$ rpki-client -vvvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft File: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft (raw, json) Hash identifier: Wob5TKO9VtaCFcZJNWqKDtCSLCEhr7Y+K4KqpSedm0Y= Subject key identifier: 2D:09:E2:5B:10:13:34:17:D0:7C:69:1A:20:DD:0C:BB:9C:F5:36:96 Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA Certificate issuer: /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Certificate serial: 4A7BF65485C7D6F41726F55D98F5C6834B959A83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 13:00:39 +0000 Manifest this update: Sun 27 Sep 2026 12:55:39 +0000 Manifest next update: Mon 28 Sep 2026 16:00:39 +0000 Files and hashes: 1: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=) 2: 1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl (hash: UJ8TRUoSeGzopOf7gO1t2nwTCJrG3rGYpMoCQhT6SiI=) 3: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=) 4: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7b:f6:54:85:c7:d6:f4:17:26:f5:5d:98:f5:c6:83:4b:95:9a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA Validity Not Before: Sep 27 12:55:39 2026 GMT Not After : Sep 28 16:00:39 2026 GMT Subject: CN=2D09E25B10133417D07C691A20DD0CBB9CF53696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:07:35:f0:07:5d:76:6c:69:72:a6:1a:94: 7f:d9:b3:95:d4:98:ba:57:fa:9a:31:2f:0c:ec:4d: 2b:e5:27:41:33:b0:32:10:02:11:f8:14:ee:8d:d3: 42:27:fb:9e:7d:68:f6:33:35:b0:9e:e9:d0:66:e5: 35:15:64:43:99:68:ab:25:45:7f:ac:50:b6:93:18: 9c:a5:93:5f:7c:c1:76:49:f3:f1:13:69:be:1c:f4: 05:84:5c:06:e9:33:9e:8b:4f:3e:92:5e:55:1a:14: a8:d1:50:42:75:3b:e0:dd:61:9e:ff:c1:da:15:aa: 84:08:50:9c:ab:ce:fc:24:b3:6d:f1:50:a1:f1:87: 4b:33:58:4c:dc:c3:b2:94:69:2a:a1:22:9b:ed:3c: c8:07:c0:af:84:0e:18:cb:9a:0c:38:36:90:47:c2: 9a:6e:55:d4:a9:09:f6:4e:bb:0d:1a:9c:40:03:e0: 0a:ed:88:2e:23:ce:6a:6b:79:f3:08:8f:80:be:0a: 71:03:3e:c7:e1:6b:de:eb:f5:24:8d:f6:4b:1a:a8: 2d:64:54:60:b5:60:2d:21:07:6b:07:f5:ec:39:b0: 3f:bc:a2:a4:97:36:04:c0:00:f0:9d:3c:8b:d4:e5: 54:04:fb:7c:fe:a9:23:26:8a:bb:40:08:0d:cb:7b: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:09:E2:5B:10:13:34:17:D0:7C:69:1A:20:DD:0C:BB:9C:F5:36:96 X509v3 Authority Key Identifier: keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:5a:c3:8b:c6:cb:04:fd:59:62:68:b4:55:bf:74:b9:02:55: 87:66:59:39:3a:ff:1e:f6:9c:ff:15:4c:80:4c:f6:23:8b:fa: 65:ac:93:89:90:a8:7d:de:88:65:01:2d:c7:3b:6d:4a:05:e7: 7d:fd:1f:9f:1c:71:21:07:f1:1f:65:e9:bc:87:82:fe:2b:3e: 69:22:9c:3e:f2:e0:75:f6:d8:ab:46:b6:e8:91:d4:b1:a8:1b: 38:01:a5:dd:20:31:25:54:46:1c:63:b9:1b:5c:02:19:d3:08: 0f:aa:90:4f:81:5e:83:bd:91:ef:33:f4:18:4a:81:d4:77:56: 99:1f:52:01:18:28:81:ee:17:65:50:a9:19:5e:68:51:c5:81: 01:1e:89:ef:97:f1:6c:29:a8:45:90:57:fc:52:d2:04:03:d8: cd:f0:7b:22:f6:65:90:f7:43:55:7b:d6:45:d5:43:da:40:e0: 79:47:58:4e:bd:12:26:da:6f:ef:14:f0:45:e9:1c:3c:c4:b6: d9:58:7a:ec:b2:88:41:6f:9f:e6:9a:50:61:4b:9a:ca:6f:5a: c1:2c:b2:0b:be:65:47:8e:d3:5b:db:93:38:0f:bf:0c:90:f2: b0:36:f9:c1:74:80:ba:60:6f:0e:8a:4b:d1:2f:26:73:0a:38: 49:fa:2f:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnv2VIXH1vQXJvVdmPXGg0uVmoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy OTEyQTFDQTAeFw0yNjA5MjcxMjU1MzlaFw0yNjA5MjgxNjAwMzlaMDMxMTAvBgNV BAMTKDJEMDlFMjVCMTAxMzM0MTdEMDdDNjkxQTIwREQwQ0JCOUNGNTM2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69Qc18AdddmxpcqYalH/Zs5XU mLpX+poxLwzsTSvlJ0EzsDIQAhH4FO6N00In+559aPYzNbCe6dBm5TUVZEOZaKsl RX+sULaTGJylk198wXZJ8/ETab4c9AWEXAbpM56LTz6SXlUaFKjRUEJ1O+DdYZ7/ wdoVqoQIUJyrzvwks23xUKHxh0szWEzcw7KUaSqhIpvtPMgHwK+EDhjLmgw4NpBH wppuVdSpCfZOuw0anEAD4ArtiC4jzmprefMIj4C+CnEDPsfha97r9SSN9ksaqC1k VGC1YC0hB2sH9ew5sD+8oqSXNgTAAPCdPIvU5VQE+3z+qSMmirtACA3Le5F5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULQniWxATNBfQfGkaIN0Mu5z1NpYwHwYDVR0j BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJC MjEyOTEyQTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdaw4vGywT9WWJotFW/dLkCVYdmWTk6/x72 nP8VTIBM9iOL+mWsk4mQqH3eiGUBLcc7bUoF5339H58ccSEH8R9l6byHgv4rPmki nD7y4HX22KtGtuiR1LGoGzgBpd0gMSVURhxjuRtcAhnTCA+qkE+BXoO9ke8z9BhK gdR3VpkfUgEYKIHuF2VQqRleaFHFgQEeie+X8WwpqEWQV/xS0gQD2M3weyL2ZZD3 Q1V71kXVQ9pA4HlHWE69Eibab+8U8EXpHDzEttlYeuyyiEFvn+aaUGFLmspvWsEs sgu+ZUeO01vbkzgPvwyQ8rA2+cF0gLpgbw6KS9EvJnMKOEn6L+c= -----END CERTIFICATE-----Generated at Sun Sep 27 18:12:58 2026 by rpki-client