$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft File: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft (raw, json) Hash identifier: LCVaZZn5Xr+usDCShaaGn0xpWrl/m3kB1dJaNtBNE84= Subject key identifier: 28:7F:38:7E:02:7B:71:90:49:42:DD:54:EC:4A:E3:06:50:B3:A8:48 Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B Certificate issuer: /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Certificate serial: 2989923B775F882541E8A5B0AF5E187CB34E13C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft Manifest number: 68 Signing time: Fri 17 Jul 2026 20:43:24 +0000 Manifest this update: Fri 17 Jul 2026 20:38:24 +0000 Manifest next update: Sat 18 Jul 2026 21:25:24 +0000 Files and hashes: 1: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl (hash: vAjgBgVrRSIK2KoN02whj+4BPxYCP7sUZY85wSV58SY=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: x6TwTOh29XWvaL5ompdRKU75ZTX3qxSvsJNiDRmi0tk=) 3: 3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa (hash: j9TzpmBrkrC4dmhMn79OWPBXD1f+9PaIM7otVoOUOss=) 4: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: VqHZLlF+lgynwiJKxLVryiJgltnho+ZAp8e5MraW8TY=) 5: 3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa (hash: Dmtm9ctWPAGQ8tAxbP7cXaBST/4ZP/Kt6XHuhcipl8s=) 6: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: dovyd8zV7svzteoH3lZIvs7PVqS20CF/gTgXg/sP+cA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:89:92:3b:77:5f:88:25:41:e8:a5:b0:af:5e:18:7c:b3:4e:13:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Validity Not Before: Jul 17 20:38:24 2026 GMT Not After : Jul 18 21:25:24 2026 GMT Subject: CN=287F387E027B71904942DD54EC4AE30650B3A848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:16:40:89:c6:f3:e4:be:bb:64:e2:fd:9a: 87:35:c4:1d:ad:34:9f:f3:52:e5:bf:5c:ad:de:e2: 71:dd:d7:54:eb:7a:d6:17:d7:a8:d8:f2:48:4e:3e: 7c:12:7f:33:3c:a2:c4:59:e8:18:b3:a3:65:45:9f: b5:a8:b0:c9:d9:ef:74:6a:e5:61:ed:2d:39:7e:50: eb:f3:d4:aa:37:8b:bf:e0:40:0d:3d:6d:7b:da:43: 92:a1:90:3f:95:5c:2a:02:ab:ca:de:01:6e:98:94: b7:46:93:35:c3:47:16:ce:86:46:d5:27:27:6d:5f: 82:ec:35:32:4f:f9:8c:19:1f:39:46:95:56:a6:6b: a7:99:04:f8:f5:a1:33:01:8f:4e:a5:a5:f9:1c:83: ca:d0:50:29:5a:ff:62:54:89:87:8d:ad:05:94:d8: f5:46:06:40:69:80:6c:93:e3:1f:92:03:21:be:15: b4:9f:54:38:7d:70:c3:d8:d1:f2:81:37:c2:c6:b1: e1:3e:f3:89:54:62:7a:6c:5a:8e:d8:32:85:11:3b: 01:db:24:d0:f2:e0:78:7d:98:50:9b:ed:34:8c:68: d5:2e:47:ff:79:a7:21:a6:b0:a1:a6:69:f8:71:c2: 4f:a1:3a:b9:cd:89:59:ba:c1:7c:c1:45:c0:5e:f6: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7F:38:7E:02:7B:71:90:49:42:DD:54:EC:4A:E3:06:50:B3:A8:48 