$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft File: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft (raw, json) Hash identifier: vZe+LcsppqHvStX0LvK67zI9swwvxrkUyof32C3YHDk= Subject key identifier: B7:14:FD:09:EB:7D:5B:6F:77:2D:FE:F7:D0:45:44:F2:3E:72:3E:9E Authority key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A Certificate issuer: /CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Certificate serial: 62A527B2DCA8C90F029C9F3A46156DEAEF172FDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:36:45 +0000 Manifest this update: Wed 23 Sep 2026 12:31:45 +0000 Manifest next update: Thu 24 Sep 2026 13:57:45 +0000 Files and hashes: 1: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: sv7PvNJnnZ10opw+lXUbBT0PVWMEcNTxqWez029VNl0=) 2: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl (hash: +Ttjq23QcBpc3VQeJwlwzv4t1dTLyM2bI1024PHRFd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a5:27:b2:dc:a8:c9:0f:02:9c:9f:3a:46:15:6d:ea:ef:17:2f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Validity Not Before: Sep 23 12:31:45 2026 GMT Not After : Sep 24 13:57:45 2026 GMT Subject: CN=B714FD09EB7D5B6F772DFEF7D04544F23E723E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:8a:04:17:46:48:cd:0c:79:e3:8e:e9:ba: 1d:8d:a3:63:73:b1:63:38:72:9d:d1:bf:3a:11:79: 3c:8d:d6:95:77:3c:71:3c:96:a8:af:d6:8d:d1:89: 69:55:92:6a:19:5e:86:e1:f4:9d:08:01:38:5b:f6: 0d:24:43:5d:00:a9:b9:47:82:13:78:5c:2f:26:92: 80:0e:fe:c4:56:a1:6e:c2:dd:d0:a3:39:51:15:2a: 18:17:0a:68:47:81:0e:64:7a:16:57:66:cc:e3:8c: 87:1e:d2:fd:6e:c9:88:db:76:1a:c9:a9:8d:88:f4: 7e:a5:09:25:46:1e:1d:92:55:6e:d2:89:1f:bf:6c: 84:5a:b2:ce:1f:00:74:a8:71:79:69:89:d3:a6:0d: 29:e6:4d:05:9e:8b:56:ac:8b:34:c2:f0:1f:2b:4f: 91:ef:88:42:ce:1a:96:ee:76:c7:e5:01:7e:cd:b1: aa:5e:e0:1b:f7:76:81:98:f6:44:7b:8e:d9:f3:12: 53:b3:6c:ab:05:fc:03:9f:df:55:8f:ab:42:67:a8: 31:bc:14:22:7b:de:c4:ef:96:e1:c6:8a:42:0b:b7: ec:d1:49:72:96:05:a8:94:7a:31:2c:6e:b2:af:61: c2:a8:58:e0:25:3d:2b:e3:45:ff:cf:65:f6:91:a1: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:FD:09:EB:7D:5B:6F:77:2D:FE:F7:D0:45:44:F2:3E:72:3E:9E X509v3 Authority Key Identifier: keyid:97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9c:7b:37:d7:a7:80:01:2b:1a:2f:58:05:d7:f5:9d:34:76: f7:06:31:60:b6:0a:55:aa:d1:6c:9c:50:c3:fe:81:20:c4:18: 9e:7c:03:02:fa:9c:6b:d9:64:06:c8:9b:87:45:ec:04:69:74: e0:b2:b1:47:43:9b:4a:81:c0:49:25:8b:4c:89:0c:a3:99:2b: 61:22:9d:dd:8f:c8:d8:66:17:3d:13:49:9b:6d:4e:d1:10:24: e4:22:ca:dd:7b:f7:48:08:26:8d:76:be:72:62:75:7a:f8:fd: 1f:3e:47:14:40:f9:7f:43:e7:e7:00:bc:01:8e:d3:d1:58:88: 0c:3b:9c:a4:76:4c:09:af:41:52:f0:5e:f2:3f:ea:71:2c:72: 5c:6a:b1:1d:a4:29:c4:aa:82:23:87:30:8c:2b:c6:23:50:de: 23:9c:43:76:a1:60:43:9e:17:51:dd:8a:9d:c6:5f:37:3b:20: 65:3a:08:43:4a:b9:cd:30:e2:ef:9d:9b:09:ac:56:01:5b:54: 86:f2:d1:50:37:58:9b:dc:cd:f1:7c:42:93:cc:4d:dc:2d:b1: 97:fa:77:4c:6f:a3:fc:db:e6:b2:05:a3:a2:49:c1:c7:e5:a3: f2:f3:3b:51:d1:dc:15:41:d3:08:7e:19:e8:14:13:d2:10:16: 85:1a:b1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqUnstyoyQ8CnJ86RhVt6u8XL98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJDMURB MEIwRDgxQTAeFw0yNjA5MjMxMjMxNDVaFw0yNjA5MjQxMzU3NDVaMDMxMTAvBgNV BAMTKEI3MTRGRDA5RUI3RDVCNkY3NzJERkVGN0QwNDU0NEYyM0U3MjNFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOr4oEF0ZIzQx5447puh2No2Nz sWM4cp3RvzoReTyN1pV3PHE8lqiv1o3RiWlVkmoZXobh9J0IAThb9g0kQ10AqblH ghN4XC8mkoAO/sRWoW7C3dCjOVEVKhgXCmhHgQ5kehZXZszjjIce0v1uyYjbdhrJ qY2I9H6lCSVGHh2SVW7SiR+/bIRass4fAHSocXlpidOmDSnmTQWei1asizTC8B8r T5HviELOGpbudsflAX7Nsape4Bv3doGY9kR7jtnzElOzbKsF/AOf31WPq0JnqDG8 FCJ73sTvluHGikILt+zRSXKWBaiUejEsbrKvYcKoWOAlPSvjRf/PZfaRoRmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtxT9Cet9W293Lf730EVE8j5yPp4wHwYDVR0j BBgwFoAUl+ssZhpfRW3OKuOnOmS8HaCw2BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3MWZjNmQtYWEzYi00ZWQ3LThmZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYx QTVGNDU2RENFMkFFM0E3M0E2NEJDMURBMEIwRDgxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85N0VCMkM2NjFBNUY0NTZEQ0UyQUUzQTczQTY0QkMxREEwQjBE ODFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJD MURBMEIwRDgxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALycezfXp4ABKxovWAXX9Z00dvcGMWC2ClWq 0WycUMP+gSDEGJ58AwL6nGvZZAbIm4dF7ARpdOCysUdDm0qBwEkli0yJDKOZK2Ei nd2PyNhmFz0TSZttTtEQJOQiyt1790gIJo12vnJidXr4/R8+RxRA+X9D5+cAvAGO 09FYiAw7nKR2TAmvQVLwXvI/6nEsclxqsR2kKcSqgiOHMIwrxiNQ3iOcQ3ahYEOe F1Hdip3GXzc7IGU6CENKuc0w4u+dmwmsVgFbVIby0VA3WJvczfF8QpPMTdwtsZf6 d0xvo/zb5rIFo6JJwcflo/LzO1HR3BVB0wh+GegUE9IQFoUaseU= -----END CERTIFICATE-----Generated at Thu Sep 24 02:35:21 2026 by rpki-client