$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft File: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft (raw, json) Hash identifier: JWq5s63u7mABmKEjt7tOCDGWtWRNNLQBCTWqZWnG/ds= Subject key identifier: 33:6C:B0:6C:DE:33:5C:4B:22:76:80:76:6B:25:EE:F7:7C:4A:1A:70 Authority key identifier: 70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 Certificate issuer: /CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Certificate serial: 229E4FBC3F440689A366FF60072B346DEC8FA298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:51:21 +0000 Manifest this update: Mon 21 Sep 2026 07:46:21 +0000 Manifest next update: Tue 22 Sep 2026 10:43:21 +0000 Files and hashes: 1: 7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl (hash: R1iPuff51MHOpU5EnxkA0OselHRqrvHh4bI8z19Bk6Q=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: UTfVl36IBhOzG0Z82kRsRWQYHXTuWdTZ5yU2IO9JgDg=) 3: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: UMQrtxzU7bwTSmrEo5CM/EREbdAjBsi84Zf8mlGLlNk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9e:4f:bc:3f:44:06:89:a3:66:ff:60:07:2b:34:6d:ec:8f:a2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031104FFCB4E1D0463476445BDFD8AAB4A4FB42 Validity Not Before: Sep 21 07:46:21 2026 GMT Not After : Sep 22 10:43:21 2026 GMT Subject: CN=336CB06CDE335C4B227680766B25EEF77C4A1A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:69:a3:d0:7e:ce:3b:2f:25:5b:12:f6:fc:74: 32:0d:ae:b6:a5:f8:72:0f:1e:36:f2:5b:b2:67:44: c2:19:ca:c6:2d:2f:15:ae:4d:b7:f0:57:32:85:a2: 7b:5c:9c:fe:de:cf:5e:c0:99:6b:db:d0:9e:91:0c: f2:8b:53:c8:cb:58:34:1e:74:83:fb:11:00:29:5f: c3:fd:86:f0:04:40:d4:64:ed:61:e6:33:d1:8a:4f: 0f:b0:30:53:5b:8a:32:bc:b3:8c:56:f1:1f:28:d0: 5b:51:62:55:91:27:a1:7d:da:d0:ee:57:4b:1c:cf: 97:9d:79:a4:ea:dd:66:a8:e0:bf:64:42:e6:c1:6c: 5c:59:5d:d5:9d:76:79:c5:b5:6b:d7:84:b9:49:21: a3:ba:f1:45:b4:65:29:e3:9e:7f:1d:f2:7b:7b:ae: 82:38:b0:5c:93:cf:7b:fb:12:b3:cf:14:74:90:22: 34:a3:d5:18:8e:5e:93:b9:75:8c:40:85:50:d2:65: 72:a7:50:c3:83:74:45:24:1e:e6:92:83:4e:44:bc: 08:c0:bb:fb:54:73:1d:6a:df:70:e5:9e:19:ef:44: 08:88:31:6d:43:ea:52:ff:6a:1c:4c:11:f2:4c:58: 1f:36:8c:b7:08:9e:44:e1:c5:6f:72:36:7f:bf:d3: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6C:B0:6C:DE:33:5C:4B:22:76:80:76:6B:25:EE:F7:7C:4A:1A:70 X509v3 Authority Key Identifier: keyid:70:31:10:4F:FC:B4:E1:D0:46:34:76:44:5B:DF:D8:AA:B4:A4:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/7031104FFCB4E1D0463476445BDFD8AAB4A4FB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8d:55:80:c0:9c:69:33:65:67:a9:70:6a:6e:c5:fd:2a:2c: 