X509v3 Authority Key Identifier: keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:43:dc:89:55:52:4e:40:2f:81:db:61:a7:3f:c1:5f:bf:39: 00:9d:04:41:16:53:dc:52:ed:c2:4c:25:e7:f1:c2:0e:30:ed: da:00:ee:86:18:44:83:06:95:57:69:c6:3b:0e:e5:6e:ec:30: 21:98:aa:29:12:94:bf:7b:01:7e:ee:ff:50:cb:80:c5:e1:58: f1:21:f9:5a:f7:3d:43:75:25:98:6e:18:73:b3:2f:f4:b3:e9: 57:ec:80:93:47:8c:ab:cf:ff:58:c4:cf:a6:fd:03:12:a8:37: d0:15:4f:73:59:4f:c3:d2:3f:c7:19:dc:dc:98:ac:3d:a9:e8: e1:ad:c1:6f:70:e5:bc:0b:99:d0:6d:d7:98:1f:fd:27:6e:5c: 1b:52:4b:9a:24:98:31:99:89:f6:e0:91:d4:ff:c5:db:72:14: 8b:e1:8a:19:24:a2:0d:69:a4:76:cf:f3:87:48:fd:85:b5:e6: eb:ec:2b:c3:12:dd:28:1a:ff:7e:12:6d:dd:f6:22:a7:ab:65: fa:9f:e9:6d:ea:fb:0f:71:99:2b:ea:91:1b:1f:68:1e:5a:b3: bc:e4:6d:5a:eb:de:bd:91:fa:aa:9d:f9:3c:83:44:09:17:bf: e6:4d:60:7e:cb:b5:f3:6d:85:fa:a4:d6:d7:2d:6b:0c:df:2a: af:63:e5:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYmSO3dfiCVB6KWwr14YfLNOE8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5RkIz RDMyNTkwQjAeFw0yNjA3MTcyMDM4MjRaFw0yNjA3MTgyMTI1MjRaMDMxMTAvBgNV BAMTKDI4N0YzODdFMDI3QjcxOTA0OTQyREQ1NEVDNEFFMzA2NTBCM0E4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50RZAicbz5L67ZOL9moc1xB2t NJ/zUuW/XK3e4nHd11TretYX16jY8khOPnwSfzM8osRZ6Bizo2VFn7WosMnZ73Rq 5WHtLTl+UOvz1Ko3i7/gQA09bXvaQ5KhkD+VXCoCq8reAW6YlLdGkzXDRxbOhkbV JydtX4LsNTJP+YwZHzlGlVama6eZBPj1oTMBj06lpfkcg8rQUCla/2JUiYeNrQWU 2PVGBkBpgGyT4x+SAyG+FbSfVDh9cMPY0fKBN8LGseE+84lUYnpsWo7YMoUROwHb JNDy4Hh9mFCb7TSMaNUuR/95pyGmsKGmafhxwk+hOrnNiVm6wXzBRcBe9hHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKH84fgJ7cZBJQt1U7ErjBlCzqEgwHwYDVR0j BBgwFoAU8xFzsQXduJ+99aHZ4jsZ+z0yWQswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOGNmNjUtZDQ2OC00MzA5LTlmMzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEw NUREQjg5RkJERjVBMUQ5RTIzQjE5RkIzRDMyNTkwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzExNzNCMTA1RERCODlGQkRGNUExRDlFMjNCMTlGQjNEMzI1 OTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5 RkIzRDMyNTkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpD3IlVUk5AL4HbYac/wV+/OQCdBEEWU9xS 7cJMJefxwg4w7doA7oYYRIMGlVdpxjsO5W7sMCGYqikSlL97AX7u/1DLgMXhWPEh +Vr3PUN1JZhuGHOzL/Sz6VfsgJNHjKvP/1jEz6b9AxKoN9AVT3NZT8PSP8cZ3NyY rD2p6OGtwW9w5bwLmdBt15gf/SduXBtSS5okmDGZifbgkdT/xdtyFIvhihkkog1p pHbP84dI/YW15uvsK8MS3Sga/34Sbd32IqerZfqf6W3q+w9xmSvqkRsfaB5as7zk bVrr3r2R+qqd+TyDRAkXv+ZNYH7LtfNthfqk1tctawzfKq9j5bw= -----END CERTIFICATE-----Generated at Sat Jul 18 02:22:52 2026 by rpki-client