$ rpki-client -vvvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json) Hash identifier: CP/t34dLuJJU0ZZGC78AlOaWIVyXppCxfThB0rTAVo4= Subject key identifier: 92:0B:39:C1:9F:05:5C:B7:8C:20:83:ED:92:BD:17:34:23:62:34:63 Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Certificate serial: 3987B2871F6B65CA82EDB9A4133045228123E19A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 22:51:10 +0000 Manifest this update: Wed 02 Sep 2026 22:46:10 +0000 Manifest next update: Fri 04 Sep 2026 02:08:10 +0000 Files and hashes: 1: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: bgK3oiVXgEAXhoTuIzG81K5LsF7X6wa18bywwdRlimg=) 2: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=) 3: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=) 4: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:87:b2:87:1f:6b:65:ca:82:ed:b9:a4:13:30:45:22:81:23:e1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Validity Not Before: Sep 2 22:46:10 2026 GMT Not After : Sep 4 02:08:10 2026 GMT Subject: CN=920B39C19F055CB78C2083ED92BD173423623463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cb:cc:a2:69:29:9e:3a:95:a3:d9:80:2d:1e: a3:46:19:9b:0d:8b:26:c8:22:87:14:85:2e:52:d2: f2:1d:09:f0:d5:b6:2a:17:9b:26:9e:7a:a1:af:22: 6f:d0:4a:74:47:6d:14:33:81:fe:02:05:b7:ae:9f: 17:e6:08:ae:9e:1d:cc:ca:ce:77:08:5f:be:1e:11: 55:e1:23:35:7a:bf:eb:79:cb:d7:3a:41:3b:24:a2: 61:8f:e6:c3:f7:9d:35:3b:f2:5a:6a:d6:c4:08:56: d8:2e:a3:13:09:42:83:30:e4:e0:7e:fd:d5:9b:05: 52:c7:d6:e5:28:f4:34:d9:01:43:e5:70:06:7f:61: 54:35:2e:03:5c:9b:88:a7:d2:76:32:09:e6:f5:20: b3:89:1a:3d:c2:fb:18:b9:dd:23:6f:51:fc:83:2d: 65:2a:9c:a4:1a:66:66:70:03:ce:ce:c2:9f:38:dc: b3:9a:ec:5f:ea:0b:00:2a:bb:04:66:1a:fe:7c:15: de:b4:fd:eb:27:fd:9e:3b:a7:1c:f4:25:75:bd:a6: c6:47:d2:37:53:6a:2e:8f:5c:bd:52:5c:51:2f:5f: f7:7e:6a:1a:e5:3e:de:64:41:85:a2:a1:c0:6c:87: e4:4e:a8:02:7a:75:21:3c:73:d7:ba:d2:b6:b9:a2: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0B:39:C1:9F:05:5C:B7:8C:20:83:ED:92:BD:17:34:23:62:34:63 X509v3 Authority Key Identifier: keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d6:57:b4:57:f0:05:c7:c7:87:3f:79:d2:33:5c:a3:c7:f9: cd:ca:b9:0f:fc:62:51:30:aa:e4:08:9f:4e:fa:72:f5:7f:7a: a7:c6:8d:3f:f8:8f:04:6c:90:20:e1:ff:ea:24:1c:ea:31:f5: 28:46:11:1f:d9:68:2b:0a:0e:dd:15:df:7e:8a:40:f3:b7:57: e6:b6:30:37:4a:f3:16:fb:c8:90:b4:db:18:22:a5:16:69:9a: 4d:40:37:eb:b0:53:03:6e:cc:93:4b:f7:23:8d:d5:7e:f5:95: fc:08:88:33:f7:9a:43:0b:6b:81:49:0c:37:1e:10:8d:c5:ff: 5c:12:a5:3e:4f:64:24:34:1b:3a:26:2e:fe:54:c1:66:f7:8e: 0a:cf:29:e2:51:f6:3e:b1:1d:2f:94:9d:02:34:a5:34:9c:67: 57:8e:4e:b9:b5:e6:be:c3:a2:aa:4f:32:5d:57:e8:f0:40:0d: 75:7d:57:05:3c:69:e3:76:44:43:03:d5:b4:74:55:7b:ac:3c: d9:29:d9:cd:f2:52:0f:cc:24:76:9c:63:fb:6d:8f:75:b8:62: 14:04:7e:3c:0c:0f:40:15:58:d8:c4:2d:f3:ca:a0:7b:7e:fb: 6c:94:ba:9f:19:a8:e1:05:6b:43:07:e4:e9:99:d4:56:7f:f8: b0:c3:98:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYeyhx9rZcqC7bmkEzBFIoEj4ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy OTEyQTFDQTAeFw0yNjA5MDIyMjQ2MTBaFw0yNjA5MDQwMjA4MTBaMDMxMTAvBgNV BAMTKDkyMEIzOUMxOUYwNTVDQjc4QzIwODNFRDkyQkQxNzM0MjM2MjM0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzy8yiaSmeOpWj2YAtHqNGGZsN iybIIocUhS5S0vIdCfDVtioXmyaeeqGvIm/QSnRHbRQzgf4CBbeunxfmCK6eHczK zncIX74eEVXhIzV6v+t5y9c6QTskomGP5sP3nTU78lpq1sQIVtguoxMJQoMw5OB+ /dWbBVLH1uUo9DTZAUPlcAZ/YVQ1LgNcm4in0nYyCeb1ILOJGj3C+xi53SNvUfyD LWUqnKQaZmZwA87Owp843LOa7F/qCwAquwRmGv58Fd60/esn/Z47pxz0JXW9psZH 0jdTai6PXL1SXFEvX/d+ahrlPt5kQYWiocBsh+ROqAJ6dSE8c9e60ra5olkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkgs5wZ8FXLeMIIPtkr0XNCNiNGMwHwYDVR0j BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJC MjEyOTEyQTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7WV7RX8AXHx4c/edIzXKPH+c3KuQ/8YlEw quQIn076cvV/eqfGjT/4jwRskCDh/+okHOox9ShGER/ZaCsKDt0V336KQPO3V+a2 MDdK8xb7yJC02xgipRZpmk1AN+uwUwNuzJNL9yON1X71lfwIiDP3mkMLa4FJDDce EI3F/1wSpT5PZCQ0GzomLv5UwWb3jgrPKeJR9j6xHS+UnQI0pTScZ1eOTrm15r7D oqpPMl1X6PBADXV9VwU8aeN2REMD1bR0VXusPNkp2c3yUg/MJHacY/ttj3W4YhQE fjwMD0AVWNjELfPKoHt++2yUup8ZqOEFa0MH5OmZ1FZ/+LDDmP4= -----END CERTIFICATE-----Generated at Thu Sep 3 14:18:30 2026 by rpki-client