$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft File: B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json) Hash identifier: fkEpBUis23BFY0PxSj6UwYQr8aZFcHIkPRUOiLirrNs= Subject key identifier: 75:69:F0:D4:19:4F:6F:03:4B:8B:0E:7C:AE:93:5E:3A:5D:75:3F:4C Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Certificate issuer: /CN=B97B101303D652EE5C0234A7A800429959745FF3 Certificate serial: 12E1A1740F2A9BA34CD5179CD48D30177004009B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:37:01 +0000 Manifest this update: Mon 20 Jul 2026 12:32:01 +0000 Manifest next update: Tue 21 Jul 2026 14:32:01 +0000 Files and hashes: 1: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=) 2: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: hxMFrFlAHiCVkOd38ofonkuPXO4be6hHwrzweTjRMCQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:a1:74:0f:2a:9b:a3:4c:d5:17:9c:d4:8d:30:17:70:04:00:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3 Validity Not Before: Jul 20 12:32:01 2026 GMT Not After : Jul 21 14:32:01 2026 GMT Subject: CN=7569F0D4194F6F034B8B0E7CAE935E3A5D753F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:b1:40:cd:21:f1:d3:8f:fa:81:9d:2e:bd: 89:5f:ac:c8:f4:3f:dc:ed:77:fa:a3:c7:6f:33:cf: 21:d4:ce:88:d2:e7:d2:36:b9:ee:21:e4:44:f7:da: 1e:0a:80:65:a6:5d:ed:90:be:80:82:aa:51:2d:cc: 98:42:16:e8:3d:56:44:da:5e:3a:31:64:e7:89:06: b0:8f:2a:e3:86:a0:00:93:f5:8e:bb:8b:8d:67:60: 08:fd:08:54:5a:26:0a:de:b2:00:0a:23:c2:f4:8b: d3:a0:53:1d:14:76:42:85:e8:36:5a:72:1b:7a:ea: c9:01:ba:aa:31:51:ad:f4:fd:f1:94:73:4c:51:a3: 91:fb:4c:be:9f:07:81:af:ce:7f:c0:57:2d:98:78: 8f:7f:00:cf:75:83:de:36:ec:1b:c5:07:2b:76:8d: 4f:ad:30:40:89:13:e2:12:cf:b9:37:ed:dd:ae:75: 71:5f:61:94:fc:72:95:71:54:c7:10:2c:eb:bf:d0: 49:7b:60:94:e5:46:74:fe:96:5f:95:39:0d:f8:3d: 6e:62:4f:14:71:90:1f:32:ae:dc:e3:13:60:af:53: 78:f2:06:af:91:a5:61:c4:9e:f4:c8:ae:40:a9:6d: 6d:15:e5:21:b8:ae:bb:b6:2e:d3:58:07:6c:52:04: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:F0:D4:19:4F:6F:03:4B:8B:0E:7C:AE:93:5E:3A:5D:75:3F:4C X509v3 Authority Key Identifier: keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cf:fe:c6:fe:7d:21:62:ac:8c:52:32:7e:55:37:ad:02:6a: ee:13:a9:81:fe:7e:a9:db:af:da:57:34:0c:0e:ed:ef:59:26: 4d:27:19:f1:f4:1c:8e:fc:a4:97:97:6a:c5:9a:e1:7b:59:ac: 6b:37:46:f0:33:a2:cb:31:be:fc:36:6a:79:2e:5e:8f:2c:99: 74:3a:74:33:c4:cb:67:4c:62:b0:30:04:bb:d3:36:7e:31:88: fc:d7:84:f5:3c:1f:c4:85:81:f2:2e:22:23:4d:bc:ec:64:be: e0:59:9e:36:67:a7:89:75:21:d2:39:ea:94:09:38:43:41:49: 77:57:9d:06:78:01:4a:b7:13:ee:b8:03:c0:72:27:b8:e3:2b: 89:a8:db:90:24:ea:6f:27:59:32:18:a1:e1:77:05:db:32:c5: 5f:5e:95:99:f1:34:82:7b:0d:28:9c:eb:75:96:70:06:c6:8f: 5d:38:08:82:ec:bc:ce:d3:8d:3e:8f:77:8f:53:ca:43:8a:20: c1:75:33:43:9c:81:05:e6:fa:14:da:42:84:81:e9:4c:d6:cc: a0:4f:82:4b:c0:6e:21:f6:39:b2:9d:c4:73:d9:68:75:9f:e4: f7:f4:f9:08:08:7d:b4:ed:d1:7b:18:1b:82:3b:bc:79:bb:87: 9d:60:4a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuGhdA8qm6NM1Rec1I0wF3AEAJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1 OTc0NUZGMzAeFw0yNjA3MjAxMjMyMDFaFw0yNjA3MjExNDMyMDFaMDMxMTAvBgNV BAMTKDc1NjlGMEQ0MTk0RjZGMDM0QjhCMEU3Q0FFOTM1RTNBNUQ3NTNGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZbFAzSHx04/6gZ0uvYlfrMj0 P9ztd/qjx28zzyHUzojS59I2ue4h5ET32h4KgGWmXe2QvoCCqlEtzJhCFug9VkTa XjoxZOeJBrCPKuOGoACT9Y67i41nYAj9CFRaJgresgAKI8L0i9OgUx0UdkKF6DZa cht66skBuqoxUa30/fGUc0xRo5H7TL6fB4Gvzn/AVy2YeI9/AM91g9427BvFByt2 jU+tMECJE+ISz7k37d2udXFfYZT8cpVxVMcQLOu/0El7YJTlRnT+ll+VOQ34PW5i TxRxkB8yrtzjE2CvU3jyBq+RpWHEnvTIrkCpbW0V5SG4rru2LtNYB2xSBKBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdWnw1BlPbwNLiw58rpNeOl11P0wwHwYDVR0j BBgwFoAUuXsQEwPWUu5cAjSnqABCmVl0X/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkN2Y5ZWItM2MyZC00MWExLTkwODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMw M0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1OTc0NUZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTdCMTAxMzAzRDY1MkVFNUMwMjM0QTdBODAwNDI5OTU5NzQ1 RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQy OTk1OTc0NUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHP/sb+fSFirIxSMn5VN60Cau4TqYH+fqnb r9pXNAwO7e9ZJk0nGfH0HI78pJeXasWa4XtZrGs3RvAzossxvvw2ankuXo8smXQ6 dDPEy2dMYrAwBLvTNn4xiPzXhPU8H8SFgfIuIiNNvOxkvuBZnjZnp4l1IdI56pQJ OENBSXdXnQZ4AUq3E+64A8ByJ7jjK4mo25Ak6m8nWTIYoeF3BdsyxV9elZnxNIJ7 DSic63WWcAbGj104CILsvM7TjT6Pd49TykOKIMF1M0OcgQXm+hTaQoSB6UzWzKBP gkvAbiH2ObKdxHPZaHWf5Pf0+QgIfbTt0XsYG4I7vHm7h51gSnY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:39 2026 by rpki-client