$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft File: C1B31DA38AE18C533BF3125B438DFED7920609DE.mft (raw, json) Hash identifier: h+7U8zM02/ODPl9LyvpAbXXxGMQ8D2WKIBjPpekjUWQ= Subject key identifier: 20:1C:51:59:0E:E7:BF:14:2D:28:09:6D:C8:25:06:0E:E9:8D:9D:9C Authority key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Certificate issuer: /CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Certificate serial: 47075E650731BA97C6F3B2144FF0AC5BE204FC94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:02:41 +0000 Manifest this update: Wed 17 Jun 2026 03:57:41 +0000 Manifest next update: Thu 18 Jun 2026 07:29:41 +0000 Files and hashes: 1: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: Oz+MvkXknVOx+2kg9rHiPY0cXl051S4cpZ1FOmSXXT0=) 2: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: YH3SdRSTcCFOkX/dwCqwGV47PfPn0krgPX18UqIdlBw=) 3: C1B31DA38AE18C533BF3125B438DFED7920609DE.crl (hash: GVYr3Q1y5JK/6nB8e4yFzr1NZUx5nH1Xu0slsdfDGjY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:07:5e:65:07:31:ba:97:c6:f3:b2:14:4f:f0:ac:5b:e2:04:fc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Validity Not Before: Jun 17 03:57:41 2026 GMT Not After : Jun 18 07:29:41 2026 GMT Subject: CN=201C51590EE7BF142D28096DC825060EE98D9D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:23:ce:eb:ff:82:d6:be:73:ac:68:b2:39:37: 13:28:18:9d:13:8a:8b:9d:ca:8e:b2:18:51:40:3d: 3f:d5:df:e0:0f:5d:df:fd:cc:22:05:7b:d9:db:f8: ab:c8:a0:4d:9e:3a:65:1b:2d:ca:9a:71:59:f8:d7: cd:11:d9:64:b5:ac:4a:e7:e5:82:c4:0c:10:85:3c: ff:0b:ff:a7:7f:01:fb:35:8d:a2:ea:04:09:72:73: b2:09:2d:d9:06:fd:2d:91:9b:d7:45:d9:3b:39:2a: b8:fc:5f:3f:19:01:53:91:03:41:af:cc:4e:c3:e8: 42:fe:76:92:32:77:91:b4:70:0a:df:d5:2a:54:12: 5a:55:a7:b1:03:5c:3a:da:24:75:c5:e8:9a:75:50: 10:bc:c5:9b:c0:51:24:4b:fc:1c:cf:34:38:d6:ce: b9:06:65:d9:bf:bb:dd:5d:e6:1b:2f:d6:68:b7:df: d6:f6:12:03:7c:9e:d9:b6:cb:26:24:0d:07:17:28: 5f:2e:ae:28:e1:14:51:37:ad:42:da:e7:2c:95:9e: 05:10:aa:6d:84:16:79:29:ab:ae:72:80:ab:4c:66: 51:4b:83:6d:56:52:0e:7e:b7:c2:90:35:e4:fb:06: c3:d8:9a:12:3a:4c:b0:ba:50:6a:54:75:1e:fb:5c: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1C:51:59:0E:E7:BF:14:2D:28:09:6D:C8:25:06:0E:E9:8D:9D:9C X509v3 Authority Key Identifier: keyid:C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a5:67:7d:d1:15:15:5b:12:10:84:f6:26:02:05:18:f7:e1: a1:8c:12:b9:44:e1:6f:c7:af:e1:a5:b9:ae:94:36:e3:31:f1: