$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: N+HgWsSFKccGNXW0jk1+M3ynX4jNCvQMJj+69BfOnls= Subject key identifier: 84:D3:49:AC:1F:BE:2C:52:7A:7B:90:C3:3D:17:29:D3:0F:F5:99:17 Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 35E3DEC0FAC14468658D590F363D039E196EDECD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:01:41 +0000 Manifest this update: Tue 02 Jun 2026 17:56:41 +0000 Manifest next update: Wed 03 Jun 2026 21:25:41 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) 2: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: dWULgJP13xG7K+12ugxUIP00v0Q9U0Cm2OKaPeVrpSo=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:de:c0:fa:c1:44:68:65:8d:59:0f:36:3d:03:9e:19:6e:de:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: Jun 2 17:56:41 2026 GMT Not After : Jun 3 21:25:41 2026 GMT Subject: CN=84D349AC1FBE2C527A7B90C33D1729D30FF59917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:00:48:35:02:b3:61:5e:a0:e3:c4:a3:dd: 80:5c:0a:c7:e5:36:b1:cd:88:6d:60:07:28:de:6d: 95:38:45:ac:26:67:f3:19:37:c0:a7:65:c7:fc:b8: d6:d4:1d:d0:02:87:18:3f:c7:9a:3f:fc:25:f6:f8: a8:e7:34:d9:c7:d6:75:ad:8b:bc:fd:7b:ed:e5:0f: ea:7c:93:e1:6f:52:b6:56:2f:c1:f7:a1:e8:90:54: af:3a:dc:6c:41:07:79:2e:49:3b:96:a1:cf:30:7e: c7:05:9d:9d:8e:7e:4d:5f:04:bc:60:be:04:12:2a: 12:8d:ec:2e:b4:3d:98:be:3e:f7:77:54:a8:b1:49: fc:ef:44:bc:9d:48:ee:21:dc:f8:ca:4d:f0:d5:f9: 8b:1e:d7:5f:42:1a:43:25:88:30:bd:a2:fb:f0:fc: 41:d0:7d:05:28:b8:fb:a9:c6:c3:b9:e9:90:02:14: 7b:86:ff:1e:52:2e:f1:e0:7b:bb:0b:53:35:cc:62: b3:62:2b:1c:7b:b1:ce:20:2f:a0:df:b5:35:e9:70: 44:08:8f:6f:6c:3f:fb:48:45:14:b3:39:5f:a3:3e: 92:34:5c:db:3c:6d:f7:71:25:c9:37:24:49:bb:2f: 81:fb:e3:6e:32:7d:5d:88:ae:9b:a1:88:9d:95:ae: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D3:49:AC:1F:BE:2C:52:7A:7B:90:C3:3D:17:29:D3:0F:F5:99:17 X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:68:b7:8a:7a:71:6d:07:12:25:d2:0e:25:38:a5:9f:0a:2f: 30:6e:36:18:00:d2:55:af:5c:97:03:d3:d2:cb:fa:d0:11:fb: fd:c8:9a:e2:b3:fb:90:b7:e5:29:0d:78:2f:af:d3:e3:d2:e6: d4:1c:de:b2:7d:c6:6e:96:84:cd:16:d7:64:44:68:5a:3f:56: 3e:86:f4:60:98:ab:d7:af:b0:33:4a:5d:e5:30:cb:06:ac:a7: a8:4d:8a:de:ac:e2:3c:1d:a8:a8:c4:6d:b0:3e:ea:2d:0e:78: 1a:ab:d4:48:64:a4:72:c8:d6:f5:dc:9c:16:18:26:fb:a5:16: 72:e0:d8:96:bc:dc:28:ed:e3:f1:82:14:19:aa:84:64:99:f9: e1:62:b5:ab:a1:17:4b:ad:33:68:ed:e0:55:63:39:c4:ae:80: c4:d8:bc:f8:f8:0c:c0:95:19:9e:27:27:a7:95:72:31:1a:29: 02:97:7c:1d:fc:33:e0:5e:d5:0f:8a:09:6d:94:58:8c:2f:fc: f9:51:72:70:36:8f:fe:29:ef:a3:c3:92:73:a3:eb:31:f7:46: 97:c8:3a:e5:9a:5f:c4:17:90:f0:ec:71:a4:65:ab:94:7b:a1: bb:44:f0:aa:af:c0:92:df:46:88:66:d9:3b:7b:40:b1:d1:91: de:75:83:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNePewPrBRGhljVkPNj0Dnhlu3s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjA2MDIxNzU2NDFaFw0yNjA2MDMyMTI1NDFaMDMxMTAvBgNV BAMTKDg0RDM0OUFDMUZCRTJDNTI3QTdCOTBDMzNEMTcyOUQzMEZGNTk5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PgBINQKzYV6g48Sj3YBcCsfl NrHNiG1gByjebZU4RawmZ/MZN8CnZcf8uNbUHdAChxg/x5o//CX2+KjnNNnH1nWt i7z9e+3lD+p8k+FvUrZWL8H3oeiQVK863GxBB3kuSTuWoc8wfscFnZ2Ofk1fBLxg vgQSKhKN7C60PZi+Pvd3VKixSfzvRLydSO4h3PjKTfDV+Yse119CGkMliDC9ovvw /EHQfQUouPupxsO56ZACFHuG/x5SLvHge7sLUzXMYrNiKxx7sc4gL6DftTXpcEQI j29sP/tIRRSzOV+jPpI0XNs8bfdxJck3JEm7L4H7424yfV2IrpuhiJ2VrhQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNNJrB++LFJ6e5DDPRcp0w/1mRcwHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1ot4p6cW0HEiXSDiU4pZ8KLzBuNhgA0lWv XJcD09LL+tAR+/3ImuKz+5C35SkNeC+v0+PS5tQc3rJ9xm6WhM0W12REaFo/Vj6G 9GCYq9evsDNKXeUwywasp6hNit6s4jwdqKjEbbA+6i0OeBqr1EhkpHLI1vXcnBYY JvulFnLg2Ja83Cjt4/GCFBmqhGSZ+eFitauhF0utM2jt4FVjOcSugMTYvPj4DMCV GZ4nJ6eVcjEaKQKXfB38M+Be1Q+KCW2UWIwv/PlRcnA2j/4p76PDknOj6zH3RpfI OuWaX8QXkPDscaRlq5R7obtE8KqvwJLfRohm2Tt7QLHRkd51g88= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:36 2026 by rpki-client