$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft File: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft (raw, json) Hash identifier: pmVCTBvVq67VWVt2NwGWi8MCTnfSLbaQgWb8HzebHgA= Subject key identifier: E5:B5:9E:69:C4:6C:B6:A5:77:22:8E:D2:7E:55:9D:D6:ED:50:CC:8F Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B Certificate issuer: /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Certificate serial: 12871BD068FAD3118A7AF66ADF078ECB14644295 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 03:24:14 +0000 Manifest this update: Tue 02 Jun 2026 03:19:14 +0000 Manifest next update: Wed 03 Jun 2026 05:23:14 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: dovyd8zV7svzteoH3lZIvs7PVqS20CF/gTgXg/sP+cA=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: x6TwTOh29XWvaL5ompdRKU75ZTX3qxSvsJNiDRmi0tk=) 3: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: VqHZLlF+lgynwiJKxLVryiJgltnho+ZAp8e5MraW8TY=) 4: F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl (hash: ik7bB6EM2yhlbbZlqzjphWyF9BdxYyJ8CZVP5xAq54s=) 5: 3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa (hash: j9TzpmBrkrC4dmhMn79OWPBXD1f+9PaIM7otVoOUOss=) 6: 3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa (hash: Dmtm9ctWPAGQ8tAxbP7cXaBST/4ZP/Kt6XHuhcipl8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 05:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:87:1b:d0:68:fa:d3:11:8a:7a:f6:6a:df:07:8e:cb:14:64:42:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B Validity Not Before: Jun 2 03:19:14 2026 GMT Not After : Jun 3 05:23:14 2026 GMT Subject: CN=E5B59E69C46CB6A577228ED27E559DD6ED50CC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:6b:fa:6f:83:97:08:9c:db:6e:ba:0e:0e: a8:d4:7d:ff:05:eb:bb:d4:a3:06:46:50:3a:85:20: 30:c2:d3:8e:9b:d3:7a:0b:d7:87:ad:d8:c2:67:d8: 8b:a4:9f:bf:5c:14:07:63:d9:0c:fd:8b:1b:cd:9a: b2:61:90:ce:9d:e3:e3:df:82:43:81:db:2c:46:2e: 17:e0:f3:b6:97:0a:ad:4d:bd:1c:6c:80:9a:c2:44: 4f:e6:1b:1d:60:e3:db:68:e1:b0:6e:50:82:91:84: a4:74:0a:6c:ae:a4:93:4c:d1:50:96:a9:40:6f:37: 85:ed:0a:c5:7c:e6:aa:5e:58:e7:dc:37:87:68:87: 70:21:d8:09:61:85:04:8c:20:83:50:23:a7:e2:10: 58:1c:7f:a0:a9:7a:c1:b2:fd:df:5e:ec:93:b8:b8: e9:d3:ef:44:6c:18:a7:29:b8:50:26:55:97:8d:15: b7:72:8a:e4:8a:24:b3:1a:64:e8:15:3b:63:dd:48: df:d5:17:5b:8c:cc:9f:cf:fc:35:2a:f1:03:0c:ee: ee:2b:11:9f:7e:a9:6d:da:70:52:ac:d5:0a:e2:6f: 6c:c8:3d:41:84:87:2b:eb:30:7c:5f:ff:64:bc:3b: 74:e9:a7:3b:9f:a2:dc:1d:c5:ee:de:cb:ca:52:38: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B5:9E:69:C4:6C:B6:A5:77:22:8E:D2:7E:55:9D:D6:ED:50:CC:8F