$ rpki-client -vvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json) Hash identifier: yxmABr7tNuCd1G7Xt4n0R1eB+vpvVvTnEDOI3aX01FY= Subject key identifier: 63:C4:B1:83:43:05:84:C5:E7:5D:00:BE:9E:16:08:A4:9D:42:3D:4E Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Certificate serial: 168165327E9C4B38E37CE2780171823E150CE7BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:06:51 +0000 Manifest this update: Tue 12 May 2026 17:01:51 +0000 Manifest next update: Wed 13 May 2026 17:47:51 +0000 Files and hashes: 1: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=) 2: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=) 3: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: 8pW6kShRA5+MupytTb3ZeOH1xc2plnXYJ25IF97k8iI=) 4: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:81:65:32:7e:9c:4b:38:e3:7c:e2:78:01:71:82:3e:15:0c:e7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Validity Not Before: May 12 17:01:51 2026 GMT Not After : May 13 17:47:51 2026 GMT Subject: CN=63C4B183430584C5E75D00BE9E1608A49D423D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:58:2d:63:c9:6e:9b:3f:32:9f:48:8b:60:a0: 8a:84:fb:ee:49:58:45:23:a0:64:be:f9:4c:f6:dc: 33:62:32:ff:61:3a:d0:31:4d:70:09:7e:ad:fd:cd: ee:25:9b:e5:01:c5:4d:cb:f9:fb:8c:33:7a:a4:ec: 55:9f:db:06:16:a1:64:d8:34:80:95:64:cc:c0:cb: ca:81:bc:cf:a4:a0:e1:18:11:9a:44:b8:12:4f:1a: 7b:53:1f:2a:a4:cd:79:95:d9:8c:5b:59:69:bb:32: f4:8f:cf:f0:e4:bf:93:b5:37:0f:4b:5b:e0:c0:6c: d5:2a:e9:5a:33:02:0d:d1:47:a9:3b:3d:d8:1b:8b: ec:73:43:c3:26:31:a1:c0:58:bf:9d:30:4d:ed:77: f0:fe:ab:dc:de:f5:8b:d7:cf:ac:f9:aa:74:2d:9d: 8c:7e:90:de:38:40:5e:19:2d:9c:f6:8f:5e:d9:21: 54:be:cb:87:ce:c1:c4:88:c5:65:1f:a5:f8:68:bd: ce:7c:09:00:1d:1c:1d:78:a4:99:50:ba:19:aa:0f: 90:9f:bf:48:0c:7b:2e:38:51:72:ed:82:e6:6b:2e: e0:7e:7d:3e:aa:e6:60:c6:df:17:33:60:2a:e2:9f: c1:68:76:15:3a:6b:47:64:55:2b:ee:af:93:e6:03: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C4:B1:83:43:05:84:C5:E7:5D:00:BE:9E:16:08:A4:9D:42:3D:4E X509v3 Authority Key Identifier: keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1a:c6:d3:f4:22:c9:17:df:c2:1c:28:04:ca:c8:28:f7:1b: 84:b4:90:57:e3:89:e8:b7:26:dd:13:e3:8e:75:17:ef:40:60: 6c:51:a4:66:7f:0e:74:6c:29:6d:ea:fc:a5:a2:75:5d:07:36: f5:31:aa:63:42:c8:18:56:24:b1:4c:5d:5a:20:79:5d:71:51: c0:4b:e2:52:3c:09:e4:fe:39:46:7e:a4:1d:ed:ee:7c:c9:28: 26:a8:88:88:8f:9d:06:70:a4:17:1e:50:a7:7e:ff:da:44:f6: 48:2d:7d:97:4d:f4:5e:1a:3f:6c:05:5b:df:45:7e:e3:80:5d: 9e:9b:ce:3e:da:4b:1e:f1:34:92:12:52:5f:69:38:e2:ee:f8: e7:45:14:53:7e:89:38:36:ef:b0:be:07:1a:c9:f7:ad:ad:a6: 78:a3:bc:e6:f9:93:c6:5a:67:24:c9:d4:76:69:c6:f0:19:7b: 7c:d7:b4:be:57:1d:fd:fb:48:42:2d:ff:6b:ee:55:f9:fb:05: 19:55:d4:53:5b:d0:f0:62:25:26:a8:a4:7f:78:56:74:86:df: f2:04:1c:81:1f:6f:fd:e4:fe:9b:ba:09:d0:24:60:43:31:89: 12:62:ef:73:f0:23:7d:b9:06:82:89:c2:f9:e1:87:0d:60:d5: 17:6f:1b:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoFlMn6cSzjjfOJ4AXGCPhUM570wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy OTEyQTFDQTAeFw0yNjA1MTIxNzAxNTFaFw0yNjA1MTMxNzQ3NTFaMDMxMTAvBgNV BAMTKDYzQzRCMTgzNDMwNTg0QzVFNzVEMDBCRTlFMTYwOEE0OUQ0MjNENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWC1jyW6bPzKfSItgoIqE++5J WEUjoGS++Uz23DNiMv9hOtAxTXAJfq39ze4lm+UBxU3L+fuMM3qk7FWf2wYWoWTY NICVZMzAy8qBvM+koOEYEZpEuBJPGntTHyqkzXmV2YxbWWm7MvSPz/Dkv5O1Nw9L W+DAbNUq6VozAg3RR6k7Pdgbi+xzQ8MmMaHAWL+dME3td/D+q9ze9YvXz6z5qnQt nYx+kN44QF4ZLZz2j17ZIVS+y4fOwcSIxWUfpfhovc58CQAdHB14pJlQuhmqD5Cf v0gMey44UXLtguZrLuB+fT6q5mDG3xczYCrin8FodhU6a0dkVSvur5PmAzgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8Sxg0MFhMXnXQC+nhYIpJ1CPU4wHwYDVR0j BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJC MjEyOTEyQTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoaxtP0IskX38IcKATKyCj3G4S0kFfjiei3 Jt0T4451F+9AYGxRpGZ/DnRsKW3q/KWidV0HNvUxqmNCyBhWJLFMXVogeV1xUcBL 4lI8CeT+OUZ+pB3t7nzJKCaoiIiPnQZwpBceUKd+/9pE9kgtfZdN9F4aP2wFW99F fuOAXZ6bzj7aSx7xNJISUl9pOOLu+OdFFFN+iTg277C+BxrJ962tpnijvOb5k8Za ZyTJ1HZpxvAZe3zXtL5XHf37SEIt/2vuVfn7BRlV1FNb0PBiJSaopH94VnSG3/IE HIEfb/3k/pu6CdAkYEMxiRJi73PwI325BoKJwvnhhw1g1RdvG1s= -----END CERTIFICATE-----Generated at Wed May 13 07:38:26 2026 by rpki-client