$ rpki-client -vvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft File: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft (raw, json) Hash identifier: LQ3WkzTP0k6YSgd4B53mBD44WjZLlGTtnsykugIJBFo= Subject key identifier: 84:C0:26:5D:70:26:35:8C:27:46:97:77:F5:FD:52:A5:35:CC:6C:22 Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 Certificate issuer: /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Certificate serial: 21AF6B11741EF0B9CFC7BA950E21AA3BD1F80BE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:55:50 +0000 Manifest this update: Wed 03 Jun 2026 00:50:50 +0000 Manifest next update: Thu 04 Jun 2026 04:34:50 +0000 Files and hashes: 1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM=) 2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=) 3: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl (hash: nBSPvJ1ypl6F2tD+edCUyYrGhRmomfxUh73ac2c3yKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:af:6b:11:74:1e:f0:b9:cf:c7:ba:95:0e:21:aa:3b:d1:f8:0b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Validity Not Before: Jun 3 00:50:50 2026 GMT Not After : Jun 4 04:34:50 2026 GMT Subject: CN=84C0265D7026358C27469777F5FD52A535CC6C22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:dd:c9:3a:42:d3:be:2e:91:eb:5d:77:b3: 86:17:c5:6e:f2:30:98:d8:c9:15:cf:d2:4b:11:b9: 88:50:ce:7d:dc:fd:9e:4a:dd:29:ac:4d:21:0b:d5: c3:18:e2:72:9d:da:70:c5:66:50:90:6d:db:67:92: 37:16:68:7b:cc:f0:d5:ce:43:8d:cb:92:86:1b:47: 73:17:c4:3a:5a:41:3a:73:fc:bd:d1:1a:e4:06:61: 41:b5:66:8b:1c:cb:7a:e2:eb:2b:7a:b6:9c:36:a6: 1f:c2:bf:f9:fd:cf:13:c8:3d:a1:6a:25:d4:05:28: aa:a7:09:c9:8a:f3:93:5e:d1:c6:ca:1c:07:0f:28: 1f:75:a2:4a:05:29:5f:a8:76:b8:66:17:26:68:dd: 8e:7f:55:de:eb:91:af:da:07:05:ca:87:04:fd:7c: 57:a5:bb:f6:59:ca:8a:77:48:14:15:6e:d6:e6:47: f8:6d:07:be:bd:f3:5f:f1:11:06:86:44:35:2e:c5: 9e:57:bf:54:0b:2a:4a:a5:63:1a:d8:8f:26:90:b4: 9f:e0:15:fa:d0:b5:1b:62:78:36:e5:70:5a:c3:b8: 01:0a:fe:5e:de:87:f5:85:f9:18:2d:11:c3:59:42: 3d:17:1e:05:f6:bf:42:f7:50:45:86:62:b7:71:eb: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:26:5D:70:26:35:8C:27:46:97:77:F5:FD:52:A5:35:CC:6C:22 X509v3 Authority Key Identifier: keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e9:ef:44:16:1f:ec:08:cd:7d:fd:6c:70:9d:a3:cf:38:a3: 29:02:bb:a6:4b:9f:ec:95:87:ca:42:31:57:24:26:b6:f4:c3: 29:2f:88:e8:ba:54:eb:79:53:5c:f1:d7:0a:07:81:f3:84:c1: bb:8e:9c:b8:a5:02:46:0b:6e:ee:7b:94:16:b3:fe:4f:51:b4: 3d:6a:be:e1:45:03:79:7c:1c:b0:9f:66:d4:24:ae:9c:6c:ab: 4b:6e:a1:44:3f:e5:09:73:8e:59:bc:e6:f0:fc:a1:59:cb:3f: 23:c6:2c:ef:dc:22:9d:dd:a2:d4:05:da:7e:8e:19:2a:29:be: 8a:72:09:aa:bc:b5:4a:fc:3f:3c:b3:69:48:bb:ff:3a:4e:35: 12:d7:2d:13:2f:74:c4:da:2b:d6:6f:7a:5e:c0:2b:37:eb:99: 42:68:82:64:c2:d1:97:0a:ed:29:4e:b7:f1:44:e2:a2:a0:db: fd:f6:2d:6c:e9:9e:04:a1:24:5d:b7:08:53:eb:c6:55:2c:a3: 54:da:af:cf:d2:f0:5c:74:07:04:8b:41:f1:2a:d1:35:55:3f: 54:0d:95:01:90:6b:e2:ab:d4:9e:6c:53:7b:6d:8e:d8:ce:83: ee:90:3c:f7:38:84:51:65:0d:87:6f:0a:f9:bc:12:1d:cc:87: 2b:8f:55:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIa9rEXQe8LnPx7qVDiGqO9H4C+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZF QUI5OTQzMDAeFw0yNjA2MDMwMDUwNTBaFw0yNjA2MDQwNDM0NTBaMDMxMTAvBgNV BAMTKDg0QzAyNjVENzAyNjM1OEMyNzQ2OTc3N0Y1RkQ1MkE1MzVDQzZDMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYa93JOkLTvi6R6113s4YXxW7y MJjYyRXP0ksRuYhQzn3c/Z5K3SmsTSEL1cMY4nKd2nDFZlCQbdtnkjcWaHvM8NXO Q43LkoYbR3MXxDpaQTpz/L3RGuQGYUG1Zoscy3ri6yt6tpw2ph/Cv/n9zxPIPaFq JdQFKKqnCcmK85Ne0cbKHAcPKB91okoFKV+odrhmFyZo3Y5/Vd7rka/aBwXKhwT9 fFelu/ZZyop3SBQVbtbmR/htB76981/xEQaGRDUuxZ5Xv1QLKkqlYxrYjyaQtJ/g FfrQtRtieDblcFrDuAEK/l7eh/WF+RgtEcNZQj0XHgX2v0L3UEWGYrdx65RrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhMAmXXAmNYwnRpd39f1SpTXMbCIwHwYDVR0j BBgwFoAU0xSXvLFHLFWS5stq7Ys8v+q5lDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5MTY2YTEtMThjZC00NGQzLWE2ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNC MTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZFQUI5OTQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzE0OTdCQ0IxNDcyQzU1OTJFNkNCNkFFRDhCM0NCRkVBQjk5 NDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjND QkZFQUI5OTQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArp70QWH+wIzX39bHCdo884oykCu6ZLn+yV h8pCMVckJrb0wykviOi6VOt5U1zx1woHgfOEwbuOnLilAkYLbu57lBaz/k9RtD1q vuFFA3l8HLCfZtQkrpxsq0tuoUQ/5Qlzjlm85vD8oVnLPyPGLO/cIp3dotQF2n6O GSopvopyCaq8tUr8PzyzaUi7/zpONRLXLRMvdMTaK9Zvel7AKzfrmUJogmTC0ZcK 7SlOt/FE4qKg2/32LWzpngShJF23CFPrxlUso1Tar8/S8Fx0BwSLQfEq0TVVP1QN lQGQa+Kr1J5sU3ttjtjOg+6QPPc4hFFlDYdvCvm8Eh3MhyuPVeQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:17 2026 by rpki-client