$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft File: 9970795F3B277481EE73EA3A16E4FA33964C92D3.mft (raw, json) Hash identifier: UKjPHHXZGZ5Yg77zea3kFZ3DCtmZ7OF/r+SI8EfGMuw= Subject key identifier: 17:3E:4B:27:38:B3:BB:B7:86:D1:96:8C:4B:A3:77:58:89:1A:41:59 Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 028E9F52738D91E694A1E0C4180CFDBC99548E26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 02:15:44 +0000 Manifest this update: Thu 03 Sep 2026 02:10:44 +0000 Manifest next update: Fri 04 Sep 2026 04:51:44 +0000 Files and hashes: 1: 9970795F3B277481EE73EA3A16E4FA33964C92D3.crl (hash: MKnXPetOOtomSBDuPAnBglZ6+wsvniQ7Hwn4Tn3tFyo=) 2: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q=) 3: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: 3Da0wSVO79CXcT4/2ct9HlMI+w8ZYFGpqAbvRWk65hU=) 4: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 04:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8e:9f:52:73:8d:91:e6:94:a1:e0:c4:18:0c:fd:bc:99:54:8e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: Sep 3 02:10:44 2026 GMT Not After : Sep 4 04:51:44 2026 GMT Subject: CN=173E4B2738B3BBB786D1968C4BA37758891A4159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:6d:6c:e6:f6:bb:34:44:99:1a:3a:1b:64: ae:a8:fc:58:a1:16:df:de:7c:35:4e:03:b4:d7:18: bf:7a:f0:69:6a:70:78:4e:a3:31:3f:05:d8:bd:35: e6:70:c4:c7:92:4d:fc:be:69:35:42:c8:21:57:e6: 99:0e:6a:34:f5:41:2f:e9:78:94:29:97:47:7d:fa: 92:38:70:3a:de:a8:59:16:b0:71:e7:c1:41:4f:8e: 0e:b2:17:ed:60:77:58:eb:f9:f5:52:cd:8d:2b:71: 49:21:4d:43:d4:71:87:70:6f:96:7d:96:3c:b9:48: 82:45:ba:8c:e6:a1:3b:90:55:33:3e:50:26:cf:28: 8a:f7:20:3e:dd:73:3d:86:aa:40:a5:5e:2c:75:bf: be:2d:58:b7:6e:e6:9d:28:a5:71:b9:0f:8f:09:32: 1c:ea:7d:ab:50:43:f9:d6:6e:9e:e0:98:b2:cc:cf: 32:85:6b:62:f4:82:8a:68:70:2e:29:00:fa:9b:7e: 68:28:3d:24:18:83:2e:c5:dd:40:7e:55:f8:a0:20: 53:66:eb:c5:22:d0:b0:c9:a7:6a:fb:a1:fd:eb:b7: 9a:ca:34:14:4f:18:32:c8:48:ec:6e:02:c2:ad:70: 8d:f3:de:fd:19:24:f4:cb:e3:42:13:88:94:c3:af: 02:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3E:4B:27:38:B3:BB:B7:86:D1:96:8C:4B:A3:77:58:89:1A:41:59 X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fc:a4:3b:9a:e5:de:ef:6a:d5:34:4d:47:f7:11:3f:2a:b0: 8e:8b:f9:ff:ed:6f:33:33:40:e7:36:c2:ac:83:8f:dd:f2:e7: cf:43:34:28:fb:16:20:a1:31:aa:df:0a:fb:cc:74:28:c3:54: e8:c2:91:73:12:c6:15:4e:8c:1a:1d:6c:3d:41:85:80:b6:f0: b0:fb:c4:62:ee:37:68:38:8a:33:a3:66:95:2f:61:a7:c1:af: d2:c3:26:89:bc:f9:ef:55:13:b9:72:25:68:e5:aa:a1:c4:d3: 69:f7:76:d2:1f:6c:82:ce:11:de:63:eb:13:bf:9f:84:10:df: 23:90:a5:5b:ca:df:0e:19:a4:49:b3:ab:3e:dd:13:3e:2d:14: a4:27:49:c0:0f:33:f4:24:38:e0:f8:ce:74:51:95:c2:55:b6: 69:4b:09:22:3d:e1:43:bf:42:d3:6e:53:89:ac:3d:0d:ff:c5: bc:8f:ac:c1:a7:59:29:b4:7a:49:66:86:13:10:d3:8d:7f:66: 6c:3f:c8:9e:34:7d:6a:11:d6:e8:cd:35:6c:3a:3f:09:36:02: 6f:69:96:cd:36:a9:80:91:1f:63:b9:6f:dd:a7:d0:91:02:0f: 5b:5d:94:04:cb:6e:f6:cf:38:c8:a5:28:fa:b7:ae:55:0d:93: 33:cb:81:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAo6fUnONkeaUoeDEGAz9vJlUjiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjA5MDMwMjEwNDRaFw0yNjA5MDQwNDUxNDRaMDMxMTAvBgNV BAMTKDE3M0U0QjI3MzhCM0JCQjc4NkQxOTY4QzRCQTM3NzU4ODkxQTQxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcG1s5va7NESZGjobZK6o/Fih Ft/efDVOA7TXGL968GlqcHhOozE/Bdi9NeZwxMeSTfy+aTVCyCFX5pkOajT1QS/p eJQpl0d9+pI4cDreqFkWsHHnwUFPjg6yF+1gd1jr+fVSzY0rcUkhTUPUcYdwb5Z9 ljy5SIJFuozmoTuQVTM+UCbPKIr3ID7dcz2GqkClXix1v74tWLdu5p0opXG5D48J MhzqfatQQ/nWbp7gmLLMzzKFa2L0gopocC4pAPqbfmgoPSQYgy7F3UB+VfigIFNm 68Ui0LDJp2r7of3rt5rKNBRPGDLISOxuAsKtcI3z3v0ZJPTL40ITiJTDrwINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFz5LJzizu7eG0ZaMS6N3WIkaQVkwHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZB MzM5NjRDOTJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX8pDua5d7vatU0TUf3ET8qsI6L+f/tbzMz QOc2wqyDj93y589DNCj7FiChMarfCvvMdCjDVOjCkXMSxhVOjBodbD1BhYC28LD7 xGLuN2g4ijOjZpUvYafBr9LDJom8+e9VE7lyJWjlqqHE02n3dtIfbILOEd5j6xO/ n4QQ3yOQpVvK3w4ZpEmzqz7dEz4tFKQnScAPM/QkOOD4znRRlcJVtmlLCSI94UO/ QtNuU4msPQ3/xbyPrMGnWSm0eklmhhMQ041/Zmw/yJ40fWoR1ujNNWw6Pwk2Am9p ls02qYCRH2O5b92n0JECD1tdlATLbvbPOMilKPq3rlUNkzPLgTQ= -----END CERTIFICATE-----Generated at Thu Sep 3 18:57:55 2026 by rpki-client