$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json) Hash identifier: njiD3+Y771Kwj/2cEnuYvAoyuKzOZMvE7NDeOB54yUM= Subject key identifier: 2D:97:EC:B8:DB:A7:46:37:85:1C:81:41:41:4B:1C:4C:9D:0F:D9:A9 Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Certificate serial: 25ECEC355018EC954CB9357E20F64DFA960F6C5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:32:12 +0000 Manifest this update: Wed 16 Sep 2026 18:27:12 +0000 Manifest next update: Thu 17 Sep 2026 21:56:12 +0000 Files and hashes: 1: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: wga+p1SvvK92G8OcULWVqDpp1AcBZdhraqE3Pg3kP6w=) 2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:ec:35:50:18:ec:95:4c:b9:35:7e:20:f6:4d:fa:96:0f:6c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Validity Not Before: Sep 16 18:27:12 2026 GMT Not After : Sep 17 21:56:12 2026 GMT Subject: CN=2D97ECB8DBA74637851C8141414B1C4C9D0FD9A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:f1:e3:64:ac:07:27:c7:e5:20:ab:ac:ee: f9:39:ee:90:31:7a:6c:fe:e3:a3:e1:cb:1a:f9:2c: 5d:86:ce:6c:ac:10:5c:19:4b:de:a5:81:53:6e:04: b6:77:d4:ce:15:16:b8:83:37:07:42:55:25:9e:b9: 6b:b8:0c:15:70:e4:fd:66:d0:7c:de:5d:30:fe:68: 5a:13:7a:19:75:05:a1:8d:08:2a:3b:a1:b4:24:c6: 97:d0:80:6f:2d:ef:9b:6b:d4:ba:80:51:bb:c0:a8: dc:b6:bb:56:6d:7b:01:bd:af:24:c0:bb:6f:ae:e3: 53:29:a1:09:a1:1a:61:4e:42:31:45:b7:2a:1d:b9: 14:04:63:78:a7:55:7d:0a:8a:3b:11:ee:51:02:29: 7e:04:51:d6:b0:1b:fc:fc:38:c9:f3:a1:63:7c:25: 2c:18:1f:47:a4:83:e9:39:c2:24:aa:79:20:d6:46: b1:ba:c5:b3:62:d3:4a:c8:6d:3f:37:c1:90:d5:93: 3e:32:17:7a:49:40:fe:21:d2:00:1a:bf:23:a1:e1: fc:bb:30:e9:8d:96:6f:1d:6c:7a:57:22:a6:84:d3: c7:4e:38:0a:9f:d3:fa:ac:9f:1d:7c:dd:7f:a1:6c: e6:30:5c:f9:8f:e9:f3:52:22:6d:57:42:a0:21:6b: 91:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:97:EC:B8:DB:A7:46:37:85:1C:81:41:41:4B:1C:4C:9D:0F:D9:A9 X509v3 Authority Key Identifier: keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:70:36:2a:d5:60:f8:25:59:4b:ae:2b:4e:27:09:18:b4:18: be:15:12:a3:6b:9d:c9:06:d7:da:d4:14:8f:a6:84:3e:b3:1b: 65:1e:17:46:ad:d8:43:4c:f2:4c:21:58:af:96:c8:68:db:8a: 69:0f:f8:26:de:ed:9d:2c:47:82:88:81:81:59:ed:c5:c9:18: 80:38:f7:c9:99:10:d8:b2:07:dc:de:37:df:f6:4b:55:58:8e: a1:33:7d:be:ee:9e:ec:5c:68:0b:d7:4a:3a:6d:63:c7:33:9c: 42:78:c1:07:e4:3c:67:c4:b1:6a:14:a1:bd:7a:8a:d4:82:ed: 03:e1:65:e1:3c:ee:d3:4b:d0:eb:66:a1:a7:97:cc:5d:48:0c: ad:18:0c:20:ea:4f:10:03:02:1f:26:ad:0e:70:51:95:c3:02: 09:4b:e3:c3:4b:7d:94:ac:d7:87:30:9a:7b:69:6d:e6:bd:bd: ca:b8:e7:31:6e:73:0e:61:45:e5:5a:0c:ed:5c:9f:ac:28:77: 8b:8e:4f:2e:d1:bb:65:94:bc:7e:ed:e4:71:8d:4a:01:99:af: 73:45:98:32:df:c4:82:bd:73:ea:a8:f7:80:2b:6b:67:b8:54: 98:93:f9:e3:41:ce:4f:08:ee:3d:05:89:c3:37:3b:47:bc:8a: 0f:3d:cf:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJezsNVAY7JVMuTV+IPZN+pYPbFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC RjYxQzU0OTAeFw0yNjA5MTYxODI3MTJaFw0yNjA5MTcyMTU2MTJaMDMxMTAvBgNV BAMTKDJEOTdFQ0I4REJBNzQ2Mzc4NTFDODE0MTQxNEIxQzRDOUQwRkQ5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MPHjZKwHJ8flIKus7vk57pAx emz+46Phyxr5LF2GzmysEFwZS96lgVNuBLZ31M4VFriDNwdCVSWeuWu4DBVw5P1m 0HzeXTD+aFoTehl1BaGNCCo7obQkxpfQgG8t75tr1LqAUbvAqNy2u1ZtewG9ryTA u2+u41MpoQmhGmFOQjFFtyoduRQEY3inVX0KijsR7lECKX4EUdawG/z8OMnzoWN8 JSwYH0ekg+k5wiSqeSDWRrG6xbNi00rIbT83wZDVkz4yF3pJQP4h0gAavyOh4fy7 MOmNlm8dbHpXIqaE08dOOAqf0/qsnx183X+hbOYwXPmP6fNSIm1XQqAha5HvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZfsuNunRjeFHIFBQUscTJ0P2akwHwYDVR0j BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD NTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQz NzJCRjYxQzU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpwNirVYPglWUuuK04nCRi0GL4VEqNrnckG 19rUFI+mhD6zG2UeF0at2ENM8kwhWK+WyGjbimkP+Cbe7Z0sR4KIgYFZ7cXJGIA4 98mZENiyB9zeN9/2S1VYjqEzfb7unuxcaAvXSjptY8cznEJ4wQfkPGfEsWoUob16 itSC7QPhZeE87tNL0OtmoaeXzF1IDK0YDCDqTxADAh8mrQ5wUZXDAglL48NLfZSs 14cwmntpbea9vcq45zFucw5hReVaDO1cn6wod4uOTy7Ru2WUvH7t5HGNSgGZr3NF mDLfxIK9c+qo94Ara2e4VJiT+eNBzk8I7j0FicM3O0e8ig89z9A= -----END CERTIFICATE-----Generated at Thu Sep 17 14:43:36 2026 by rpki-client