$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json) Hash identifier: 7d0D9vtfrlW4S4Nwx0QFHHUJPlt9ONJmCvNFYLnwsng= Subject key identifier: 49:0D:2D:42:5F:B9:16:99:C7:CF:DB:85:DA:5D:40:3C:28:6A:D1:B9 Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Certificate serial: 3DF107E969596B0CC147F1B34C552F2CF8D90F0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:45 +0000 Manifest this update: Tue 12 May 2026 20:32:44 +0000 Manifest next update: Wed 13 May 2026 21:11:44 +0000 Files and hashes: 1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=) 2: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: 6faHHvSziFLSQS1XnjTYaAghs3FfVWPGSK+1lu+0MGc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f1:07:e9:69:59:6b:0c:c1:47:f1:b3:4c:55:2f:2c:f8:d9:0f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Validity Not Before: May 12 20:32:44 2026 GMT Not After : May 13 21:11:44 2026 GMT Subject: CN=490D2D425FB91699C7CFDB85DA5D403C286AD1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c6:ff:f7:e1:59:bc:09:7c:4a:00:92:7b:37: 01:30:f2:85:07:d1:36:44:4d:1b:98:f3:55:75:f8: b4:7d:d3:9c:87:5b:e8:28:48:d4:b2:3a:f7:9c:32: b2:40:e4:e8:a8:86:5c:93:6a:2b:8f:06:8e:fd:ec: 24:78:90:51:0b:2b:26:b4:b8:de:d5:a7:6f:57:f2: e7:56:81:82:02:bf:cc:16:de:df:9c:36:2f:7c:80: 06:cf:66:85:e7:8f:bf:c3:a3:ed:a8:52:8c:a4:ab: e2:02:28:5c:bb:81:ed:8a:ad:7c:bb:8b:3c:8d:86: b6:c3:dc:20:94:29:27:58:f8:e1:19:a2:cd:2b:47: 35:27:95:5c:9a:38:2f:50:32:a0:b3:3a:0e:56:4f: ec:e2:bc:23:b1:d2:78:55:a9:52:36:d7:5c:8b:c2: 78:d3:fc:e5:db:80:0f:e3:18:a0:38:02:37:ef:4e: 07:c5:27:47:8b:6d:57:ca:de:3d:2a:71:dd:c2:a6: 04:de:de:3b:3c:ef:72:6b:be:00:1b:78:18:98:f2: 45:5a:41:94:e6:56:97:76:69:0a:e9:2b:f2:7b:c2: 4c:96:aa:69:e6:f0:5b:84:20:ef:e9:62:43:da:85: be:b1:b5:93:d8:2e:92:ad:9e:72:e9:c7:3b:77:32: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0D:2D:42:5F:B9:16:99:C7:CF:DB:85:DA:5D:40:3C:28:6A:D1:B9 X509v3 Authority Key Identifier: keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d5:70:f6:5c:d1:9c:03:71:a8:cc:75:41:1a:56:74:44:f2: 98:7d:58:21:40:e4:66:44:c3:36:de:6a:b9:d0:96:1e:9a:22: c6:ad:b7:66:95:80:b9:a7:a5:7a:3d:5b:c8:a2:ef:81:c9:71: d0:b3:08:7d:fc:0c:d9:89:ff:b1:4f:d9:a1:0d:1c:2c:87:46: 3c:21:f0:0a:05:58:a4:e3:8f:56:27:43:9e:c5:41:78:e9:ee: 8f:d2:87:47:25:d0:b4:5a:15:35:40:c7:5c:3a:d7:b3:3b:db: cd:a3:9f:e1:21:d0:16:8b:7e:92:30:c6:7d:eb:c7:52:32:ff: 0a:55:c9:a0:61:4e:49:ca:83:f6:16:03:f4:4d:32:38:4a:bc: 94:fe:99:eb:f9:83:ab:2b:2e:bd:b8:df:ec:bb:2a:fd:0a:fc: fe:51:c6:86:5c:3f:b5:b1:58:46:a8:29:f9:9a:e1:34:02:36: 55:d8:32:ab:b1:15:a0:8d:c5:a9:0f:2e:22:bf:b8:04:6b:89: 9f:7b:d7:65:2a:bf:03:06:bf:ab:8c:9b:c0:ba:1b:fc:ef:3a: 8d:89:12:44:5e:2b:b6:4f:7f:c7:53:a4:2e:aa:e5:c8:be:4e: c8:50:8e:7f:52:21:9c:5e:77:cd:26:63:c7:48:0c:1a:eb:85: 16:e5:af:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfEH6WlZawzBR/GzTFUvLPjZDwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC RjYxQzU0OTAeFw0yNjA1MTIyMDMyNDRaFw0yNjA1MTMyMTExNDRaMDMxMTAvBgNV BAMTKDQ5MEQyRDQyNUZCOTE2OTlDN0NGREI4NURBNUQ0MDNDMjg2QUQxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxv/34Vm8CXxKAJJ7NwEw8oUH 0TZETRuY81V1+LR905yHW+goSNSyOvecMrJA5OiohlyTaiuPBo797CR4kFELKya0 uN7Vp29X8udWgYICv8wW3t+cNi98gAbPZoXnj7/Do+2oUoykq+ICKFy7ge2KrXy7 izyNhrbD3CCUKSdY+OEZos0rRzUnlVyaOC9QMqCzOg5WT+zivCOx0nhVqVI211yL wnjT/OXbgA/jGKA4AjfvTgfFJ0eLbVfK3j0qcd3CpgTe3js873JrvgAbeBiY8kVa QZTmVpd2aQrpK/J7wkyWqmnm8FuEIO/pYkPahb6xtZPYLpKtnnLpxzt3MpYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSQ0tQl+5FpnHz9uF2l1APChq0bkwHwYDVR0j BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD NTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQz NzJCRjYxQzU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHVcPZc0ZwDcajMdUEaVnRE8ph9WCFA5GZE wzbearnQlh6aIsatt2aVgLmnpXo9W8ii74HJcdCzCH38DNmJ/7FP2aENHCyHRjwh 8AoFWKTjj1YnQ57FQXjp7o/Sh0cl0LRaFTVAx1w617M7282jn+Eh0BaLfpIwxn3r x1Iy/wpVyaBhTknKg/YWA/RNMjhKvJT+mev5g6srLr243+y7Kv0K/P5RxoZcP7Wx WEaoKfma4TQCNlXYMquxFaCNxakPLiK/uARriZ9712UqvwMGv6uMm8C6G/zvOo2J EkReK7ZPf8dTpC6q5ci+TshQjn9SIZxed80mY8dIDBrrhRblrz4= -----END CERTIFICATE-----Generated at Wed May 13 03:23:33 2026 by rpki-client