ea:51:1f:e1:5a:c9:ef:ad:88:f3:37:d3:51:9b:0b:2c:e9:77: 3a:6a:10:36:c4:15:b1:97:4e:56:68:b9:26:75:16:0a:34:9e: 0a:75:16:09:18:c4:c4:95:6a:80:37:c2:55:d9:c3:a5:81:fd: 6c:03:07:77:dd:13:a3:52:77:41:87:3b:66:bc:2b:0a:70:30: ab:09:60:23:0c:e6:07:21:15:3d:25:69:2a:e9:cf:90:d0:a4: d4:b2:b8:fa:d0:02:8d:df:f0:44:18:be:bc:6c:01:f6:a8:fa: e4:de:d9:24:76:d3:6a:42:52:0a:6f:f6:ef:cb:55:7a:ac:6b: 1e:f4:00:73:03:19:54:e4:6f:ee:e8:f5:2d:fb:a1:08:00:30: 83:9d:01:ed:a9:fa:d1:bd:ec:fd:e5:5a:0e:bb:3c:60:c8:50: f1:ec:d4:43:40:20:9f:89:51:09:c5:4d:48:74:6d:88:6e:3e: d0:8c:8a:94:8c:a3:95:f5:ca:e7:e3:20:22:25:24:87:48:5e: 95:66:d8:08:bd:b8:7e:f9:1c:aa:ab:6b:3d:39:1a:41:1c:d6: 24:cb:e2:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwdeZQcxupfG87IUT/CsW+IE/JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5 MjA2MDlERTAeFw0yNjA2MTcwMzU3NDFaFw0yNjA2MTgwNzI5NDFaMDMxMTAvBgNV BAMTKDIwMUM1MTU5MEVFN0JGMTQyRDI4MDk2REM4MjUwNjBFRTk4RDlEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGI87r/4LWvnOsaLI5NxMoGJ0T ioudyo6yGFFAPT/V3+APXd/9zCIFe9nb+KvIoE2eOmUbLcqacVn4180R2WS1rErn 5YLEDBCFPP8L/6d/Afs1jaLqBAlyc7IJLdkG/S2Rm9dF2Ts5Krj8Xz8ZAVORA0Gv zE7D6EL+dpIyd5G0cArf1SpUElpVp7EDXDraJHXF6Jp1UBC8xZvAUSRL/BzPNDjW zrkGZdm/u91d5hsv1mi339b2EgN8ntm2yyYkDQcXKF8urijhFFE3rULa5yyVngUQ qm2EFnkpq65ygKtMZlFLg21WUg5+t8KQNeT7BsPYmhI6TLC6UGpUdR77XBvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIBxRWQ7nvxQtKAltyCUGDumNnZwwHwYDVR0j BBgwFoAUwbMdo4rhjFM78xJbQ43+15IGCd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdhMTEwZTgtYjhjMi00Mjc3LWJlYjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4 QUUxOEM1MzNCRjMxMjVCNDM4REZFRDc5MjA2MDlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMUIzMURBMzhBRTE4QzUzM0JGMzEyNUI0MzhERkVENzkyMDYw OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdhMTEwZTgtYjhjMi00Mjc3LWJl YjMtOTJhYTViMzY5MGYwLzAvQzFCMzFEQTM4QUUxOEM1MzNCRjMxMjVCNDM4REZF RDc5MjA2MDlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOlZ33RFRVbEhCE9iYCBRj34aGMErlE4W/H r+Glua6UNuMx8epRH+Faye+tiPM301GbCyzpdzpqEDbEFbGXTlZouSZ1Fgo0ngp1 FgkYxMSVaoA3wlXZw6WB/WwDB3fdE6NSd0GHO2a8KwpwMKsJYCMM5gchFT0laSrp z5DQpNSyuPrQAo3f8EQYvrxsAfao+uTe2SR202pCUgpv9u/LVXqsax70AHMDGVTk b+7o9S37oQgAMIOdAe2p+tG97P3lWg67PGDIUPHs1ENAIJ+JUQnFTUh0bYhuPtCM ipSMo5X1yufjICIlJIdIXpVm2Ai9uH75HKqraz05GkEc1iTL4uE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:35 2026 by rpki-client