77:37:4b:23:d4:75:41:5d:b6:0c:8d:72:e6:f7:45:ab:d3:75: 09:40:47:94:d1:46:dd:a6:88:11:e6:3c:45:47:12:c1:16:8e: ea:c2:10:5f:83:57:cf:66:e0:8b:cf:a4:84:df:be:36:d9:c9: a8:f9:5b:63:12:84:57:3b:b8:ed:e5:05:e2:6b:4c:a6:5c:88: c5:d4:56:f5:fd:35:17:50:47:9b:51:b4:82:94:8c:0f:0c:78: fc:22:f0:c1:a4:26:5e:76:55:4f:ac:b8:ac:e4:ba:bc:c3:99: d3:76:0d:50:05:54:7a:a5:91:d0:d1:14:e8:71:bf:bb:67:fa: f2:24:26:6b:99:27:f4:da:d0:cc:d6:3b:56:83:55:0f:d4:82: 0f:57:92:c6:89:f8:e6:da:a0:ae:a9:92:e8:13:b6:4a:49:cb: c7:92:99:58:80:5d:5d:98:81:ff:b3:55:d0:c1:9b:ef:96:8d: 20:5b:49:9e:e1:b1:7e:0d:ba:9b:50:a6:bf:f8:55:60:64:18: 78:be:0c:58:b6:de:2f:3f:a5:ee:2f:c9:c4:2c:a6:a9:f9:99: 53:1f:17:b3:59:bf:74:45:2f:be:1e:01:97:82:83:2e:69:e1: 8c:57:5b:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIp5PvD9EBomjZv9gBys0beyPopgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFC NEE0RkI0MjAeFw0yNjA5MjEwNzQ2MjFaFw0yNjA5MjIxMDQzMjFaMDMxMTAvBgNV BAMTKDMzNkNCMDZDREUzMzVDNEIyMjc2ODA3NjZCMjVFRUY3N0M0QTFBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuaaPQfs47LyVbEvb8dDINrral +HIPHjbyW7JnRMIZysYtLxWuTbfwVzKFontcnP7ez17AmWvb0J6RDPKLU8jLWDQe dIP7EQApX8P9hvAEQNRk7WHmM9GKTw+wMFNbijK8s4xW8R8o0FtRYlWRJ6F92tDu V0scz5edeaTq3Wao4L9kQubBbFxZXdWddnnFtWvXhLlJIaO68UW0ZSnjnn8d8nt7 roI4sFyTz3v7ErPPFHSQIjSj1RiOXpO5dYxAhVDSZXKnUMODdEUkHuaSg05EvAjA u/tUcx1q33DlnhnvRAiIMW1D6lL/ahxMEfJMWB82jLcInkThxW9yNn+/05G9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM2ywbN4zXEsidoB2ayXu93xKGnAwHwYDVR0j BBgwFoAUcDEQT/y04dBGNHZEW9/YqrSk+0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJiZTY4MTUtMzEwZS00MjA2LWE1MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZG Q0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4QUFCNEE0RkI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDMxMTA0RkZDQjRFMUQwNDYzNDc2NDQ1QkRGRDhBQUI0QTRG QjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvNzAzMTEwNEZGQ0I0RTFEMDQ2MzQ3NjQ0NUJERkQ4 QUFCNEE0RkI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeNVYDAnGkzZWepcGpuxf0qLHc3SyPUdUFd tgyNcub3RavTdQlAR5TRRt2miBHmPEVHEsEWjurCEF+DV89m4IvPpITfvjbZyaj5 W2MShFc7uO3lBeJrTKZciMXUVvX9NRdQR5tRtIKUjA8MePwi8MGkJl52VU+suKzk urzDmdN2DVAFVHqlkdDRFOhxv7tn+vIkJmuZJ/Ta0MzWO1aDVQ/Ugg9XksaJ+Oba oK6pkugTtkpJy8eSmViAXV2Ygf+zVdDBm++WjSBbSZ7hsX4NuptQpr/4VWBkGHi+ DFi23i8/pe4vycQspqn5mVMfF7NZv3RFL74eAZeCgy5p4YxXW5c= -----END CERTIFICATE-----Generated at Mon Sep 21 16:02:24 2026 by rpki-client