$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft File: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft (raw, json) Hash identifier: q158WIIFD3htL8iXlqd9nlsRbkRQ1cI7cfXY5tMlKN0= Subject key identifier: 58:AD:BC:28:C4:E8:E8:08:AD:3D:AA:39:97:57:FD:F9:D8:29:AD:C1 Authority key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A Certificate issuer: /CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Certificate serial: 192F6C44746DE6221DBC3DE4E669A3425CCF5B99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:10:25 +0000 Manifest this update: Wed 16 Sep 2026 17:05:25 +0000 Manifest next update: Thu 17 Sep 2026 17:50:25 +0000 Files and hashes: 1: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl (hash: t5yxm6R4l77Gx3qAT4kXfhkKwOhIGeFCH2Mb+F2unCg=) 2: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: sv7PvNJnnZ10opw+lXUbBT0PVWMEcNTxqWez029VNl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2f:6c:44:74:6d:e6:22:1d:bc:3d:e4:e6:69:a3:42:5c:cf:5b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Validity Not Before: Sep 16 17:05:25 2026 GMT Not After : Sep 17 17:50:25 2026 GMT Subject: CN=58ADBC28C4E8E808AD3DAA399757FDF9D829ADC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:78:00:01:6c:2c:ae:f1:3e:47:76:67:7a: 01:a1:cd:90:60:a8:24:ee:3e:22:1f:80:a5:f7:b9: e9:68:24:a5:38:a5:34:b6:af:d6:56:b6:cb:4c:8f: e3:0c:3a:34:a3:23:c8:61:e2:b6:90:53:5e:d0:ef: 5a:9c:66:a4:41:46:5f:d0:d8:aa:5e:a3:24:f7:33: a7:09:a5:f5:e0:a4:a9:89:f8:a2:f7:6a:aa:b9:49: 7b:e4:1f:c1:6e:80:48:bc:d0:be:33:f9:ad:23:a4: 4f:07:3b:7d:49:bc:9c:9d:13:33:eb:07:bb:d7:35: dc:f4:cc:3d:c2:e3:4d:23:86:f7:a8:75:d0:40:a6: c2:a6:3f:e9:07:c3:3c:a6:84:eb:a4:0b:07:30:79: cc:47:d8:32:7a:4b:38:50:cf:07:9c:1e:b3:cf:38: 73:6c:91:83:4c:6d:bc:40:93:91:1b:99:03:5c:72: 57:f6:0c:d7:db:89:f2:d5:1e:92:40:b7:ef:90:80: 92:bb:f5:06:4d:8e:ce:42:aa:fb:f1:dd:11:45:8e: f3:12:1c:ec:7b:05:60:72:b2:6a:16:27:ab:57:29: e6:51:78:83:f8:45:e1:fd:8e:3d:62:4f:77:c4:a2: 53:7f:93:85:b8:69:ae:85:ab:5b:82:61:53:59:4c: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AD:BC:28:C4:E8:E8:08:AD:3D:AA:39:97:57:FD:F9:D8:29:AD:C1 X509v3 Authority Key Identifier: keyid:97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0c:82:5d:c0:5c:00:ca:8b:09:1c:ee:83:1e:c5:70:29:ae: 00:55:09:e3:77:7b:44:6d:30:2b:2b:36:5d:65:d3:3f:05:0a: a2:d4:f8:ff:6e:df:96:08:98:4d:a2:ee:32:2a:5d:1a:97:7e: fb:56:6f:56:da:d0:00:24:58:0f:3d:c5:bf:e5:55:95:8b:a2: f2:be:2b:19:87:32:e0:2e:a7:08:2e:82:ca:d7:75:35:de:53: 6c:f9:72:30:9b:ae:29:f6:3c:ee:d6:52:da:e6:72:45:b6:c8: 14:7f:7e:47:4d:ad:9d:4b:57:ea:d7:31:03:57:47:41:76:05: 4e:66:ae:a7:86:65:9a:86:4f:14:e3:e4:76:32:80:a7:bb:5e: 25:1d:e2:ec:a4:57:50:5a:13:ec:c8:a9:4e:04:bc:87:28:c4: 9e:69:6e:13:bf:a8:40:46:39:6b:87:de:50:d9:74:ae:d5:45: 82:bb:ff:db:b1:e7:1d:57:21:34:25:c9:62:22:3a:d8:2a:e4: a6:79:e9:e7:3c:27:a1:3e:b2:e9:df:78:da:3a:34:60:7d:e3: af:29:0d:fb:ea:ae:f7:51:62:a5:5c:2e:55:de:6d:e7:aa:e8: 35:1e:50:92:2b:11:f8:62:af:11:53:ee:f8:ea:84:87:4b:75: 93:fa:ae:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGS9sRHRt5iIdvD3k5mmjQlzPW5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJDMURB MEIwRDgxQTAeFw0yNjA5MTYxNzA1MjVaFw0yNjA5MTcxNzUwMjVaMDMxMTAvBgNV BAMTKDU4QURCQzI4QzRFOEU4MDhBRDNEQUEzOTk3NTdGREY5RDgyOUFEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbyngAAWwsrvE+R3ZnegGhzZBg qCTuPiIfgKX3ueloJKU4pTS2r9ZWtstMj+MMOjSjI8hh4raQU17Q71qcZqRBRl/Q 2KpeoyT3M6cJpfXgpKmJ+KL3aqq5SXvkH8FugEi80L4z+a0jpE8HO31JvJydEzPr B7vXNdz0zD3C400jhveoddBApsKmP+kHwzymhOukCwcwecxH2DJ6SzhQzwecHrPP OHNskYNMbbxAk5EbmQNcclf2DNfbifLVHpJAt++QgJK79QZNjs5Cqvvx3RFFjvMS HOx7BWBysmoWJ6tXKeZReIP4ReH9jj1iT3fEolN/k4W4aa6Fq1uCYVNZTC1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWK28KMTo6AitPao5l1f9+dgprcEwHwYDVR0j BBgwFoAUl+ssZhpfRW3OKuOnOmS8HaCw2BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3MWZjNmQtYWEzYi00ZWQ3LThmZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYx QTVGNDU2RENFMkFFM0E3M0E2NEJDMURBMEIwRDgxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85N0VCMkM2NjFBNUY0NTZEQ0UyQUUzQTczQTY0QkMxREEwQjBE ODFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJD MURBMEIwRDgxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQMgl3AXADKiwkc7oMexXAprgBVCeN3e0Rt MCsrNl1l0z8FCqLU+P9u35YImE2i7jIqXRqXfvtWb1ba0AAkWA89xb/lVZWLovK+ KxmHMuAupwgugsrXdTXeU2z5cjCbrin2PO7WUtrmckW2yBR/fkdNrZ1LV+rXMQNX R0F2BU5mrqeGZZqGTxTj5HYygKe7XiUd4uykV1BaE+zIqU4EvIcoxJ5pbhO/qEBG OWuH3lDZdK7VRYK7/9ux5x1XITQlyWIiOtgq5KZ56ec8J6E+sunfeNo6NGB9468p DfvqrvdRYqVcLlXebeeq6DUeUJIrEfhirxFT7vjqhIdLdZP6riw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:55 2026 by rpki-client