$ rpki-client -vvvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: 1In/b/boRBdb0CcPLDSEijSIe/btxzgC6x6MFpzKpVI= Subject key identifier: 48:FA:B4:F0:AD:40:5F:4F:97:B2:08:79:D4:7D:9B:EA:C5:AC:0B:7C Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 2147808BDF60E9FDA5938403F5A6585C1B0ECD97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: ED Signing time: Sun 25 Oct 2026 21:43:54 +0000 Manifest this update: Sun 25 Oct 2026 21:38:54 +0000 Manifest next update: Mon 26 Oct 2026 22:20:54 +0000 Files and hashes: 1: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) 2: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 3: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: 6Sxo32wJEAtOxLTN98d91Cwt2SJO4jBS+l+OeWq8Kv8=) 4: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 5: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 22:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:47:80:8b:df:60:e9:fd:a5:93:84:03:f5:a6:58:5c:1b:0e:cd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: Oct 25 21:38:54 2026 GMT Not After : Oct 26 22:20:54 2026 GMT Subject: CN=48FAB4F0AD405F4F97B20879D47D9BEAC5AC0B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:22:96:dd:a2:35:46:d9:09:32:9b:c1:93: 51:99:02:78:99:73:e6:65:be:dd:90:47:80:09:47: 8e:5d:29:98:42:3c:5f:7f:5c:3f:4e:e0:28:0a:9d: 6a:dc:5f:f0:6f:9f:36:ea:1b:c8:8c:01:bb:9f:7c: 87:fc:fc:4c:e1:7a:80:9b:70:7b:d2:e3:aa:75:6b: 33:13:bb:04:75:92:72:76:9c:04:84:fc:48:2c:e0: 04:8e:81:ad:45:18:58:4e:88:54:3c:7f:19:d0:54: 5e:c7:89:9c:73:5e:44:8f:71:e2:8f:fd:2d:fa:74: 25:97:dc:e3:df:b4:d8:45:ae:5f:85:7c:d8:a1:1f: 8c:9b:3e:ed:71:be:f3:38:d7:d7:86:71:22:f8:00: 0f:2d:52:a8:c5:06:92:be:2c:a0:bd:84:56:14:6f: 13:71:9a:dc:f4:32:68:94:8e:a1:c1:ed:54:70:60: c8:22:02:6e:9e:69:67:56:9e:3e:b3:a7:e7:52:8d: b7:82:e1:4b:06:27:97:8b:82:2c:6c:ed:9a:f1:01: 26:fe:39:c1:9d:11:cb:d8:fb:34:b4:07:42:c0:56: 19:15:97:5e:06:34:43:8d:92:36:79:96:dd:51:73: ba:bb:b6:56:57:da:66:09:59:f1:16:40:a3:2a:66: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FA:B4:F0:AD:40:5F:4F:97:B2:08:79:D4:7D:9B:EA:C5:AC:0B:7C X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c0:a0:fe:ca:a7:64:74:10:03:2c:4b:17:91:0b:7d:ae:e7: 66:a6:38:fd:ea:e5:a0:19:d2:87:20:cf:a5:69:5b:8e:37:de: 29:76:1b:68:4d:d9:99:65:4d:f2:c6:9a:e2:20:af:8c:75:34: 07:8f:e9:c0:b9:41:b7:81:47:e5:fb:33:6a:21:c0:51:2c:ce: ca:89:e6:98:db:12:91:6d:7c:47:26:62:27:c2:3a:e0:6b:1e: 59:ab:ac:d5:25:ec:82:8c:6b:16:5c:5a:7d:08:ee:5e:a6:5b: 94:14:3d:ca:33:85:e7:c2:f4:4b:40:d2:97:07:f5:2b:7a:e5: e3:2e:5b:0b:b5:9c:b9:96:a1:eb:f4:55:f1:9f:64:b9:94:8e: 2b:67:4c:0d:6c:ec:21:80:73:4e:b2:bd:9f:ed:7c:5c:53:38: de:12:d9:91:e2:40:1f:42:c5:c3:3d:85:bf:56:05:0f:cd:63: 58:88:20:24:c0:c0:a0:12:37:e5:02:5b:79:7d:c4:2f:c7:6e: 23:92:ee:72:05:d8:e1:e3:7a:5e:a0:4f:07:ce:2d:de:1a:41: 30:99:fe:a3:7c:78:a2:a8:ac:fd:24:bb:f8:5e:ca:bb:3d:42: ae:38:4e:c1:8f:15:f0:ce:55:06:90:8e:63:e2:ed:f9:f3:e9: e1:60:28:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUeAi99g6f2lk4QD9aZYXBsOzZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjEwMjUyMTM4NTRaFw0yNjEwMjYyMjIwNTRaMDMxMTAvBgNV BAMTKDQ4RkFCNEYwQUQ0MDVGNEY5N0IyMDg3OUQ0N0Q5QkVBQzVBQzBCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYqCKW3aI1RtkJMpvBk1GZAniZ c+Zlvt2QR4AJR45dKZhCPF9/XD9O4CgKnWrcX/BvnzbqG8iMAbuffIf8/EzheoCb cHvS46p1azMTuwR1knJ2nASE/Egs4ASOga1FGFhOiFQ8fxnQVF7HiZxzXkSPceKP /S36dCWX3OPftNhFrl+FfNihH4ybPu1xvvM419eGcSL4AA8tUqjFBpK+LKC9hFYU bxNxmtz0MmiUjqHB7VRwYMgiAm6eaWdWnj6zp+dSjbeC4UsGJ5eLgixs7ZrxASb+ OcGdEcvY+zS0B0LAVhkVl14GNEONkjZ5lt1Rc7q7tlZX2mYJWfEWQKMqZr2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSPq08K1AX0+Xsgh51H2b6sWsC3wwHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbAoP7Kp2R0EAMsSxeRC32u52amOP3q5aAZ 0ocgz6VpW4433il2G2hN2ZllTfLGmuIgr4x1NAeP6cC5QbeBR+X7M2ohwFEszsqJ 5pjbEpFtfEcmYifCOuBrHlmrrNUl7IKMaxZcWn0I7l6mW5QUPcozhefC9EtA0pcH 9St65eMuWwu1nLmWoev0VfGfZLmUjitnTA1s7CGAc06yvZ/tfFxTON4S2ZHiQB9C xcM9hb9WBQ/NY1iIICTAwKASN+UCW3l9xC/HbiOS7nIF2OHjel6gTwfOLd4aQTCZ /qN8eKKorP0ku/heyrs9Qq44TsGPFfDOVQaQjmPi7fnz6eFgKMs= -----END CERTIFICATE-----Generated at Mon Oct 26 08:34:34 2026 by rpki-client