$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft File: E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft (raw, json) Hash identifier: fnP8SMcX2bJZN0smJPRQ7N/vz6MbZAisUJLGZ6e6W+k= Subject key identifier: 35:02:F0:2D:F7:FA:14:17:57:36:E9:4B:2C:7A:D2:CE:B6:6E:2F:80 Authority key identifier: E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 Certificate issuer: /CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Certificate serial: 661E8209DE2DA84C000C3F0C32838E84CCF9FDDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft Manifest number: 63 Signing time: Tue 14 Jul 2026 02:22:25 +0000 Manifest this update: Tue 14 Jul 2026 02:17:25 +0000 Manifest next update: Wed 15 Jul 2026 02:33:25 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: 3u4SqpMZHOiN005smob5L/czZ7TrAkEBbioYuGaCo6o=) 2: E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl (hash: P3ETAO7b8dHTVsVP8rjuWUKb60WteeCZOU6++CX/Et0=) 3: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: vqX/mtnN0W8RLZb7l8bNIZx8LnJh0g2gbraFilNseKo=) 4: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: eE2EjWF5JyFRMHUXcgYuX1KiOGjP1McRgQBH4Ci3bis=) 5: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: 17JZlywqEJeGYZvXZ5p1XRwbIJcNG0ARBxLeQExtlUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 02:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1e:82:09:de:2d:a8:4c:00:0c:3f:0c:32:83:8e:84:cc:f9:fd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E97B01E9B103A0595C106FBDB4EA9635F3812B44 Validity Not Before: Jul 14 02:17:25 2026 GMT Not After : Jul 15 02:33:25 2026 GMT Subject: CN=3502F02DF7FA14175736E94B2C7AD2CEB66E2F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:2f:b5:e8:3e:08:bc:3a:4b:c9:80:be:73: 3d:eb:de:91:80:f9:0c:dd:79:aa:ac:dd:a8:04:02: 6d:fa:17:01:67:bf:a6:a3:e5:9c:76:e4:17:9f:a2: ad:47:48:80:44:8a:80:34:9d:58:2c:55:d3:73:69: fc:ef:ca:c8:61:3c:d5:6a:b6:0b:96:75:66:b2:b2: 2c:37:dc:76:3c:06:93:7d:b9:63:63:c8:8c:8f:a1: d1:01:fe:5f:07:f0:cf:21:62:7d:49:86:0e:47:a0: dd:05:d9:28:c4:41:97:03:24:79:38:81:96:80:31: 63:e5:4f:56:02:9c:70:16:d2:5d:80:17:50:10:10: 56:2b:45:63:0c:85:6f:20:9a:ad:e4:b3:fc:29:43: eb:64:5c:bd:33:0f:5a:80:76:d1:a1:68:4e:c5:1e: ea:64:70:00:c9:bf:32:c1:31:c9:99:b2:99:7c:27: 91:50:5c:6a:e0:2d:d7:ed:ff:57:96:c8:12:cb:60: b6:8a:80:b3:ff:a8:44:bf:9b:3c:5f:7b:f4:d0:12: d7:2b:db:50:32:4c:22:c3:fc:ad:e8:6b:21:69:a7: 3f:85:8b:26:93:28:b2:24:e4:d5:99:65:8e:41:25: cb:04:34:44:c1:35:a7:40:f4:31:f4:90:23:58:f5: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:02:F0:2D:F7:FA:14:17:57:36:E9:4B:2C:7A:D2:CE:B6:6E:2F:80 X509v3 Authority Key Identifier: