$ rpki-client -vvf rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft File: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft (raw, json) Hash identifier: yvik/zCebfH8Y/0t5FUaqns9ccCNfDkNUR2hqFj8gvk= Subject key identifier: 59:6B:BB:CA:5A:71:23:34:25:A2:5C:5E:9C:42:D0:9D:B8:1A:92:FD Authority key identifier: B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B Certificate issuer: /CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B Certificate serial: 126AFBE318E66C5359A11F45713540AB310E2257 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:44:01 +0000 Manifest this update: Tue 02 Jun 2026 19:39:01 +0000 Manifest next update: Wed 03 Jun 2026 22:11:01 +0000 Files and hashes: 1: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (hash: 5fm1VV66aIhuu/oPeZZw27kiviKlDXlW5aL6SC7t08E=) 2: B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl (hash: 3WaR5x9SBb1Fu/5A2xksl0+CYGCkiBDvg2Ixcb8M+nE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6a:fb:e3:18:e6:6c:53:59:a1:1f:45:71:35:40:ab:31:0e:22:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B31DF635793A74C7DF5A8E3E59FE1D8F3907428B Validity Not Before: Jun 2 19:39:01 2026 GMT Not After : Jun 3 22:11:01 2026 GMT Subject: CN=596BBBCA5A71233425A25C5E9C42D09DB81A92FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:eb:87:96:cf:6e:c6:e2:e6:12:8c:7b:69: 35:4f:ac:8c:84:71:80:28:ce:c0:15:d6:43:e0:c2: 01:fc:fb:a1:53:e0:9f:a3:78:82:23:17:78:5c:0a: fb:58:dd:29:a3:23:10:f1:90:9e:c7:22:9a:77:5e: b9:94:47:9c:7b:b9:63:4b:ea:fb:f4:73:b7:ea:a3: da:b6:11:59:5e:73:24:24:b9:2b:43:9a:2d:ce:fb: 13:68:30:47:3d:3c:54:6e:a0:78:5e:74:9e:ba:5b: 24:88:a6:79:c1:95:50:e0:27:f3:ba:c8:54:dc:00: 87:d2:de:ec:75:b8:74:72:9d:a4:f9:48:22:ac:e6: 6c:55:dc:77:99:b1:2c:d2:8b:69:3e:8c:35:38:78: cd:08:23:77:a1:e5:97:74:df:48:48:1b:85:4c:a1: fd:d1:1f:fa:ec:dd:01:95:5d:ed:08:65:be:ae:79: f3:25:da:f2:8c:8d:aa:f4:69:47:fc:13:27:fd:a8: 1a:ed:e3:fd:50:3a:ab:aa:9c:20:be:eb:37:e0:b2: 3b:ac:f5:e5:96:36:7b:c6:84:82:83:39:e1:cc:62: bb:e4:1b:f1:23:1d:59:1f:90:81:f7:85:70:06:59: 0e:ff:80:07:22:bb:2c:28:06:e7:93:0a:08:1f:41: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6B:BB:CA:5A:71:23:34:25:A2:5C:5E:9C:42:D0:9D:B8:1A:92:FD X509v3 Authority Key Identifier: keyid:B3:1D:F6:35:79:3A:74:C7:DF:5A:8E:3E:59:FE:1D:8F:39:07:42:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/B31DF635793A74C7DF5A8E3E59FE1D8F3907428B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ea:7a:b7:2d:91:8a:64:83:41:fa:38:32:b6:84:22:83:a2: ff:62:88:f3:22:e0:5f:4f:e5:2d:c5:a5:6c:17:d9:92:31:e4: bd:b2:53:5c:bb:44:ee:da:41:f6:9e:9e:3b:fc:0b:bf:8f:27: 5c:c1:03:49:b9:29:87:7f:0d:35:df:32:b5:fc:e6:bc:b8:96: 2d:8b:cb:be:4e:bd:69:4b:6b:20:71:a4:f2:63:d8:75:cf:09: de:c1:66:c2:ca:0b:57:7f:c6:f5:f1:9c:b8:de:35:c4:71:e3: 3a:25:5b:2e:a5:c6:46:71:3a:7e:47:05:20:42:0c:5c:9e:e3: c3:20:40:50:84:7a:fe:4f:7a:68:77:59:59:e3:a4:47:69:d6: dd:6b:1d:05:49:34:1b:1b:6e:d2:57:df:e6:66:e0:9e:56:3c: 3f:46:97:91:92:f2:b4:24:c5:5b:6b:ad:fe:d2:32:65:0c:44: 1c:3e:02:53:54:b4:8b:2e:62:e7:0b:03:fe:3f:80:a4:49:5c: 82:1b:76:3c:22:3a:3a:ce:f0:1f:a2:8b:50:9c:66:b7:0c:4e: 9a:2e:f2:b2:57:b0:5a:c0:f4:f4:82:58:c3:b5:23:c5:80:fc: de:a6:34:17:41:cd:ac:40:a8:a0:47:ce:63:78:8b:3a:62:e4: 54:82:8e:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmr74xjmbFNZoR9FcTVAqzEOIlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxREY2MzU3OTNBNzRDN0RGNUE4RTNFNTlGRTFEOEYz OTA3NDI4QjAeFw0yNjA2MDIxOTM5MDFaFw0yNjA2MDMyMjExMDFaMDMxMTAvBgNV BAMTKDU5NkJCQkNBNUE3MTIzMzQyNUEyNUM1RTlDNDJEMDlEQjgxQTkyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UOuHls9uxuLmEox7aTVPrIyE cYAozsAV1kPgwgH8+6FT4J+jeIIjF3hcCvtY3SmjIxDxkJ7HIpp3XrmUR5x7uWNL 6vv0c7fqo9q2EVlecyQkuStDmi3O+xNoMEc9PFRuoHhedJ66WySIpnnBlVDgJ/O6 yFTcAIfS3ux1uHRynaT5SCKs5mxV3HeZsSzSi2k+jDU4eM0II3eh5Zd030hIG4VM of3RH/rs3QGVXe0IZb6uefMl2vKMjar0aUf8Eyf9qBrt4/1QOquqnCC+6zfgsjus 9eWWNnvGhIKDOeHMYrvkG/EjHVkfkIH3hXAGWQ7/gAciuywoBueTCggfQTTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWWu7ylpxIzQlolxenELQnbgakv0wHwYDVR0j BBgwFoAUsx32NXk6dMffWo4+Wf4djzkHQoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIyMWFkNjctZDM1Yy00NTU5LTlhNzMtN2M3NGY1MGRjZmZhLzAvQjMxREY2MzU3 OTNBNzRDN0RGNUE4RTNFNTlGRTFEOEYzOTA3NDI4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzFERjYzNTc5M0E3NEM3REY1QThFM0U1OUZFMUQ4RjM5MDc0 MjhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIyMWFkNjctZDM1Yy00NTU5LTlh NzMtN2M3NGY1MGRjZmZhLzAvQjMxREY2MzU3OTNBNzRDN0RGNUE4RTNFNTlGRTFE OEYzOTA3NDI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzqerctkYpkg0H6ODK2hCKDov9iiPMi4F9P 5S3FpWwX2ZIx5L2yU1y7RO7aQfaenjv8C7+PJ1zBA0m5KYd/DTXfMrX85ry4li2L y75OvWlLayBxpPJj2HXPCd7BZsLKC1d/xvXxnLjeNcRx4zolWy6lxkZxOn5HBSBC DFye48MgQFCEev5Pemh3WVnjpEdp1t1rHQVJNBsbbtJX3+Zm4J5WPD9Gl5GS8rQk xVtrrf7SMmUMRBw+AlNUtIsuYucLA/4/gKRJXIIbdjwiOjrO8B+ii1CcZrcMTpou 8rJXsFrA9PSCWMO1I8WA/N6mNBdBzaxAqKBHzmN4izpi5FSCjuo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:38 2026 by rpki-client