$ rpki-client -vvvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: MVTTfYcymwnWwa0PYkBxWA2geXqhDnMuuVLHAgwmqfA= Subject key identifier: FF:E7:F4:6B:4F:41:17:DB:DE:EA:B8:D7:B8:83:ED:F7:43:A7:D4:4C Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 25FECA786A6D9D02D78A32F6C775665D8CB7C6CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 12:37:24 +0000 Manifest this update: Thu 03 Sep 2026 12:32:24 +0000 Manifest next update: Fri 04 Sep 2026 15:16:24 +0000 Files and hashes: 1: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) 2: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) 3: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 4: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 5: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: 7muXvhpwXwhJQwKWtKC2t+bbU212qGXjPmHPR1AW2ac=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fe:ca:78:6a:6d:9d:02:d7:8a:32:f6:c7:75:66:5d:8c:b7:c6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: Sep 3 12:32:24 2026 GMT Not After : Sep 4 15:16:24 2026 GMT Subject: CN=FFE7F46B4F4117DBDEEAB8D7B883EDF743A7D44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:a9:62:d7:b8:a5:39:bb:82:39:45:73:47: d7:29:b4:9f:09:81:11:fe:99:6c:48:8c:36:2a:23: 0c:a5:23:4d:ae:90:5d:af:d3:fc:f1:d7:4c:77:ac: 28:1c:4f:6b:1c:a6:c1:42:a1:ed:10:9d:0e:ba:a7: 4b:ec:32:78:75:06:21:57:56:5f:9a:fd:97:c0:9e: 41:47:dd:a4:50:cf:20:16:e0:d1:f5:45:d7:a1:46: 81:c2:55:e2:2d:75:58:c5:8e:4c:70:1c:4a:4d:d5: c1:56:0d:8d:79:b7:8a:96:a2:f7:04:bc:93:10:c5: 58:b7:ef:75:0e:8d:89:5e:6c:6e:27:e6:2e:ce:9b: 22:ba:d2:a8:f4:f1:27:06:d7:8f:23:d8:60:cc:e0: ea:da:2a:ed:3d:58:00:a1:d0:e5:5b:e3:94:8e:ef: ed:ff:8f:85:05:1a:45:00:ac:0b:36:cf:ca:5c:e7: 1c:d1:46:1a:e0:ba:42:22:0d:09:58:96:24:8f:21: 05:94:48:3e:4f:e0:33:72:64:2c:23:77:c7:1e:9f: f4:4c:ac:bc:98:19:fa:62:aa:9e:09:31:97:0e:cf: c9:3c:4c:26:53:d1:66:3d:f8:fe:23:5d:0e:a3:8f: 1b:8b:d2:16:17:c2:33:c4:f9:4b:41:4f:e0:8e:ac: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:F4:6B:4F:41:17:DB:DE:EA:B8:D7:B8:83:ED:F7:43:A7:D4:4C X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:74:f7:25:32:d4:57:6f:9a:3b:42:40:eb:89:53:e6:2e:0f: 2f:e0:00:cc:d2:51:16:c2:29:5a:f8:5b:52:a6:1e:99:72:53: cb:77:84:6e:f5:b6:c3:96:ad:8c:48:8a:0a:97:61:58:73:41: 96:7e:32:8c:7b:7e:bf:f4:ed:da:74:6e:31:b6:a6:38:a1:9c: 78:3d:54:71:08:da:86:4d:4c:ec:0a:b2:be:56:72:7f:35:34: 93:e0:0d:6e:54:8b:67:65:95:74:53:d8:ff:bc:72:2a:1e:02: 59:a2:a1:55:13:c0:59:ac:cb:39:6b:79:00:59:c7:16:56:f3: 27:e3:77:4a:11:30:93:51:20:5c:f9:49:bc:f3:78:31:1a:93: 39:ce:61:90:b2:de:e5:61:9f:96:93:a0:a8:1f:19:ef:7a:ee: f4:53:b0:8c:7b:56:9f:10:93:9b:85:a0:2a:f2:30:e5:3a:6a: 47:91:5c:bd:6f:68:7d:f1:6e:fd:ee:e7:7b:ae:68:27:3e:f2: d6:31:7c:4f:0c:c2:bc:75:91:25:96:24:b3:36:5d:32:4f:4b: 72:d4:e1:57:10:93:dc:4e:02:82:69:7d:99:bf:5c:7f:13:40: ac:2a:26:74:e5:07:e3:0d:70:31:6a:14:bd:af:ff:55:0c:f3: 9e:59:19:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJf7KeGptnQLXijL2x3VmXYy3xs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA5MDMxMjMyMjRaFw0yNjA5MDQxNTE2MjRaMDMxMTAvBgNV BAMTKEZGRTdGNDZCNEY0MTE3REJERUVBQjhEN0I4ODNFREY3NDNBN0Q0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNNqli17ilObuCOUVzR9cptJ8J gRH+mWxIjDYqIwylI02ukF2v0/zx10x3rCgcT2scpsFCoe0QnQ66p0vsMnh1BiFX Vl+a/ZfAnkFH3aRQzyAW4NH1RdehRoHCVeItdVjFjkxwHEpN1cFWDY15t4qWovcE vJMQxVi373UOjYlebG4n5i7OmyK60qj08ScG148j2GDM4OraKu09WACh0OVb45SO 7+3/j4UFGkUArAs2z8pc5xzRRhrgukIiDQlYliSPIQWUSD5P4DNyZCwjd8cen/RM rLyYGfpiqp4JMZcOz8k8TCZT0WY9+P4jXQ6jjxuL0hYXwjPE+UtBT+COrDpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/+f0a09BF9ve6rjXuIPt90On1EwwHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ09yUy1FdvmjtCQOuJU+YuDy/gAMzSURbC KVr4W1KmHplyU8t3hG71tsOWrYxIigqXYVhzQZZ+Mox7fr/07dp0bjG2pjihnHg9 VHEI2oZNTOwKsr5Wcn81NJPgDW5Ui2dllXRT2P+8cioeAlmioVUTwFmsyzlreQBZ xxZW8yfjd0oRMJNRIFz5SbzzeDEakznOYZCy3uVhn5aToKgfGe967vRTsIx7Vp8Q k5uFoCryMOU6akeRXL1vaH3xbv3u53uuaCc+8tYxfE8Mwrx1kSWWJLM2XTJPS3LU 4VcQk9xOAoJpfZm/XH8TQKwqJnTlB+MNcDFqFL2v/1UM855ZGes= -----END CERTIFICATE-----Generated at Thu Sep 3 22:38:41 2026 by rpki-client