$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft File: 31F5B417659DF6EE03991B6AB5E72A24009BC769.mft (raw, json) Hash identifier: regLZ+F5T03Jtphii7VwjD0FVXfh+/+WQrkZmfMP13w= Subject key identifier: 2D:F3:2E:C0:49:28:AC:BB:19:B2:2A:D5:8C:9C:4F:50:49:D3:17:D5 Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Certificate serial: 4B1890EE22DDC4180C67C5EDF752A867110F5C38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 20:38:36 +0000 Manifest this update: Mon 02 Nov 2026 20:33:36 +0000 Manifest next update: Tue 03 Nov 2026 22:15:36 +0000 Files and hashes: 1: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=) 2: 31F5B417659DF6EE03991B6AB5E72A24009BC769.crl (hash: +j8dfEfKrXAdckk6OsXOHH2g0RGun/JBrffPiRHskso=) 3: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=) 4: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 22:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:18:90:ee:22:dd:c4:18:0c:67:c5:ed:f7:52:a8:67:11:0f:5c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Validity Not Before: Nov 2 20:33:36 2026 GMT Not After : Nov 3 22:15:36 2026 GMT Subject: CN=2DF32EC04928ACBB19B22AD58C9C4F5049D317D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:1c:d0:ca:ab:26:1f:0f:68:05:f9:43:fa: 22:e8:f2:4b:90:df:e1:37:76:89:d3:22:40:bc:13: d1:29:85:33:c6:78:fa:3a:09:73:9f:a4:45:c9:cd: 6d:cb:7d:0a:3d:62:49:e9:95:de:26:4c:21:65:9a: cc:e2:67:98:af:15:97:8c:58:a2:f0:18:f6:91:28: c3:64:f7:15:0d:1b:d0:29:c2:f4:14:ac:ce:14:cf: 49:0b:e7:36:56:51:8a:bc:72:40:a5:85:e7:75:9c: 09:80:bc:2a:39:39:d3:e3:87:c2:4e:32:0d:62:fd: 6e:90:f1:5e:c4:3f:94:64:ed:b7:69:58:e4:82:47: fa:b1:81:37:a6:e3:3d:3f:a4:1e:51:9f:f8:bf:30: bf:d2:00:c1:02:19:52:1b:e1:a4:49:73:67:12:9d: 62:8f:01:67:14:c1:27:12:dd:a2:b4:00:58:36:c4: 6e:a5:29:3f:e5:b1:17:6c:a0:bd:f7:a8:55:fb:75: 7b:fe:ee:5e:2a:4e:f4:e9:8f:a7:bd:98:d8:c2:2c: 6a:71:c8:28:3d:e3:e2:93:10:87:5d:67:e6:16:2a: a5:93:90:1e:be:ce:a1:72:91:a8:e9:72:3c:36:dd: 24:42:35:9f:43:2d:e2:8a:dd:48:2b:2b:d3:89:fb: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F3:2E:C0:49:28:AC:BB:19:B2:2A:D5:8C:9C:4F:50:49:D3:17:D5 X509v3 Authority Key Identifier: keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2a:b7:bc:f5:fa:c6:1d:15:f1:4a:a7:72:ee:79:b9:74:3f: bb:c3:82:8a:11:93:fc:e1:be:c7:57:6b:6e:5f:ab:a7:fa:35: a4:46:a7:a2:3d:81:2b:fc:2c:34:64:38:02:19:2e:b7:51:1e: 99:ac:24:70:83:7d:9f:45:a0:6e:64:ad:0b:99:b4:5b:84:45: af:ef:2d:43:10:53:ad:56:2f:c2:00:26:34:0b:8c:0d:b0:44: 1a:5a:10:66:e5:68:31:8b:da:3d:43:e3:f6:d9:b9:d4:77:cc: 8b:14:ac:73:c1:6c:72:d8:3f:99:40:3e:b1:d2:fc:14:6a:f0: 73:59:4b:ba:4a:c3:38:17:cf:32:6b:6b:bb:97:08:a0:04:f1: fc:7e:06:01:22:67:f7:36:19:9e:da:2c:7f:d1:37:bc:dd:6c: 44:99:ca:20:93:27:e6:2b:7d:7c:70:6e:e8:44:ab:92:f1:56: ae:94:1b:4a:f6:55:7f:d3:da:95:b7:50:0b:72:c5:59:ef:36: d9:91:12:f9:d2:df:2c:b6:25:ed:5c:23:42:f0:83:4c:2d:d5: 54:98:90:92:93:c3:2c:40:41:e5:19:76:81:8b:7d:c5:d7:ba: 2a:83:cc:fb:0e:3d:25:f2:2b:33:10:86:1d:6c:47:b7:dd:49: 9b:3e:7b:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxiQ7iLdxBgMZ8Xt91KoZxEPXDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQw MDlCQzc2OTAeFw0yNjExMDIyMDMzMzZaFw0yNjExMDMyMjE1MzZaMDMxMTAvBgNV BAMTKDJERjMyRUMwNDkyOEFDQkIxOUIyMkFENThDOUM0RjUwNDlEMzE3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOBzQyqsmHw9oBflD+iLo8kuQ 3+E3donTIkC8E9EphTPGePo6CXOfpEXJzW3LfQo9Yknpld4mTCFlmsziZ5ivFZeM WKLwGPaRKMNk9xUNG9ApwvQUrM4Uz0kL5zZWUYq8ckClhed1nAmAvCo5OdPjh8JO Mg1i/W6Q8V7EP5Rk7bdpWOSCR/qxgTem4z0/pB5Rn/i/ML/SAMECGVIb4aRJc2cS nWKPAWcUwScS3aK0AFg2xG6lKT/lsRdsoL33qFX7dXv+7l4qTvTpj6e9mNjCLGpx yCg94+KTEIddZ+YWKqWTkB6+zqFykajpcjw23SRCNZ9DLeKK3UgrK9OJ+yMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULfMuwEkorLsZsirVjJxPUEnTF9UwHwYDVR0j BBgwFoAUMfW0F2Wd9u4DmRtqtecqJACbx2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBjMjY2ZTYtMGI4NC00MzFmLTllNzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2 NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQwMDlCQzc2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMUY1QjQxNzY1OURGNkVFMDM5OTFCNkFCNUU3MkEyNDAwOUJD NzY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJB MjQwMDlCQzc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgqt7z1+sYdFfFKp3Luebl0P7vDgooRk/zh vsdXa25fq6f6NaRGp6I9gSv8LDRkOAIZLrdRHpmsJHCDfZ9FoG5krQuZtFuERa/v LUMQU61WL8IAJjQLjA2wRBpaEGblaDGL2j1D4/bZudR3zIsUrHPBbHLYP5lAPrHS /BRq8HNZS7pKwzgXzzJra7uXCKAE8fx+BgEiZ/c2GZ7aLH/RN7zdbESZyiCTJ+Yr fXxwbuhEq5LxVq6UG0r2VX/T2pW3UAtyxVnvNtmREvnS3yy2Je1cI0Lwg0wt1VSY kJKTwyxAQeUZdoGLfcXXuiqDzPsOPSXyKzMQhh1sR7fdSZs+e3k= -----END CERTIFICATE-----Generated at Tue Nov 3 12:12:56 2026 by rpki-client