$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft File: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft (raw, json) Hash identifier: Y/3VmZlnrEzrEQa36t2rOSCOilEHlawD/5hS6M0JrG0= Subject key identifier: 37:9F:B7:84:02:F7:36:49:F1:EF:1B:BA:0C:41:2D:4F:A6:4F:B3:41 Authority key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 Certificate issuer: /CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Certificate serial: 01948DACE6E505ED3C3849191A2F72F1989DE88B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft Manifest number: EA Signing time: Sat 24 Oct 2026 13:20:36 +0000 Manifest this update: Sat 24 Oct 2026 13:15:36 +0000 Manifest next update: Sun 25 Oct 2026 13:34:36 +0000 Files and hashes: 1: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl (hash: Eqzp9drxFihv7iTkvZo7B54YcWIIzsGSnjVs4GAK328=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: +bhA3UYPReYDsrbCyo3nY+2634L/BbsW+oTXhT99PgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 13:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:8d:ac:e6:e5:05:ed:3c:38:49:19:1a:2f:72:f1:98:9d:e8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Validity Not Before: Oct 24 13:15:36 2026 GMT Not After : Oct 25 13:34:36 2026 GMT Subject: CN=379FB78402F73649F1EF1BBA0C412D4FA64FB341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:d0:39:b6:e7:c2:8d:f6:a2:82:e5:a8:b4: 45:a8:19:3b:84:2a:84:76:5c:28:52:4c:f3:75:0f: e5:1f:11:6e:c2:a3:fb:2d:85:e6:a7:ef:19:ae:af: 88:5a:a7:3a:3d:b7:09:39:19:fc:88:74:7a:7b:c6: cd:1e:4f:a5:7c:89:01:ab:ec:d3:58:bf:60:d5:aa: 39:a3:0c:61:ed:f9:88:bf:a3:96:80:f5:ed:37:b5: 0b:f7:7c:16:2a:ae:74:6d:b4:1a:6f:b3:75:98:84: 61:02:90:5f:0e:8b:ad:94:11:8f:a0:72:fb:66:c8: d9:e9:cf:14:45:9c:1e:5a:d3:9b:b3:f0:2e:45:27: d3:46:73:fc:34:fe:55:57:ec:c4:e9:5d:f8:88:80: fc:75:71:c6:56:a4:3d:93:77:4e:00:15:6e:e0:33: 9d:59:de:e5:f3:3f:e0:05:12:38:45:6d:ca:e9:c0: 63:32:a4:67:f0:eb:82:cb:22:f9:9f:4f:13:94:aa: 02:78:18:bd:15:f0:98:b4:c9:1c:b4:1b:e8:3d:d5: 91:f5:fe:2c:cf:0f:1a:71:57:f3:22:39:aa:00:14: eb:27:73:be:a2:56:bb:c7:ac:44:0c:bf:28:c4:3e: fb:32:94:13:fb:36:fa:d9:d7:f5:82:bd:8b:64:8c: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:B7:84:02:F7:36:49:F1:EF:1B:BA:0C:41:2D:4F:A6:4F:B3:41 X509v3 Authority Key Identifier: keyid:A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ed:6c:08:3a:6e:31:0b:e5:0d:70:99:1e:92:e7:7a:a5:5a: 84:8c:7b:f0:76:fa:c2:f1:26:fb:c2:e5:02:8e:81:c9:ee:71: 53:0d:a0:8c:ce:9a:60:1d:7f:d4:21:c7:22:0b:23:2d:f5:06: cc:95:af:19:83:f8:fe:4e:9e:b3:df:b9:4d:3f:9a:1c:26:5e: d0:e8:38:34:89:9f:06:be:d5:ed:47:45:35:ed:de:a0:e2:8c: 93:1c:eb:69:14:b0:8e:b6:b7:6d:aa:95:83:2f:b0:ba:69:b1: d3:2e:38:6c:e9:3e:c9:53:1b:79:32:95:70:37:06:5f:da:7d: 68:b5:cb:0b:6a:61:8a:5e:67:62:e7:6e:db:6e:9b:09:09:fa: 75:2f:f5:27:60:e0:0e:60:4a:a0:cb:db:26:56:0a:77:9d:62: b0:2c:b4:9e:07:e5:a9:12:aa:bc:3a:22:d2:6e:b6:ff:d6:dd: 26:4e:81:35:db:e8:10:27:8e:17:12:df:b3:66:c5:00:5e:25: 54:ed:2f:04:96:16:7a:34:d7:de:62:2a:7b:bf:11:59:e6:eb: 90:7d:d6:48:7c:76:d8:2c:85:83:36:27:a3:80:ec:80:bb:04: dd:07:41:fd:d3:c1:dc:18:ed:97:39:3b:ae:7b:c3:19:0c:69: 43:01:a4:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZSNrOblBe08OEkZGi9y8Zid6IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2QjkxMURC Q0E0RTBFNzAeFw0yNjEwMjQxMzE1MzZaFw0yNjEwMjUxMzM0MzZaMDMxMTAvBgNV BAMTKDM3OUZCNzg0MDJGNzM2NDlGMUVGMUJCQTBDNDEyRDRGQTY0RkIzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFd9A5tufCjfaiguWotEWoGTuE KoR2XChSTPN1D+UfEW7Co/sthean7xmur4hapzo9twk5GfyIdHp7xs0eT6V8iQGr 7NNYv2DVqjmjDGHt+Yi/o5aA9e03tQv3fBYqrnRttBpvs3WYhGECkF8Oi62UEY+g cvtmyNnpzxRFnB5a05uz8C5FJ9NGc/w0/lVX7MTpXfiIgPx1ccZWpD2Td04AFW7g M51Z3uXzP+AFEjhFbcrpwGMypGfw64LLIvmfTxOUqgJ4GL0V8Ji0yRy0G+g91ZH1 /izPDxpxV/MiOaoAFOsnc76iVrvHrEQMvyjEPvsylBP7NvrZ1/WCvYtkjOB7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5+3hAL3Nknx7xu6DEEtT6ZPs0EwHwYDVR0j BBgwFoAUqXqZVLMiTxh6YY7y02uRHbyk4OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVhNzNkMDQtMjE0Zi00NmI4LTk3NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRC MzIyNEYxODdBNjE4RUYyRDM2QjkxMURCQ0E0RTBFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTdBOTk1NEIzMjI0RjE4N0E2MThFRjJEMzZCOTExREJDQTRF MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2Qjkx MURCQ0E0RTBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILtbAg6bjEL5Q1wmR6S53qlWoSMe/B2+sLx JvvC5QKOgcnucVMNoIzOmmAdf9QhxyILIy31BsyVrxmD+P5OnrPfuU0/mhwmXtDo ODSJnwa+1e1HRTXt3qDijJMc62kUsI62t22qlYMvsLppsdMuOGzpPslTG3kylXA3 Bl/afWi1ywtqYYpeZ2LnbttumwkJ+nUv9Sdg4A5gSqDL2yZWCnedYrAstJ4H5akS qrw6ItJutv/W3SZOgTXb6BAnjhcS37NmxQBeJVTtLwSWFno0195iKnu/EVnm65B9 1kh8dtgshYM2J6OA7IC7BN0HQf3TwdwY7Zc5O657wxkMaUMBpEk= -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:38 2026 by rpki-client