$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json) Hash identifier: LD8GA992JUzEYaDI17Rm+2cLQ9IKQE2C2Swn3uISm4w= Subject key identifier: D9:90:B7:81:EB:AF:EA:29:C6:21:A4:47:6F:74:AF:7B:9D:29:B3:B3 Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Certificate serial: 2DC69EC2B4528E43BAFB542ED48CFDD2A6ADD017 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 03:11:25 +0000 Manifest this update: Sun 02 Aug 2026 03:06:25 +0000 Manifest next update: Mon 03 Aug 2026 05:06:25 +0000 Files and hashes: 1: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: s/z8lPvdv/JE8AGR1Rbm9IxLSWxyb1naC2zLP+kd9b8=) 2: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c6:9e:c2:b4:52:8e:43:ba:fb:54:2e:d4:8c:fd:d2:a6:ad:d0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Validity Not Before: Aug 2 03:06:25 2026 GMT Not After : Aug 3 05:06:25 2026 GMT Subject: CN=D990B781EBAFEA29C621A4476F74AF7B9D29B3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:50:34:6d:47:c4:12:f4:a1:0c:91:4a:d8: 27:46:77:ef:79:38:91:10:e9:19:08:43:a3:1f:17: ba:7f:3e:71:0f:95:e2:9b:a8:49:fb:95:84:3a:de: 59:47:ea:93:57:0b:51:c3:f1:de:c1:60:52:a5:c2: 4d:69:fd:84:2f:8a:54:e0:2b:8d:60:4a:19:69:38: 06:ab:ef:07:08:fb:9d:db:65:36:7e:a2:af:0c:fa: 18:e7:9d:82:4f:b9:1e:29:59:b0:7d:39:ef:3f:c7: 69:3a:fa:f5:c8:1b:df:74:a4:f8:13:41:41:6a:77: 97:63:d3:36:81:5b:ab:cc:b2:2e:21:07:8f:c6:3c: ae:c6:69:9e:a0:5f:4a:a2:48:3d:91:9c:23:69:83: cf:a5:36:30:36:7e:82:db:e6:23:8a:44:33:44:92: 3d:7d:d7:57:a7:ed:bd:9e:f7:4c:3a:94:c2:f0:fd: 8f:5f:13:f3:e5:13:11:0c:d2:57:ec:7d:b5:53:9c: ee:38:b0:ac:a4:a0:2d:89:54:e0:a5:78:d6:13:17: 28:b3:b1:52:c2:d2:70:1c:ab:4e:52:60:83:69:fb: 71:df:36:03:9b:91:90:ff:1c:09:ed:0b:7d:13:cd: 7e:14:be:8c:12:af:0e:e1:eb:60:3f:3f:f4:85:e5: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:90:B7:81:EB:AF:EA:29:C6:21:A4:47:6F:74:AF:7B:9D:29:B3:B3 X509v3 Authority Key Identifier: keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d3:b1:1a:f0:89:68:15:0d:1b:2b:70:27:13:c3:f1:42:f9: 3b:97:e2:60:15:25:5d:69:17:1f:26:c9:04:aa:3e:a1:57:f7: ee:0f:04:c2:22:ed:cc:08:11:c0:3e:66:f2:5a:a3:c8:40:0c: 73:d9:ae:45:39:9d:cb:d5:d9:b3:94:96:cb:cf:a5:e5:f5:ad: ba:ef:ed:31:29:99:b2:a2:3d:05:ee:53:af:30:ba:9e:4f:e0: 3c:f3:36:ec:d2:ee:a5:27:da:e8:3f:7a:9d:28:4c:7f:ba:0d: 16:ee:fa:e2:4d:4b:9e:84:57:e2:b8:64:99:32:bc:f4:97:b0: ba:20:8e:db:df:c8:7f:f5:78:04:b8:e3:c5:45:57:b5:f2:32: 1f:d6:e0:19:ad:04:a6:1b:db:e7:e7:7e:6d:e1:70:b8:dd:7c: 8a:30:f2:80:4e:da:e3:05:42:87:06:59:40:88:6b:29:d9:05: 72:b2:63:11:1c:02:81:5d:d5:1c:0d:79:6b:43:8f:c1:bd:70: 93:41:47:43:90:73:5a:8d:4d:05:20:73:ff:ec:f5:f9:05:4a: ae:25:e3:ee:ac:9b:c9:35:c8:7c:3a:ae:59:8b:81:2c:f6:cb: 15:03:8e:6d:97:57:8b:cd:3b:5b:69:f5:eb:9b:cd:66:52:13: a2:a0:22:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcaewrRSjkO6+1Qu1Iz90qat0BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC RjYxQzU0OTAeFw0yNjA4MDIwMzA2MjVaFw0yNjA4MDMwNTA2MjVaMDMxMTAvBgNV BAMTKEQ5OTBCNzgxRUJBRkVBMjlDNjIxQTQ0NzZGNzRBRjdCOUQyOUIzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iFA0bUfEEvShDJFK2CdGd+95 OJEQ6RkIQ6MfF7p/PnEPleKbqEn7lYQ63llH6pNXC1HD8d7BYFKlwk1p/YQvilTg K41gShlpOAar7wcI+53bZTZ+oq8M+hjnnYJPuR4pWbB9Oe8/x2k6+vXIG990pPgT QUFqd5dj0zaBW6vMsi4hB4/GPK7GaZ6gX0qiSD2RnCNpg8+lNjA2foLb5iOKRDNE kj1911en7b2e90w6lMLw/Y9fE/PlExEM0lfsfbVTnO44sKykoC2JVOCleNYTFyiz sVLC0nAcq05SYINp+3HfNgObkZD/HAntC30TzX4UvowSrw7h62A/P/SF5SaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZC3geuv6inGIaRHb3Sve50ps7MwHwYDVR0j BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD NTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQz NzJCRjYxQzU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzTsRrwiWgVDRsrcCcTw/FC+TuX4mAVJV1p Fx8myQSqPqFX9+4PBMIi7cwIEcA+ZvJao8hADHPZrkU5ncvV2bOUlsvPpeX1rbrv 7TEpmbKiPQXuU68wup5P4DzzNuzS7qUn2ug/ep0oTH+6DRbu+uJNS56EV+K4ZJky vPSXsLogjtvfyH/1eAS448VFV7XyMh/W4BmtBKYb2+fnfm3hcLjdfIow8oBO2uMF QocGWUCIaynZBXKyYxEcAoFd1RwNeWtDj8G9cJNBR0OQc1qNTQUgc//s9fkFSq4l 4+6sm8k1yHw6rlmLgSz2yxUDjm2XV4vNO1tp9eubzWZSE6KgIm0= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:40 2026 by rpki-client