$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft File: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft (raw, json) Hash identifier: 9Fq0VSHloll4juHJyyXL+ZP03I6G6sIzMQSHrzNQ4iw= Subject key identifier: B0:55:BD:4E:3E:F3:8A:85:0A:DB:F0:09:8D:2A:80:B8:AC:64:9D:89 Authority key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 Certificate issuer: /CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Certificate serial: 36320A5B31E1F7824B1C9B0FFD74EC7FA3853E53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:06:54 +0000 Manifest this update: Tue 12 May 2026 23:01:54 +0000 Manifest next update: Thu 14 May 2026 02:08:54 +0000 Files and hashes: 1: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: +bhA3UYPReYDsrbCyo3nY+2634L/BbsW+oTXhT99PgM=) 2: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl (hash: ZKORqdm2TKGFnEInuTIVjwMaPULnihZt8C6Vj5LcRs8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:32:0a:5b:31:e1:f7:82:4b:1c:9b:0f:fd:74:ec:7f:a3:85:3e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Validity Not Before: May 12 23:01:54 2026 GMT Not After : May 14 02:08:54 2026 GMT Subject: CN=B055BD4E3EF38A850ADBF0098D2A80B8AC649D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:9c:96:1a:60:23:bd:7c:24:81:08:23:bc: b2:3a:c4:a0:76:a4:47:ca:fb:02:d1:d9:aa:64:0d: 60:11:e0:ba:aa:52:e9:b9:c0:e1:58:21:7b:13:99: a0:a3:da:1f:83:db:eb:d9:67:ac:8e:3e:d5:42:42: 00:45:b3:31:74:f4:b7:02:da:72:8f:42:f5:cb:7c: 25:29:6d:f0:67:47:9a:d4:9e:83:98:b7:df:90:ee: 20:b2:8c:d3:7c:d0:39:2f:7f:1f:6b:bb:9b:e8:ea: 9b:f2:60:11:83:85:71:2e:93:6d:4a:fb:03:f4:cc: f4:03:71:0b:f9:39:0e:f5:69:9b:7e:82:12:5a:e8: b0:b7:39:03:a1:f7:24:ff:6d:0b:61:15:c2:0e:3c: ce:49:db:2c:aa:b2:f2:5e:a4:96:c9:75:0b:de:58: 01:aa:c4:36:13:88:1b:9a:d0:e7:72:f8:4d:c0:e8: 70:f7:d2:f2:87:ee:03:32:55:14:a2:f0:23:2f:6f: 3d:b6:50:69:12:71:f2:dd:a6:b6:53:de:ba:d5:11: a0:6c:f2:52:c5:71:bc:81:ef:b5:64:cf:02:01:18: b6:8e:e6:6d:53:18:32:2f:0e:55:60:0d:c6:84:32: 0c:04:ab:40:f4:2b:1d:ec:93:e8:25:fa:be:fa:21: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:55:BD:4E:3E:F3:8A:85:0A:DB:F0:09:8D:2A:80:B8:AC:64:9D:89 X509v3 Authority Key Identifier: keyid:A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:34:1c:e9:40:00:ac:21:a3:80:00:62:3b:0e:79:fa:64:89: 93:77:3b:36:22:95:6c:96:6e:4f:77:03:1b:5b:66:d7:b5:f9: 54:4f:3e:c9:11:a5:2a:ef:7c:57:ed:8d:64:86:cb:3a:ea:e8: 3b:95:39:49:73:43:f6:07:ce:25:64:9d:cd:c5:36:25:57:a3: 19:44:19:e4:42:57:60:e8:94:b9:a6:18:3c:0e:44:2e:40:26: fe:8d:01:e0:85:e4:ba:b1:81:63:54:5d:fa:a1:5a:69:df:d5: 15:e0:25:01:59:1c:2f:a8:3c:c0:d0:01:89:3e:c2:d3:42:f6: c9:f3:a7:17:cb:60:75:50:a7:2f:62:b3:fe:16:2c:72:1f:6e: 0a:8c:90:68:24:b7:32:2c:c2:f0:2d:b7:06:3f:b3:70:f4:64: 61:12:b2:e2:06:73:ad:83:c3:88:70:93:b0:db:50:d5:85:14: af:71:fc:02:49:97:57:9e:b5:f1:3e:a5:96:6d:64:1d:46:65: ee:1c:00:75:56:ba:1f:ac:2e:0e:47:9e:ad:72:c8:12:1f:35: 6f:fe:4d:1f:55:f6:4c:10:6d:45:33:3b:b9:be:1e:0d:f9:13: fb:bd:81:49:bd:61:71:41:5b:e8:f5:6b:4f:92:6d:8d:cc:82: 97:fa:5d:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjIKWzHh94JLHJsP/XTsf6OFPlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2QjkxMURC Q0E0RTBFNzAeFw0yNjA1MTIyMzAxNTRaFw0yNjA1MTQwMjA4NTRaMDMxMTAvBgNV BAMTKEIwNTVCRDRFM0VGMzhBODUwQURCRjAwOThEMkE4MEI4QUM2NDlEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSpyWGmAjvXwkgQgjvLI6xKB2 pEfK+wLR2apkDWAR4LqqUum5wOFYIXsTmaCj2h+D2+vZZ6yOPtVCQgBFszF09LcC 2nKPQvXLfCUpbfBnR5rUnoOYt9+Q7iCyjNN80Dkvfx9ru5vo6pvyYBGDhXEuk21K +wP0zPQDcQv5OQ71aZt+ghJa6LC3OQOh9yT/bQthFcIOPM5J2yyqsvJepJbJdQve WAGqxDYTiBua0Ody+E3A6HD30vKH7gMyVRSi8CMvbz22UGkScfLdprZT3rrVEaBs 8lLFcbyB77VkzwIBGLaO5m1TGDIvDlVgDcaEMgwEq0D0Kx3sk+gl+r76IZ/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsFW9Tj7zioUK2/AJjSqAuKxknYkwHwYDVR0j BBgwFoAUqXqZVLMiTxh6YY7y02uRHbyk4OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVhNzNkMDQtMjE0Zi00NmI4LTk3NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRC MzIyNEYxODdBNjE4RUYyRDM2QjkxMURCQ0E0RTBFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTdBOTk1NEIzMjI0RjE4N0E2MThFRjJEMzZCOTExREJDQTRF MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2Qjkx MURCQ0E0RTBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANI0HOlAAKwho4AAYjsOefpkiZN3OzYilWyW bk93AxtbZte1+VRPPskRpSrvfFftjWSGyzrq6DuVOUlzQ/YHziVknc3FNiVXoxlE GeRCV2DolLmmGDwORC5AJv6NAeCF5LqxgWNUXfqhWmnf1RXgJQFZHC+oPMDQAYk+ wtNC9snzpxfLYHVQpy9is/4WLHIfbgqMkGgktzIswvAttwY/s3D0ZGESsuIGc62D w4hwk7DbUNWFFK9x/AJJl1eetfE+pZZtZB1GZe4cAHVWuh+sLg5Hnq1yyBIfNW/+ TR9V9kwQbUUzO7m+Hg35E/u9gUm9YXFBW+j1a0+SbY3Mgpf6Xew= -----END CERTIFICATE-----Generated at Wed May 13 03:51:50 2026 by rpki-client