$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft File: 131B2C4183A792602608BDB864E292BA8DE75A11.mft (raw, json) Hash identifier: NCjsFRI5S44NTkCs6Acurd+6AwcK7Y+WHI0OwErSw9M= Subject key identifier: 97:C6:42:96:B7:D8:CF:20:54:A2:E1:6B:D8:4F:F3:E3:77:6E:5F:58 Authority key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 Certificate issuer: /CN=131B2C4183A792602608BDB864E292BA8DE75A11 Certificate serial: 5A1EA8BF70700F55B3759724401AB7D998F36675 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft Manifest number: BE Signing time: Mon 21 Sep 2026 23:36:00 +0000 Manifest this update: Mon 21 Sep 2026 23:31:00 +0000 Manifest next update: Wed 23 Sep 2026 01:23:00 +0000 Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 12e1omD0IXRnYpyZM8k+ckYl4amwle3dyHSLftRggH4=) 2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: U66/wMKa+3Mr6eOM2KE1F7tqcI2yllXE+mxjWHCqnzw=) 3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: aAxEWHVil7qjhdI4b6bWhc3cZIyJqTNCRrne2x8sFPQ=) 4: 131B2C4183A792602608BDB864E292BA8DE75A11.crl (hash: al/jNbblvUtkmhA1LjhP6cxd5liN9X+k/DpWy4lnqoo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1e:a8:bf:70:70:0f:55:b3:75:97:24:40:1a:b7:d9:98:f3:66:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131B2C4183A792602608BDB864E292BA8DE75A11 Validity Not Before: Sep 21 23:31:00 2026 GMT Not After : Sep 23 01:23:00 2026 GMT Subject: CN=97C64296B7D8CF2054A2E16BD84FF3E3776E5F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:f4:1a:0c:a4:85:fe:8d:44:65:eb:07:01: f2:c1:e1:07:74:71:38:7a:9d:15:a8:a2:ef:f4:1d: 55:d8:61:37:26:ee:30:38:d0:df:b9:ec:1b:5d:af: 69:6c:40:22:6e:55:23:05:b1:a2:b8:1c:b0:14:2b: d9:6d:f4:b3:b0:48:8b:78:1b:a4:d2:77:48:57:e8: 0b:d5:d6:2e:0c:99:45:4c:43:c0:eb:4f:50:13:ba: 7b:44:7a:d3:4c:d8:79:59:72:68:77:cb:6c:89:d7: b6:9d:99:49:37:a4:c1:aa:99:1c:ea:8c:e6:85:61: 40:f4:f2:d9:a8:98:3e:1e:4d:ff:ba:86:b2:2b:27: 10:b7:b4:de:9a:3c:ee:15:c0:ff:ce:0e:11:2e:04: cd:83:56:95:93:fc:53:6b:8d:2b:aa:00:c0:0d:10: 16:ee:c1:51:c9:35:ef:2d:08:70:60:57:75:a3:9a: 48:65:2b:73:78:7b:b8:23:68:d4:a5:7f:0e:3a:7c: c0:0d:8e:42:27:08:43:88:d3:0b:bc:14:b6:59:d8: 8e:24:1e:22:80:15:e8:7c:f3:0d:7e:c9:dd:92:c7: aa:92:af:1a:18:5b:0c:6b:09:c0:64:be:63:49:01: 3d:64:86:1e:d0:65:ea:fe:ef:80:09:8f:77:8a:d4: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C6:42:96:B7:D8:CF:20:54:A2:E1:6B:D8:4F:F3:E3:77:6E:5F:58 X509v3 Authority Key Identifier: keyid:13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4f:f0:e5:72:4c:9d:5b:5d:91:9f:40:a7:f8:86:58:81:36: ed:1c:e7:2c:53:47:19:9e:d2:b3:32:e5:28:d3:0d:8c:8e:22: 3b:48:27:ff:2e:94:c2:a6:38:ec:b2:32:b1:12:0e:72:0c:24: bb:0a:3b:f1:bb:55:89:22:2d:f3:d6:de:d5:4e:c9:58:a2:23: 44:40:e2:63:48:0e:93:74:a3:69:c2:dc:91:58:8d:67:55:68: e9:78:cf:e3:69:2e:be:96:54:75:90:d0:ca:d1:6e:50:06:08: 34:32:a1:1a:d1:21:15:b5:f2:35:f8:00:e0:df:f9:71:ab:4c: fe:1b:81:7a:fc:f1:d4:f2:7f:45:ca:a5:00:0f:7c:6d:77:92: 0d:5e:3b:d7:74:8d:e8:83:af:e9:d3:a1:ba:82:9f:cd:50:13: ae:69:34:0d:4c:51:ed:da:26:71:7e:90:c2:8f:e6:a2:8c:ea: 45:a6:64:d2:49:17:7c:c6:00:cf:8c:8d:d4:2a:cb:a0:72:a2: 65:eb:29:de:15:9a:11:fa:0f:77:86:c2:7b:b0:37:54:e8:50: ae:77:37:c4:c0:b9:94:89:21:c4:5a:2f:b6:c0:da:aa:56:51: 91:78:59:f1:4c:40:6e:de:8d:c9:ca:05:30:50:2e:58:c0:9a: 07:a2:9c:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWh6ov3BwD1WzdZckQBq32ZjzZnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4 REU3NUExMTAeFw0yNjA5MjEyMzMxMDBaFw0yNjA5MjMwMTIzMDBaMDMxMTAvBgNV BAMTKDk3QzY0Mjk2QjdEOENGMjA1NEEyRTE2QkQ4NEZGM0UzNzc2RTVGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI+PQaDKSF/o1EZesHAfLB4Qd0 cTh6nRWoou/0HVXYYTcm7jA40N+57Btdr2lsQCJuVSMFsaK4HLAUK9lt9LOwSIt4 G6TSd0hX6AvV1i4MmUVMQ8DrT1ATuntEetNM2HlZcmh3y2yJ17admUk3pMGqmRzq jOaFYUD08tmomD4eTf+6hrIrJxC3tN6aPO4VwP/ODhEuBM2DVpWT/FNrjSuqAMAN EBbuwVHJNe8tCHBgV3WjmkhlK3N4e7gjaNSlfw46fMANjkInCEOI0wu8FLZZ2I4k HiKAFeh88w1+yd2Sx6qSrxoYWwxrCcBkvmNJAT1khh7QZer+74AJj3eK1EcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl8ZClrfYzyBUouFr2E/z43duX1gwHwYDVR0j BBgwFoAUExssQYOnkmAmCL24ZOKSuo3nWhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJmZjFiM2YtMTE5MC00MTE5LWJiYzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4 M0E3OTI2MDI2MDhCREI4NjRFMjkyQkE4REU3NUExMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMzFCMkM0MTgzQTc5MjYwMjYwOEJEQjg2NEUyOTJCQThERTc1 QTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvMTMxQjJDNDE4M0E3OTI2MDI2MDhCREI4NjRFMjky QkE4REU3NUExMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZP8OVyTJ1bXZGfQKf4hliBNu0c5yxTRxme 0rMy5SjTDYyOIjtIJ/8ulMKmOOyyMrESDnIMJLsKO/G7VYkiLfPW3tVOyViiI0RA 4mNIDpN0o2nC3JFYjWdVaOl4z+NpLr6WVHWQ0MrRblAGCDQyoRrRIRW18jX4AODf +XGrTP4bgXr88dTyf0XKpQAPfG13kg1eO9d0jeiDr+nTobqCn81QE65pNA1MUe3a JnF+kMKP5qKM6kWmZNJJF3zGAM+MjdQqy6ByomXrKd4VmhH6D3eGwnuwN1ToUK53 N8TAuZSJIcRaL7bA2qpWUZF4WfFMQG7ejcnKBTBQLljAmgeinII= -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:50 2026 by rpki-client