$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft File: B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json) Hash identifier: gz70XPO9lSd/5UJ8d+Ha9FyAisCpPC+vhHkpR5Y6QNg= Subject key identifier: B5:CD:C7:B4:F5:12:E0:30:BC:3D:79:FB:90:45:4D:70:23:B1:41:0F Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Certificate issuer: /CN=B97B101303D652EE5C0234A7A800429959745FF3 Certificate serial: 12B92D56DD140857831F99398B4F059B5EBCD8D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:55:19 +0000 Manifest this update: Tue 02 Jun 2026 16:50:19 +0000 Manifest next update: Wed 03 Jun 2026 17:35:19 +0000 Files and hashes: 1: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: uHQQsis3n6bj8EQ+w8mDem7s5QNHrVFOkfflmPHgq80=) 2: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b9:2d:56:dd:14:08:57:83:1f:99:39:8b:4f:05:9b:5e:bc:d8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3 Validity Not Before: Jun 2 16:50:19 2026 GMT Not After : Jun 3 17:35:19 2026 GMT Subject: CN=B5CDC7B4F512E030BC3D79FB90454D7023B1410F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:7e:e0:c9:53:7e:4c:b2:ad:35:1e:3d:bc: e2:d8:7a:0a:3f:1a:9b:15:1a:02:dd:45:83:11:d8: 0c:b2:cb:52:3e:cb:c5:e8:8e:f5:87:3a:a4:80:4c: 9a:be:84:6b:ca:2e:fd:52:23:bd:bd:62:94:7c:4b: 9e:c4:79:29:ad:df:b7:c7:bf:34:eb:e2:2a:00:e6: b5:ee:4f:b6:a8:d5:74:bc:cf:57:e1:6e:e2:51:92: 24:c0:ce:f3:4a:3c:8f:94:1e:3a:d4:da:26:d1:be: f6:63:ab:d1:36:c1:9a:43:aa:03:82:79:ff:86:06: 68:3f:38:a2:66:6b:05:5e:a9:80:5e:cc:52:4b:de: 64:13:48:da:16:f9:b9:a4:9c:a5:92:f1:9c:47:10: 8c:98:24:00:f2:f3:82:57:e8:95:23:95:52:2f:c2: cd:4e:17:e8:93:9a:99:e0:d4:be:8e:6e:d0:32:f8: 3c:85:44:2a:e7:49:f2:f9:5f:f5:94:2d:8d:4f:16: cb:bf:f3:76:5e:80:77:43:92:93:16:d0:af:a1:a1: 61:c3:8f:c6:fa:b7:17:15:6a:51:da:0c:72:47:92: 51:9d:c1:3f:7d:b4:53:7f:71:89:ca:cc:13:bf:f6: 7d:07:f6:0a:b8:23:5d:f4:a5:6a:6a:ed:ea:a3:71: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CD:C7:B4:F5:12:E0:30:BC:3D:79:FB:90:45:4D:70:23:B1:41:0F X509v3 Authority Key Identifier: keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:72:c9:9e:d8:83:bc:1b:0f:18:29:04:36:9d:c5:08:38:cd: f5:57:58:45:93:5d:05:2a:a3:94:ff:2e:50:b8:55:86:56:fb: df:c1:6d:0a:10:cb:33:dc:b7:6d:63:48:24:50:22:d7:63:70: 77:f3:68:86:38:50:52:9c:f2:58:25:90:95:0b:ff:46:37:ff: 4d:0a:37:4f:6f:c4:c6:5c:36:ec:a0:67:53:20:9e:62:9c:54: 91:b0:23:12:3f:04:59:a6:0e:0e:52:b2:80:93:56:51:4c:a0: 27:5a:e8:12:45:17:3d:a6:5d:bf:7b:16:9f:1e:3a:09:a4:3b: 18:fd:8c:30:fb:67:eb:42:10:b2:97:e9:bc:6c:1a:da:f6:8c: cf:09:11:87:c6:29:df:b3:46:c0:8b:8a:ee:2a:2e:c6:bd:9c: 28:53:38:f1:30:a0:e5:4f:28:97:ea:76:07:92:47:3d:e7:34: 8f:76:39:77:1c:3b:ea:a4:ee:3a:47:e3:0b:e8:fc:9e:dd:6e: df:f9:d1:94:a3:4c:33:4b:9d:b6:bf:ff:e7:7d:4d:05:8b:21: b2:64:6d:a9:f1:3f:3b:48:2b:a1:b0:4b:88:58:c8:21:d4:b3: f3:1f:bc:ef:91:79:65:1c:40:8f:9e:1c:0b:af:5c:df:fb:bc: c3:d2:5a:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErktVt0UCFeDH5k5i08Fm1682NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1 OTc0NUZGMzAeFw0yNjA2MDIxNjUwMTlaFw0yNjA2MDMxNzM1MTlaMDMxMTAvBgNV BAMTKEI1Q0RDN0I0RjUxMkUwMzBCQzNENzlGQjkwNDU0RDcwMjNCMTQxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPr37gyVN+TLKtNR49vOLYego/ GpsVGgLdRYMR2Ayyy1I+y8XojvWHOqSATJq+hGvKLv1SI729YpR8S57EeSmt37fH vzTr4ioA5rXuT7ao1XS8z1fhbuJRkiTAzvNKPI+UHjrU2ibRvvZjq9E2wZpDqgOC ef+GBmg/OKJmawVeqYBezFJL3mQTSNoW+bmknKWS8ZxHEIyYJADy84JX6JUjlVIv ws1OF+iTmpng1L6ObtAy+DyFRCrnSfL5X/WULY1PFsu/83ZegHdDkpMW0K+hoWHD j8b6txcValHaDHJHklGdwT99tFN/cYnKzBO/9n0H9gq4I130pWpq7eqjcSZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtc3HtPUS4DC8PXn7kEVNcCOxQQ8wHwYDVR0j BBgwFoAUuXsQEwPWUu5cAjSnqABCmVl0X/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkN2Y5ZWItM2MyZC00MWExLTkwODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMw M0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1OTc0NUZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTdCMTAxMzAzRDY1MkVFNUMwMjM0QTdBODAwNDI5OTU5NzQ1 RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQy OTk1OTc0NUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdyyZ7Yg7wbDxgpBDadxQg4zfVXWEWTXQUq o5T/LlC4VYZW+9/BbQoQyzPct21jSCRQItdjcHfzaIY4UFKc8lglkJUL/0Y3/00K N09vxMZcNuygZ1MgnmKcVJGwIxI/BFmmDg5SsoCTVlFMoCda6BJFFz2mXb97Fp8e OgmkOxj9jDD7Z+tCELKX6bxsGtr2jM8JEYfGKd+zRsCLiu4qLsa9nChTOPEwoOVP KJfqdgeSRz3nNI92OXccO+qk7jpH4wvo/J7dbt/50ZSjTDNLnba//+d9TQWLIbJk banxPztIK6GwS4hYyCHUs/MfvO+ReWUcQI+eHAuvXN/7vMPSWjs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:42 2026 by rpki-client