$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft File: B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json) Hash identifier: 96K5fPbi4PDnFf5tKP0NoIYOlbfSPtW9AqyPlyYSwzI= Subject key identifier: E8:9B:A3:7E:B1:35:CB:05:B7:FE:C9:72:17:95:CF:E1:9A:D5:82:4A Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Certificate issuer: /CN=B97B101303D652EE5C0234A7A800429959745FF3 Certificate serial: 472A6E068B60D2F93C7354735EBD65849A9DC008 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 16:51:34 +0000 Manifest this update: Thu 24 Sep 2026 16:46:34 +0000 Manifest next update: Fri 25 Sep 2026 20:16:34 +0000 Files and hashes: 1: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=) 2: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: hDxCyCNdP3i2HhKobR1bFUE3BXsW537xZk5SE/amRZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2a:6e:06:8b:60:d2:f9:3c:73:54:73:5e:bd:65:84:9a:9d:c0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3 Validity Not Before: Sep 24 16:46:34 2026 GMT Not After : Sep 25 20:16:34 2026 GMT Subject: CN=E89BA37EB135CB05B7FEC9721795CFE19AD5824A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:1c:b1:71:90:23:53:3b:27:97:6b:85:7d: 97:75:9c:e9:56:1e:7e:f4:db:43:4d:bb:f1:f2:c4: c1:82:00:e4:73:5e:e6:35:20:3d:18:88:b4:ea:40: ec:9f:eb:c0:6c:83:65:3f:dc:46:9d:af:5d:e0:8d: 2f:d2:61:70:37:cc:1a:ea:22:e7:dd:17:17:b9:7d: cb:96:3e:c3:7b:ca:40:40:e1:bd:7c:a1:27:08:83: ea:9c:47:0a:cf:91:f2:90:75:34:0e:fa:ab:e9:67: 90:03:da:b7:c5:85:51:b8:72:3a:0c:9a:df:71:de: 53:67:65:d2:aa:25:42:99:3c:e2:b4:b1:7c:29:1c: d2:48:e0:12:55:6c:29:3f:02:2a:4e:41:09:4e:26: bb:a0:aa:9f:cd:2f:24:10:d0:13:6b:42:05:db:5d: 0a:c8:02:ba:e5:6a:62:b7:ff:99:31:aa:63:99:e0: 64:3c:ba:83:fc:6c:f9:25:f5:e1:0c:93:37:63:c8: 00:2c:7f:0f:cd:a4:24:aa:a3:85:52:8c:2d:4b:1f: 63:86:84:1a:b5:93:ad:29:88:e0:91:e3:ab:62:f9: d6:5a:1f:c8:d4:9b:7d:c4:87:df:c9:62:53:09:cc: 3e:62:5b:db:7f:f6:74:15:d5:96:37:7d:db:46:7d: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9B:A3:7E:B1:35:CB:05:B7:FE:C9:72:17:95:CF:E1:9A:D5:82:4A X509v3 Authority Key Identifier: keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ad:0c:92:c7:92:2a:a9:58:cb:3f:41:25:f7:8e:47:5a:3d: 66:54:31:92:50:b2:8f:f1:dc:aa:a6:53:9b:87:6b:82:4a:f8: fd:ca:a6:99:bd:28:0f:01:f0:a8:00:5e:d5:eb:61:27:84:b2: ed:91:0f:42:04:79:a8:d0:18:ef:d3:6b:45:a2:fc:c4:20:37: 15:8a:c0:b2:fb:51:ee:c4:c9:06:dd:6c:d7:91:4c:b7:6c:5a: b7:50:9e:20:8c:e0:21:7b:a4:1d:8c:d2:d6:62:1e:3d:45:9b: af:49:5b:7b:5c:d9:35:1e:2b:69:e5:58:73:c3:00:37:1e:ce: d3:3d:2c:53:ef:35:f5:f7:92:74:61:ea:45:47:f8:3e:23:a5: 20:9a:25:87:8c:19:be:0a:c9:51:2a:3d:97:eb:28:6f:f0:c6: 06:4f:38:66:30:f3:cb:ba:52:65:2d:4e:94:8c:e3:33:c4:97: a4:44:bc:ce:10:8a:67:30:b4:d0:35:46:6c:62:6c:fa:10:1a: f7:d1:2f:7a:06:65:cb:a0:30:39:1e:8d:3e:96:25:25:26:5f: 75:0c:1b:f4:22:b0:fb:ae:a8:51:8c:fe:f6:0d:7d:35:0d:8b: d6:3b:3f:cd:a8:1d:c6:76:c3:c4:2d:13:51:a4:1e:34:64:96: 18:2a:14:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURypuBotg0vk8c1RzXr1lhJqdwAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1 OTc0NUZGMzAeFw0yNjA5MjQxNjQ2MzRaFw0yNjA5MjUyMDE2MzRaMDMxMTAvBgNV BAMTKEU4OUJBMzdFQjEzNUNCMDVCN0ZFQzk3MjE3OTVDRkUxOUFENTgyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclByxcZAjUzsnl2uFfZd1nOlW Hn7020NNu/HyxMGCAORzXuY1ID0YiLTqQOyf68Bsg2U/3Eadr13gjS/SYXA3zBrq IufdFxe5fcuWPsN7ykBA4b18oScIg+qcRwrPkfKQdTQO+qvpZ5AD2rfFhVG4cjoM mt9x3lNnZdKqJUKZPOK0sXwpHNJI4BJVbCk/AipOQQlOJrugqp/NLyQQ0BNrQgXb XQrIArrlamK3/5kxqmOZ4GQ8uoP8bPkl9eEMkzdjyAAsfw/NpCSqo4VSjC1LH2OG hBq1k60piOCR46ti+dZaH8jUm33Eh9/JYlMJzD5iW9t/9nQV1ZY3fdtGffnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6JujfrE1ywW3/slyF5XP4ZrVgkowHwYDVR0j BBgwFoAUuXsQEwPWUu5cAjSnqABCmVl0X/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkN2Y5ZWItM2MyZC00MWExLTkwODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMw M0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1OTc0NUZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTdCMTAxMzAzRDY1MkVFNUMwMjM0QTdBODAwNDI5OTU5NzQ1 RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQy OTk1OTc0NUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmtDJLHkiqpWMs/QSX3jkdaPWZUMZJQso/x 3KqmU5uHa4JK+P3Kppm9KA8B8KgAXtXrYSeEsu2RD0IEeajQGO/Ta0Wi/MQgNxWK wLL7Ue7EyQbdbNeRTLdsWrdQniCM4CF7pB2M0tZiHj1Fm69JW3tc2TUeK2nlWHPD ADceztM9LFPvNfX3knRh6kVH+D4jpSCaJYeMGb4KyVEqPZfrKG/wxgZPOGYw88u6 UmUtTpSM4zPEl6REvM4QimcwtNA1RmxibPoQGvfRL3oGZcugMDkejT6WJSUmX3UM G/QisPuuqFGM/vYNfTUNi9Y7P82oHcZ2w8QtE1GkHjRklhgqFLQ= -----END CERTIFICATE-----Generated at Fri Sep 25 04:53:03 2026 by rpki-client