X509v3 Authority Key Identifier: keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:b4:fd:6a:cb:a4:e3:6e:e8:37:e0:dd:07:e9:45:67:ec:c3: d6:f3:46:60:1c:5c:91:3b:90:33:18:d4:15:89:21:a6:92:a4: be:43:5b:8d:85:e8:7b:e1:ec:dc:80:d5:44:8c:db:31:9a:dc: f9:b4:12:6c:d4:a3:8b:e6:3a:43:ae:6c:3f:c7:3d:aa:9b:65: c7:3d:b8:c5:05:b2:15:21:2c:64:21:b8:f2:a9:54:3f:ab:e8: 2e:2d:af:f3:5e:a7:4d:d0:16:6f:b0:bd:8c:51:a3:9a:23:d0: 24:b1:97:83:d0:bd:a9:68:da:54:6c:2c:52:7e:b9:92:21:34: 1b:15:e1:cb:8d:41:b8:e4:b9:1a:c9:8d:2f:4b:ba:74:bf:86: 48:7f:06:c2:19:40:d6:29:9d:94:fb:0b:a8:a0:97:32:40:ea: 19:e5:56:b9:b2:0a:9e:ad:a2:80:e1:09:d3:48:fc:79:be:1a: ba:de:eb:54:53:e1:36:02:6d:73:eb:62:68:0c:4d:b7:4d:cb: af:8e:31:32:ca:b9:aa:72:26:f0:3a:d8:54:23:c8:43:61:c3: d3:06:33:c4:14:6b:7a:15:c5:d8:8d:f9:7c:83:60:82:86:aa: be:19:01:1b:2b:0f:0f:ba:10:6b:bb:02:94:19:19:e2:63:13: 35:1d:89:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEocb0Gj60xGKevZq3weOyxRkQpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5RkIz RDMyNTkwQjAeFw0yNjA2MDIwMzE5MTRaFw0yNjA2MDMwNTIzMTRaMDMxMTAvBgNV BAMTKEU1QjU5RTY5QzQ2Q0I2QTU3NzIyOEVEMjdFNTU5REQ2RUQ1MENDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKmv6b4OXCJzbbroODqjUff8F 67vUowZGUDqFIDDC046b03oL14et2MJn2Iukn79cFAdj2Qz9ixvNmrJhkM6d4+Pf gkOB2yxGLhfg87aXCq1NvRxsgJrCRE/mGx1g49to4bBuUIKRhKR0CmyupJNM0VCW qUBvN4XtCsV85qpeWOfcN4doh3Ah2AlhhQSMIINQI6fiEFgcf6CpesGy/d9e7JO4 uOnT70RsGKcpuFAmVZeNFbdyiuSKJLMaZOgVO2PdSN/VF1uMzJ/P/DUq8QMM7u4r EZ9+qW3acFKs1Qrib2zIPUGEhyvrMHxf/2S8O3Tppzufotwdxe7ey8pSOIopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5bWeacRstqV3Io7SflWd1u1QzI8wHwYDVR0j BBgwFoAU8xFzsQXduJ+99aHZ4jsZ+z0yWQswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWJhOGNmNjUtZDQ2OC00MzA5LTlmMzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEw NUREQjg5RkJERjVBMUQ5RTIzQjE5RkIzRDMyNTkwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzExNzNCMTA1RERCODlGQkRGNUExRDlFMjNCMTlGQjNEMzI1 OTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvRjMxMTczQjEwNUREQjg5RkJERjVBMUQ5RTIzQjE5 RkIzRDMyNTkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANy0/WrLpONu6Dfg3QfpRWfsw9bzRmAcXJE7 kDMY1BWJIaaSpL5DW42F6Hvh7NyA1USM2zGa3Pm0EmzUo4vmOkOubD/HPaqbZcc9 uMUFshUhLGQhuPKpVD+r6C4tr/Nep03QFm+wvYxRo5oj0CSxl4PQvalo2lRsLFJ+ uZIhNBsV4cuNQbjkuRrJjS9LunS/hkh/BsIZQNYpnZT7C6iglzJA6hnlVrmyCp6t ooDhCdNI/Hm+Grre61RT4TYCbXPrYmgMTbdNy6+OMTLKuapyJvA62FQjyENhw9MG M8QUa3oVxdiN+XyDYIKGqr4ZARsrDw+6EGu7ApQZGeJjEzUdibo= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:14 2026 by rpki-client