$ rpki-client -vvvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: Qwc0+biHbnSrg2TETWoS3ZfFArg+goROrLLPj9CImNQ= Subject key identifier: 61:A4:8D:71:CF:F7:1B:F1:6A:E3:6A:2A:A8:B1:8B:9B:E8:73:4B:5B Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 5CFBD552323194AA4E6F62B5242FE98F7071DC5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:37:52 +0000 Manifest this update: Wed 23 Sep 2026 21:32:52 +0000 Manifest next update: Thu 24 Sep 2026 23:24:52 +0000 Files and hashes: 1: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: x/B+hqs1+k5+xw+Jhc3bXt6C0Mp53Gbsl3PL/+3TzUk=) 2: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 3: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) 4: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 5: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fb:d5:52:32:31:94:aa:4e:6f:62:b5:24:2f:e9:8f:70:71:dc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: Sep 23 21:32:52 2026 GMT Not After : Sep 24 23:24:52 2026 GMT Subject: CN=61A48D71CFF71BF16AE36A2AA8B18B9BE8734B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:ec:cf:44:d9:98:f9:6d:52:78:36:be:a0: 7a:ec:26:bc:a4:ee:59:bb:12:39:ec:5b:cf:88:22: 69:4b:86:81:59:0a:90:52:c9:9e:43:da:a3:3d:9a: 38:c1:25:aa:a7:7d:eb:a9:95:6c:c6:c1:c0:2a:75: 19:58:9b:d6:8c:76:7f:a3:96:0b:4f:89:12:26:18: 86:07:59:52:44:b9:d4:1d:7e:b2:18:58:b1:1c:75: b7:57:d6:47:16:b2:cf:06:6b:31:ad:65:05:04:b3: 63:42:35:84:3e:90:32:80:9a:7b:b3:38:a1:b4:a6: cb:d8:0a:33:11:1f:ab:fe:dd:0e:8b:c7:89:41:2e: 04:ab:e6:7d:b7:89:30:0a:cf:6e:8b:7b:43:82:be: 97:39:24:fc:52:a7:4f:14:9b:4e:01:2a:1b:6e:db: 65:35:98:41:1e:70:5d:15:e5:fe:23:8b:da:39:a7: a1:a7:1c:5d:60:a4:a8:d3:3a:71:6b:5a:14:64:2b: f1:7c:a9:4b:b7:db:20:8b:de:33:20:d0:e1:1e:66: 89:92:0f:43:b3:80:97:af:ce:93:82:93:7b:04:bf: 8f:3f:c4:a0:dc:6f:ce:eb:eb:fa:27:f7:88:b1:93: 8f:16:b6:f6:0c:5a:a8:25:e4:fb:bc:b5:e3:64:31: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A4:8D:71:CF:F7:1B:F1:6A:E3:6A:2A:A8:B1:8B:9B:E8:73:4B:5B X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:59:d1:80:59:fb:dd:02:ec:dc:9d:a8:c9:d2:d0:31:3a:67: 1a:f8:12:15:ac:3f:9d:77:ab:a2:3f:cf:0b:39:5b:aa:4d:3c: b1:c6:44:a4:e7:7e:8f:f0:09:ef:8a:f0:59:f2:05:1c:9c:0f: f8:1f:1d:10:59:05:f1:95:76:00:3a:2a:aa:4e:60:ad:4a:9e: d3:ff:df:cf:bb:0d:16:02:a6:52:0f:0f:43:cd:c0:81:20:cb: 82:17:73:2d:82:c7:b6:df:7a:f9:0a:d0:82:82:68:78:11:53: 1e:fa:9d:a8:10:96:c7:28:58:8e:d8:6d:da:f1:a9:72:72:84: 38:9a:d1:98:62:cf:82:f8:47:54:ba:cf:67:f8:f1:32:d1:73: 0e:85:a6:5e:87:1b:66:77:03:e8:9a:8a:c1:9a:ee:8f:2d:e5: 58:d5:0a:c8:59:99:ed:73:55:00:91:ce:a3:06:3b:42:43:6f: 5c:2d:c1:d2:ea:11:29:f6:e6:74:b0:f8:22:ce:53:15:ab:79: 88:e1:27:db:73:f8:f7:e4:8d:43:01:fe:bf:e2:fd:4c:95:7e: c0:c1:4a:60:95:50:62:62:e7:77:d8:d6:9a:49:48:70:73:ec: a5:ce:dc:63:4e:8e:a5:0e:ed:54:9a:ac:28:06:fd:c5:79:e5: 96:39:50:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPvVUjIxlKpOb2K1JC/pj3Bx3FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA5MjMyMTMyNTJaFw0yNjA5MjQyMzI0NTJaMDMxMTAvBgNV BAMTKDYxQTQ4RDcxQ0ZGNzFCRjE2QUUzNkEyQUE4QjE4QjlCRTg3MzRCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMOzPRNmY+W1SeDa+oHrsJryk 7lm7EjnsW8+IImlLhoFZCpBSyZ5D2qM9mjjBJaqnfeuplWzGwcAqdRlYm9aMdn+j lgtPiRImGIYHWVJEudQdfrIYWLEcdbdX1kcWss8GazGtZQUEs2NCNYQ+kDKAmnuz OKG0psvYCjMRH6v+3Q6Lx4lBLgSr5n23iTAKz26Le0OCvpc5JPxSp08Um04BKhtu 22U1mEEecF0V5f4ji9o5p6GnHF1gpKjTOnFrWhRkK/F8qUu32yCL3jMg0OEeZomS D0OzgJevzpOCk3sEv48/xKDcb87r6/on94ixk48WtvYMWqgl5Pu8teNkMdULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaSNcc/3G/Fq42oqqLGLm+hzS1swHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtZ0YBZ+90C7NydqMnS0DE6Zxr4EhWsP513 q6I/zws5W6pNPLHGRKTnfo/wCe+K8FnyBRycD/gfHRBZBfGVdgA6KqpOYK1KntP/ 38+7DRYCplIPD0PNwIEgy4IXcy2Cx7bfevkK0IKCaHgRUx76nagQlscoWI7Ybdrx qXJyhDia0Zhiz4L4R1S6z2f48TLRcw6Fpl6HG2Z3A+iaisGa7o8t5VjVCshZme1z VQCRzqMGO0JDb1wtwdLqESn25nSw+CLOUxWreYjhJ9tz+PfkjUMB/r/i/UyVfsDB SmCVUGJi53fY1ppJSHBz7KXO3GNOjqUO7VSarCgG/cV55ZY5UFA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:42:45 2026 by rpki-client