$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json) Hash identifier: nKW8jW6bRvqFw27aRicuJQpumBSl11J85sVDDJxumOI= Subject key identifier: 44:F6:01:53:C4:B9:4D:7D:27:88:7C:3D:D5:7F:D9:5A:02:4D:DB:80 Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Certificate serial: 68658F46B28F9232D56FB73051BF1A0F7E6F4C26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 14:34:29 +0000 Manifest this update: Thu 18 Jun 2026 14:29:29 +0000 Manifest next update: Fri 19 Jun 2026 17:40:29 +0000 Files and hashes: 1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=) 2: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: +jFu6utzCe/r+tGOfj0TYt+9nhvsA12im/7fUhL+08A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:65:8f:46:b2:8f:92:32:d5:6f:b7:30:51:bf:1a:0f:7e:6f:4c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Validity Not Before: Jun 18 14:29:29 2026 GMT Not After : Jun 19 17:40:29 2026 GMT Subject: CN=44F60153C4B94D7D27887C3DD57FD95A024DDB80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:78:e2:5d:8e:ed:85:5a:31:a0:10:29:97: fb:8a:6c:98:a6:8f:96:34:54:62:a8:1f:30:09:02: e7:17:72:43:d6:ce:6f:7d:e0:e7:16:b4:d0:fb:6a: 0a:20:cd:45:cc:a4:65:12:a7:00:73:8e:eb:9f:1b: b2:b2:2c:fe:3e:20:26:86:c1:ca:2d:cc:9e:b2:63: 65:de:f1:1b:3e:4d:8f:45:fb:41:b6:6c:bb:fa:17: 90:5e:52:17:71:ce:48:59:47:e1:31:16:e0:3f:ee: 9f:a0:03:c5:e3:04:7b:0b:14:ee:9c:08:fe:46:31: f5:d4:31:e4:c0:01:47:59:29:82:7b:04:b3:e8:25: c1:00:59:cc:8c:7d:71:e1:f7:f8:ba:52:67:cb:d6: e3:44:74:d2:ca:a3:c7:2c:41:9b:99:6e:87:34:e5: 52:e1:c4:09:b2:d8:49:51:a4:b0:31:15:7c:8d:96: f2:6b:b2:e4:96:cd:fe:e0:dd:ec:b3:ab:73:e5:11: e9:fa:51:61:79:87:02:f2:76:41:72:81:e2:b1:8f: 45:04:65:0e:9a:92:de:3e:04:75:86:89:1b:41:9e: 79:c0:47:a5:15:7a:eb:33:45:fa:a4:78:dd:c4:88: 56:55:4d:7b:99:7f:fd:a9:9c:87:4d:f5:b3:1c:b8: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F6:01:53:C4:B9:4D:7D:27:88:7C:3D:D5:7F:D9:5A:02:4D:DB:80 X509v3 Authority Key Identifier: keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bd:70:3e:cf:cd:a1:08:e8:aa:2a:7e:87:f0:26:fb:ac:12: 8a:e1:10:f4:04:31:a4:5d:8c:06:2e:e8:16:14:32:e3:a6:cf: 8f:f2:1f:2b:40:65:79:24:7a:d0:7f:aa:7f:31:5d:b7:6b:d5: 6e:41:60:d6:e3:b3:6b:da:28:3f:99:9f:45:1e:86:04:c9:7d: cc:ef:75:94:c2:2b:62:8b:5a:9e:c3:87:b8:c0:67:55:ab:0c: 68:47:8a:3e:7d:bf:7c:d7:59:19:01:3f:67:c7:4b:f7:dc:11: 5d:5b:1c:19:77:01:21:bc:32:4f:77:e9:92:f2:62:0c:09:ee: 6c:81:34:a5:dd:87:21:ff:18:e4:a2:a4:29:25:26:88:61:d4: f7:66:32:71:5c:e6:60:59:88:3e:6c:12:1d:5f:e6:bd:04:30: db:93:48:55:f0:1d:f4:fe:b6:3a:0a:d9:d3:e2:0c:c0:ae:33: d5:ae:03:98:d6:70:09:c5:7f:77:05:39:e9:02:39:2d:75:06: 32:67:8c:2a:4e:3e:32:d6:3c:be:27:81:1c:77:9d:5c:78:fc: 93:93:54:76:4b:71:00:f7:19:71:59:5c:31:8a:38:1c:91:d7: f1:e8:53:2f:ee:75:52:ff:56:31:93:0d:d1:17:1c:b6:e0:3c: 14:7e:21:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGWPRrKPkjLVb7cwUb8aD35vTCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC RjYxQzU0OTAeFw0yNjA2MTgxNDI5MjlaFw0yNjA2MTkxNzQwMjlaMDMxMTAvBgNV BAMTKDQ0RjYwMTUzQzRCOTREN0QyNzg4N0MzREQ1N0ZEOTVBMDI0RERCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYO3jiXY7thVoxoBApl/uKbJim j5Y0VGKoHzAJAucXckPWzm994OcWtND7agogzUXMpGUSpwBzjuufG7KyLP4+ICaG wcotzJ6yY2Xe8Rs+TY9F+0G2bLv6F5BeUhdxzkhZR+ExFuA/7p+gA8XjBHsLFO6c CP5GMfXUMeTAAUdZKYJ7BLPoJcEAWcyMfXHh9/i6UmfL1uNEdNLKo8csQZuZboc0 5VLhxAmy2ElRpLAxFXyNlvJrsuSWzf7g3eyzq3PlEen6UWF5hwLydkFygeKxj0UE ZQ6akt4+BHWGiRtBnnnAR6UVeuszRfqkeN3EiFZVTXuZf/2pnIdN9bMcuG83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPYBU8S5TX0niHw91X/ZWgJN24AwHwYDVR0j BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD NTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQz NzJCRjYxQzU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe9cD7PzaEI6KoqfofwJvusEorhEPQEMaRd jAYu6BYUMuOmz4/yHytAZXkketB/qn8xXbdr1W5BYNbjs2vaKD+Zn0UehgTJfczv dZTCK2KLWp7Dh7jAZ1WrDGhHij59v3zXWRkBP2fHS/fcEV1bHBl3ASG8Mk936ZLy YgwJ7myBNKXdhyH/GOSipCklJohh1PdmMnFc5mBZiD5sEh1f5r0EMNuTSFXwHfT+ tjoK2dPiDMCuM9WuA5jWcAnFf3cFOekCOS11BjJnjCpOPjLWPL4ngRx3nVx4/JOT VHZLcQD3GXFZXDGKOByR1/HoUy/udVL/VjGTDdEXHLbgPBR+ITs= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:37 2026 by rpki-client