$ rpki-client -vvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: Tt1a8igpLhLxQLXbFz8VWlXcghbHQI2qMjDrmdmpwE8= Subject key identifier: CE:08:C8:AC:04:97:3C:BC:B1:52:C0:FD:B3:AD:6F:9D:A8:C3:86:8F Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 7863EAEAC1FD609441CD3856C257BAC5823C4791 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: 05 Signing time: Tue 05 May 2026 07:16:30 +0000 Manifest this update: Tue 05 May 2026 07:11:30 +0000 Manifest next update: Wed 06 May 2026 09:15:30 +0000 Files and hashes: 1: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: UI0MKOvRBUtsvsTtvgaEX7kEecyeBdn8wdzQZ9LFaHo=) 2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 3: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) 4: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) 5: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:63:ea:ea:c1:fd:60:94:41:cd:38:56:c2:57:ba:c5:82:3c:47:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: May 5 07:11:30 2026 GMT Not After : May 6 09:15:30 2026 GMT Subject: CN=CE08C8AC04973CBCB152C0FDB3AD6F9DA8C3868F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:2b:6d:3b:7c:6d:19:cd:fb:29:17:d1:c9: 72:04:9d:3a:e4:e0:c1:bb:5e:6e:c5:a9:2b:16:ff: 1f:f2:c6:7f:48:1e:2f:7d:18:a1:29:8e:d5:55:f7: 97:0f:f3:e6:a9:bd:2a:fd:6b:a9:04:e8:28:e3:9c: 0a:bf:7c:a1:99:8b:a7:39:e5:7e:74:be:d2:b5:96: e5:cd:1c:37:6d:4d:af:d0:3d:f9:32:3d:35:1a:2f: 49:82:4b:62:24:d1:27:ea:83:ac:53:79:04:41:4c: 5e:5d:b7:cb:d6:e7:1c:f7:6a:5b:67:b7:73:3b:a0: 3d:e2:a1:1f:c1:c2:48:72:a8:57:65:36:89:87:60: f7:bf:db:0a:31:27:95:09:27:25:16:fc:82:fd:e9: 8d:27:e6:fc:bd:2f:48:fa:29:d7:4f:42:b0:08:9e: 5b:1c:15:a2:64:de:64:4d:10:23:b4:94:af:e3:6e: 50:a4:78:76:7b:37:86:ba:be:3c:6d:51:e9:f3:2f: db:95:9f:7e:c4:7c:3f:67:18:e0:7f:56:5d:75:5f: f5:b4:20:26:08:f1:dd:19:d4:e8:8d:ac:66:a0:bd: 09:b4:b9:eb:f2:f9:bb:c4:cd:be:a4:e4:17:db:3c: f8:b2:37:21:99:59:b9:2c:8b:8c:76:88:bf:0c:70: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:08:C8:AC:04:97:3C:BC:B1:52:C0:FD:B3:AD:6F:9D:A8:C3:86:8F X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:47:79:41:84:e4:52:50:84:42:a1:35:62:8f:e9:73:37:b4: 3d:8d:e8:61:16:77:34:69:66:14:75:01:ee:27:77:e3:df:4f: 12:87:7c:56:e0:34:e8:7b:bf:c1:ee:2b:82:a9:95:15:92:c8: f7:b9:12:a9:11:5e:fb:6d:96:21:8c:21:89:33:35:50:cf:2b: b7:22:61:e9:6b:3d:d4:6b:4a:a5:31:8e:a9:8b:22:a5:af:e0: eb:8f:b5:8b:a6:7a:fe:28:a5:ec:cc:f8:f2:63:82:61:4e:44: d5:ea:55:01:3d:ec:e9:64:81:4b:8c:af:52:3c:a6:47:fb:1c: b6:40:20:87:70:d7:ba:ce:63:a3:6a:b8:d9:79:db:1f:0e:56: 20:b8:a2:ac:1a:2e:b5:3b:f3:0c:d9:c8:6b:c4:e2:46:34:b6: 2e:6c:5f:84:8c:01:27:4c:1d:3b:07:5e:45:5c:d6:86:1d:74: 89:b3:4f:c5:10:5b:92:62:8e:65:2a:0d:09:f2:88:a3:1b:46: 9c:f5:21:95:c1:84:82:48:fa:0f:ac:c7:b1:f2:e4:97:a9:11: 03:ab:83:0c:ce:22:35:91:33:69:97:11:06:0c:ca:70:9f:4c: b6:61:ae:f8:72:11:ec:33:7f:b5:fa:bb:27:bc:9e:7b:73:c2: 24:53:1b:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGPq6sH9YJRBzThWwle6xYI8R5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA1MDUwNzExMzBaFw0yNjA1MDYwOTE1MzBaMDMxMTAvBgNV BAMTKENFMDhDOEFDMDQ5NzNDQkNCMTUyQzBGREIzQUQ2RjlEQThDMzg2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUSttO3xtGc37KRfRyXIEnTrk 4MG7Xm7FqSsW/x/yxn9IHi99GKEpjtVV95cP8+apvSr9a6kE6CjjnAq/fKGZi6c5 5X50vtK1luXNHDdtTa/QPfkyPTUaL0mCS2Ik0Sfqg6xTeQRBTF5dt8vW5xz3altn t3M7oD3ioR/BwkhyqFdlNomHYPe/2woxJ5UJJyUW/IL96Y0n5vy9L0j6KddPQrAI nlscFaJk3mRNECO0lK/jblCkeHZ7N4a6vjxtUenzL9uVn37EfD9nGOB/Vl11X/W0 ICYI8d0Z1OiNrGagvQm0uevy+bvEzb6k5BfbPPiyNyGZWbksi4x2iL8McF2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzgjIrASXPLyxUsD9s61vnajDho8wHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1HeUGE5FJQhEKhNWKP6XM3tD2N6GEWdzRp ZhR1Ae4nd+PfTxKHfFbgNOh7v8HuK4KplRWSyPe5EqkRXvttliGMIYkzNVDPK7ci YelrPdRrSqUxjqmLIqWv4OuPtYumev4opezM+PJjgmFORNXqVQE97OlkgUuMr1I8 pkf7HLZAIIdw17rOY6NquNl52x8OViC4oqwaLrU78wzZyGvE4kY0ti5sX4SMASdM HTsHXkVc1oYddImzT8UQW5JijmUqDQnyiKMbRpz1IZXBhIJI+g+sx7Hy5JepEQOr gwzOIjWRM2mXEQYMynCfTLZhrvhyEewzf7X6uye8nntzwiRTG+k= -----END CERTIFICATE-----Generated at Tue May 5 11:00:12 2026 by rpki-client