$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json) Hash identifier: Wk0DamZsn1O9sagQ5+uJ4/JcSgmViYWKqAwXNOYGBAM= Subject key identifier: 9B:50:B0:62:B9:94:0D:33:94:35:5F:43:D0:62:17:99:8B:57:26:DB Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11 Certificate serial: 5371C31B29F4D95C52DDF6E3BB3E9190337A2BEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft Manifest number: F9 Signing time: Thu 05 Nov 2026 00:09:10 +0000 Manifest this update: Thu 05 Nov 2026 00:04:10 +0000 Manifest next update: Fri 06 Nov 2026 01:12:10 +0000 Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=) 2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=) 3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=) 4: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: 6IOOuFEt2bpbfVl96TD/ShSFF46KCKAWuvw1EJNbZBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 01:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:71:c3:1b:29:f4:d9:5c:52:dd:f6:e3:bb:3e:91:90:33:7a:2b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11 Validity Not Before: Nov 5 00:04:10 2026 GMT Not After : Nov 6 01:12:10 2026 GMT Subject: CN=9B50B062B9940D3394355F43D06217998B5726DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:d3:4a:26:98:a4:04:f0:fc:c6:12:4b:55: 3e:70:e6:67:a3:b5:54:11:b3:00:7f:92:05:63:b4: 0f:d8:aa:68:7c:80:2e:49:96:3c:40:45:c0:07:ed: 39:2f:df:4b:7a:0a:bd:0d:f3:c5:e0:8c:ea:e9:80: 78:e7:ac:30:aa:8b:21:92:db:83:98:77:47:8a:24: bd:75:b3:10:db:7d:89:50:bb:a5:6b:72:d4:ab:40: 7e:68:88:9d:26:0a:da:3a:2f:e7:62:18:7a:28:a8: 8d:65:ba:a4:44:53:a9:d9:4a:45:0b:94:91:14:47: 3f:1d:72:55:01:3a:9e:46:3f:f2:f5:91:ed:ec:04: 7d:3a:da:19:13:ae:f1:1c:3c:91:98:59:94:9c:97: f4:cb:e8:24:46:64:03:23:5c:18:f6:80:63:fc:81: cb:f8:64:ed:56:1d:8e:be:4d:36:b4:01:d9:23:8f: b4:20:1f:46:8d:a0:9a:d4:43:33:d9:ac:ef:99:ab: 8b:be:0f:74:35:e0:89:38:c0:a2:d0:98:7e:4a:f6: 7f:1b:8d:ef:cf:e7:08:35:43:ec:2c:fd:17:10:af: 1c:8a:35:4f:40:85:cb:59:42:5d:90:2a:5a:75:29: d8:53:95:75:87:0f:74:0d:86:7c:d0:21:4b:48:fd: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:B0:62:B9:94:0D:33:94:35:5F:43:D0:62:17:99:8B:57:26:DB X509v3 Authority Key Identifier: keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0c:e3:f7:f4:29:5c:86:ba:f0:c7:9e:4f:4e:d4:69:29:4e: 76:61:e6:b6:cc:7f:b4:80:a6:78:02:33:f5:c1:88:df:00:55: 7c:b6:7b:8c:29:5a:dc:ff:60:2f:96:ee:82:8e:8e:05:b4:00: 4e:3d:4e:53:f1:7b:cf:62:ef:2f:a5:1f:c7:b5:00:04:76:1a: 54:73:84:00:95:e2:44:d8:3a:20:c6:5a:fd:6e:a2:fb:18:9e: c6:7c:81:f3:0d:96:71:84:c9:7a:d7:4a:42:56:65:18:1b:a4: 1e:96:60:e4:f8:df:14:f9:3b:10:97:5d:c2:e3:2b:68:36:86: ed:02:ad:96:f7:08:76:fe:67:71:74:2c:e0:bf:9e:77:ac:c7: 3c:59:f7:62:ea:be:f5:c5:f2:33:ac:2f:b2:fe:dc:32:a1:44: ec:10:e1:2b:18:9f:15:d5:fa:1a:67:aa:0a:b7:fe:b5:40:90: 53:b7:ca:7a:51:a5:24:5b:e1:72:a2:b1:28:cf:e2:da:c3:fd: 2f:1e:ea:30:9e:15:b7:cb:35:ef:90:a3:26:68:b7:fa:81:e2: 2e:e4:55:60:24:20:ee:d0:14:33:e4:87:be:fc:2d:b4:ed:ae: 09:12:2c:f4:ff:fa:ea:c5:13:6d:30:9b:1a:ff:db:ef:38:79: 42:23:84:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3HDGyn02VxS3fbjuz6RkDN6K+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4 REU3NUExMTAeFw0yNjExMDUwMDA0MTBaFw0yNjExMDYwMTEyMTBaMDMxMTAvBgNV BAMTKDlCNTBCMDYyQjk5NDBEMzM5NDM1NUY0M0QwNjIxNzk5OEI1NzI2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdFNNKJpikBPD8xhJLVT5w5mej tVQRswB/kgVjtA/Yqmh8gC5JljxARcAH7Tkv30t6Cr0N88XgjOrpgHjnrDCqiyGS 24OYd0eKJL11sxDbfYlQu6VrctSrQH5oiJ0mCto6L+diGHooqI1luqREU6nZSkUL lJEURz8dclUBOp5GP/L1ke3sBH062hkTrvEcPJGYWZScl/TL6CRGZAMjXBj2gGP8 gcv4ZO1WHY6+TTa0Adkjj7QgH0aNoJrUQzPZrO+Zq4u+D3Q14Ik4wKLQmH5K9n8b je/P5wg1Q+ws/RcQrxyKNU9AhctZQl2QKlp1KdhTlXWHD3QNhnzQIUtI/bptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1CwYrmUDTOUNV9D0GIXmYtXJtswHwYDVR0j BBgwFoAUExssQYOnkmAmCL24ZOKSuo3nWhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJmZjFiM2YtMTE5MC00MTE5LWJiYzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4 M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4REU3NUExMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzFCMkM0MTgzQTc5MjYwMjYwOEJEQjg2NEUyOTJCQThERTc1 QTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjky QkE4REU3NUExMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsM4/f0KVyGuvDHnk9O1GkpTnZh5rbMf7SA pngCM/XBiN8AVXy2e4wpWtz/YC+W7oKOjgW0AE49TlPxe89i7y+lH8e1AAR2GlRz hACV4kTYOiDGWv1uovsYnsZ8gfMNlnGEyXrXSkJWZRgbpB6WYOT43xT5OxCXXcLj K2g2hu0CrZb3CHb+Z3F0LOC/nnesxzxZ92LqvvXF8jOsL7L+3DKhROwQ4SsYnxXV +hpnqgq3/rVAkFO3ynpRpSRb4XKisSjP4trD/S8e6jCeFbfLNe+QoyZot/qB4i7k VWAkIO7QFDPkh778LbTtrgkSLPT/+urFE20wmxr/2+84eUIjhO4= -----END CERTIFICATE-----Generated at Thu Nov 5 05:23:57 2026 by rpki-client