keyid:E9:7B:01:E9:B1:03:A0:59:5C:10:6F:BD:B4:EA:96:35:F3:81:2B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E97B01E9B103A0595C106FBDB4EA9635F3812B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/E97B01E9B103A0595C106FBDB4EA9635F3812B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f9:44:5f:3b:67:56:cc:e7:77:b9:a5:c1:f6:c8:bb:b9:16: 1e:f6:96:b4:23:48:a5:23:8c:cb:9b:29:f6:95:f8:2d:17:c4: 4a:00:d0:32:0c:5f:bb:2a:dd:bf:90:c8:3c:41:16:5f:18:36: 93:0b:87:e0:56:78:45:00:cb:a3:78:b1:36:9f:35:ca:31:34: aa:f4:49:69:70:b3:ef:61:e9:49:c0:ad:e4:ea:bb:78:7b:60: 77:2e:48:b4:99:75:bf:05:e9:93:de:34:e2:40:cb:3b:be:9c: db:4b:a5:6e:d4:cf:e2:19:dc:77:4f:8d:22:94:cc:fa:d9:d4: 9b:9f:b6:2e:2f:e0:7f:7e:23:ed:97:a1:4c:a6:a7:63:d0:13: 28:96:8e:f2:b3:46:4b:2e:ae:0f:4b:17:c5:26:76:88:99:16: 0a:3c:9a:72:f2:8c:22:c4:c0:49:72:c1:22:78:cd:f5:4e:eb: 05:ed:d7:7e:90:b4:ec:ef:ac:96:63:58:d4:96:81:76:93:eb: 80:27:04:98:1c:e1:da:fa:ba:bd:7d:eb:73:9b:99:b1:cd:2b: 89:f8:09:9a:95:b7:2d:81:08:59:5e:ab:18:97:53:6a:ef:4c: 32:31:76:54:52:53:2a:b8:2c:08:22:84:61:cf:3c:7a:04:9e: 8f:f4:03:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZh6CCd4tqEwADD8MMoOOhMz5/dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVG MzgxMkI0NDAeFw0yNjA3MTQwMjE3MjVaFw0yNjA3MTUwMjMzMjVaMDMxMTAvBgNV BAMTKDM1MDJGMDJERjdGQTE0MTc1NzM2RTk0QjJDN0FEMkNFQjY2RTJGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiy+16D4IvDpLyYC+cz3r3pGA +Qzdeaqs3agEAm36FwFnv6aj5Zx25Befoq1HSIBEioA0nVgsVdNzafzvyshhPNVq tguWdWaysiw33HY8BpN9uWNjyIyPodEB/l8H8M8hYn1Jhg5HoN0F2SjEQZcDJHk4 gZaAMWPlT1YCnHAW0l2AF1AQEFYrRWMMhW8gmq3ks/wpQ+tkXL0zD1qAdtGhaE7F HupkcADJvzLBMcmZspl8J5FQXGrgLdft/1eWyBLLYLaKgLP/qES/mzxfe/TQEtcr 21AyTCLD/K3oayFppz+FiyaTKLIk5NWZZY5BJcsENETBNadA9DH0kCNY9U1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQLwLff6FBdXNulLLHrSzrZuL4AwHwYDVR0j BBgwFoAU6XsB6bEDoFlcEG+9tOqWNfOBK0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI3MmVjYTQtNzNhZC00ZTBiLWE2YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlC MTAzQTA1OTVDMTA2RkJEQjRFQTk2MzVGMzgxMkI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOTdCMDFFOUIxMDNBMDU5NUMxMDZGQkRCNEVBOTYzNUYzODEy QjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvRTk3QjAxRTlCMTAzQTA1OTVDMTA2RkJEQjRFQTk2 MzVGMzgxMkI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb5RF87Z1bM53e5pcH2yLu5Fh72lrQjSKUj jMubKfaV+C0XxEoA0DIMX7sq3b+QyDxBFl8YNpMLh+BWeEUAy6N4sTafNcoxNKr0 SWlws+9h6UnAreTqu3h7YHcuSLSZdb8F6ZPeNOJAyzu+nNtLpW7Uz+IZ3HdPjSKU zPrZ1Jufti4v4H9+I+2XoUymp2PQEyiWjvKzRksurg9LF8UmdoiZFgo8mnLyjCLE wElywSJ4zfVO6wXt136QtOzvrJZjWNSWgXaT64AnBJgc4dr6ur1963ObmbHNK4n4 CZqVty2BCFleqxiXU2rvTDIxdlRSUyq4LAgihGHPPHoEno/0A2g= -----END CERTIFICATE-----Generated at Tue Jul 14 08:25:05 2026 by rpki-client