$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: ADQgM33UmMVcPq6oOBh4LMsFFlqy1AoC4uWAsJOmbtE= Subject key identifier: 34:33:69:EF:FD:56:0E:CF:82:34:CB:A3:D9:D2:73:B4:4A:F1:91:34 Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 7D915CA836FD74EA37FFF6854CB0FF3CBF9D8932 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:29:18 +0000 Manifest this update: Tue 12 May 2026 04:24:18 +0000 Manifest next update: Wed 13 May 2026 05:46:18 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) 3: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: tPo+OL2LZgdwCUPAp4oT9ybj1XKCsHk3YrwzERdlUOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:91:5c:a8:36:fd:74:ea:37:ff:f6:85:4c:b0:ff:3c:bf:9d:89:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: May 12 04:24:18 2026 GMT Not After : May 13 05:46:18 2026 GMT Subject: CN=343369EFFD560ECF8234CBA3D9D273B44AF19134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:e6:71:59:fd:bc:e1:56:81:e0:6d:4e:c4: 65:27:77:b6:16:ab:5e:49:74:3b:e2:ec:eb:b6:2f: 8a:3a:c4:3a:dc:cf:25:3b:bb:0f:b8:a9:a3:f2:df: 5c:cb:46:07:0f:94:c7:e0:b3:67:a7:00:87:3d:08: 8b:f3:0e:5b:95:e9:1e:51:d1:ab:38:89:2b:7e:e3: 64:f3:7f:31:43:96:4b:58:d4:74:54:cd:d9:97:d8: 01:27:c6:f8:d7:6b:bc:61:3b:2e:2b:9f:37:d7:9d: a6:55:d5:b2:60:12:5f:45:48:42:0d:4d:e7:ee:9a: a3:3e:3a:cc:b4:6e:fc:a7:2f:34:1e:e0:9d:b6:02: 8a:58:c4:41:5d:7a:f6:56:f9:18:24:10:1a:42:21: e6:9b:ea:ee:13:36:ef:a5:39:8e:52:61:aa:90:22: d7:af:96:df:71:ad:ee:54:96:f1:ee:84:41:04:49: ab:bd:4d:af:ea:c7:f1:ca:ac:27:f3:69:97:66:c6: fb:78:ad:3e:a6:5b:b6:f1:03:a0:76:78:aa:ba:33: 13:bd:9d:a0:af:d8:7b:fd:8a:c9:f6:38:02:0c:4c: ce:6b:76:fa:cd:2b:15:c9:16:aa:76:91:c3:94:1d: 26:92:a4:47:e5:85:a4:fd:56:66:14:37:8b:96:48: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:69:EF:FD:56:0E:CF:82:34:CB:A3:D9:D2:73:B4:4A:F1:91:34 X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6f:c3:f7:17:7c:3a:d9:4e:2a:64:d0:15:77:48:2c:66:1e: 4d:6b:6e:cc:a6:7e:c9:a5:d9:d9:3a:6e:71:69:6d:35:6c:f2: 61:5c:63:e2:38:d4:5e:ce:ff:77:24:ef:88:ac:be:a5:20:ae: 68:32:8c:9e:19:45:e6:25:8a:04:f4:57:c2:82:3d:c6:15:30: f9:7e:10:17:5f:cc:73:4f:a0:14:63:43:d1:8a:9f:df:97:54: e1:56:a8:4e:c0:c9:37:0e:21:54:fd:4e:bf:e6:18:b0:85:d3: c3:a5:38:20:96:60:44:bf:be:4d:2f:43:ad:38:36:5b:89:c9: 96:6d:d7:74:a8:c8:27:77:93:06:1c:45:d1:8a:23:09:cc:9f: d7:90:f5:39:05:e6:27:e2:5b:06:a2:1c:48:dd:cf:fa:5c:12: 4f:f3:d3:99:1e:52:b6:f1:a9:c8:c4:14:c5:a6:79:8f:de:13: c0:75:16:27:6d:ed:07:b6:3d:2a:ff:70:3e:f0:1a:61:51:da: b7:c2:9c:ac:21:2f:80:67:e7:fd:ad:69:82:25:48:c4:00:80: 64:0d:9c:c8:99:a9:9f:e8:3d:3c:dc:80:c3:5d:4d:04:2b:5b: 9a:a5:1b:cb:48:80:b6:cd:30:26:dc:97:6b:1c:59:56:36:86: db:b2:33:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZFcqDb9dOo3//aFTLD/PL+diTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjA1MTIwNDI0MThaFw0yNjA1MTMwNTQ2MThaMDMxMTAvBgNV BAMTKDM0MzM2OUVGRkQ1NjBFQ0Y4MjM0Q0JBM0Q5RDI3M0I0NEFGMTkxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wOZxWf284VaB4G1OxGUnd7YW q15JdDvi7Ou2L4o6xDrczyU7uw+4qaPy31zLRgcPlMfgs2enAIc9CIvzDluV6R5R 0as4iSt+42TzfzFDlktY1HRUzdmX2AEnxvjXa7xhOy4rnzfXnaZV1bJgEl9FSEIN TefumqM+Osy0bvynLzQe4J22AopYxEFdevZW+RgkEBpCIeab6u4TNu+lOY5SYaqQ Itevlt9xre5UlvHuhEEESau9Ta/qx/HKrCfzaZdmxvt4rT6mW7bxA6B2eKq6MxO9 naCv2Hv9isn2OAIMTM5rdvrNKxXJFqp2kcOUHSaSpEflhaT9VmYUN4uWSI9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNDNp7/1WDs+CNMuj2dJztErxkTQwHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFvw/cXfDrZTipk0BV3SCxmHk1rbsymfsml 2dk6bnFpbTVs8mFcY+I41F7O/3ck74isvqUgrmgyjJ4ZReYligT0V8KCPcYVMPl+ EBdfzHNPoBRjQ9GKn9+XVOFWqE7AyTcOIVT9Tr/mGLCF08OlOCCWYES/vk0vQ604 NluJyZZt13SoyCd3kwYcRdGKIwnMn9eQ9TkF5ifiWwaiHEjdz/pcEk/z05keUrbx qcjEFMWmeY/eE8B1Fidt7Qe2PSr/cD7wGmFR2rfCnKwhL4Bn5/2taYIlSMQAgGQN nMiZqZ/oPTzcgMNdTQQrW5qlG8tIgLbNMCbcl2scWVY2htuyM/I= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client