$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft File: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft (raw, json) Hash identifier: Xoq9PBc1iAJB3QonOd2Ots1ShTW0sDKiGk4GyyG/f/Q= Subject key identifier: E0:9D:78:7B:A4:89:E7:75:0E:9E:9E:BD:AC:16:84:B3:BA:0D:3B:09 Authority key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 Certificate issuer: /CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Certificate serial: 6D1F3839028BB53A5E20DF93BA6DB270A3AD9379 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 02:45:00 +0000 Manifest this update: Fri 04 Sep 2026 02:40:00 +0000 Manifest next update: Sat 05 Sep 2026 02:55:00 +0000 Files and hashes: 1: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl (hash: UAJToySj5B/BxI1lzFZ2UWVQtIJGraHi+aG00LWzj2A=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: +bhA3UYPReYDsrbCyo3nY+2634L/BbsW+oTXhT99PgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 02:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1f:38:39:02:8b:b5:3a:5e:20:df:93:ba:6d:b2:70:a3:ad:93:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Validity Not Before: Sep 4 02:40:00 2026 GMT Not After : Sep 5 02:55:00 2026 GMT Subject: CN=E09D787BA489E7750E9E9EBDAC1684B3BA0D3B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:03:66:85:92:80:80:de:ca:d7:64:4a:1d: a0:36:d1:05:ad:da:9a:e1:00:3c:ef:f6:1c:c0:1f: 70:91:1f:40:a8:ec:b2:ef:69:a3:de:fb:71:45:11: 30:6c:9b:28:ca:99:f5:89:33:df:22:a8:ac:a8:9d: 7d:e1:fb:d7:bb:4d:c9:72:79:77:75:15:bc:ac:a6: 57:93:5c:7f:0e:47:be:7a:04:8e:fa:e8:5f:a5:27: 38:ca:52:20:05:d4:c0:e1:b6:85:37:c0:e5:a7:b5: 52:b2:34:78:b8:2b:db:d9:fe:f5:85:11:c3:42:d6: ba:7f:3f:52:28:f6:dc:8b:6c:1b:1e:83:19:ca:68: c0:e2:08:8a:33:59:79:11:ac:2b:32:33:7a:0c:e6: 51:c3:6d:33:96:8a:6f:1c:59:f9:92:d0:e5:ab:bb: f4:ef:03:c9:7c:75:ae:55:92:4a:00:ef:71:47:b6: ea:3e:00:b5:c1:40:3a:92:38:c2:ee:c9:91:01:35: 27:80:22:e0:99:8f:5c:46:87:44:27:8b:c5:5a:d9: 42:51:72:f0:d1:f4:46:47:90:5c:50:6d:4b:35:2d: c4:ec:e2:7d:4b:7d:36:2e:53:fb:8e:05:ba:5c:e5: fe:ef:1f:c7:5b:36:cb:e9:77:f5:b6:9c:08:8a:0a: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9D:78:7B:A4:89:E7:75:0E:9E:9E:BD:AC:16:84:B3:BA:0D:3B:09 X509v3 Authority Key Identifier: keyid:A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:11:6e:92:66:1e:d2:e3:b5:dd:9f:0b:ca:f3:53:b1:d9:0b: 57:79:13:ac:46:36:79:2a:4e:58:ae:0a:fb:55:1b:b5:68:1a: aa:0d:be:13:02:5e:5f:2a:dc:af:d1:72:ca:4c:db:a3:f2:76: 20:23:9e:2e:f9:7c:a7:ec:be:69:c8:6a:a5:30:3e:da:80:19: 77:27:8a:ee:3c:29:65:06:6a:8e:50:13:f1:ee:25:c9:ce:2f: 35:7a:29:89:9c:a3:f5:0e:8d:3a:d8:2d:9c:e4:4a:70:9d:a7: ad:75:ed:d0:19:ea:66:4e:46:01:01:3d:6c:38:c8:ab:94:55: 78:66:95:f5:15:49:b8:be:fa:7c:42:cc:00:ed:48:d1:4c:6b: 73:40:72:d3:46:97:25:20:4f:a5:d2:46:9a:7b:dd:a1:40:3e: 7a:14:f3:ca:9e:6b:87:23:2d:ce:ff:81:9f:33:04:cb:2e:f8: b1:1b:3e:3f:e5:f7:59:33:fd:a5:c1:53:84:79:84:80:f7:d4: da:b9:72:17:57:9b:b8:8f:2f:4d:b0:cb:f6:cc:1a:c5:69:0c: a0:fb:dc:02:00:c7:1e:bf:71:15:6e:0c:dc:d3:ea:44:82:5c: 58:65:e6:c9:82:7a:d5:9c:5b:1f:30:6a:46:7d:bf:cf:f9:34: 05:3b:0d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbR84OQKLtTpeIN+Tum2ycKOtk3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2QjkxMURC Q0E0RTBFNzAeFw0yNjA5MDQwMjQwMDBaFw0yNjA5MDUwMjU1MDBaMDMxMTAvBgNV BAMTKEUwOUQ3ODdCQTQ4OUU3NzUwRTlFOUVCREFDMTY4NEIzQkEwRDNCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSQNmhZKAgN7K12RKHaA20QWt 2prhADzv9hzAH3CRH0Co7LLvaaPe+3FFETBsmyjKmfWJM98iqKyonX3h+9e7Tcly eXd1FbyspleTXH8OR756BI766F+lJzjKUiAF1MDhtoU3wOWntVKyNHi4K9vZ/vWF EcNC1rp/P1Io9tyLbBsegxnKaMDiCIozWXkRrCsyM3oM5lHDbTOWim8cWfmS0OWr u/TvA8l8da5VkkoA73FHtuo+ALXBQDqSOMLuyZEBNSeAIuCZj1xGh0Qni8Va2UJR cvDR9EZHkFxQbUs1LcTs4n1LfTYuU/uOBbpc5f7vH8dbNsvpd/W2nAiKCkh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4J14e6SJ53UOnp69rBaEs7oNOwkwHwYDVR0j BBgwFoAUqXqZVLMiTxh6YY7y02uRHbyk4OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVhNzNkMDQtMjE0Zi00NmI4LTk3NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRC MzIyNEYxODdBNjE4RUYyRDM2QjkxMURCQ0E0RTBFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTdBOTk1NEIzMjI0RjE4N0E2MThFRjJEMzZCOTExREJDQTRF MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2Qjkx MURCQ0E0RTBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKARbpJmHtLjtd2fC8rzU7HZC1d5E6xGNnkq TliuCvtVG7VoGqoNvhMCXl8q3K/RcspM26PydiAjni75fKfsvmnIaqUwPtqAGXcn iu48KWUGao5QE/HuJcnOLzV6KYmco/UOjTrYLZzkSnCdp6117dAZ6mZORgEBPWw4 yKuUVXhmlfUVSbi++nxCzADtSNFMa3NActNGlyUgT6XSRpp73aFAPnoU88qea4cj Lc7/gZ8zBMsu+LEbPj/l91kz/aXBU4R5hID31Nq5chdXm7iPL02wy/bMGsVpDKD7 3AIAxx6/cRVuDNzT6kSCXFhl5smCetWcWx8wakZ9v8/5NAU7DTg= -----END CERTIFICATE-----Generated at Fri Sep 4 15:17:30 2026 by rpki-client