$ rpki-client -vvf rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft File: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft (raw, json) Hash identifier: 8iEqSR33qL9COiqEZ8l/S9F6eOZP42iWFrZE81/HKGA= Subject key identifier: 41:5E:A0:2A:31:C9:8E:E8:8C:0C:75:F1:E0:6C:D5:2D:1D:BE:DC:35 Authority key identifier: 73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 Certificate issuer: /CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Certificate serial: 12903AE2E8255B821FE1DB365E2AD9FD6A7652F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:49:38 +0000 Manifest this update: Tue 16 Jun 2026 16:44:38 +0000 Manifest next update: Wed 17 Jun 2026 19:12:38 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: +l7H6IXgAvTv+3glkvk8VLjCw4Za7qX1HwAcAg3brR0=) 2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: J0CxZDsJ9hK/vFJkCmlYVTK0Hkphd/z0nczFHp0XF3o=) 3: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl (hash: TQx0cZv4L7TV5EcE1BqrUueMesLo/4OSdfI3dQTo5Jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:90:3a:e2:e8:25:5b:82:1f:e1:db:36:5e:2a:d9:fd:6a:76:52:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Validity Not Before: Jun 16 16:44:38 2026 GMT Not After : Jun 17 19:12:38 2026 GMT Subject: CN=415EA02A31C98EE88C0C75F1E06CD52D1DBEDC35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:bf:37:8f:4d:13:f0:bf:a5:f1:8c:da:f9: 5c:2a:ca:d2:be:17:ab:8a:47:fa:af:63:1e:1f:66: 14:f9:d9:e5:52:f3:ed:a4:43:8f:0c:84:7f:4d:96: 86:ef:00:9d:e4:a2:d4:cf:3c:d1:56:f6:b3:9e:b7: bf:4c:e4:21:46:2b:5b:e9:2f:56:97:18:c2:36:d0: e6:16:46:c0:5b:72:a9:f9:59:08:96:14:f4:31:ba: c7:ae:8e:77:fc:6c:7d:8a:6d:bb:ec:05:14:83:2e: 58:b3:e1:bc:60:d3:14:b3:14:d8:ed:e9:a3:69:14: 65:09:c4:e7:b2:22:73:e7:98:d8:4f:9a:6e:3f:80: 3a:67:57:5e:58:a6:c5:66:59:3b:5d:75:2c:b6:fa: d4:7e:56:4c:2c:61:62:f2:d1:7d:9d:d1:4a:b0:cb: 9b:2d:74:2a:4b:da:a1:52:6d:8a:3e:01:41:b1:4d: b3:35:37:05:1c:f7:7a:e1:b8:3a:79:86:8a:2d:f1: b0:ae:76:37:e1:9e:32:18:a2:f2:21:9b:97:f8:e3: 91:ab:11:bb:82:d1:39:e3:3b:2b:f7:eb:c7:16:27: 68:31:84:d0:e2:52:ab:97:77:44:83:a4:7f:f6:6c: 48:e2:c1:4d:34:b6:88:08:c4:df:86:cb:29:97:6e: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:A0:2A:31:C9:8E:E8:8C:0C:75:F1:E0:6C:D5:2D:1D:BE:DC:35 X509v3 Authority Key Identifier: keyid:73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:32:74:e8:ec:c0:50:81:c0:8c:07:17:14:5e:87:ab:a9:23: 2b:09:f2:5f:96:d2:56:94:34:59:97:a3:d9:a3:3c:0c:07:1f: f2:b6:f7:ab:ee:4d:93:3d:43:d6:02:b5:eb:48:02:ca:25:86: ad:d7:3d:d1:c3:47:c3:78:55:f8:fb:e1:b7:b6:4b:92:8b:cc: 69:59:ff:a1:55:46:83:51:c5:2d:10:0b:52:93:83:83:49:f2: f6:bf:fe:83:5e:e0:20:e7:6c:7b:0d:54:0c:7f:27:c0:d4:01: 84:c9:38:a6:9a:f8:02:b4:f9:9b:c4:57:13:bc:14:48:ac:bb: a1:92:cd:92:b8:f6:78:2d:cb:30:d2:02:79:68:18:29:14:46: 8f:02:28:25:20:88:57:e9:75:8b:9f:bb:f2:69:6c:51:2c:22: cd:b9:e0:c3:02:56:30:47:da:2b:0b:30:ed:8e:fb:2c:ef:ad: 74:da:6e:9f:9b:58:9e:89:56:b8:34:ce:07:04:4d:44:d5:58: c9:e4:96:75:f7:c5:67:21:57:87:ae:16:7c:8f:da:bf:65:6f: 2f:66:0a:ea:dc:6f:bb:ac:4b:3a:b8:b3:79:e6:3b:a1:01:7a: ad:1a:6a:2b:2f:68:97:4b:0a:9b:5b:0c:07:6b:fd:19:c9:9b: d0:e4:a1:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpA64uglW4If4ds2XirZ/Wp2UvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4 MjRBQTJFNjAeFw0yNjA2MTYxNjQ0MzhaFw0yNjA2MTcxOTEyMzhaMDMxMTAvBgNV BAMTKDQxNUVBMDJBMzFDOThFRTg4QzBDNzVGMUUwNkNENTJEMURCRURDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLb83j00T8L+l8Yza+VwqytK+ F6uKR/qvYx4fZhT52eVS8+2kQ48MhH9NlobvAJ3kotTPPNFW9rOet79M5CFGK1vp L1aXGMI20OYWRsBbcqn5WQiWFPQxuseujnf8bH2KbbvsBRSDLliz4bxg0xSzFNjt 6aNpFGUJxOeyInPnmNhPmm4/gDpnV15YpsVmWTtddSy2+tR+VkwsYWLy0X2d0Uqw y5stdCpL2qFSbYo+AUGxTbM1NwUc93rhuDp5hoot8bCudjfhnjIYovIhm5f445Gr EbuC0TnjOyv368cWJ2gxhNDiUquXd0SDpH/2bEjiwU00togIxN+GyymXbs07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQV6gKjHJjuiMDHXx4GzVLR2+3DUwHwYDVR0j BBgwFoAUcx1dWakjj3no5FQLe/iDn4JKouYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ3MDI2YTktMGM5YS00ZDc5LWFkNjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlB OTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4MjRBQTJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MzFENUQ1OUE5MjM4Rjc5RThFNDU0MEI3QkY4ODM5RjgyNEFB MkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgz OUY4MjRBQTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0ydOjswFCBwIwHFxReh6upIysJ8l+W0laU NFmXo9mjPAwHH/K296vuTZM9Q9YCtetIAsolhq3XPdHDR8N4Vfj74be2S5KLzGlZ /6FVRoNRxS0QC1KTg4NJ8va//oNe4CDnbHsNVAx/J8DUAYTJOKaa+AK0+ZvEVxO8 FEisu6GSzZK49ngtyzDSAnloGCkURo8CKCUgiFfpdYufu/JpbFEsIs254MMCVjBH 2isLMO2O+yzvrXTabp+bWJ6JVrg0zgcETUTVWMnklnX3xWchV4euFnyP2r9lby9m Curcb7usSzq4s3nmO6EBeq0aaisvaJdLCptbDAdr/RnJm9DkoWA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:48 2026 by rpki-client