$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json) Hash identifier: CBPg9lVkSWv/6p5bLpa9xuSuagAnyU4MfZYGbSVGsN8= Subject key identifier: 25:B5:13:63:24:BA:E7:A3:21:04:56:BE:A4:4A:32:73:28:82:34:6D Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Certificate serial: 7BA7F4F1AC03CAE409CFF15744FFC6EA98689398 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 09:09:44 +0000 Manifest this update: Wed 04 Nov 2026 09:04:44 +0000 Manifest next update: Thu 05 Nov 2026 10:12:44 +0000 Files and hashes: 1: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: RrHvPdR7FzKFv51qrRkctAWLB1ksSNlvSyz/lI5Kvlo=) 2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 10:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a7:f4:f1:ac:03:ca:e4:09:cf:f1:57:44:ff:c6:ea:98:68:93:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Validity Not Before: Nov 4 09:04:44 2026 GMT Not After : Nov 5 10:12:44 2026 GMT Subject: CN=25B5136324BAE7A3210456BEA44A32732882346D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:27:75:06:49:24:5a:40:a9:e4:e3:81:e8: 38:4c:e6:c0:89:97:9f:15:69:a3:65:6e:ab:b6:00: 68:77:f7:a4:de:09:ac:8a:58:36:16:4b:85:6e:12: c8:a1:5d:a4:9d:7f:49:ec:78:f0:3f:42:7c:b0:23: 6a:98:f8:33:84:7b:b1:31:8e:2f:1e:85:3a:9b:e7: 95:11:22:05:37:a0:6f:f0:8a:e2:80:f2:3d:e6:9a: ea:4a:a8:53:22:c9:5c:1f:02:58:d3:ab:09:78:61: 59:23:3f:41:92:67:55:83:a4:f2:9f:1f:9a:98:80: 74:d0:00:f7:26:a3:53:b2:76:5a:67:7e:32:e0:1a: db:6c:81:e5:d6:ba:1e:79:8c:ba:77:4a:52:aa:a6: c5:37:8b:99:6c:ff:d5:0f:e4:6e:e2:97:35:5b:2b: 01:19:da:1e:01:fb:aa:c3:28:7c:83:b1:13:b0:ab: a2:77:c7:29:7a:6e:1a:8d:52:55:9d:9e:00:bd:a9: 5f:b9:91:5d:d9:41:3b:82:27:02:7b:d8:54:65:d7: f5:89:0e:ce:b1:f5:19:c8:2b:17:9c:54:08:cc:da: 15:72:f3:8b:b8:30:5a:28:9e:f2:56:73:54:98:aa: 76:c3:47:bc:c7:f8:6c:e4:ee:80:b0:ce:6e:d8:62: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B5:13:63:24:BA:E7:A3:21:04:56:BE:A4:4A:32:73:28:82:34:6D X509v3 Authority Key Identifier: keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:35:74:14:4f:2b:bb:10:51:73:52:26:34:e5:3d:be:51:88: ac:50:79:cc:46:6a:00:a6:11:83:5a:69:20:e4:db:aa:75:1c: 75:25:6f:8e:22:dd:5c:da:47:d9:76:c2:9b:48:98:7b:e0:8a: 72:0d:5f:8d:a1:b9:19:10:1a:8f:37:91:70:14:7c:f2:12:a8: 26:3e:73:13:fe:ac:ce:0a:bb:c6:11:8d:70:ca:82:98:8a:9c: 90:19:53:ee:26:d4:25:f2:a1:6e:e3:b5:cb:f1:16:d4:65:a9: e9:b4:27:93:9c:17:ac:ba:b4:69:de:5c:a0:31:8a:db:1b:59: c7:99:d1:ce:b2:21:d3:7d:c0:fa:3d:06:12:d5:0a:97:ed:b5: 54:a2:65:bb:55:cd:70:16:2a:5d:91:b1:ff:f7:04:bf:10:ec: ea:67:6b:d5:03:43:59:1f:fb:91:d3:09:43:b4:3d:a3:dc:4f: 85:2c:99:80:13:3f:9e:cc:4d:ea:f8:b1:d3:0d:ba:f2:bc:8c: ac:81:64:77:a8:bb:20:5e:1a:e7:0d:31:6c:95:ed:16:18:eb: 1b:ce:bb:84:61:38:ce:79:b4:d8:a5:8f:5a:ce:8f:8e:f2:9b: 94:8c:a9:89:ac:b0:5c:03:6a:ac:50:a1:34:af:80:20:5d:17: 37:3c:f2:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6f08awDyuQJz/FXRP/G6phok5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC RjYxQzU0OTAeFw0yNjExMDQwOTA0NDRaFw0yNjExMDUxMDEyNDRaMDMxMTAvBgNV BAMTKDI1QjUxMzYzMjRCQUU3QTMyMTA0NTZCRUE0NEEzMjczMjg4MjM0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Byd1BkkkWkCp5OOB6DhM5sCJ l58VaaNlbqu2AGh396TeCayKWDYWS4VuEsihXaSdf0nsePA/QnywI2qY+DOEe7Ex ji8ehTqb55URIgU3oG/wiuKA8j3mmupKqFMiyVwfAljTqwl4YVkjP0GSZ1WDpPKf H5qYgHTQAPcmo1OydlpnfjLgGttsgeXWuh55jLp3SlKqpsU3i5ls/9UP5G7ilzVb KwEZ2h4B+6rDKHyDsROwq6J3xyl6bhqNUlWdngC9qV+5kV3ZQTuCJwJ72FRl1/WJ Ds6x9RnIKxecVAjM2hVy84u4MFoonvJWc1SYqnbDR7zH+Gzk7oCwzm7YYrfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJbUTYyS656MhBFa+pEoycyiCNG0wHwYDVR0j BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD NTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQz NzJCRjYxQzU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHs1dBRPK7sQUXNSJjTlPb5RiKxQecxGagCm EYNaaSDk26p1HHUlb44i3VzaR9l2wptImHvginINX42huRkQGo83kXAUfPISqCY+ cxP+rM4Ku8YRjXDKgpiKnJAZU+4m1CXyoW7jtcvxFtRlqem0J5OcF6y6tGneXKAx itsbWceZ0c6yIdN9wPo9BhLVCpfttVSiZbtVzXAWKl2Rsf/3BL8Q7Opna9UDQ1kf +5HTCUO0PaPcT4UsmYATP57MTer4sdMNuvK8jKyBZHeouyBeGucNMWyV7RYY6xvO u4RhOM55tNilj1rOj47ym5SMqYmssFwDaqxQoTSvgCBdFzc88mY= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:50 2026 by rpki-client