$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft File: 9970795F3B277481EE73EA3A16E4FA33964C92D3.mft (raw, json) Hash identifier: Abe6yl/651Oj/F+D0ACFiOLKxEUKxNioAPPwzpLj6Rc= Subject key identifier: 97:1A:EF:35:A3:42:0A:A1:96:29:45:AA:FF:59:CA:8C:67:03:02:00 Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 08AA37396ACE0648B4D0075A63C35F512391AE06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft Manifest number: EB Signing time: Sun 25 Oct 2026 06:03:49 +0000 Manifest this update: Sun 25 Oct 2026 05:58:49 +0000 Manifest next update: Mon 26 Oct 2026 07:24:49 +0000 Files and hashes: 1: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: 3Da0wSVO79CXcT4/2ct9HlMI+w8ZYFGpqAbvRWk65hU=) 2: 9970795F3B277481EE73EA3A16E4FA33964C92D3.crl (hash: ilfb3dIm6YTAKj3hT8fm2eufKcmDY7aVH4h96eidY/Y=) 3: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q=) 4: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:aa:37:39:6a:ce:06:48:b4:d0:07:5a:63:c3:5f:51:23:91:ae:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: Oct 25 05:58:49 2026 GMT Not After : Oct 26 07:24:49 2026 GMT Subject: CN=971AEF35A3420AA1962945AAFF59CA8C67030200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:60:8a:cd:95:5c:c0:48:c0:b5:2d:7c:4c: 8e:e3:ac:02:94:a4:9d:c7:7e:8d:a9:b6:9c:5c:ce: c1:66:da:d8:09:98:ae:1b:d1:d3:d2:dc:fd:86:8f: 1c:6a:01:a8:a5:07:6b:5d:6a:b2:aa:fa:ed:6d:93: 9c:5b:69:e9:68:fb:90:8b:5d:c0:b4:62:bb:11:98: 3a:d7:98:22:f0:c1:4d:af:9a:f5:1a:b2:f7:6e:f1: 42:75:b3:57:49:da:7f:cd:f9:82:7c:90:51:96:c0: 60:0e:c4:81:2e:45:c7:05:ad:27:9a:19:07:b4:06: 29:ed:60:82:7e:87:bd:43:de:b4:e8:9a:e0:cd:78: 1b:6b:41:52:9d:66:73:aa:47:84:46:99:0e:a3:ab: 3e:31:84:85:41:3c:2f:7d:ec:75:45:33:cb:08:cc: 4f:ae:2e:d4:20:35:3b:f1:ce:e5:4a:4f:24:6b:e3: 7d:3e:3e:5d:1c:45:b7:8c:86:4f:92:d6:94:dc:d5: 46:db:91:9a:79:3c:9e:13:56:88:ab:c9:c6:28:99: 90:99:4a:a2:cd:65:5a:76:aa:32:e5:06:c6:05:e1: 64:39:8c:67:b4:16:02:22:a7:6a:61:8c:1f:9d:fd: 6d:52:e7:45:dd:64:31:ce:24:9f:e5:ba:1e:94:4b: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:EF:35:A3:42:0A:A1:96:29:45:AA:FF:59:CA:8C:67:03:02:00 X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:24:04:fc:dd:0d:12:06:4a:3d:5d:1a:5b:a1:ef:d1:77:91: 3c:35:a5:eb:a9:a3:20:95:a1:a5:97:c5:6f:2c:27:63:a1:37: 9c:44:80:ca:9d:58:dc:07:a9:dc:04:60:11:0e:3e:b0:a7:1d: 89:78:d0:fc:42:2f:51:97:5e:29:ab:19:93:65:07:1c:55:29: 5d:44:5d:55:80:b3:ed:c0:c5:f6:b3:6d:5d:4c:fc:dc:30:73: b3:75:ed:4f:b0:11:eb:b1:79:55:4e:0a:70:57:98:6c:d9:02: 72:cf:32:17:bd:67:79:c9:25:af:2f:c3:49:fd:ea:1b:c3:5e: 25:34:9e:dc:09:38:12:e5:38:61:6c:dc:4d:6e:ca:e5:be:5e: 0a:7c:3e:dc:ac:b3:73:3a:c6:b4:56:13:78:f0:07:bd:7c:a8: 31:88:fa:a3:dd:66:73:93:67:bc:07:57:38:26:c8:a9:d1:84: c3:16:62:d5:d1:76:b3:50:7f:50:8d:63:53:3c:89:cd:bd:73: e7:26:0d:7b:b3:20:d3:9e:71:b2:ac:9f:07:61:1f:0e:aa:ba: 50:be:3e:54:64:88:9f:7d:ff:54:f7:ba:21:56:4a:37:62:d7: fb:4c:29:f4:f9:eb:42:e3:da:bb:fa:4e:75:1b:ae:43:cb:17: d1:ab:18:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKo3OWrOBki00AdaY8NfUSORrgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjEwMjUwNTU4NDlaFw0yNjEwMjYwNzI0NDlaMDMxMTAvBgNV BAMTKDk3MUFFRjM1QTM0MjBBQTE5NjI5NDVBQUZGNTlDQThDNjcwMzAyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgmCKzZVcwEjAtS18TI7jrAKU pJ3Hfo2ptpxczsFm2tgJmK4b0dPS3P2GjxxqAailB2tdarKq+u1tk5xbaelo+5CL XcC0YrsRmDrXmCLwwU2vmvUasvdu8UJ1s1dJ2n/N+YJ8kFGWwGAOxIEuRccFrSea GQe0BintYIJ+h71D3rTomuDNeBtrQVKdZnOqR4RGmQ6jqz4xhIVBPC997HVFM8sI zE+uLtQgNTvxzuVKTyRr430+Pl0cRbeMhk+S1pTc1UbbkZp5PJ4TVoirycYomZCZ SqLNZVp2qjLlBsYF4WQ5jGe0FgIip2phjB+d/W1S50XdZDHOJJ/luh6US9wTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxrvNaNCCqGWKUWq/1nKjGcDAgAwHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZB MzM5NjRDOTJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIokBPzdDRIGSj1dGluh79F3kTw1peupoyCV oaWXxW8sJ2OhN5xEgMqdWNwHqdwEYBEOPrCnHYl40PxCL1GXXimrGZNlBxxVKV1E XVWAs+3AxfazbV1M/Nwwc7N17U+wEeuxeVVOCnBXmGzZAnLPMhe9Z3nJJa8vw0n9 6hvDXiU0ntwJOBLlOGFs3E1uyuW+Xgp8Ptyss3M6xrRWE3jwB718qDGI+qPdZnOT Z7wHVzgmyKnRhMMWYtXRdrNQf1CNY1M8ic29c+cmDXuzINOecbKsnwdhHw6qulC+ PlRkiJ99/1T3uiFWSjdi1/tMKfT560Lj2rv6TnUbrkPLF9GrGNw= -----END CERTIFICATE-----Generated at Sun Oct 25 10:42:39 2026 by rpki-client