a2:c5:60:8f:b3:2f:53:29:92:20:f7:94:6c:88:2c:4d:76:5e: 61:64:d4:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJd21xsbOmSTMcfSANUguFzWyjsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4 MjRBQTJFNjAeFw0yNjA5MjMyMDIxMTZaFw0yNjA5MjQyMDMwMTZaMDMxMTAvBgNV BAMTKDVGQTY2RDNGMjJBNkFFRDM3MTc5NThEQzc1QjYxNURGNTc4QkUwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktvvcEHn7bxFxacnaLHUwUgw9 2XD+jcRGsYdu2xkryXAILsxkgfWOAf0GIrRMPuJEWJwS/pSVsn3AERqJoe4zNGYy 7kJKZAkQPPIY8/L9jrIodJS6zQSslYn3bQQUgg+XNb2e/XttiBofqsGUck24nhCC MQWx+4f8aT4fhFA4j/LQRbg2pyE78rN/xk5BJYDKa8TkPCk1d+GB6IT8cUUWxP8/ s/QDJCTV7VYBSgBb5cIOGrCHRw87DXKNkLCjzY4Ti2RbJKAvc2YIWCOhgjRAhnXM PVVCIg3336JIh395A+bSRrO4QlipZsMmfzS+l0U7fB2uOdQ91kG+ayaG1WXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX6ZtPyKmrtNxeVjcdbYV31eL4HYwHwYDVR0j BBgwFoAUcx1dWakjj3no5FQLe/iDn4JKouYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ3MDI2YTktMGM5YS00ZDc5LWFkNjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlB OTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4MjRBQTJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MzFENUQ1OUE5MjM4Rjc5RThFNDU0MEI3QkY4ODM5RjgyNEFB MkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgz OUY4MjRBQTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQsapfy3zKFjUq0z5KILoxRTcPUUeBD2pNN PKkkVsBKge98PMfhyiFeX994tkvI/7k4vaycBFui7JSYqKA7fG6SfVZZ6D6TFmfl Z0/jbB/DyprThYQdQE8AIEdAr8t9nO/NF2HafTnLAiSZYs79eQQW8brjKFW/J8GH 1lCd53uiWCRFTi5oAhjMqOWyoYC7s8z5ew+wH+Q3znEbp7uOMn1l2oHVYpVbSCiW s0WlDNmLK8AfmY1R+5Bn1Yf+bXCbYEmfIViWfLhdXtPFrUFNpZGsVJLIJJJg8dUp xWLyeP/CzFDmsOgLkuClOqLFYI+zL1MpkiD3lGyILE12XmFk1K0= -----END CERTIFICATE-----Generated at Thu Sep 24 15:39:04 2026 by rpki-client