$ rpki-client -vvvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft File: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft (raw, json) Hash identifier: EnHiIFTdTp+q1XI9JlBBwcTQip3QiLhEe9xXo/h2vuI= Subject key identifier: B2:AA:59:B6:45:60:57:96:35:EC:F7:9B:A9:27:F4:05:59:DD:C9:CC Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 Certificate issuer: /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Certificate serial: 4523CFB25F19C0DB7EEB0A3D5D33680B0C50BC5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:12:52 +0000 Manifest this update: Wed 16 Sep 2026 15:07:52 +0000 Manifest next update: Thu 17 Sep 2026 17:34:52 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=) 2: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl (hash: 3A1y3tA9GefEUfIWIpfzg/qxtCj13Ojpzw0S4TVg8SU=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:23:cf:b2:5f:19:c0:db:7e:eb:0a:3d:5d:33:68:0b:0c:50:bc:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Validity Not Before: Sep 16 15:07:52 2026 GMT Not After : Sep 17 17:34:52 2026 GMT Subject: CN=B2AA59B64560579635ECF79BA927F40559DDC9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:cd:87:4d:a6:91:d8:6a:3c:5a:18:a4:40: 66:5a:4f:ad:d3:78:72:8e:65:72:3b:6a:61:30:a5: 7f:03:0d:71:28:99:c6:87:01:47:83:fb:cd:0a:9f: 08:43:c2:72:20:c8:77:4b:fb:85:74:08:23:1c:b3: 58:0b:6b:a7:f4:89:88:5f:ea:9b:40:8e:f7:f3:87: 94:a5:be:27:a1:ef:ec:23:17:16:b6:0a:92:b7:fd: 75:64:5f:1c:63:27:e5:ad:69:5d:3f:a2:ef:0e:02: 51:b5:8d:04:ac:1b:a4:33:16:db:31:56:80:20:60: 7c:4d:91:a8:06:09:c4:d2:3f:ef:5e:93:a3:3c:40: 94:09:f1:8a:a2:b1:d3:95:e9:4e:73:36:e2:ce:92: 74:d6:98:b3:1b:0d:15:23:5b:89:dc:93:14:61:68: f6:2b:ad:46:4f:79:d2:e0:ef:26:11:55:54:e0:33: de:f9:b0:5c:bd:1e:28:89:64:2f:32:bc:e2:95:ae: ca:2f:61:60:19:e7:e1:03:5f:b0:e9:32:f9:a6:10: c9:64:7f:a0:84:a0:ec:6c:7d:19:a9:8a:0d:e0:99: 21:af:44:68:14:c8:28:c0:c7:8d:62:fe:25:d9:7d: 8b:53:69:81:1c:23:c9:96:cb:58:90:6b:2b:bd:1b: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AA:59:B6:45:60:57:96:35:EC:F7:9B:A9:27:F4:05:59:DD:C9:CC X509v3 Authority Key Identifier: keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:5b:3a:dd:9c:fb:8a:72:04:e2:fe:d1:12:4a:18:39:bf:18: 0c:52:04:10:29:db:e3:00:ce:9a:5d:64:ac:39:c8:31:91:fc: 53:5b:38:89:41:25:e2:2d:8e:51:65:24:4b:a9:e3:d3:da:e7: 18:b1:49:8c:70:81:6f:32:e0:44:e1:0b:0b:21:88:bf:bd:b1: a8:10:48:9f:00:d7:4b:b6:03:f3:7d:d9:05:8d:ca:7e:41:82: 16:f8:b8:a4:cc:21:5e:68:18:45:7c:2d:2a:7d:c7:54:f9:a5: db:60:fb:c3:3d:52:c0:d8:84:43:87:6d:c4:bb:8f:4e:fc:c9: 58:b3:b5:3e:41:64:d3:d2:70:c4:ab:f7:23:53:07:af:7d:cc: e8:e2:5d:76:78:51:ea:f5:a3:82:f1:21:48:61:97:bf:ca:be: 7d:ea:cd:c8:4d:4d:05:99:00:2b:ba:f2:60:5e:73:f2:14:9b: c0:a9:0f:8b:de:29:8d:65:6c:3b:7e:f7:5f:71:47:8c:fe:f3: 66:e8:b5:a1:18:18:98:13:ba:06:b7:d9:03:a9:d5:ba:c7:51: a3:eb:32:13:1b:cb:30:e2:0a:55:85:7b:e9:1a:b3:f5:78:30: a6:03:8b:73:a7:74:bd:58:4c:ef:93:d1:8d:29:2b:75:68:ea: 83:e7:a7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSPPsl8ZwNt+6wo9XTNoCwxQvF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZF QUI5OTQzMDAeFw0yNjA5MTYxNTA3NTJaFw0yNjA5MTcxNzM0NTJaMDMxMTAvBgNV BAMTKEIyQUE1OUI2NDU2MDU3OTYzNUVDRjc5QkE5MjdGNDA1NTlEREM5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTSM2HTaaR2Go8WhikQGZaT63T eHKOZXI7amEwpX8DDXEomcaHAUeD+80KnwhDwnIgyHdL+4V0CCMcs1gLa6f0iYhf 6ptAjvfzh5Slvieh7+wjFxa2CpK3/XVkXxxjJ+WtaV0/ou8OAlG1jQSsG6QzFtsx VoAgYHxNkagGCcTSP+9ek6M8QJQJ8YqisdOV6U5zNuLOknTWmLMbDRUjW4nckxRh aPYrrUZPedLg7yYRVVTgM975sFy9HiiJZC8yvOKVrsovYWAZ5+EDX7DpMvmmEMlk f6CEoOxsfRmpig3gmSGvRGgUyCjAx41i/iXZfYtTaYEcI8mWy1iQayu9G2iHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqpZtkVgV5Y17PebqSf0BVndycwwHwYDVR0j BBgwFoAU0xSXvLFHLFWS5stq7Ys8v+q5lDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5MTY2YTEtMThjZC00NGQzLWE2ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNC MTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZFQUI5OTQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzE0OTdCQ0IxNDcyQzU1OTJFNkNCNkFFRDhCM0NCRkVBQjk5 NDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjND QkZFQUI5OTQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhbOt2c+4pyBOL+0RJKGDm/GAxSBBAp2+MA zppdZKw5yDGR/FNbOIlBJeItjlFlJEup49Pa5xixSYxwgW8y4EThCwshiL+9sagQ SJ8A10u2A/N92QWNyn5Bghb4uKTMIV5oGEV8LSp9x1T5pdtg+8M9UsDYhEOHbcS7 j078yViztT5BZNPScMSr9yNTB699zOjiXXZ4Uer1o4LxIUhhl7/Kvn3qzchNTQWZ ACu68mBec/IUm8CpD4veKY1lbDt+919xR4z+82botaEYGJgTuga32QOp1brHUaPr MhMbyzDiClWFe+kas/V4MKYDi3OndL1YTO+T0Y0pK3Vo6oPnp0Y= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:27 2026 by rpki-client