$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft File: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft (raw, json) Hash identifier: owTszSMihRBKMlQnj88d6bDcGfckSHRE72KBD5sI5EQ= Subject key identifier: 7D:E8:90:14:0C:17:A0:9C:8F:88:51:53:DE:E3:C6:51:CC:9A:D3:05 Authority key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A Certificate issuer: /CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Certificate serial: 752F12E5B8FB256964196AE731DC755A5FA195A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:25:51 +0000 Manifest this update: Tue 12 May 2026 05:20:51 +0000 Manifest next update: Wed 13 May 2026 06:03:51 +0000 Files and hashes: 1: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: sv7PvNJnnZ10opw+lXUbBT0PVWMEcNTxqWez029VNl0=) 2: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl (hash: /tBm5VqhJhcvJwV044U5x0wJNltk00WgA9n+oKkjs14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2f:12:e5:b8:fb:25:69:64:19:6a:e7:31:dc:75:5a:5f:a1:95:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Validity Not Before: May 12 05:20:51 2026 GMT Not After : May 13 06:03:51 2026 GMT Subject: CN=7DE890140C17A09C8F885153DEE3C651CC9AD305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:79:40:51:92:69:94:7a:92:29:3a:ea:89: 49:98:b0:79:8e:6b:84:c5:f8:a2:08:1f:fc:d6:3d: 01:ab:61:aa:f6:72:f6:98:3e:75:e5:72:ea:6b:57: 0b:66:34:54:a7:6e:26:91:18:4e:c0:d4:76:f7:18: 0c:8c:e9:96:9a:6d:e9:fa:90:2d:39:0f:27:91:9e: e1:ba:80:51:1d:6a:6b:b8:3e:03:f3:f2:11:11:47: 7a:df:cf:f5:5e:b4:5d:87:c0:53:2a:bc:b0:b1:21: 16:22:6c:b1:7d:fc:74:f6:5f:3a:27:ac:b0:a5:b9: 0b:64:44:26:44:43:dc:f7:d9:ef:a8:28:c0:b0:7f: 41:ec:d7:e9:87:39:33:3f:60:a2:97:9f:31:ef:4b: 06:ac:f8:1a:39:06:19:06:bc:21:23:36:d2:41:12: 64:35:6d:8a:1b:1d:ed:02:98:76:0c:93:2d:01:96: 7d:8c:45:7b:e3:06:95:b8:61:f4:20:1e:a2:c3:fd: 0e:cf:01:ff:f3:71:b6:ae:2a:36:03:53:b6:96:04: 03:c9:37:b1:17:84:58:08:3e:43:9a:c2:13:a9:b4: fb:44:c9:dd:3e:3f:b1:60:ec:ef:54:9f:f3:56:94: 66:1f:46:4b:bc:4e:47:f7:65:d1:09:58:aa:c3:f8: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E8:90:14:0C:17:A0:9C:8F:88:51:53:DE:E3:C6:51:CC:9A:D3:05 X509v3 Authority Key Identifier: keyid:97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:78:89:79:d4:80:48:2b:06:2b:03:d1:f3:37:7b:81:22:b9: b7:c4:15:44:54:d8:0e:d6:9f:13:5f:6e:60:32:48:fa:98:d5: 07:ed:4c:73:20:d7:0f:0a:3a:b3:6f:ee:51:62:6a:8b:66:6f: 37:c1:40:71:93:8e:c9:ab:d6:a5:18:76:f6:27:a2:0b:4e:c1: ba:66:8b:ca:00:95:1f:0e:d6:d9:b4:52:77:aa:37:13:b7:e6: e2:fe:78:4f:37:30:9e:d8:69:1a:7f:e1:b1:7f:df:ca:da:29: da:c3:f5:b5:a6:76:f6:79:9c:6b:cc:3d:a7:59:fe:52:c3:5e: aa:b6:2e:a1:ef:3c:c9:d1:bf:95:23:87:b0:85:46:3e:4c:98: 92:95:22:57:1d:70:0d:1f:df:b3:d0:36:fe:c5:f4:34:26:08: f7:37:27:79:db:37:ea:cc:84:8a:45:c0:d2:d3:eb:92:12:9c: df:a9:23:6e:d7:2b:43:a7:72:95:88:af:f5:86:93:7b:f1:b7: e8:87:71:2a:9f:7d:27:56:61:27:f2:53:49:64:82:ff:30:2d: 3b:69:ad:30:ba:75:b9:cd:e3:4f:79:b8:66:96:3a:57:b5:4d: 67:8b:be:57:bc:22:98:bb:b2:29:e3:39:26:f0:0c:86:13:00: d3:95:64:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdS8S5bj7JWlkGWrnMdx1Wl+hlaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJDMURB MEIwRDgxQTAeFw0yNjA1MTIwNTIwNTFaFw0yNjA1MTMwNjAzNTFaMDMxMTAvBgNV BAMTKDdERTg5MDE0MEMxN0EwOUM4Rjg4NTE1M0RFRTNDNjUxQ0M5QUQzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbS3lAUZJplHqSKTrqiUmYsHmO a4TF+KIIH/zWPQGrYar2cvaYPnXlcuprVwtmNFSnbiaRGE7A1Hb3GAyM6Zaaben6 kC05DyeRnuG6gFEdamu4PgPz8hERR3rfz/VetF2HwFMqvLCxIRYibLF9/HT2Xzon rLCluQtkRCZEQ9z32e+oKMCwf0Hs1+mHOTM/YKKXnzHvSwas+Bo5BhkGvCEjNtJB EmQ1bYobHe0CmHYMky0Bln2MRXvjBpW4YfQgHqLD/Q7PAf/zcbauKjYDU7aWBAPJ N7EXhFgIPkOawhOptPtEyd0+P7Fg7O9Un/NWlGYfRku8Tkf3ZdEJWKrD+CBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfeiQFAwXoJyPiFFT3uPGUcya0wUwHwYDVR0j BBgwFoAUl+ssZhpfRW3OKuOnOmS8HaCw2BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3MWZjNmQtYWEzYi00ZWQ3LThmZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYx QTVGNDU2RENFMkFFM0E3M0E2NEJDMURBMEIwRDgxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85N0VCMkM2NjFBNUY0NTZEQ0UyQUUzQTczQTY0QkMxREEwQjBE ODFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJD MURBMEIwRDgxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV4iXnUgEgrBisD0fM3e4EiubfEFURU2A7W nxNfbmAySPqY1QftTHMg1w8KOrNv7lFiaotmbzfBQHGTjsmr1qUYdvYnogtOwbpm i8oAlR8O1tm0UneqNxO35uL+eE83MJ7YaRp/4bF/38raKdrD9bWmdvZ5nGvMPadZ /lLDXqq2LqHvPMnRv5Ujh7CFRj5MmJKVIlcdcA0f37PQNv7F9DQmCPc3J3nbN+rM hIpFwNLT65ISnN+pI27XK0OncpWIr/WGk3vxt+iHcSqffSdWYSfyU0lkgv8wLTtp rTC6dbnN4095uGaWOle1TWeLvle8Ipi7sinjOSbwDIYTANOVZEg= -----END CERTIFICATE-----Generated at Tue May 12 23:46:02 2026 by rpki-client