$ rpki-client -vvvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json) Hash identifier: e/6zzmnNVryrchi0dxL8Bf2xQ30EEjomOJ5hRvhpFbo= Subject key identifier: 1D:44:53:91:B4:1D:ED:F7:E2:9D:60:B4:83:D1:EB:42:75:D3:A7:24 Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Certificate serial: 69DA3E747B32B99D1EAF5046B552E1B9BA086454 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 18:09:50 +0000 Manifest this update: Thu 03 Sep 2026 18:04:50 +0000 Manifest next update: Fri 04 Sep 2026 19:40:50 +0000 Files and hashes: 1: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: 2F20AeULINRR2T2qCDYf8p/aCKVarxoIKmylA4UuRWw=) 2: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=) 3: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=) 4: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:da:3e:74:7b:32:b9:9d:1e:af:50:46:b5:52:e1:b9:ba:08:64:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Validity Not Before: Sep 3 18:04:50 2026 GMT Not After : Sep 4 19:40:50 2026 GMT Subject: CN=1D445391B41DEDF7E29D60B483D1EB4275D3A724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ba:6c:91:01:08:da:e0:84:09:f1:9a:64:01: c8:92:a0:a9:81:d4:f9:e0:f3:ad:ea:b7:e3:15:86: a1:7e:d3:d8:00:ae:33:63:e4:b5:3e:ae:23:2f:98: 85:2c:a1:6d:f1:d3:2b:0d:c6:61:cf:77:08:c7:b3: bb:ef:e5:5d:41:61:ad:f4:3a:7f:54:b6:2d:9c:ee: bd:5b:81:63:a9:58:3c:7b:ca:df:7f:69:13:d6:e0: 18:1f:ec:44:87:18:7d:a3:03:c6:f9:c6:bd:fc:44: f5:64:0c:71:fe:93:6f:fa:4c:56:fd:98:c3:e0:4c: 41:0f:d1:97:74:49:6e:e8:b2:a0:85:b7:6d:32:08: 9f:a5:58:1f:1d:a6:ce:02:f1:1e:46:a8:e9:a3:30: 22:d5:ed:bb:e8:32:b2:7f:86:3f:2a:4f:ca:4f:8e: 29:46:1a:96:95:84:bc:6e:b9:9d:44:e8:a1:ec:f3: e4:05:83:91:7c:9b:3a:fa:e1:37:94:dc:0f:44:10: 34:7a:45:9a:19:4e:d4:d1:68:8f:ec:c1:64:1c:16: 98:93:cf:a6:84:b9:1d:2c:fc:58:a4:b1:d9:7c:ae: 6d:75:63:9e:a4:22:dc:47:9e:65:05:58:dd:54:28: 34:2a:65:c7:e6:27:66:7a:ee:c1:50:d4:c3:0c:2c: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:44:53:91:B4:1D:ED:F7:E2:9D:60:B4:83:D1:EB:42:75:D3:A7:24 X509v3 Authority Key Identifier: keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f1:0c:5e:9c:f9:3b:71:5d:1d:ee:88:a3:ac:68:f6:ef:47: 79:6a:81:a2:b9:b6:c5:30:04:96:66:56:b2:bf:69:af:d1:62: fa:a1:6b:73:a9:e8:77:19:78:c6:57:63:bc:07:92:5f:37:f4: 30:c1:72:10:55:c9:89:6e:ee:36:4f:45:24:cc:48:b0:e1:8a: 22:39:21:e5:78:4f:95:4d:27:fc:7e:08:c2:2b:77:28:7f:d4: 83:c7:5a:cd:ed:e8:7e:c6:8c:1a:f0:49:e6:a5:73:63:3b:19: 0d:13:f2:79:e0:2e:6a:b9:d2:e1:fb:86:22:ba:b8:d3:05:f8: cc:3a:69:07:33:31:ac:8a:e5:a4:29:46:29:05:53:92:24:ba: 92:3e:75:76:f6:2b:2b:bc:01:dc:5b:70:55:af:70:80:3e:79: 9a:cc:04:0c:57:d6:fe:ee:c1:fb:e1:a4:04:12:51:ae:f4:3f: 0a:1d:0d:e3:e7:51:dc:a7:2b:e4:a3:e1:0a:6f:2e:8c:df:03: e8:fd:4e:c1:03:93:ce:f2:71:eb:a7:4c:d1:08:50:c4:ff:0b: bd:49:6c:fa:6a:fa:de:08:d9:13:a3:12:5b:80:dd:1c:de:80: 05:6c:e9:69:fd:6e:6c:6e:52:f0:49:a9:47:1b:40:eb:7a:7b: 36:ca:6f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUado+dHsyuZ0er1BGtVLhuboIZFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy OTEyQTFDQTAeFw0yNjA5MDMxODA0NTBaFw0yNjA5MDQxOTQwNTBaMDMxMTAvBgNV BAMTKDFENDQ1MzkxQjQxREVERjdFMjlENjBCNDgzRDFFQjQyNzVEM0E3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoumyRAQja4IQJ8ZpkAciSoKmB 1Png863qt+MVhqF+09gArjNj5LU+riMvmIUsoW3x0ysNxmHPdwjHs7vv5V1BYa30 On9Uti2c7r1bgWOpWDx7yt9/aRPW4Bgf7ESHGH2jA8b5xr38RPVkDHH+k2/6TFb9 mMPgTEEP0Zd0SW7osqCFt20yCJ+lWB8dps4C8R5GqOmjMCLV7bvoMrJ/hj8qT8pP jilGGpaVhLxuuZ1E6KHs8+QFg5F8mzr64TeU3A9EEDR6RZoZTtTRaI/swWQcFpiT z6aEuR0s/Fiksdl8rm11Y56kItxHnmUFWN1UKDQqZcfmJ2Z67sFQ1MMMLHc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHURTkbQd7ffinWC0g9HrQnXTpyQwHwYDVR0j BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJC MjEyOTEyQTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPxDF6c+TtxXR3uiKOsaPbvR3lqgaK5tsUw BJZmVrK/aa/RYvqha3Op6HcZeMZXY7wHkl839DDBchBVyYlu7jZPRSTMSLDhiiI5 IeV4T5VNJ/x+CMIrdyh/1IPHWs3t6H7GjBrwSealc2M7GQ0T8nngLmq50uH7hiK6 uNMF+Mw6aQczMayK5aQpRikFU5IkupI+dXb2Kyu8AdxbcFWvcIA+eZrMBAxX1v7u wfvhpAQSUa70PwodDePnUdynK+Sj4QpvLozfA+j9TsEDk87yceunTNEIUMT/C71J bPpq+t4I2ROjEluA3RzegAVs6Wn9bmxuUvBJqUcbQOt6ezbKb50= -----END CERTIFICATE-----Generated at Thu Sep 3 20:52:15 2026 by rpki-client