$ rpki-client -vvf rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft File: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft (raw, json) Hash identifier: 6aeHXbsWBQmEjn3sczhSyEyp4J5c5KfVPA3/kSSi35A= Subject key identifier: E4:8F:48:DA:5D:85:28:EF:87:EA:98:14:E1:4C:03:28:12:EF:BD:D4 Authority key identifier: D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 Certificate issuer: /CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Certificate serial: 022F548B9DA5A9CF3A740EA2AC0FA2E44D724261 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 01:29:40 +0000 Manifest this update: Sun 14 Jun 2026 01:24:40 +0000 Manifest next update: Mon 15 Jun 2026 04:02:40 +0000 Files and hashes: 1: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: Sxgj/jIWe1519euOI3Cc2FFGv49kzekxQhzGH0BLJlM=) 2: D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl (hash: mrHN+HIkqg/d5gpyB0sDdWB/P12uDdg0XYtzcN9LDWU=) 3: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: eAwax4YpAFVnhFTpTcP/7sxY2Fc6q05CXGATtMyPlAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 04:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2f:54:8b:9d:a5:a9:cf:3a:74:0e:a2:ac:0f:a2:e4:4d:72:42:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31497BCB1472C5592E6CB6AED8B3CBFEAB99430 Validity Not Before: Jun 14 01:24:40 2026 GMT Not After : Jun 15 04:02:40 2026 GMT Subject: CN=E48F48DA5D8528EF87EA9814E14C032812EFBDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:55:74:60:62:d7:6f:44:4f:7e:5a:f5:ab:55: ce:0c:9d:28:bf:4e:d5:b0:00:cb:6d:2d:e7:25:35: ac:e5:44:10:20:fc:cc:a4:23:5d:cc:71:36:32:eb: 05:2e:da:e6:67:24:75:aa:f8:27:73:fe:2a:47:b3: 71:9d:74:a0:45:3a:32:42:c0:21:c3:4c:d2:b9:8c: 2d:8f:d9:dd:26:f8:d0:51:94:6d:b1:f6:8a:35:db: 52:32:06:00:2d:92:06:d1:dc:2b:d0:98:04:92:45: cc:08:3d:00:d2:ea:0b:d4:d5:5c:2e:9f:5f:f4:0e: 8f:8f:3d:12:f5:c3:d2:f6:e7:81:b0:d7:68:ef:00: 23:7f:f2:8c:ee:3e:56:d1:26:39:a9:65:dc:fe:85: 86:5e:d1:f8:e0:7f:97:fe:e3:d7:ae:00:03:e7:d9: 36:4a:1f:f2:e8:c2:05:e4:05:c0:13:16:69:da:82: 17:3d:f3:cb:9c:00:01:d4:3d:81:11:94:89:0a:1d: b9:3e:37:2a:9e:5a:ca:98:14:25:e4:af:20:28:0a: a4:11:e5:2b:bc:8c:7e:f2:5d:5f:c6:34:1f:9c:3e: 26:e1:66:c7:dc:4a:ac:49:07:5b:5c:4a:d2:75:36: ee:6f:4f:45:ba:67:70:35:92:32:59:fa:d0:45:79: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8F:48:DA:5D:85:28:EF:87:EA:98:14:E1:4C:03:28:12:EF:BD:D4 X509v3 Authority Key Identifier: keyid:D3:14:97:BC:B1:47:2C:55:92:E6:CB:6A:ED:8B:3C:BF:EA:B9:94:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/D31497BCB1472C5592E6CB6AED8B3CBFEAB99430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fa:6f:a1:87:33:09:c9:0c:e1:40:71:b8:2e:bd:7c:81:4f: 22:6b:61:34:17:12:f4:af:bf:11:19:8d:f5:01:b9:fd:c5:ac: ab:3e:4d:06:79:19:ad:d4:5c:04:bb:33:81:fb:16:2e:f0:08: 9e:2c:e2:cd:81:7d:cb:36:9e:f0:f6:8e:b9:c2:98:77:b4:aa: 79:53:71:42:f7:ad:88:36:f7:f9:ff:45:26:a9:94:dc:35:14: 0b:9d:a9:40:9e:de:3d:f3:4c:62:70:32:39:01:27:52:69:28: da:07:41:94:a5:53:33:de:f0:39:20:db:5a:cf:49:72:27:38: 61:aa:28:7e:4b:9d:c4:6f:36:ef:b3:24:34:2d:45:59:ad:04: 1a:32:26:69:ab:56:30:26:2a:61:6c:20:13:f0:a9:a1:2b:70: 92:28:9a:ab:e7:c0:a8:8e:59:9b:b8:6f:97:43:0f:e3:c1:0c: a5:8b:08:2b:68:86:48:aa:92:88:29:4e:52:8e:68:d9:fb:1a: 01:de:16:d5:e8:8a:ea:c4:04:e4:62:5e:cd:35:a0:e5:9c:d4: ec:dd:fb:e0:87:0a:8f:cf:19:79:ec:3b:cd:b9:58:7d:19:b7: a5:34:58:25:37:18:5f:3d:36:cc:de:70:64:61:ee:70:e7:c9: f1:46:ba:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAi9Ui52lqc86dA6irA+i5E1yQmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZF QUI5OTQzMDAeFw0yNjA2MTQwMTI0NDBaFw0yNjA2MTUwNDAyNDBaMDMxMTAvBgNV BAMTKEU0OEY0OERBNUQ4NTI4RUY4N0VBOTgxNEUxNEMwMzI4MTJFRkJERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVXRgYtdvRE9+WvWrVc4MnSi/ TtWwAMttLeclNazlRBAg/MykI13McTYy6wUu2uZnJHWq+Cdz/ipHs3GddKBFOjJC wCHDTNK5jC2P2d0m+NBRlG2x9oo121IyBgAtkgbR3CvQmASSRcwIPQDS6gvU1Vwu n1/0Do+PPRL1w9L254Gw12jvACN/8ozuPlbRJjmpZdz+hYZe0fjgf5f+49euAAPn 2TZKH/LowgXkBcATFmnaghc988ucAAHUPYERlIkKHbk+NyqeWsqYFCXkryAoCqQR 5Su8jH7yXV/GNB+cPibhZsfcSqxJB1tcStJ1Nu5vT0W6Z3A1kjJZ+tBFeT/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5I9I2l2FKO+H6pgU4UwDKBLvvdQwHwYDVR0j BBgwFoAU0xSXvLFHLFWS5stq7Ys8v+q5lDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE5MTY2YTEtMThjZC00NGQzLWE2ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNC MTQ3MkM1NTkyRTZDQjZBRUQ4QjNDQkZFQUI5OTQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzE0OTdCQ0IxNDcyQzU1OTJFNkNCNkFFRDhCM0NCRkVBQjk5 NDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvRDMxNDk3QkNCMTQ3MkM1NTkyRTZDQjZBRUQ4QjND QkZFQUI5OTQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFn6b6GHMwnJDOFAcbguvXyBTyJrYTQXEvSv vxEZjfUBuf3FrKs+TQZ5Ga3UXAS7M4H7Fi7wCJ4s4s2Bfcs2nvD2jrnCmHe0qnlT cUL3rYg29/n/RSaplNw1FAudqUCe3j3zTGJwMjkBJ1JpKNoHQZSlUzPe8Dkg21rP SXInOGGqKH5LncRvNu+zJDQtRVmtBBoyJmmrVjAmKmFsIBPwqaErcJIomqvnwKiO WZu4b5dDD+PBDKWLCCtohkiqkogpTlKOaNn7GgHeFtXoiurEBORiXs01oOWc1Ozd ++CHCo/PGXnsO825WH0Zt6U0WCU3GF89NszecGRh7nDnyfFGuh4= -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:07 2026 by rpki-client