$ rpki-client -vvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: Ii/pTAACTCgjM//ShZ64Brle6s8/at9ReTKc08da/zQ= Subject key identifier: 78:26:6E:C4:C4:A8:C5:B1:D0:25:27:26:57:07:5E:35:E2:D1:0E:A5 Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 17E51683A3792F82177CC4DD9B8BE70011683526 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 10:27:52 +0000 Manifest this update: Thu 23 Jul 2026 10:22:52 +0000 Manifest next update: Fri 24 Jul 2026 12:27:52 +0000 Files and hashes: 1: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) 2: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 3: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: j78QmHnOYp//AIUaaIHkVeJKhiP2wJ8KlgOPfx1Qwc4=) 4: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e5:16:83:a3:79:2f:82:17:7c:c4:dd:9b:8b:e7:00:11:68:35:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: Jul 23 10:22:52 2026 GMT Not After : Jul 24 12:27:52 2026 GMT Subject: CN=78266EC4C4A8C5B1D025272657075E35E2D10EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:00:5d:96:65:d7:7b:6e:de:d2:c4:8a:fd: e1:25:94:dd:ca:47:65:3d:cd:7a:55:5b:b6:1a:fa: a8:14:76:f6:20:25:ba:dd:61:8c:d9:4f:f7:52:d0: 3f:e2:a3:07:61:23:0e:d2:e7:a8:16:2e:c2:5d:40: 6d:b1:d1:26:bc:26:65:63:19:34:a0:5d:f3:b5:13: 9f:e1:82:4b:68:e2:66:d0:c4:61:de:d0:53:2a:7f: 01:ed:dd:65:c8:ff:79:a8:f0:85:3e:61:2a:76:93: e8:59:d6:ac:4f:01:80:f6:b3:16:c0:70:f5:60:d3: 2f:42:b6:a7:73:4e:e9:3a:ea:fc:6e:81:47:1b:b4: ed:a8:b6:6e:60:7b:f5:a5:61:15:d8:98:83:6c:fd: 88:f8:73:10:4e:38:c2:28:aa:69:9a:e2:50:4b:cf: be:d5:de:ec:c2:20:d8:54:de:86:6b:a8:99:fa:e9: 7a:33:3e:9f:9f:03:80:be:6f:58:80:93:ad:49:c5: 8a:18:64:10:28:95:a9:f1:90:79:75:ff:85:a2:03: 84:65:68:f1:ed:80:7a:ef:0f:e5:cc:b9:82:14:ce: d1:36:8e:db:84:de:34:ae:3a:2a:60:6e:04:46:f4: 07:87:a6:d7:dd:ab:75:61:17:9b:a4:dc:cc:4f:14: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:26:6E:C4:C4:A8:C5:B1:D0:25:27:26:57:07:5E:35:E2:D1:0E:A5 X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1f:4b:9e:71:09:d9:b6:70:65:85:69:31:35:de:63:58:2c: 1e:86:20:46:11:9b:7a:4f:a3:4c:d3:59:dd:e2:3d:ec:f9:0f: 11:39:03:ff:71:48:6d:7e:13:2a:93:1b:47:87:3e:95:33:c2: ba:2f:59:3e:cb:96:d9:70:e9:81:3b:02:f4:af:0d:ad:c1:08: ef:18:8e:55:b9:69:07:eb:66:ca:aa:79:cb:00:26:d2:cd:32: 4e:48:d8:e8:bc:12:e2:af:f7:20:d1:31:f0:4f:33:84:9b:9e: 30:ac:c9:17:eb:b9:52:61:3f:79:52:9b:99:d0:43:c8:b2:7f: 73:4a:93:dd:8f:e8:f7:62:85:16:7c:d7:79:37:95:aa:34:8f: ac:b2:80:a7:04:51:c3:cf:83:7e:fd:47:ac:48:04:e7:87:66: 0b:24:53:79:10:b5:82:27:1c:5c:1a:2a:15:b6:a2:3d:74:8b: 86:f0:e8:87:e1:dd:92:6c:7f:69:5c:42:04:c1:f1:f0:57:1b: aa:b1:cb:f9:ad:c8:a4:d3:55:d0:cb:c9:a8:43:24:2a:06:25: 79:67:09:f4:7e:df:51:58:26:52:2e:b3:19:b1:d2:64:c0:41: 84:bf:33:c2:39:18:9c:61:7a:b7:95:d5:2d:d6:78:8b:27:0c: d6:7d:6c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+UWg6N5L4IXfMTdm4vnABFoNSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA3MjMxMDIyNTJaFw0yNjA3MjQxMjI3NTJaMDMxMTAvBgNV BAMTKDc4MjY2RUM0QzRBOEM1QjFEMDI1MjcyNjU3MDc1RTM1RTJEMTBFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwQBdlmXXe27e0sSK/eEllN3K R2U9zXpVW7Ya+qgUdvYgJbrdYYzZT/dS0D/iowdhIw7S56gWLsJdQG2x0Sa8JmVj GTSgXfO1E5/hgkto4mbQxGHe0FMqfwHt3WXI/3mo8IU+YSp2k+hZ1qxPAYD2sxbA cPVg0y9CtqdzTuk66vxugUcbtO2otm5ge/WlYRXYmINs/Yj4cxBOOMIoqmma4lBL z77V3uzCINhU3oZrqJn66XozPp+fA4C+b1iAk61JxYoYZBAolanxkHl1/4WiA4Rl aPHtgHrvD+XMuYIUztE2jtuE3jSuOipgbgRG9AeHptfdq3VhF5uk3MxPFNYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeCZuxMSoxbHQJScmVwdeNeLRDqUwHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAfS55xCdm2cGWFaTE13mNYLB6GIEYRm3pP o0zTWd3iPez5DxE5A/9xSG1+EyqTG0eHPpUzwrovWT7Lltlw6YE7AvSvDa3BCO8Y jlW5aQfrZsqqecsAJtLNMk5I2Oi8EuKv9yDRMfBPM4SbnjCsyRfruVJhP3lSm5nQ Q8iyf3NKk92P6PdihRZ813k3lao0j6yygKcEUcPPg379R6xIBOeHZgskU3kQtYIn HFwaKhW2oj10i4bw6Ifh3ZJsf2lcQgTB8fBXG6qxy/mtyKTTVdDLyahDJCoGJXln CfR+31FYJlIusxmx0mTAQYS/M8I5GJxhereV1S3WeIsnDNZ9bOA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:47:35 2026 by rpki-client