$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: vMaZBhxaw+Jo9LTqaxj0tImMTKnkmD9tvARb8zXZR+k= Subject key identifier: 33:4F:38:6F:9C:8E:E2:35:DB:50:9B:25:A0:0D:53:1E:39:49:20:07 Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 6978274E8E241F47A3B2999D70707715A135DCE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 03:52:55 +0000 Manifest this update: Wed 04 Nov 2026 03:47:55 +0000 Manifest next update: Thu 05 Nov 2026 05:10:55 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) 2: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: FCZTnZwqGU9+Y94H/mxCFZRLR09VgYEjDNqIw7cjjJc=) 3: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:78:27:4e:8e:24:1f:47:a3:b2:99:9d:70:70:77:15:a1:35:dc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: Nov 4 03:47:55 2026 GMT Not After : Nov 5 05:10:55 2026 GMT Subject: CN=334F386F9C8EE235DB509B25A00D531E39492007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:85:47:ed:c4:4b:7f:bd:49:86:44:99:ae: 76:7a:21:84:4f:68:af:85:e4:ce:71:d6:b7:34:35: 44:7c:a8:aa:8e:8f:7b:84:f5:e6:fd:a6:be:91:47: ce:b5:6c:e0:fc:d9:82:77:42:bd:55:02:e1:c7:4c: 70:53:50:38:fb:8f:bd:79:1d:0b:34:4b:94:83:22: 26:be:f9:9d:25:29:c9:4b:be:3b:05:00:65:5a:11: 81:0c:0b:45:a7:a1:11:3f:8a:ac:ca:e9:b8:47:9c: 05:58:16:0b:7c:e5:df:41:19:aa:00:ba:98:ba:5f: 29:cd:04:d4:9e:a7:60:83:3d:e3:75:34:a8:b9:74: 41:5c:fd:f2:62:04:58:e5:c5:42:3e:60:b2:38:8a: a1:f2:6c:c1:b9:09:63:e7:dc:1e:15:39:d1:0a:48: 49:05:d3:43:d9:51:7b:cf:e6:68:ea:f0:49:a1:2b: fa:26:fa:e7:e0:6f:ed:d7:99:82:08:28:fa:0f:ae: 95:3d:fa:e0:fa:68:d1:75:4c:98:30:30:91:45:73: 22:a3:f6:9e:f1:85:b2:a4:4f:60:ec:68:24:20:5b: 8c:5a:56:9b:23:a8:ed:ae:be:7a:50:58:3c:e0:36: 9d:03:04:8e:6a:7c:f7:43:b1:d1:ba:f2:54:f9:6c: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4F:38:6F:9C:8E:E2:35:DB:50:9B:25:A0:0D:53:1E:39:49:20:07 X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:da:31:2e:a6:a7:ee:7b:68:b9:a9:c1:78:9e:cd:a7:ef:bb: 5f:81:d1:f2:88:3d:bc:63:96:8c:42:51:fa:d6:f7:6e:21:b1: d4:da:fe:1f:5e:79:58:82:1b:57:cf:ce:25:4f:42:29:c8:4b: a4:2d:39:b5:35:e0:64:ba:4d:8b:6f:dd:af:f9:d4:03:96:83: ef:a8:9c:34:91:5c:4c:9f:07:59:89:f9:b7:39:b3:31:67:19: 7c:18:b9:99:33:1d:a7:df:10:11:61:22:18:86:83:77:8f:f9: 40:ee:c7:e6:7d:ec:11:49:58:32:a4:ce:1d:8c:42:61:5b:39: ff:d0:ba:a0:61:73:48:6c:5d:5f:58:4e:72:88:c9:7c:a6:fe: 96:74:6e:b3:15:93:a3:1a:88:9d:3a:71:28:c3:fe:67:d5:d6: 84:48:5f:04:8a:3b:8c:72:b4:0d:b7:c5:9b:2c:0f:c5:0c:09: af:59:82:bd:4f:72:e1:d7:28:24:13:48:c4:04:62:6b:63:4a: 96:51:4b:b1:7a:a2:d2:81:5f:aa:1e:57:7d:68:c1:67:04:0d: b6:7d:19:30:76:6c:5f:d1:ed:30:50:33:39:96:7e:16:d2:37: ee:e8:43:90:95:4c:a6:9e:be:72:34:b4:8d:21:84:bf:aa:ea: 5d:95:35:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXgnTo4kH0ejspmdcHB3FaE13OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjExMDQwMzQ3NTVaFw0yNjExMDUwNTEwNTVaMDMxMTAvBgNV BAMTKDMzNEYzODZGOUM4RUUyMzVEQjUwOUIyNUEwMEQ1MzFFMzk0OTIwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5oVH7cRLf71JhkSZrnZ6IYRP aK+F5M5x1rc0NUR8qKqOj3uE9eb9pr6RR861bOD82YJ3Qr1VAuHHTHBTUDj7j715 HQs0S5SDIia++Z0lKclLvjsFAGVaEYEMC0WnoRE/iqzK6bhHnAVYFgt85d9BGaoA upi6XynNBNSep2CDPeN1NKi5dEFc/fJiBFjlxUI+YLI4iqHybMG5CWPn3B4VOdEK SEkF00PZUXvP5mjq8EmhK/om+ufgb+3XmYIIKPoPrpU9+uD6aNF1TJgwMJFFcyKj 9p7xhbKkT2DsaCQgW4xaVpsjqO2uvnpQWDzgNp0DBI5qfPdDsdG68lT5bIfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM084b5yO4jXbUJsloA1THjlJIAcwHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfaMS6mp+57aLmpwXiezafvu1+B0fKIPbxj loxCUfrW924hsdTa/h9eeViCG1fPziVPQinIS6QtObU14GS6TYtv3a/51AOWg++o nDSRXEyfB1mJ+bc5szFnGXwYuZkzHaffEBFhIhiGg3eP+UDux+Z97BFJWDKkzh2M QmFbOf/QuqBhc0hsXV9YTnKIyXym/pZ0brMVk6MaiJ06cSjD/mfV1oRIXwSKO4xy tA23xZssD8UMCa9Zgr1PcuHXKCQTSMQEYmtjSpZRS7F6otKBX6oeV31owWcEDbZ9 GTB2bF/R7TBQMzmWfhbSN+7oQ5CVTKaevnI0tI0hhL+q6l2VNb8= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:43 2026 by rpki-client