$ rpki-client -vvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: O9T2Re5fpXY16Q6F/SPiQThDPQDoZFvQKsUbF//XuDA= Subject key identifier: 1E:69:41:09:D0:39:97:24:15:2E:F5:A7:B0:F9:7C:A1:5C:79:FC:0A Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 03C588E50906F80A29D23C256FBB796F18B51A39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:45:46 +0000 Manifest this update: Sat 20 Jun 2026 00:40:46 +0000 Manifest next update: Sun 21 Jun 2026 01:00:46 +0000 Files and hashes: 1: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) 2: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) 3: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 4: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: KA5tOaQNoMhaxS//TAMm+gKtnrGnQsYSVS/SyElHSio=) 5: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c5:88:e5:09:06:f8:0a:29:d2:3c:25:6f:bb:79:6f:18:b5:1a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: Jun 20 00:40:46 2026 GMT Not After : Jun 21 01:00:46 2026 GMT Subject: CN=1E694109D0399724152EF5A7B0F97CA15C79FC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:44:86:b1:7b:54:78:6b:e9:c7:89:81:95:7c: 0a:39:3b:7f:c4:d8:d2:38:b2:2b:1c:04:86:cd:20: e4:de:d7:55:23:1d:a2:77:13:d8:0c:d7:13:74:20: d7:fc:e5:8e:47:48:bf:12:ca:1a:e4:86:9c:b4:b0: d3:9a:b4:f1:74:c4:5a:1c:85:04:2c:51:3f:db:68: 8c:63:61:38:d5:5d:91:41:cf:30:a7:b2:16:70:32: b6:aa:20:6e:57:47:4b:fd:90:03:77:b9:5e:0d:f9: bd:85:66:e1:38:0c:a6:6d:06:69:67:13:ae:ce:7e: 5f:9e:14:27:a2:e0:f8:75:3a:e0:44:ef:2a:1a:f3: 49:2f:0e:17:bf:83:03:82:6c:6c:4d:e1:aa:f7:76: 20:a4:57:70:c4:a2:41:0c:fc:7d:27:ca:9c:f2:63: 6c:29:75:2b:4a:8b:02:97:08:8d:ec:09:7c:ab:97: b7:c4:b8:43:fb:89:8a:d2:b3:ad:74:93:a7:e5:bc: 2b:a6:5a:e7:a7:b0:1e:93:23:62:29:f8:a0:86:2b: a9:3c:ee:65:8d:ec:fc:60:10:f0:d9:9e:6a:d9:ee: 05:be:b0:8e:86:2d:78:da:ab:25:a7:80:40:23:7e: 5e:8b:4f:d9:93:63:97:d9:3b:4d:cd:6c:28:1b:76: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:69:41:09:D0:39:97:24:15:2E:F5:A7:B0:F9:7C:A1:5C:79:FC:0A X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:07:64:a3:41:20:7d:fd:fe:b0:96:da:f8:15:41:f7:20:d6: dc:29:16:cf:29:ee:26:44:22:5b:07:d6:d8:d4:70:57:b6:61: bf:14:5b:1f:f9:fd:a8:29:3e:6f:57:5f:8c:ba:e6:0a:22:9f: 9a:79:36:62:42:3a:30:d2:ef:35:ad:42:f2:f4:67:fd:7e:96: 4f:92:81:0f:03:45:fe:5e:ea:6b:ee:c0:0f:b1:96:98:b5:c8: e4:02:a1:76:76:27:28:a3:e3:d9:b5:2e:26:96:23:52:36:94: be:5e:1f:18:5f:72:7b:b6:5c:78:cd:1b:8c:d5:db:99:cc:a3: 33:20:69:a4:e7:d7:ec:9a:35:eb:b0:64:49:49:05:18:b5:d8: 54:40:6a:09:25:0b:69:8c:5d:5e:a6:02:6c:05:1e:2a:07:fe: e6:e7:49:42:3d:7e:ac:37:31:ac:eb:3b:24:ec:5f:83:a9:4b: 6d:d3:5c:35:56:09:9c:66:bb:e9:66:f9:a3:e9:ae:06:76:20: 21:fa:32:58:64:17:07:d2:90:e1:22:bf:b7:da:50:cf:34:53: 4b:24:b0:b1:c8:37:7d:df:c0:85:4c:df:ee:ec:39:c7:ed:97: ea:10:73:7b:a2:80:a2:ca:1f:13:03:b8:5d:dd:64:15:0f:2e: 0b:40:9f:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8WI5QkG+Aop0jwlb7t5bxi1GjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA2MjAwMDQwNDZaFw0yNjA2MjEwMTAwNDZaMDMxMTAvBgNV BAMTKDFFNjk0MTA5RDAzOTk3MjQxNTJFRjVBN0IwRjk3Q0ExNUM3OUZDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRIaxe1R4a+nHiYGVfAo5O3/E 2NI4siscBIbNIOTe11UjHaJ3E9gM1xN0INf85Y5HSL8Syhrkhpy0sNOatPF0xFoc hQQsUT/baIxjYTjVXZFBzzCnshZwMraqIG5XR0v9kAN3uV4N+b2FZuE4DKZtBmln E67Ofl+eFCei4Ph1OuBE7yoa80kvDhe/gwOCbGxN4ar3diCkV3DEokEM/H0nypzy Y2wpdStKiwKXCI3sCXyrl7fEuEP7iYrSs610k6flvCumWuensB6TI2Ip+KCGK6k8 7mWN7PxgEPDZnmrZ7gW+sI6GLXjaqyWngEAjfl6LT9mTY5fZO03NbCgbdrf1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHmlBCdA5lyQVLvWnsPl8oVx5/AowHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoHZKNBIH39/rCW2vgVQfcg1twpFs8p7iZE IlsH1tjUcFe2Yb8UWx/5/agpPm9XX4y65goin5p5NmJCOjDS7zWtQvL0Z/1+lk+S gQ8DRf5e6mvuwA+xlpi1yOQCoXZ2Jyij49m1LiaWI1I2lL5eHxhfcnu2XHjNG4zV 25nMozMgaaTn1+yaNeuwZElJBRi12FRAagklC2mMXV6mAmwFHioH/ubnSUI9fqw3 MazrOyTsX4OpS23TXDVWCZxmu+lm+aPprgZ2ICH6MlhkFwfSkOEiv7faUM80U0sk sLHIN33fwIVM3+7sOcftl+oQc3uigKLKHxMDuF3dZBUPLgtAnxk= -----END CERTIFICATE-----Generated at Sat Jun 20 11:42:33 2026 by rpki-client