$ rpki-client -vvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json) Hash identifier: NAXVswOpy33Y+79Twf3r/r30wXQHwXpUTfFOrwbQ0tA= Subject key identifier: 08:03:B3:7A:5C:42:3C:D1:31:E9:5D:4B:2F:5A:DE:20:82:52:28:F5 Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Certificate serial: 2CD588F7950A8C795152A064547B7587151773B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:57:58 +0000 Manifest this update: Fri 24 Jul 2026 02:52:58 +0000 Manifest next update: Sat 25 Jul 2026 03:20:58 +0000 Files and hashes: 1: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=) 2: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: 9mrA4/fnpHpAl5Ew25ve4Xk60Kf2XgTt5DWlu1oohPg=) 3: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=) 4: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d5:88:f7:95:0a:8c:79:51:52:a0:64:54:7b:75:87:15:17:73:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Validity Not Before: Jul 24 02:52:58 2026 GMT Not After : Jul 25 03:20:58 2026 GMT Subject: CN=0803B37A5C423CD131E95D4B2F5ADE20825228F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:d3:5a:d4:ae:98:ef:4f:7a:d5:a3:53:17: 02:ec:75:c6:a8:12:c5:a1:f7:8d:be:fb:b4:73:9a: d3:bf:e6:9b:b7:0c:d7:9c:a0:5d:2c:09:8a:b7:81: 84:80:5c:4e:18:54:64:67:18:b5:09:be:a6:b6:45: ff:1e:28:f4:e0:3d:7c:26:6c:d6:c5:12:4c:d1:61: 8d:b9:f8:e2:fa:c6:05:5f:3c:d5:cf:3d:9f:f2:c6: b2:4c:e4:c9:9d:9b:5b:23:d4:1b:6f:1a:d0:8c:2e: 88:05:39:1c:50:6e:83:3e:9f:a3:fa:e9:f7:ee:ea: d0:93:eb:a3:b8:b0:96:90:63:a7:b5:5e:7b:54:a5: 19:f7:a8:03:1d:03:d8:6e:e4:3c:6e:37:dc:f5:65: 3e:87:29:5c:59:33:f6:8f:78:c2:86:19:a0:79:4d: eb:5a:d9:eb:48:90:9a:31:f3:15:9b:de:9e:59:86: 9e:25:42:50:c7:58:d3:bc:cd:7f:aa:b3:70:b5:ac: c2:49:a5:c1:95:4e:25:10:96:45:eb:ec:4f:58:fb: 16:82:f5:1c:a2:79:74:be:97:e5:64:73:ba:c7:98: 5d:c2:c0:2b:00:08:9d:56:3f:c1:bb:90:a9:ed:3e: 76:08:ca:63:fe:fa:c1:cd:b5:21:bf:13:34:55:92: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:03:B3:7A:5C:42:3C:D1:31:E9:5D:4B:2F:5A:DE:20:82:52:28:F5 X509v3 Authority Key Identifier: keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:09:39:c1:20:1b:ba:5f:bc:bc:59:c7:42:61:54:d3:d5:60: 1a:9b:f6:36:3f:dc:c4:b4:bb:f4:78:2c:25:e6:bf:e1:c1:02: bc:5f:26:e9:da:ae:79:f1:72:0c:02:f6:05:e3:4b:7d:90:6c: 25:d8:e9:97:65:cc:5a:dc:b9:a5:b3:ea:9d:12:df:99:ec:3b: 62:dd:85:8a:4e:23:d1:80:ad:05:43:3f:ed:39:88:ff:83:16: 53:59:f0:b6:0a:da:68:95:ec:71:1a:05:58:ba:fd:85:84:52: 5f:08:9b:d5:18:be:df:6d:70:f8:f6:d9:3b:d5:e9:2d:ff:69: f5:db:27:f7:10:6c:c2:c9:f1:95:16:b8:47:cd:d3:53:fc:5b: 0f:54:89:5b:73:10:e7:61:b2:fa:92:3d:bb:a1:d8:d1:32:82: e3:b7:17:ca:66:e3:eb:b6:34:29:84:d8:02:1a:3c:02:34:6e: d9:a7:c0:2d:f9:63:9e:ce:7b:63:b2:ac:9d:bd:a4:c5:6a:5b: a6:e1:b5:c3:01:4a:86:42:2c:33:d9:ff:f0:26:68:c9:13:f1: 4f:bb:e6:80:8d:c6:f0:19:6d:4f:93:d1:25:cb:3d:dd:a3:dd: f7:7f:72:5a:01:f2:95:be:70:55:ad:09:2e:01:3b:20:17:a3: f9:be:71:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNWI95UKjHlRUqBkVHt1hxUXc7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy OTEyQTFDQTAeFw0yNjA3MjQwMjUyNThaFw0yNjA3MjUwMzIwNThaMDMxMTAvBgNV BAMTKDA4MDNCMzdBNUM0MjNDRDEzMUU5NUQ0QjJGNUFERTIwODI1MjI4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgdNa1K6Y70961aNTFwLsdcao EsWh942++7RzmtO/5pu3DNecoF0sCYq3gYSAXE4YVGRnGLUJvqa2Rf8eKPTgPXwm bNbFEkzRYY25+OL6xgVfPNXPPZ/yxrJM5Mmdm1sj1BtvGtCMLogFORxQboM+n6P6 6ffu6tCT66O4sJaQY6e1XntUpRn3qAMdA9hu5DxuN9z1ZT6HKVxZM/aPeMKGGaB5 Teta2etIkJox8xWb3p5Zhp4lQlDHWNO8zX+qs3C1rMJJpcGVTiUQlkXr7E9Y+xaC 9RyieXS+l+Vkc7rHmF3CwCsACJ1WP8G7kKntPnYIymP++sHNtSG/EzRVkmQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCAOzelxCPNEx6V1LL1reIIJSKPUwHwYDVR0j BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJC MjEyOTEyQTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMJOcEgG7pfvLxZx0JhVNPVYBqb9jY/3MS0 u/R4LCXmv+HBArxfJunarnnxcgwC9gXjS32QbCXY6ZdlzFrcuaWz6p0S35nsO2Ld hYpOI9GArQVDP+05iP+DFlNZ8LYK2miV7HEaBVi6/YWEUl8Im9UYvt9tcPj22TvV 6S3/afXbJ/cQbMLJ8ZUWuEfN01P8Ww9UiVtzEOdhsvqSPbuh2NEyguO3F8pm4+u2 NCmE2AIaPAI0btmnwC35Y57Oe2OyrJ29pMVqW6bhtcMBSoZCLDPZ//AmaMkT8U+7 5oCNxvAZbU+T0SXLPd2j3fd/cloB8pW+cFWtCS4BOyAXo/m+ceg= -----END CERTIFICATE-----Generated at Fri Jul 24 09:04:34 2026 by rpki-client