$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: cRY5gOct/kd/IwZdv8wnYRlJj1mnAj1142Sldiec29o= Subject key identifier: A3:66:F8:69:67:CE:99:7C:0B:CB:CA:E3:91:F9:0D:21:95:5D:BF:6A Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 03F015B19B763F46CF8FAE4A7B4CA7D146F8DC66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 02:54:21 +0000 Manifest this update: Tue 21 Jul 2026 02:49:21 +0000 Manifest next update: Wed 22 Jul 2026 05:29:21 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) 3: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: JQ+mRWjrUVo5EwF7eDOAdF1huLQuHKdbpg9YDfePFXE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f0:15:b1:9b:76:3f:46:cf:8f:ae:4a:7b:4c:a7:d1:46:f8:dc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: Jul 21 02:49:21 2026 GMT Not After : Jul 22 05:29:21 2026 GMT Subject: CN=A366F86967CE997C0BCBCAE391F90D21955DBF6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:8a:64:67:36:2c:fc:1f:85:54:2f:44:e5: 99:62:2b:a2:bb:6d:7d:9c:05:1c:f3:d1:68:9f:62: 17:85:b4:9b:44:62:4d:d2:f1:4d:64:10:59:27:54: cb:66:49:72:ee:68:57:26:fd:5b:85:0c:e1:38:f8: 42:36:92:f8:59:8d:50:ea:a2:75:95:96:3e:48:29: 9c:18:17:86:42:01:85:08:46:6c:95:01:f4:4d:db: 93:f9:38:a6:b3:52:e0:70:d2:91:7a:7e:a4:25:f2: ab:26:bc:07:4b:72:10:77:1a:c8:5b:4e:e5:5c:fa: d7:2d:62:90:c7:48:c3:7c:46:4a:cd:4b:f6:f8:1d: 63:b3:d0:1b:80:72:b0:8c:4a:5b:5b:c8:74:3c:4f: c3:32:41:ff:35:62:15:8b:1f:69:da:0d:f8:f3:ba: 4d:78:fe:7e:cb:a3:70:76:80:ee:d2:56:52:36:15: 45:2c:a0:ad:c1:0a:c9:f1:26:1b:5a:01:ce:ee:01: 71:26:77:8b:2f:1c:a6:15:93:27:33:41:88:04:fa: e0:12:83:fa:48:78:b8:2f:14:ba:b7:c6:de:f1:ec: b4:c0:da:46:7f:c3:1a:da:90:22:6c:f0:08:88:c6: 1c:8b:5f:cb:34:b4:f2:00:eb:b2:a8:62:50:07:ba: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:F8:69:67:CE:99:7C:0B:CB:CA:E3:91:F9:0D:21:95:5D:BF:6A X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3e:d3:3d:40:2c:a4:c3:c1:aa:e9:80:37:76:e3:ae:94:af: f6:d3:0a:bd:ea:9b:fd:8f:df:78:9b:c4:90:9f:9d:f2:94:f2: 49:9f:f0:90:32:57:a7:97:63:9a:e3:6f:e1:79:de:bc:d8:3f: 60:49:c1:37:c2:f1:19:a8:64:ce:91:d6:f2:d1:c4:7a:c5:ee: 1b:c6:14:9f:79:f1:ab:b4:b5:67:8e:de:1f:e1:53:23:8b:f3: f5:a0:9d:eb:86:ae:64:82:37:55:29:a6:35:8c:a5:23:7c:7d: 7d:8a:eb:fd:a8:bc:fd:ba:b0:39:56:22:ec:53:34:19:e8:b9: 47:be:37:05:ab:85:9a:2b:6d:6c:d2:58:bc:85:82:fa:47:f4: bd:dd:76:81:b8:7c:72:79:a6:3b:c4:bb:39:f4:b2:64:6d:2d: 0c:92:c9:c1:60:14:f6:d4:15:6d:04:a8:13:af:96:a6:a7:67: 37:ff:38:f2:24:f8:ca:23:1a:88:f1:cf:d1:1b:46:96:c5:5d: 96:9c:94:cd:4d:a3:a8:3d:fe:d3:c7:3a:2e:08:7c:98:93:89: a1:6a:e6:25:08:3c:a1:4d:9b:f8:21:c7:4d:93:6f:cd:0a:bc: 61:d6:be:48:cd:2d:9d:22:bd:60:d0:18:9d:f1:ce:67:0b:b4: 3b:4e:6d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/AVsZt2P0bPj65Ke0yn0Ub43GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjA3MjEwMjQ5MjFaFw0yNjA3MjIwNTI5MjFaMDMxMTAvBgNV BAMTKEEzNjZGODY5NjdDRTk5N0MwQkNCQ0FFMzkxRjkwRDIxOTU1REJGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcopkZzYs/B+FVC9E5ZliK6K7 bX2cBRzz0WifYheFtJtEYk3S8U1kEFknVMtmSXLuaFcm/VuFDOE4+EI2kvhZjVDq onWVlj5IKZwYF4ZCAYUIRmyVAfRN25P5OKazUuBw0pF6fqQl8qsmvAdLchB3Gshb TuVc+tctYpDHSMN8RkrNS/b4HWOz0BuAcrCMSltbyHQ8T8MyQf81YhWLH2naDfjz uk14/n7Lo3B2gO7SVlI2FUUsoK3BCsnxJhtaAc7uAXEmd4svHKYVkyczQYgE+uAS g/pIeLgvFLq3xt7x7LTA2kZ/wxrakCJs8AiIxhyLX8s0tPIA67KoYlAHuj7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo2b4aWfOmXwLy8rjkfkNIZVdv2owHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo+0z1ALKTDwarpgDd2466Ur/bTCr3qm/2P 33ibxJCfnfKU8kmf8JAyV6eXY5rjb+F53rzYP2BJwTfC8RmoZM6R1vLRxHrF7hvG FJ958au0tWeO3h/hUyOL8/WgneuGrmSCN1UppjWMpSN8fX2K6/2ovP26sDlWIuxT NBnouUe+NwWrhZorbWzSWLyFgvpH9L3ddoG4fHJ5pjvEuzn0smRtLQySycFgFPbU FW0EqBOvlqanZzf/OPIk+MojGojxz9EbRpbFXZaclM1No6g9/tPHOi4IfJiTiaFq 5iUIPKFNm/ghx02Tb80KvGHWvkjNLZ0ivWDQGJ3xzmcLtDtObR4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:29:42 2026 by rpki-client