$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json) Hash identifier: XuI3cRiFauLdYQ0eRZWB1Emrzc4mFqh8VorRTkMnxy0= Subject key identifier: CD:CF:6F:07:41:9C:17:F5:A7:AD:BA:2A:EF:30:CC:0F:0D:B0:A1:A3 Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Certificate serial: 64523ED6B3C0E94FF07CF25DF58CAFA36FB5E3D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 22:02:52 +0000 Manifest this update: Fri 25 Sep 2026 21:57:52 +0000 Manifest next update: Sat 26 Sep 2026 22:24:52 +0000 Files and hashes: 1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=) 2: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: YgXy0N5KCmrnyOm6MsX/kBrpTbdNNyxwiuqfFWgeq6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:52:3e:d6:b3:c0:e9:4f:f0:7c:f2:5d:f5:8c:af:a3:6f:b5:e3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Validity Not Before: Sep 25 21:57:52 2026 GMT Not After : Sep 26 22:24:52 2026 GMT Subject: CN=CDCF6F07419C17F5A7ADBA2AEF30CC0F0DB0A1A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:78:d4:a9:d6:ad:00:2e:01:29:1c:b6:dc: 46:dd:ed:6a:0a:ce:b7:4e:7c:cb:30:31:65:5c:49: 67:8f:f5:5c:41:40:b6:60:86:3c:07:16:ed:6e:e7: 4b:d4:21:99:1f:4f:51:a4:25:ea:dc:1b:75:8d:60: 76:cc:e3:b9:bc:00:51:c5:e5:71:a0:4b:bb:3f:ac: 03:ac:e4:ac:55:3a:b7:a2:9a:0a:e7:08:5f:29:89: 86:35:9c:14:04:0f:4a:0b:20:39:96:62:71:e9:fd: 2c:ca:f1:fb:f7:08:88:24:b2:5e:86:95:84:d2:97: 8c:0f:33:20:2a:06:c0:4a:ff:29:6f:fb:6a:f5:a9: 7e:90:11:75:17:00:9a:eb:db:1e:61:3b:f4:9f:1d: 54:ca:95:00:0c:59:97:87:6a:8e:6b:24:73:3b:5e: 04:a1:37:1b:92:63:42:ad:d1:e7:9a:82:0f:84:83: bc:c9:e4:50:3f:a3:6d:f3:c1:87:14:5e:a8:09:8d: 46:bf:22:5e:9c:54:e1:6e:2a:0e:12:52:11:f1:5c: 9e:9f:e1:8e:f2:47:3c:21:4d:ee:e2:08:1b:03:80: f3:d0:77:1a:92:ec:58:56:83:17:95:86:43:b0:a6: f2:e6:5a:50:e8:4e:8b:bd:74:fc:16:9d:f5:02:f7: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CF:6F:07:41:9C:17:F5:A7:AD:BA:2A:EF:30:CC:0F:0D:B0:A1:A3 X509v3 Authority Key Identifier: keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5a:b0:8c:e7:b8:7b:f6:82:54:9c:97:c4:39:44:45:18:ed: d6:a6:04:27:5f:9d:0d:69:89:62:39:75:3a:c1:2b:46:bf:c7: fb:dc:58:a9:2c:e1:bd:78:25:ff:17:6a:9e:33:92:1c:97:c1: 97:ac:64:52:12:2c:35:6f:2c:7c:ed:0f:45:3b:b3:4e:c6:82: 8e:51:4b:c9:4f:c9:f1:1b:53:55:2b:80:b0:c0:c5:68:ac:26: fa:75:30:ac:24:cf:4a:5b:42:64:28:4c:5f:d4:c7:c6:68:1a: a2:31:7a:bb:8f:e5:61:5c:6d:dd:6b:10:74:52:1d:3a:95:14: 0b:da:cc:4f:e0:18:08:13:9c:20:95:4b:0e:09:e4:35:e3:eb: be:7b:65:a5:5a:cd:b6:99:3a:46:0f:62:fd:14:eb:9a:d3:55: b2:81:27:99:9e:78:8c:7a:d1:b2:aa:2a:8f:76:91:fc:f6:b6: 18:10:a7:f3:76:13:43:29:4d:04:49:57:d1:cd:da:87:7e:0e: f9:a3:0d:bf:6d:bd:e8:06:6d:f3:fc:c9:7e:39:d8:ce:5b:6b: bc:99:56:5b:62:90:48:d4:60:47:78:56:18:1c:57:cc:dc:74: 8e:e9:70:75:78:0c:69:6c:74:d3:c4:39:16:d7:98:8e:8f:0d: c3:5f:6f:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFI+1rPA6U/wfPJd9Yyvo2+149cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC RjYxQzU0OTAeFw0yNjA5MjUyMTU3NTJaFw0yNjA5MjYyMjI0NTJaMDMxMTAvBgNV BAMTKENEQ0Y2RjA3NDE5QzE3RjVBN0FEQkEyQUVGMzBDQzBGMERCMEExQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXG3jUqdatAC4BKRy23Ebd7WoK zrdOfMswMWVcSWeP9VxBQLZghjwHFu1u50vUIZkfT1GkJercG3WNYHbM47m8AFHF 5XGgS7s/rAOs5KxVOreimgrnCF8piYY1nBQED0oLIDmWYnHp/SzK8fv3CIgksl6G lYTSl4wPMyAqBsBK/ylv+2r1qX6QEXUXAJrr2x5hO/SfHVTKlQAMWZeHao5rJHM7 XgShNxuSY0Kt0eeagg+Eg7zJ5FA/o23zwYcUXqgJjUa/Il6cVOFuKg4SUhHxXJ6f 4Y7yRzwhTe7iCBsDgPPQdxqS7FhWgxeVhkOwpvLmWlDoTou9dPwWnfUC9zblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzc9vB0GcF/Wnrboq7zDMDw2woaMwHwYDVR0j BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD NTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQz NzJCRjYxQzU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhasIznuHv2glScl8Q5REUY7damBCdfnQ1p iWI5dTrBK0a/x/vcWKks4b14Jf8Xap4zkhyXwZesZFISLDVvLHztD0U7s07Ggo5R S8lPyfEbU1UrgLDAxWisJvp1MKwkz0pbQmQoTF/Ux8ZoGqIxeruP5WFcbd1rEHRS HTqVFAvazE/gGAgTnCCVSw4J5DXj6757ZaVazbaZOkYPYv0U65rTVbKBJ5meeIx6 0bKqKo92kfz2thgQp/N2E0MpTQRJV9HN2od+DvmjDb9tvegGbfP8yX452M5ba7yZ VltikEjUYEd4VhgcV8zcdI7pcHV4DGlsdNPEORbXmI6PDcNfbxg= -----END CERTIFICATE-----Generated at Sat Sep 26 01:54:41 2026 by rpki-client