$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft File: 31F5B417659DF6EE03991B6AB5E72A24009BC769.mft (raw, json) Hash identifier: MKoY8EnLM1XW2TpSgrrac/P/IiTzqQhYuyZO1j75tc0= Subject key identifier: 8F:C9:7C:62:92:BF:4C:B9:F5:0D:7B:91:D0:48:49:02:36:9F:2A:FB Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Certificate serial: 421ED0CDAD592CF42C4A79579FB20C9FD2F19BFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 03:05:27 +0000 Manifest this update: Tue 22 Sep 2026 03:00:27 +0000 Manifest next update: Wed 23 Sep 2026 03:48:27 +0000 Files and hashes: 1: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY=) 2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=) 3: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=) 4: 31F5B417659DF6EE03991B6AB5E72A24009BC769.crl (hash: O7/6inQKlERvyldytB06DWOeFhzWje6Qc7eBJCMACWA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1e:d0:cd:ad:59:2c:f4:2c:4a:79:57:9f:b2:0c:9f:d2:f1:9b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Validity Not Before: Sep 22 03:00:27 2026 GMT Not After : Sep 23 03:48:27 2026 GMT Subject: CN=8FC97C6292BF4CB9F50D7B91D0484902369F2AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:a0:c4:5d:2c:fa:10:c1:25:4c:69:c3:11: fe:02:99:a7:06:32:35:54:dc:bc:d6:ff:63:ac:6f: 5a:ae:77:3d:fb:f9:90:36:50:2e:f4:27:98:6a:08: f6:62:69:0f:da:ec:69:df:9c:6c:b9:77:fb:8a:aa: 19:5e:65:a7:70:57:9c:f8:4f:f5:99:0e:39:8b:eb: d5:3e:08:8e:89:36:34:22:e5:fc:97:ed:6c:74:03: f7:18:a8:9d:f6:04:ea:27:a5:1b:7d:c0:c6:3a:b5: e7:f0:0f:dd:a0:80:44:02:5c:ae:ed:63:2d:d2:65: e5:fc:10:29:86:92:fe:8e:c8:b5:5c:59:3a:89:ee: 07:e4:77:2c:53:60:88:66:c9:44:59:4f:76:82:52: ad:b3:fb:fd:3d:84:86:1f:74:07:90:1a:81:c5:1e: d7:b6:34:c7:eb:52:20:bd:22:cb:96:41:56:36:b8: 2c:da:ac:e8:d0:72:c7:7a:04:4d:61:dd:dd:22:fc: 5d:e9:62:06:7f:3b:7c:8f:ff:04:b2:d8:fa:dc:b5: 4f:09:07:dc:d1:f8:fa:16:03:a3:f0:70:d8:03:11: 1b:f9:ce:34:42:e2:6b:80:f4:4e:e4:77:52:cf:df: 17:bf:ca:ac:21:06:e0:28:8b:c2:e8:68:2f:df:cf: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C9:7C:62:92:BF:4C:B9:F5:0D:7B:91:D0:48:49:02:36:9F:2A:FB X509v3 Authority Key Identifier: keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:91:e0:71:fc:19:9b:e5:98:25:f6:3b:08:b2:21:a7:62:6b: 3e:e8:69:8b:84:02:9c:be:cb:56:34:b7:0a:95:38:d8:68:8b: 0f:95:8b:91:d0:21:78:7c:af:08:12:97:fc:c1:5f:c6:b0:27: 60:85:2c:3d:d3:06:79:74:38:6d:b8:c7:12:6e:22:b7:6d:bc: 8b:c9:fb:be:94:22:38:b9:56:b9:c1:9c:f0:90:bd:d3:be:1a: bc:9a:08:a6:85:7b:60:0f:12:97:c0:a9:1a:7c:f9:6d:bf:63: 11:8d:a2:aa:be:36:49:35:61:8a:3f:70:67:a2:be:38:16:b4: 52:35:76:62:f7:0d:b9:0d:40:53:ec:23:69:df:21:fa:66:e1: b6:bb:44:4b:51:cc:c6:4b:82:fd:03:3b:41:f1:f2:14:e7:db: c7:73:75:fe:c8:f0:ab:07:44:65:81:97:66:fe:d7:76:e3:05: 57:40:e4:e6:82:fb:2d:84:46:3d:5f:56:e5:4f:2a:56:43:7a: 03:f5:3b:8e:f8:f0:c6:73:14:0b:70:eb:a8:4e:ea:95:a7:1d: 7f:f1:50:13:cb:3b:1d:9d:84:28:e0:e4:b5:fd:c9:19:25:7f: c7:84:ae:11:27:25:47:84:92:54:97:42:40:cb:84:29:95:38: 11:eb:a3:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQh7Qza1ZLPQsSnlXn7IMn9Lxm/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQw MDlCQzc2OTAeFw0yNjA5MjIwMzAwMjdaFw0yNjA5MjMwMzQ4MjdaMDMxMTAvBgNV BAMTKDhGQzk3QzYyOTJCRjRDQjlGNTBEN0I5MUQwNDg0OTAyMzY5RjJBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZKDEXSz6EMElTGnDEf4CmacG MjVU3LzW/2Osb1qudz37+ZA2UC70J5hqCPZiaQ/a7GnfnGy5d/uKqhleZadwV5z4 T/WZDjmL69U+CI6JNjQi5fyX7Wx0A/cYqJ32BOonpRt9wMY6tefwD92ggEQCXK7t Yy3SZeX8ECmGkv6OyLVcWTqJ7gfkdyxTYIhmyURZT3aCUq2z+/09hIYfdAeQGoHF Hte2NMfrUiC9IsuWQVY2uCzarOjQcsd6BE1h3d0i/F3pYgZ/O3yP/wSy2PrctU8J B9zR+PoWA6PwcNgDERv5zjRC4muA9E7kd1LP3xe/yqwhBuAoi8LoaC/fz6ypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8l8YpK/TLn1DXuR0EhJAjafKvswHwYDVR0j BBgwFoAUMfW0F2Wd9u4DmRtqtecqJACbx2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBjMjY2ZTYtMGI4NC00MzFmLTllNzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2 NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQwMDlCQzc2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMUY1QjQxNzY1OURGNkVFMDM5OTFCNkFCNUU3MkEyNDAwOUJD NzY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJB MjQwMDlCQzc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2R4HH8GZvlmCX2OwiyIadiaz7oaYuEApy+ y1Y0twqVONhoiw+Vi5HQIXh8rwgSl/zBX8awJ2CFLD3TBnl0OG24xxJuIrdtvIvJ +76UIji5VrnBnPCQvdO+GryaCKaFe2APEpfAqRp8+W2/YxGNoqq+Nkk1YYo/cGei vjgWtFI1dmL3DbkNQFPsI2nfIfpm4ba7REtRzMZLgv0DO0Hx8hTn28dzdf7I8KsH RGWBl2b+13bjBVdA5OaC+y2ERj1fVuVPKlZDegP1O4748MZzFAtw66hO6pWnHX/x UBPLOx2dhCjg5LX9yRklf8eErhEnJUeEklSXQkDLhCmVOBHro8M= -----END CERTIFICATE-----Generated at Tue Sep 22 21:50:29 2026 by rpki-client