$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: nUobZ8byDR9wP6a/WpV6oi5DOlVQmyZstHyLcC5v4zg= Subject key identifier: 41:13:98:75:FF:40:CE:F8:31:06:0C:D0:BC:2B:74:5E:EA:3F:8B:6B Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 219D79CAC059A17973FD6DA92C7D87175D1EC6AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:32:23 +0000 Manifest this update: Fri 24 Jul 2026 02:27:23 +0000 Manifest next update: Sat 25 Jul 2026 06:19:23 +0000 Files and hashes: 1: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) 2: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: 71z9ZG9mwpTI3aQz/04I+0HbC98JcvQcDpv0hd/gKc4=) 3: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9d:79:ca:c0:59:a1:79:73:fd:6d:a9:2c:7d:87:17:5d:1e:c6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: Jul 24 02:27:23 2026 GMT Not After : Jul 25 06:19:23 2026 GMT Subject: CN=41139875FF40CEF831060CD0BC2B745EEA3F8B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:bb:9e:1c:29:4a:a2:c7:fe:30:6b:68:f1: bd:d2:bf:c4:75:6a:32:54:15:0f:17:84:71:0a:08: 24:e4:7e:de:15:26:cc:0b:6f:13:ad:cf:05:d7:4b: 05:5d:28:ee:2c:e6:c3:dc:f1:d6:65:02:10:2d:67: 95:61:fa:a8:84:21:8a:30:f9:78:b6:25:55:87:7a: fc:df:9e:46:b0:92:54:95:9d:8b:84:86:ef:a3:5a: 7c:99:c4:99:e3:de:48:9e:77:bf:82:4c:2d:a3:f2: 53:c2:46:a5:c1:bd:b2:00:b6:53:59:47:28:38:ce: 00:58:92:db:64:0d:de:8c:d1:2c:29:ae:fa:88:7e: 12:1b:31:67:cd:d7:63:be:40:10:d9:31:6b:93:11: 68:0d:02:56:ca:2d:bd:4a:1b:cc:66:cf:dd:dc:2a: e4:e0:b4:8e:7b:0b:83:e9:e7:c4:cd:ab:49:34:bd: 8e:1c:45:65:fa:09:f3:57:6f:0b:c9:d3:92:b5:3b: 69:25:5e:9b:fd:0e:81:e2:e4:93:a1:60:88:f3:66: 63:a6:22:57:ca:72:8b:7f:92:23:a6:10:40:d9:ef: b1:c2:5b:3a:e7:99:55:49:e0:ed:40:19:4b:34:b5: 7b:8a:bf:65:eb:d9:99:08:19:1d:b1:95:b1:5d:7e: 9d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:13:98:75:FF:40:CE:F8:31:06:0C:D0:BC:2B:74:5E:EA:3F:8B:6B X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4e:5c:65:7a:0a:49:d9:d5:9c:65:5d:3d:22:e7:2d:11:30: 88:eb:21:78:e1:0c:59:57:13:e0:0e:bb:12:b3:01:d3:36:48: 55:10:c4:4e:ca:3c:c8:d5:e9:a9:4b:2e:2f:a0:4d:32:e7:6c: f3:e1:57:a0:02:02:2f:9a:59:94:57:d6:95:10:58:6d:90:d1: 96:1a:ac:3e:13:59:56:77:29:cb:37:6a:4c:ab:fb:9c:c1:83: a9:71:13:ec:62:1c:b3:75:70:35:18:e3:3b:43:39:60:27:32: a6:af:4f:cf:f7:19:b5:63:2b:7d:6a:8c:f3:c8:9d:16:8c:66: e4:cb:7b:9d:05:56:17:ba:bc:1a:2d:81:e8:c6:40:a7:e7:79: 57:b9:69:de:5b:3f:23:b6:36:68:88:f8:62:50:17:85:40:cf: 18:8b:ff:54:38:47:f5:d1:b4:76:88:43:63:e3:a9:6d:21:39: eb:f9:e0:92:d6:c2:30:3d:c3:c2:89:83:42:c8:ac:2b:fc:e8: 1a:11:7a:28:df:66:c8:84:84:20:ac:78:56:42:e6:8b:18:6f: 01:2e:5d:13:95:44:ee:17:07:96:88:99:d5:b8:1b:bb:c3:39: 7c:82:55:46:e7:74:cd:db:46:13:6c:2a:5d:3b:6e:6f:ec:d3: 24:76:36:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZ15ysBZoXlz/W2pLH2HF10exq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjA3MjQwMjI3MjNaFw0yNjA3MjUwNjE5MjNaMDMxMTAvBgNV BAMTKDQxMTM5ODc1RkY0MENFRjgzMTA2MENEMEJDMkI3NDVFRUEzRjhCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XLueHClKosf+MGto8b3Sv8R1 ajJUFQ8XhHEKCCTkft4VJswLbxOtzwXXSwVdKO4s5sPc8dZlAhAtZ5Vh+qiEIYow +Xi2JVWHevzfnkawklSVnYuEhu+jWnyZxJnj3kied7+CTC2j8lPCRqXBvbIAtlNZ Ryg4zgBYkttkDd6M0SwprvqIfhIbMWfN12O+QBDZMWuTEWgNAlbKLb1KG8xmz93c KuTgtI57C4Pp58TNq0k0vY4cRWX6CfNXbwvJ05K1O2klXpv9DoHi5JOhYIjzZmOm IlfKcot/kiOmEEDZ77HCWzrnmVVJ4O1AGUs0tXuKv2Xr2ZkIGR2xlbFdfp2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQROYdf9AzvgxBgzQvCt0Xuo/i2swHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZOXGV6CknZ1ZxlXT0i5y0RMIjrIXjhDFlX E+AOuxKzAdM2SFUQxE7KPMjV6alLLi+gTTLnbPPhV6ACAi+aWZRX1pUQWG2Q0ZYa rD4TWVZ3Kcs3akyr+5zBg6lxE+xiHLN1cDUY4ztDOWAnMqavT8/3GbVjK31qjPPI nRaMZuTLe50FVhe6vBotgejGQKfneVe5ad5bPyO2NmiI+GJQF4VAzxiL/1Q4R/XR tHaIQ2PjqW0hOev54JLWwjA9w8KJg0LIrCv86BoReijfZsiEhCCseFZC5osYbwEu XROVRO4XB5aImdW4G7vDOXyCVUbndM3bRhNsKl07bm/s0yR2NiE= -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:44 2026 by rpki-client