$ rpki-client -vvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft File: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft (raw, json) Hash identifier: LXyt2lK2A8Vi+SBjaSwQC9RxGH/Zm2XA6ZWZr6y77FE= Subject key identifier: 02:8F:F9:07:9C:26:7E:66:35:94:5A:51:DE:41:7F:4A:AB:91:38:9F Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 Certificate issuer: /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Certificate serial: 3A22B4D9D09400B7EB063C7D69F739AAECE22EDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:10:07 +0000 Manifest this update: Mon 20 Jul 2026 19:05:07 +0000 Manifest next update: Tue 21 Jul 2026 21:23:07 +0000 Files and hashes: 1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM=) 2: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl (hash: CbkXXfIjnE6hmwnBs+59Q+/mxwmKrLVj3X4TezJhIBs=) 3: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:22:b4:d9:d0:94:00:b7:eb:06:3c:7d:69:f7:39:aa:ec:e2:2e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Validity Not Before: Jul 20 19:05:07 2026 GMT Not After : Jul 21 21:23:07 2026 GMT Subject: CN=028FF9079C267E6635945A51DE417F4AAB91389F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:ff:fd:a8:10:4c:4b:46:55:eb:9e:e1:93: 45:d6:91:61:9c:1d:22:46:1d:e2:fd:d8:40:2a:2c: a4:b9:57:43:78:f7:a3:3a:c7:09:fe:80:d9:d8:fb: 6e:46:b1:15:07:3a:9b:c7:7a:a0:a0:96:50:ff:78: 29:6f:9f:a6:db:97:b3:d9:a0:ac:69:4d:17:89:9a: 3d:45:c2:fe:ba:ba:bd:9b:a3:4b:bd:2c:56:83:d5: 6d:5d:f1:d6:43:0f:28:3e:40:7f:7c:33:fd:27:fc: a5:06:9d:88:8d:07:0f:56:f8:0c:49:e5:f6:78:bc: 02:95:17:7a:f4:08:83:3c:b2:ea:b1:65:9d:49:f3: 1f:f7:44:7d:4e:0c:d8:82:61:29:61:f0:c8:11:a4: 2a:07:3d:89:69:f1:35:02:99:7b:09:3e:e0:ff:4d: 34:de:bd:71:08:e4:51:a7:a7:76:08:58:89:33:47: b0:77:de:83:43:fa:b9:17:08:03:ec:35:53:29:60: da:61:2c:fb:5e:86:05:b9:dd:04:b7:f6:37:3c:8e: e5:2c:3c:30:ba:50:bb:1f:25:f0:94:c3:5f:74:53: 42:f0:87:8d:98:3f:86:e9:ac:f2:b3:7a:a8:84:4f: a7:0a:91:cd:7b:36:54:b1:10:c3:6d:e1:9f:8d:53: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8F:F9:07:9C:26:7E:66:35:94:5A:51:DE:41:7F:4A:AB:91:38:9F X509v3 Authority Key Identifier: keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:85:70:0e:0c:94:be:22:cb:a4:ce:ad:c8:14:d4:27:bf:4d: b9:3f:7e:cd:f1:bd:f3:79:d8:5c:1e:61:e1:d7:7a:c8:51:09: 6d:bc:95:ef:e6:7d:f9:60:8e:d0:83:f6:99:b2:1c:53:16:b8: 33:c3:5a:4f:fc:d7:05:a5:f0:c2:1f:fe:91:6e:00:96:80:60: a0:3c:d8:06:04:05:46:09:eb:a9:f8:4e:f4:ad:0b:7d:97:29: 82:b1:53:d7:dc:4e:58:24:6e:b4:df:13:df:d3:2c:e8:50:d8: 85:5b:54:4f:8b:5a:3a:56:2b:c4:af:f7:7c:a7:5d:ad:4f:b1: f2:b5:62:1b:24:5f:77:bf:53:56:d8:4c:2c:06:b5:ca:76:88: b0:9e:38:29:d4:e9:6a:c6:94:58:62:1e:a1:7c:e8:ea:0e:da: 98:ba:34:64:d4:33:e4:5d:ad:70:71:f3:ef:fc:e6:8a:4d:75: 44:16:1e:ce:cb:e5:cb:48:3d:20:4f:e8:9f:00:c2:a9:4f:58: 7b:04:ee:1b:ad:1f:ce:97:11:bc:5d:41:58:54:8b:0c:04:2e: 2a:87:25:aa:3b:ff:9d:d9:4e:48:d4:06:98:1f:63:90:63:36: 6d:6e:db:9a:bd:92:ff:fa:ad:48:b8:15:2b:79:b2:23:9f:6d: d4:87:6a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiK02dCUALfrBjx9afc5quziLt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZF QUI5OTQzMDAeFw0yNjA3MjAxOTA1MDdaFw0yNjA3MjEyMTIzMDdaMDMxMTAvBgNV BAMTKDAyOEZGOTA3OUMyNjdFNjYzNTk0NUE1MURFNDE3RjRBQUI5MTM4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWv/9qBBMS0ZV657hk0XWkWGc HSJGHeL92EAqLKS5V0N496M6xwn+gNnY+25GsRUHOpvHeqCgllD/eClvn6bbl7PZ oKxpTReJmj1Fwv66ur2bo0u9LFaD1W1d8dZDDyg+QH98M/0n/KUGnYiNBw9W+AxJ 5fZ4vAKVF3r0CIM8suqxZZ1J8x/3RH1ODNiCYSlh8MgRpCoHPYlp8TUCmXsJPuD/ TTTevXEI5FGnp3YIWIkzR7B33oND+rkXCAPsNVMpYNphLPtehgW53QS39jc8juUs PDC6ULsfJfCUw190U0Lwh42YP4bprPKzeqiET6cKkc17NlSxEMNt4Z+NU1yVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAo/5B5wmfmY1lFpR3kF/SquROJ8wHwYDVR0j BBgwFoAU0xSXvLFHLFWS5stq7Ys8v+q5lDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5MTY2YTEtMThjZC00NGQzLWE2ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNC MTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZFQUI5OTQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzE0OTdCQ0IxNDcyQzU1OTJFNkNCNkFFRDhCM0NCRkVBQjk5 NDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjND QkZFQUI5OTQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiFcA4MlL4iy6TOrcgU1Ce/Tbk/fs3xvfN5 2FweYeHXeshRCW28le/mfflgjtCD9pmyHFMWuDPDWk/81wWl8MIf/pFuAJaAYKA8 2AYEBUYJ66n4TvStC32XKYKxU9fcTlgkbrTfE9/TLOhQ2IVbVE+LWjpWK8Sv93yn Xa1PsfK1YhskX3e/U1bYTCwGtcp2iLCeOCnU6WrGlFhiHqF86OoO2pi6NGTUM+Rd rXBx8+/85opNdUQWHs7L5ctIPSBP6J8AwqlPWHsE7hutH86XEbxdQVhUiwwELiqH Jao7/53ZTkjUBpgfY5BjNm1u25q9kv/6rUi4FSt5siOfbdSHao4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:33:12 2026 by rpki-client