$ rpki-client -vvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: nxuWuXJ8msSN7rwZ0EXl8RQYCXeZU+i/2TPQj8jmxA4= Subject key identifier: ED:EB:E8:51:CE:94:8E:F1:B8:8F:A9:B4:2C:3A:E2:4E:02:1C:DE:24 Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 1F604F1D5B44D35E3C5EACD2C31C944E9F9C96F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 04:29:59 +0000 Manifest this update: Fri 24 Jul 2026 04:24:59 +0000 Manifest next update: Sat 25 Jul 2026 04:57:59 +0000 Files and hashes: 1: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: HGLuo3iKBfEOXo9SVn1QysUbU/H+BCKQIJR8ibCfxx4=) 2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 3: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) 4: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:60:4f:1d:5b:44:d3:5e:3c:5e:ac:d2:c3:1c:94:4e:9f:9c:96:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: Jul 24 04:24:59 2026 GMT Not After : Jul 25 04:57:59 2026 GMT Subject: CN=EDEBE851CE948EF1B88FA9B42C3AE24E021CDE24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:d0:16:ee:91:9c:6a:1b:9f:f0:89:48:2e: a0:44:88:b2:e7:96:db:f8:cf:e8:5f:ef:53:7a:85: e4:72:fb:19:ef:66:b9:34:88:4f:93:49:1b:42:8c: 12:9a:45:a2:06:3f:75:ea:0e:d2:aa:76:25:19:1f: 13:21:39:b8:35:cf:08:41:51:af:15:48:3d:0c:04: 26:b3:00:ac:53:7a:2a:c5:29:15:31:2e:a5:64:ad: 70:50:2b:65:a3:ba:40:7e:0e:c9:92:c8:96:75:39: 0f:81:a5:fa:74:7b:e1:b4:c2:72:68:a9:10:5b:ab: 8c:5a:6a:00:1d:ec:fd:85:98:09:f5:63:0f:3c:de: 33:5e:5d:25:66:aa:c3:c9:54:a7:89:f3:22:d8:8c: cd:e6:8d:b1:5c:e3:0c:ba:63:1a:d7:3b:e7:77:90: cf:33:5f:c3:9d:26:e1:a1:5a:54:ae:5c:ea:77:39: 70:05:07:63:dc:90:cb:fc:0f:e8:6e:99:aa:16:59: 31:3c:d6:28:99:07:8b:20:39:25:f3:e0:4b:6c:de: b2:bf:05:84:c2:b6:aa:2b:ed:11:6b:43:35:a7:a5: d4:24:5a:bc:41:83:58:63:5a:95:22:c3:df:82:bf: 3d:09:58:01:6b:dc:7b:d1:94:06:d9:cb:dd:58:e7: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EB:E8:51:CE:94:8E:F1:B8:8F:A9:B4:2C:3A:E2:4E:02:1C:DE:24 X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a9:17:30:bb:d8:a0:a6:79:f3:12:b7:a5:7a:c8:b0:26:95: 3b:25:28:e0:bf:71:21:ab:1d:28:87:04:e9:9b:fd:8b:71:b4: 76:57:65:0e:d1:c2:47:ab:b4:79:94:37:b4:da:db:24:1d:67: a9:60:ba:6b:7c:af:ce:71:7f:83:3d:87:07:ac:a7:b9:53:8a: 6d:2f:48:c4:8f:00:01:84:4a:66:7e:9c:a9:e6:ed:96:96:32: 25:c3:fc:6d:4d:21:2f:dc:7d:73:64:18:8d:eb:26:81:7a:df: f6:47:1e:60:e9:0e:12:1d:80:29:1d:55:84:0b:3f:ce:74:71: ff:d4:7f:94:e5:cc:5f:e6:1f:b0:c7:f5:66:8a:50:9f:25:3d: 0d:49:fb:80:5f:13:d6:26:74:87:e1:d5:21:de:07:8d:5d:b9: 0f:8c:cc:0b:69:3f:ba:4d:60:4c:f3:b4:c6:f2:ee:70:07:36: 9e:ba:26:59:b0:df:9e:c3:68:01:0a:dd:86:30:43:0d:06:9f: e1:b2:65:e3:69:14:46:8e:01:31:5f:86:71:9a:fd:a1:69:3b: 0f:8d:e8:28:01:62:2f:6c:24:bc:6c:8f:88:a7:89:f0:dd:47: 82:5b:1c:b1:62:d0:f3:7e:b5:fb:ff:5c:4e:6a:38:09:7b:56: 0c:ff:17:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2BPHVtE0148XqzSwxyUTp+clvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA3MjQwNDI0NTlaFw0yNjA3MjUwNDU3NTlaMDMxMTAvBgNV BAMTKEVERUJFODUxQ0U5NDhFRjFCODhGQTlCNDJDM0FFMjRFMDIxQ0RFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrNAW7pGcahuf8IlILqBEiLLn ltv4z+hf71N6heRy+xnvZrk0iE+TSRtCjBKaRaIGP3XqDtKqdiUZHxMhObg1zwhB Ua8VSD0MBCazAKxTeirFKRUxLqVkrXBQK2WjukB+DsmSyJZ1OQ+Bpfp0e+G0wnJo qRBbq4xaagAd7P2FmAn1Yw883jNeXSVmqsPJVKeJ8yLYjM3mjbFc4wy6YxrXO+d3 kM8zX8OdJuGhWlSuXOp3OXAFB2PckMv8D+humaoWWTE81iiZB4sgOSXz4Ets3rK/ BYTCtqor7RFrQzWnpdQkWrxBg1hjWpUiw9+Cvz0JWAFr3HvRlAbZy91Y5/gTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7evoUc6UjvG4j6m0LDriTgIc3iQwHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABipFzC72KCmefMSt6V6yLAmlTslKOC/cSGr HSiHBOmb/YtxtHZXZQ7RwkertHmUN7Ta2yQdZ6lgumt8r85xf4M9hwesp7lTim0v SMSPAAGESmZ+nKnm7ZaWMiXD/G1NIS/cfXNkGI3rJoF63/ZHHmDpDhIdgCkdVYQL P850cf/Uf5TlzF/mH7DH9WaKUJ8lPQ1J+4BfE9YmdIfh1SHeB41duQ+MzAtpP7pN YEzztMby7nAHNp66Jlmw357DaAEK3YYwQw0Gn+GyZeNpFEaOATFfhnGa/aFpOw+N 6CgBYi9sJLxsj4inifDdR4JbHLFi0PN+tfv/XE5qOAl7Vgz/FwY= -----END CERTIFICATE-----Generated at Fri Jul 24 07:04:45 2026 by rpki-client