$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json) Hash identifier: 2nT/MoifZ7fvEsZkFrQN6MrCrhqZuTgEpAka/U2GH+M= Subject key identifier: 54:E0:A8:E2:1A:D9:05:B7:11:99:37:09:53:8C:07:57:6E:B0:FE:06 Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11 Certificate serial: 664F7B3BE73139BAAEA5926CD9714AD21E3FAC0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 19:24:30 +0000 Manifest this update: Fri 25 Sep 2026 19:19:30 +0000 Manifest next update: Sat 26 Sep 2026 20:50:30 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=) 2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=) 3: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: 05IdytPKUtiG7AT4IY12h4rzb3DnnXtunU/jDeRsgF4=) 4: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4f:7b:3b:e7:31:39:ba:ae:a5:92:6c:d9:71:4a:d2:1e:3f:ac:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11 Validity Not Before: Sep 25 19:19:30 2026 GMT Not After : Sep 26 20:50:30 2026 GMT Subject: CN=54E0A8E21AD905B711993709538C07576EB0FE06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:f0:bb:24:a2:fe:a9:30:c6:ac:cf:c1:4d: 3a:54:2b:1c:f1:ef:a2:ef:7a:ef:25:80:e6:00:88: 06:0f:c4:dd:d3:f6:c4:9d:95:c9:ad:f5:62:9c:98: cb:f0:ac:63:dc:f0:ac:b1:0b:b5:76:97:8a:7a:cc: 02:ae:18:e4:df:75:93:e7:09:59:21:82:8a:a1:ac: 91:57:80:c0:b7:e6:2a:db:e0:12:bb:23:8f:8a:62: 2a:63:f4:17:57:58:71:81:ca:5e:7a:75:e5:48:5a: 76:b0:fa:c9:fc:0b:fe:b5:44:7e:b9:2e:27:c5:d5: 56:d6:31:6a:bd:84:83:96:dd:0f:74:3b:7c:72:6c: 23:a6:9e:5d:ac:71:10:2d:ce:d1:f9:d5:0d:49:10: a4:29:e7:f5:10:29:c7:7d:73:f1:28:35:2e:0c:f9: 1e:cc:49:73:6d:16:b3:8c:0a:d3:8b:a7:43:93:8c: 8c:8d:dc:72:a6:da:64:68:82:ba:8d:dc:59:90:43: 8d:5b:00:38:75:d2:71:64:80:b1:5e:69:e4:ed:e2: 45:6c:0d:56:32:9f:cb:73:11:ca:ae:1c:ca:e6:2d: 1e:33:3c:33:63:35:c8:c4:34:55:dc:b4:91:ac:3c: 8b:d1:24:50:2a:c6:fb:ca:5b:ee:62:86:6e:07:ea: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E0:A8:E2:1A:D9:05:B7:11:99:37:09:53:8C:07:57:6E:B0:FE:06 X509v3 Authority Key Identifier: keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5f:a2:88:1d:dc:89:56:40:83:82:67:69:36:be:b0:d3:de: 50:e7:b0:e6:cb:7d:ca:b9:c2:36:73:df:9c:7a:84:dd:b3:ee: ff:fa:03:c6:5b:5a:53:20:23:77:13:c2:3a:82:a3:79:b2:77: b3:26:63:b7:9b:9d:bd:a4:97:6e:25:59:a3:09:da:dd:8c:f1: 7b:5f:05:3f:20:ee:11:e9:b7:5a:95:71:de:9a:62:a5:e5:f5: 89:66:a3:1f:68:c4:6a:ca:17:31:d7:ab:a8:88:3a:e9:0a:c3: ce:fd:ec:23:6d:86:c4:57:16:df:28:a2:4c:b9:9d:af:33:2b: ce:3b:42:1e:cc:4a:8b:66:2b:36:11:85:e0:9d:71:f8:07:f3: 2b:67:5b:5d:98:a2:c3:15:41:0a:c2:aa:b5:cc:0e:fe:f2:3c: da:ef:dd:ef:ba:0d:42:52:2e:6e:91:6d:9a:95:7b:ee:7e:c3: 45:c6:b2:36:b3:80:03:e2:24:28:9e:ed:19:68:c0:aa:6d:2c: 29:0e:1f:ec:bd:ed:ae:ce:9c:e8:af:ff:4c:39:bf:9c:88:02: b1:1a:10:68:3d:46:e1:b0:3b:81:a9:0a:09:42:87:61:55:c5: 90:e1:a4:94:42:9e:ea:1f:58:5f:bc:49:8c:ba:68:34:ad:c4: c4:f1:34:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZk97O+cxObqupZJs2XFK0h4/rAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4 REU3NUExMTAeFw0yNjA5MjUxOTE5MzBaFw0yNjA5MjYyMDUwMzBaMDMxMTAvBgNV BAMTKDU0RTBBOEUyMUFEOTA1QjcxMTk5MzcwOTUzOEMwNzU3NkVCMEZFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUvC7JKL+qTDGrM/BTTpUKxzx 76Lveu8lgOYAiAYPxN3T9sSdlcmt9WKcmMvwrGPc8KyxC7V2l4p6zAKuGOTfdZPn CVkhgoqhrJFXgMC35irb4BK7I4+KYipj9BdXWHGByl56deVIWnaw+sn8C/61RH65 LifF1VbWMWq9hIOW3Q90O3xybCOmnl2scRAtztH51Q1JEKQp5/UQKcd9c/EoNS4M +R7MSXNtFrOMCtOLp0OTjIyN3HKm2mRogrqN3FmQQ41bADh10nFkgLFeaeTt4kVs DVYyn8tzEcquHMrmLR4zPDNjNcjENFXctJGsPIvRJFAqxvvKW+5ihm4H6v1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOCo4hrZBbcRmTcJU4wHV26w/gYwHwYDVR0j BBgwFoAUExssQYOnkmAmCL24ZOKSuo3nWhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJmZjFiM2YtMTE5MC00MTE5LWJiYzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4 M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4REU3NUExMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzFCMkM0MTgzQTc5MjYwMjYwOEJEQjg2NEUyOTJCQThERTc1 QTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjky QkE4REU3NUExMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZfoogd3IlWQIOCZ2k2vrDT3lDnsObLfcq5 wjZz35x6hN2z7v/6A8ZbWlMgI3cTwjqCo3myd7MmY7ebnb2kl24lWaMJ2t2M8Xtf BT8g7hHpt1qVcd6aYqXl9Ylmox9oxGrKFzHXq6iIOukKw8797CNthsRXFt8ooky5 na8zK847Qh7MSotmKzYRheCdcfgH8ytnW12YosMVQQrCqrXMDv7yPNrv3e+6DUJS Lm6RbZqVe+5+w0XGsjazgAPiJCie7RlowKptLCkOH+y97a7OnOiv/0w5v5yIArEa EGg9RuGwO4GpCglCh2FVxZDhpJRCnuofWF+8SYy6aDStxMTxNKM= -----END CERTIFICATE-----Generated at Fri Sep 25 22:17:09 2026 by rpki-client