$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft File: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft (raw, json) Hash identifier: 88EX6ZlK3u+DSHKyp9HMmDcOE9uKh6Vt8bjJCAoO+Es= Subject key identifier: C3:DB:4D:C3:3F:8A:F5:A3:31:9B:6C:6B:27:74:49:E3:B0:BF:0D:38 Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B Certificate issuer: /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Certificate serial: 32FDFF3AAA09879AC2059839A8009961EAE22D18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft Manifest number: E9 Signing time: Mon 19 Oct 2026 22:12:04 +0000 Manifest this update: Mon 19 Oct 2026 22:07:04 +0000 Manifest next update: Wed 21 Oct 2026 00:15:04 +0000 Files and hashes: 1: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl (hash: IZzY4wBma/2cBq6r7633ijzpQTPPzB9ApZg4OiKHmVI=) 2: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: VqHZLlF+lgynwiJKxLVryiJgltnho+ZAp8e5MraW8TY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 00:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fd:ff:3a:aa:09:87:9a:c2:05:98:39:a8:00:99:61:ea:e2:2d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Validity Not Before: Oct 19 22:07:04 2026 GMT Not After : Oct 21 00:15:04 2026 GMT Subject: CN=C3DB4DC33F8AF5A3319B6C6B277449E3B0BF0D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:ca:ee:bf:15:cb:fb:11:93:0b:a5:ac:a3: 5b:95:07:8e:79:74:67:4e:f5:83:c5:1a:70:c6:54: 2d:ea:2d:2b:34:a2:92:67:f6:bd:d9:a0:99:91:ec: 71:91:55:65:9d:c0:24:d0:11:66:f1:1c:22:93:89: e5:d9:47:2f:ae:f1:df:00:a5:b9:f9:80:f3:33:73: 3c:69:c4:96:8d:70:ac:e1:99:a9:ab:55:b6:28:6e: 4b:46:d2:70:08:1f:6b:0f:bb:66:3c:a7:49:42:e9: c8:e2:85:44:3a:80:a4:74:74:e6:6a:aa:f0:24:b2: be:03:5b:1f:17:7e:2c:8e:34:55:66:01:10:3d:9a: d9:bf:f1:86:f1:b3:ba:28:e5:58:a3:ef:b8:2a:1b: e8:fd:bd:93:fd:a1:47:58:3a:20:0d:9f:b0:28:aa: 92:2a:76:a9:5e:df:44:45:81:37:1c:71:db:5e:23: 84:53:5b:e8:9f:b7:cb:ab:63:1a:d4:1e:e1:6c:54: 92:68:d3:35:b6:c5:31:2f:c9:47:12:c7:90:7b:ac: 85:15:d7:96:23:da:c3:0f:73:ab:1d:49:b7:94:17: d1:bf:8c:6f:6e:67:46:78:8c:c9:a9:47:f2:43:9a: 82:bb:6e:7b:d3:b3:86:a4:03:13:a3:30:d9:d0:e5: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:4D:C3:3F:8A:F5:A3:31:9B:6C:6B:27:74:49:E3:B0:BF:0D:38 X509v3 Authority Key Identifier: keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:36:66:6d:c4:b5:39:b6:24:14:bc:56:98:12:f3:2f:37:88: a3:6d:92:2f:5d:d0:7c:e8:14:e3:bc:90:db:3c:ea:b4:52:cc: c4:d5:45:13:ff:bc:52:78:49:28:bc:40:a9:05:63:ca:45:43: 9c:5f:3a:9e:44:07:0e:ee:a8:0a:92:b9:9d:22:16:6c:e5:46: d6:f2:ec:d9:1a:0e:66:56:2b:06:d7:fd:61:06:9e:6c:04:bc: e8:4a:1d:09:60:c7:55:72:bb:21:8d:07:95:0a:93:fe:05:4c: 10:1a:02:75:d1:89:d3:83:ee:9d:ec:94:6a:55:26:94:fb:f8: fd:7b:48:4b:c6:ef:99:4e:e4:23:6e:61:93:e5:2b:cd:ec:35: a3:26:8c:88:9a:8b:24:cf:62:52:40:e1:c8:4b:f2:e4:35:84: c3:99:92:90:30:2a:2f:5b:e4:0a:60:e0:96:b7:9e:d0:2e:23: e8:51:9b:b8:44:ed:40:5c:db:54:25:08:50:b4:2c:e2:dc:4c: 96:ef:f0:93:83:f2:dc:a0:fd:75:bc:2b:db:0b:95:b3:41:12: e4:52:1a:58:4a:44:cb:c6:6d:38:4d:c0:c3:25:94:cf:df:30: 10:66:ea:f9:4b:31:0d:ba:03:89:dd:93:0a:09:bb:f4:cd:4e: 2c:fa:0d:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMv3/OqoJh5rCBZg5qACZYeriLRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5RkIz RDMyNTkwQjAeFw0yNjEwMTkyMjA3MDRaFw0yNjEwMjEwMDE1MDRaMDMxMTAvBgNV BAMTKEMzREI0REMzM0Y4QUY1QTMzMTlCNkM2QjI3NzQ0OUUzQjBCRjBEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qsruvxXL+xGTC6Wso1uVB455 dGdO9YPFGnDGVC3qLSs0opJn9r3ZoJmR7HGRVWWdwCTQEWbxHCKTieXZRy+u8d8A pbn5gPMzczxpxJaNcKzhmamrVbYobktG0nAIH2sPu2Y8p0lC6cjihUQ6gKR0dOZq qvAksr4DWx8XfiyONFVmARA9mtm/8Ybxs7oo5Vij77gqG+j9vZP9oUdYOiANn7Ao qpIqdqle30RFgTcccdteI4RTW+ift8urYxrUHuFsVJJo0zW2xTEvyUcSx5B7rIUV 15Yj2sMPc6sdSbeUF9G/jG9uZ0Z4jMmpR/JDmoK7bnvTs4akAxOjMNnQ5d7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9tNwz+K9aMxm2xrJ3RJ47C/DTgwHwYDVR0j BBgwFoAU8xFzsQXduJ+99aHZ4jsZ+z0yWQswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOGNmNjUtZDQ2OC00MzA5LTlmMzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEw NUREQjg5RkJERjVBMUQ5RTIzQjE5RkIzRDMyNTkwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzExNzNCMTA1RERCODlGQkRGNUExRDlFMjNCMTlGQjNEMzI1 OTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5 RkIzRDMyNTkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw2Zm3EtTm2JBS8VpgS8y83iKNtki9d0Hzo FOO8kNs86rRSzMTVRRP/vFJ4SSi8QKkFY8pFQ5xfOp5EBw7uqAqSuZ0iFmzlRtby 7NkaDmZWKwbX/WEGnmwEvOhKHQlgx1VyuyGNB5UKk/4FTBAaAnXRidOD7p3slGpV JpT7+P17SEvG75lO5CNuYZPlK83sNaMmjIiaiyTPYlJA4chL8uQ1hMOZkpAwKi9b 5Apg4Ja3ntAuI+hRm7hE7UBc21QlCFC0LOLcTJbv8JOD8tyg/XW8K9sLlbNBEuRS GlhKRMvGbThNwMMllM/fMBBm6vlLMQ26A4ndkwoJu/TNTiz6DWo= -----END CERTIFICATE-----Generated at Tue Oct 20 07:28:16 2026 by rpki-client