$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft File: B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json) Hash identifier: zqYPKNs+Shn5C8n3/HmiO80VWZKwI5HPjDt52uv10KA= Subject key identifier: A0:43:D0:FE:7E:16:08:F1:B7:29:1A:42:5E:8A:EA:11:D6:09:9E:BA Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Certificate issuer: /CN=B97B101303D652EE5C0234A7A800429959745FF3 Certificate serial: 12DE25CF6D574731F480DA2BD249EB0383D01631 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:45:25 +0000 Manifest this update: Thu 23 Jul 2026 16:40:25 +0000 Manifest next update: Fri 24 Jul 2026 16:51:25 +0000 Files and hashes: 1: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=) 2: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: I6VtB1d9HRoeEu//8pl1XbVFOaC8Uvb2rpV+VlzdPGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:de:25:cf:6d:57:47:31:f4:80:da:2b:d2:49:eb:03:83:d0:16:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3 Validity Not Before: Jul 23 16:40:25 2026 GMT Not After : Jul 24 16:51:25 2026 GMT Subject: CN=A043D0FE7E1608F1B7291A425E8AEA11D6099EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:9c:31:2f:90:47:e6:3d:ad:ce:25:07:54: 46:e1:85:96:d3:50:e3:ff:2b:70:76:ec:53:77:d6: 88:c6:b2:89:ee:7e:d4:84:06:ac:c6:1f:2f:37:4a: f7:a6:34:21:57:82:0f:7d:cc:7c:08:b2:b6:cf:29: a4:62:45:81:8f:9a:1e:c6:91:d9:ed:96:ae:8f:8f: db:39:75:c4:72:c4:fb:b5:d3:f3:02:fe:f9:e4:b6: c9:80:5f:a6:d3:9a:6d:85:0b:3b:a3:c8:0e:c5:38: fe:00:70:a9:2b:82:2c:07:4f:e6:27:b0:36:75:2b: 57:75:04:29:47:b4:6f:4c:6f:e3:63:4f:98:bb:d8: 14:01:04:9f:8e:5c:f0:f6:78:9c:59:1a:a1:27:b6: 58:a7:32:5e:3f:f6:7f:dd:1c:84:a5:d5:9f:be:85: 74:c6:f8:d0:4f:7d:59:a9:c1:68:72:5a:69:44:b7: 7c:b9:64:00:2d:95:af:bc:5e:ee:72:60:13:9f:ad: af:72:02:da:eb:5a:37:51:40:fb:d3:e1:52:97:6e: a8:7b:b6:a8:36:d0:95:e2:24:50:bf:a9:e9:1f:eb: 81:25:c4:5e:d9:58:67:af:cc:4a:5c:c9:3a:2b:e3: bb:3b:9b:1a:6e:d6:0f:ed:25:fd:14:5c:d3:60:a9: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:43:D0:FE:7E:16:08:F1:B7:29:1A:42:5E:8A:EA:11:D6:09:9E:BA X509v3 Authority Key Identifier: keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6e:93:ee:7b:1d:b0:09:45:50:58:a7:54:a9:ad:7b:ae:7f: ed:c2:c1:51:eb:5d:cf:97:b1:ab:c3:54:c0:e9:5a:5f:92:22: 3d:bf:5d:7d:8e:6c:2d:e1:bb:a0:e1:05:c9:47:79:87:59:14: af:12:48:4b:7b:fd:82:3f:e2:b6:a8:c5:4d:7d:ff:8e:50:4f: 08:70:24:e1:cc:b6:bd:46:0e:9d:a3:a4:4f:5b:cb:77:d7:05: 57:c3:c5:df:4e:ba:ea:72:c3:70:9d:33:8c:20:13:4e:9c:0e: 64:6c:09:ab:f4:6e:aa:d4:2d:93:f7:f1:af:ec:d8:4d:f5:77: df:0e:a6:3f:27:ea:1c:87:3a:62:fc:7b:f6:48:96:a2:fc:78: 4b:a6:1b:31:1d:20:aa:de:27:93:5d:8f:2b:1f:d2:4c:46:6b: fb:88:28:81:a7:74:5b:d1:de:14:73:82:59:58:20:21:49:0e: fa:ce:6a:1a:d2:d3:26:13:23:ad:2b:96:69:03:14:ba:f2:21: 1f:c4:a2:8f:90:d3:f5:be:d3:c3:bd:61:98:1b:78:44:2e:40: 37:ed:95:40:c5:46:2a:1c:9b:2f:b6:32:98:fd:84:74:fc:23: ce:c6:4a:e8:9a:78:d4:4f:25:f2:ef:0e:26:a1:b9:e6:5a:07: d0:4c:36:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEt4lz21XRzH0gNor0knrA4PQFjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1 OTc0NUZGMzAeFw0yNjA3MjMxNjQwMjVaFw0yNjA3MjQxNjUxMjVaMDMxMTAvBgNV BAMTKEEwNDNEMEZFN0UxNjA4RjFCNzI5MUE0MjVFOEFFQTExRDYwOTlFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHpwxL5BH5j2tziUHVEbhhZbT UOP/K3B27FN31ojGsonuftSEBqzGHy83SvemNCFXgg99zHwIsrbPKaRiRYGPmh7G kdntlq6Pj9s5dcRyxPu10/MC/vnktsmAX6bTmm2FCzujyA7FOP4AcKkrgiwHT+Yn sDZ1K1d1BClHtG9Mb+NjT5i72BQBBJ+OXPD2eJxZGqEntlinMl4/9n/dHISl1Z++ hXTG+NBPfVmpwWhyWmlEt3y5ZAAtla+8Xu5yYBOfra9yAtrrWjdRQPvT4VKXbqh7 tqg20JXiJFC/qekf64ElxF7ZWGevzEpcyTor47s7mxpu1g/tJf0UXNNgqcqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoEPQ/n4WCPG3KRpCXorqEdYJnrowHwYDVR0j BBgwFoAUuXsQEwPWUu5cAjSnqABCmVl0X/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkN2Y5ZWItM2MyZC00MWExLTkwODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMw M0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1OTc0NUZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTdCMTAxMzAzRDY1MkVFNUMwMjM0QTdBODAwNDI5OTU5NzQ1 RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQy OTk1OTc0NUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVuk+57HbAJRVBYp1SprXuuf+3CwVHrXc+X savDVMDpWl+SIj2/XX2ObC3hu6DhBclHeYdZFK8SSEt7/YI/4raoxU19/45QTwhw JOHMtr1GDp2jpE9by3fXBVfDxd9Ouupyw3CdM4wgE06cDmRsCav0bqrULZP38a/s 2E31d98Opj8n6hyHOmL8e/ZIlqL8eEumGzEdIKreJ5Ndjysf0kxGa/uIKIGndFvR 3hRzgllYICFJDvrOahrS0yYTI60rlmkDFLryIR/Eoo+Q0/W+08O9YZgbeEQuQDft lUDFRiocmy+2Mpj9hHT8I87GSuiaeNRPJfLvDiahueZaB9BMNtU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:47 2026 by rpki-client