$ rpki-client -vvvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft File: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft (raw, json) Hash identifier: yVEYKkPeUdkFL0ub6/KQEchJ1OCtxaHCOTGpXusB1mA= Subject key identifier: 89:97:66:BD:E9:46:B4:35:8E:8A:9E:42:74:E0:8C:A2:6D:AA:7E:ED Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 Certificate issuer: /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Certificate serial: 1CD94DF38937AE3B5A7BBB4446422EE4C2E28E69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 12:07:19 +0000 Manifest this update: Sun 01 Nov 2026 12:02:19 +0000 Manifest next update: Mon 02 Nov 2026 14:52:19 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=) 2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM=) 3: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl (hash: Ms9YmznwIVUvmucBN5Mem2WFBpHDRcGPeJ9aMwd6f0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d9:4d:f3:89:37:ae:3b:5a:7b:bb:44:46:42:2e:e4:c2:e2:8e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Validity Not Before: Nov 1 12:02:19 2026 GMT Not After : Nov 2 14:52:19 2026 GMT Subject: CN=899766BDE946B4358E8A9E4274E08CA26DAA7EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:d8:0a:de:dc:f7:4b:95:bb:97:e1:b5:60: 3f:65:c2:2b:b0:05:7d:f1:6f:a0:ea:d5:48:f0:01: bd:4b:c6:cd:83:0b:29:5e:81:bd:75:5c:0e:e8:54: 2b:a1:ba:f3:b4:15:53:00:34:98:a8:29:0e:d2:d5: 56:ad:c6:4b:37:30:f5:ce:f2:ad:95:c7:68:c8:c9: 31:6b:1d:b1:df:7e:b5:03:66:88:fa:66:63:8b:d2: 76:d5:31:15:16:2d:01:bd:12:bc:7e:0c:b7:29:f3: df:36:51:c0:13:37:5f:ee:95:8d:64:2b:b3:25:46: d8:26:b4:57:37:a2:ae:36:f5:a4:14:0c:80:5f:14: 02:43:c5:4b:02:34:f1:8a:42:5d:e3:d9:1b:43:c8: 96:e0:d8:c8:ec:16:df:d8:7b:89:6c:3a:62:0f:29: 42:2f:0d:47:6a:5e:0a:00:28:cf:3b:3a:20:58:26: 3d:7b:76:02:c5:81:68:4d:2f:75:66:8d:0d:63:c4: 73:76:ea:4d:7c:2c:44:b9:f4:e4:fb:a4:2b:94:2b: 6a:f2:c8:34:11:d1:f0:ef:71:53:3f:fc:ca:cb:9e: d7:7c:57:47:b9:f3:0e:1e:35:61:0d:eb:33:23:7f: 75:1d:c9:a4:23:72:3b:9e:17:94:ec:eb:4c:39:4e: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:97:66:BD:E9:46:B4:35:8E:8A:9E:42:74:E0:8C:A2:6D:AA:7E:ED X509v3 Authority Key Identifier: keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c3:cf:4e:cf:71:35:d7:4b:53:9c:e4:0e:12:11:2d:88:45: 05:79:5a:b4:8e:b0:06:d1:49:db:22:46:95:3d:1f:41:ba:da: bb:e8:f8:d0:b6:7b:23:37:e6:fd:8f:96:cc:19:b7:ed:30:61: 78:a0:8a:2c:88:8d:50:e8:51:8b:98:e8:1c:41:51:cb:0c:cb: e5:28:3d:47:ac:e2:29:2d:93:71:50:5a:79:7c:dd:bc:35:96: 8f:da:7c:d2:d2:0d:0d:43:e2:2c:56:fa:20:67:06:5b:8d:68: 5e:47:85:79:1c:5f:17:39:4a:e7:f0:1a:cb:d2:58:91:0e:11: ea:63:84:1a:71:5e:ff:7a:9a:ff:2c:e8:46:0b:e7:03:77:b6: 1c:30:64:13:a5:cb:98:2d:3f:2f:e4:8f:1b:e4:06:59:81:06: f1:d1:93:8b:fa:a5:03:b4:cb:66:9c:d6:b7:b3:79:9f:16:1c: 14:d9:75:2f:2d:52:20:0f:08:bc:5f:39:2b:ac:ea:af:9f:47: 83:e8:2c:72:05:00:48:78:33:25:97:f4:4e:4d:5c:2c:18:50: e4:69:41:0f:de:a8:04:a9:11:2a:bf:30:ba:45:02:8a:08:50: 98:a0:8d:3c:f1:67:d0:ae:b7:d5:35:23:f1:ba:5e:1c:5d:eb: e8:5d:37:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNlN84k3rjtae7tERkIu5MLijmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZF QUI5OTQzMDAeFw0yNjExMDExMjAyMTlaFw0yNjExMDIxNDUyMTlaMDMxMTAvBgNV BAMTKDg5OTc2NkJERTk0NkI0MzU4RThBOUU0Mjc0RTA4Q0EyNkRBQTdFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBdgK3tz3S5W7l+G1YD9lwiuw BX3xb6Dq1UjwAb1Lxs2DCylegb11XA7oVCuhuvO0FVMANJioKQ7S1Vatxks3MPXO 8q2Vx2jIyTFrHbHffrUDZoj6ZmOL0nbVMRUWLQG9Erx+DLcp8982UcATN1/ulY1k K7MlRtgmtFc3oq429aQUDIBfFAJDxUsCNPGKQl3j2RtDyJbg2MjsFt/Ye4lsOmIP KUIvDUdqXgoAKM87OiBYJj17dgLFgWhNL3VmjQ1jxHN26k18LES59OT7pCuUK2ry yDQR0fDvcVM//MrLntd8V0e58w4eNWEN6zMjf3UdyaQjcjueF5Ts60w5Tq3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiZdmvelGtDWOip5CdOCMom2qfu0wHwYDVR0j BBgwFoAU0xSXvLFHLFWS5stq7Ys8v+q5lDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5MTY2YTEtMThjZC00NGQzLWE2ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNC MTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZFQUI5OTQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzE0OTdCQ0IxNDcyQzU1OTJFNkNCNkFFRDhCM0NCRkVBQjk5 NDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjND QkZFQUI5OTQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfDz07PcTXXS1Oc5A4SES2IRQV5WrSOsAbR SdsiRpU9H0G62rvo+NC2eyM35v2PlswZt+0wYXigiiyIjVDoUYuY6BxBUcsMy+Uo PUes4iktk3FQWnl83bw1lo/afNLSDQ1D4ixW+iBnBluNaF5HhXkcXxc5SufwGsvS WJEOEepjhBpxXv96mv8s6EYL5wN3thwwZBOly5gtPy/kjxvkBlmBBvHRk4v6pQO0 y2ac1rezeZ8WHBTZdS8tUiAPCLxfOSus6q+fR4PoLHIFAEh4MyWX9E5NXCwYUORp QQ/eqASpESq/MLpFAooIUJigjTzxZ9Cut9U1I/G6Xhxd6+hdN1g= -----END CERTIFICATE-----Generated at Mon Nov 2 00:46:43 2026 by rpki-client