$ rpki-client -vvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: 7bb6YW/eG11ndHHivULR93YwoHnMQPeJEgQQ6Y+/B00= Subject key identifier: C3:B9:A0:F5:29:99:B0:CB:AB:B6:4F:18:ED:6D:2E:72:BD:B1:99:B7 Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 5ACD20850CFAFF8B8C71CBE901092EA9C78F8F5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:50:22 +0000 Manifest this update: Tue 12 May 2026 15:45:22 +0000 Manifest next update: Wed 13 May 2026 16:27:22 +0000 Files and hashes: 1: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 3: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) 4: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: crAuPNFYNXcpuQdnyMXcaPnuHvi26BfuviGWWW4jwhI=) 5: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cd:20:85:0c:fa:ff:8b:8c:71:cb:e9:01:09:2e:a9:c7:8f:8f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: May 12 15:45:22 2026 GMT Not After : May 13 16:27:22 2026 GMT Subject: CN=C3B9A0F52999B0CBABB64F18ED6D2E72BDB199B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:cb:4a:3e:95:56:38:17:d9:9b:d2:70:15: f2:26:9f:3e:d8:1b:c1:2b:a7:27:7a:fa:ba:4b:6e: 47:ba:ee:a1:66:0a:c5:f0:9d:59:c8:a6:b9:2f:47: ec:13:8a:24:5d:49:6b:d8:1d:a6:ed:22:b9:4c:0c: 57:ec:ed:5d:c8:f8:00:04:e4:84:cb:ad:f6:c9:ca: dc:b9:d5:a7:f8:8a:eb:32:da:22:85:b4:4e:8b:35: fc:21:1f:65:67:83:3b:7d:36:a1:d2:c3:7f:15:d6: a3:16:4b:84:dc:41:d3:fd:ec:43:23:cf:8c:8b:6d: c4:c0:b9:57:cf:b8:52:b2:34:3f:40:c7:90:c5:65: cb:6a:25:2a:90:a2:2f:a3:a9:b9:d6:f4:a5:47:99: e3:8a:9d:b7:0c:4f:32:9b:6a:c9:c8:07:81:ed:24: 83:19:d2:27:6f:0f:04:83:02:11:48:d0:67:e5:9a: 64:cb:33:38:3b:27:b8:02:b0:cb:d4:0a:0e:3b:de: 4a:d1:71:73:1a:1e:98:7c:90:b2:0f:54:8c:80:e5: 8e:0a:f4:92:a5:d6:a9:be:df:07:9c:12:93:b0:00: 7e:dd:85:3f:f1:14:61:84:fa:36:46:7a:39:f7:10: a8:89:04:0d:96:b6:96:55:be:28:ab:a6:b7:92:69: 5d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B9:A0:F5:29:99:B0:CB:AB:B6:4F:18:ED:6D:2E:72:BD:B1:99:B7 X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1b:af:6d:8b:eb:6e:40:ab:cb:2d:c2:66:dc:05:13:df:ce: ed:62:f3:27:c1:7a:1f:c3:9f:bd:44:da:25:84:64:3d:88:fe: 87:e6:a9:9e:44:79:f7:ca:d5:55:5c:5a:11:ea:4c:c0:5c:a6: 3c:ef:e7:26:bf:87:1f:56:44:91:bf:56:ad:00:7a:0a:d1:cf: 5d:4c:bc:dd:8d:7e:c9:ed:11:7a:f8:3f:f3:29:36:0f:84:7a: 3b:ca:22:3c:73:73:b3:43:0c:e8:b3:9c:c0:ea:17:06:5e:c4: 0d:2c:23:5a:e5:f3:90:26:dd:d3:f2:f3:c9:32:7e:f8:25:7a: 9e:c0:cf:65:fd:16:62:8d:5d:39:69:05:0c:9b:19:48:a9:53: 2f:98:07:57:33:36:73:05:3e:08:dc:a8:01:10:84:8e:ac:ce: 66:01:c7:9f:79:4c:4e:98:0c:a0:5b:55:9b:dd:4e:f0:10:e0: 8e:d8:80:3c:35:00:33:ca:9e:b1:fd:73:0d:01:bd:2f:a1:ab: e7:88:a1:86:c4:a6:df:36:10:9e:f8:a8:e0:3a:a6:23:ec:9a: d0:51:9e:60:2b:d8:bf:a0:3d:92:21:58:69:ed:bb:e5:98:77: 5d:a1:61:a8:2e:ab:64:05:1d:59:7b:d9:19:b7:71:5a:de:b2: ee:0c:d6:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWs0ghQz6/4uMccvpAQkuqcePj14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA1MTIxNTQ1MjJaFw0yNjA1MTMxNjI3MjJaMDMxMTAvBgNV BAMTKEMzQjlBMEY1Mjk5OUIwQ0JBQkI2NEYxOEVENkQyRTcyQkRCMTk5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJ8tKPpVWOBfZm9JwFfImnz7Y G8Erpyd6+rpLbke67qFmCsXwnVnIprkvR+wTiiRdSWvYHabtIrlMDFfs7V3I+AAE 5ITLrfbJyty51af4iusy2iKFtE6LNfwhH2Vngzt9NqHSw38V1qMWS4TcQdP97EMj z4yLbcTAuVfPuFKyND9Ax5DFZctqJSqQoi+jqbnW9KVHmeOKnbcMTzKbasnIB4Ht JIMZ0idvDwSDAhFI0GflmmTLMzg7J7gCsMvUCg473krRcXMaHph8kLIPVIyA5Y4K 9JKl1qm+3wecEpOwAH7dhT/xFGGE+jZGejn3EKiJBA2WtpZVviirpreSaV2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7mg9SmZsMurtk8Y7W0ucr2xmbcwHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgbr22L625Aq8stwmbcBRPfzu1i8yfBeh/D n71E2iWEZD2I/ofmqZ5EeffK1VVcWhHqTMBcpjzv5ya/hx9WRJG/Vq0AegrRz11M vN2NfsntEXr4P/MpNg+EejvKIjxzc7NDDOiznMDqFwZexA0sI1rl85Am3dPy88ky fvglep7Az2X9FmKNXTlpBQybGUipUy+YB1czNnMFPgjcqAEQhI6szmYBx595TE6Y DKBbVZvdTvAQ4I7YgDw1ADPKnrH9cw0BvS+hq+eIoYbEpt82EJ74qOA6piPsmtBR nmAr2L+gPZIhWGntu+WYd12hYaguq2QFHVl72Rm3cVresu4M1hQ= -----END CERTIFICATE-----Generated at Wed May 13 02:15:32 2026 by rpki-client