$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft File: B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json) Hash identifier: v2dXiplcWkEEOgCH4OPFqvRy0a8kkWc5AASffXFdKjo= Subject key identifier: 8D:FD:EC:4C:6D:40:26:ED:8D:D8:99:85:AE:C8:57:28:24:A3:67:65 Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Certificate issuer: /CN=B97B101303D652EE5C0234A7A800429959745FF3 Certificate serial: 7719E1F8EE3F16FE1079FF825283FAE92FA0538A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:10 +0000 Manifest this update: Tue 12 May 2026 21:24:10 +0000 Manifest next update: Wed 13 May 2026 21:58:10 +0000 Files and hashes: 1: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: /vHPP6kh4SdwUDLV7+93ehhh8ak6aJwaF3Jbs/8tHCI=) 2: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:19:e1:f8:ee:3f:16:fe:10:79:ff:82:52:83:fa:e9:2f:a0:53:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3 Validity Not Before: May 12 21:24:10 2026 GMT Not After : May 13 21:58:10 2026 GMT Subject: CN=8DFDEC4C6D4026ED8DD89985AEC8572824A36765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c4:f6:d8:d1:20:0c:b0:21:d4:45:c5:f7:23: a6:1a:92:51:00:61:90:f1:b1:85:c6:8c:91:a8:63: 32:17:e6:7f:1a:f4:36:68:e1:b9:6a:4c:27:69:60: 48:79:84:64:ba:0c:5e:76:c5:7e:82:e8:23:4b:f9: 88:71:de:05:d9:fd:04:11:bf:e0:8f:b9:f0:bd:ed: 0d:b6:fb:2a:02:03:df:f5:03:09:ae:ff:33:d9:01: e4:f0:5a:11:4d:c8:36:91:da:98:e4:15:b9:37:7d: 06:82:b4:80:fd:09:08:05:7e:c1:f6:73:9f:04:45: 43:50:e9:6d:a7:07:cb:88:68:16:55:b2:23:81:51: 10:f0:7e:e5:f6:af:85:c1:f8:ec:57:c1:c8:c3:90: 1b:e2:43:cd:c7:c9:60:1a:68:6c:32:c8:df:4e:e6: c7:81:46:bd:f0:22:d0:f3:5f:e1:d5:ab:18:7e:75: f2:29:aa:b4:44:ed:7c:3f:e6:56:92:ab:2a:84:2b: 25:71:08:a8:35:92:ff:bf:76:6c:5d:0d:50:77:40: 7d:d4:85:91:3e:46:b1:3b:5b:62:d3:73:04:bf:c6: 34:7e:38:ce:e6:04:f9:d9:5b:8e:7f:7c:65:46:03: dd:ed:69:50:8f:a3:b6:a4:9e:55:e0:80:7c:fb:24: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FD:EC:4C:6D:40:26:ED:8D:D8:99:85:AE:C8:57:28:24:A3:67:65 X509v3 Authority Key Identifier: keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ef:f7:3d:9c:34:fb:66:77:f5:51:bf:21:5d:4e:a5:2a:e6: d5:98:19:e2:0d:b0:3f:1d:7b:f0:b8:67:33:32:bd:a4:ae:ca: 44:c3:80:8b:ea:19:ad:95:ba:09:4d:17:d2:ba:ad:1f:15:f6: 7b:dd:e8:5a:3b:46:5c:e5:ec:72:59:d3:b2:73:fe:56:ff:5a: d2:86:1c:86:b4:71:8a:65:c6:d3:9e:35:68:a1:65:7e:bc:5e: 58:5c:3e:5e:01:2a:ca:20:64:36:0d:4d:16:ad:ad:18:68:2f: 9d:ca:45:43:da:5a:89:42:92:dd:bb:f4:d4:0b:c1:62:10:12: 01:41:73:ed:d1:43:64:31:77:14:09:7b:d2:2b:b0:1c:5b:be: a8:2c:8e:40:a7:de:60:cd:a9:60:3c:f7:de:a9:cb:05:8e:36: 14:cc:1d:71:ab:c4:c4:d9:8c:01:38:97:d0:9c:3d:45:e8:c3: 56:34:8f:4e:9a:2a:3e:d5:5e:9d:48:f4:eb:a7:ca:0a:0f:56: 8c:bf:d3:b3:13:13:b1:db:9d:9f:8e:ec:c5:91:d4:d4:49:10: 25:b0:68:17:9b:a2:1a:d9:df:01:82:3d:30:a0:f3:38:55:79: 3d:53:28:da:ae:28:24:d2:ed:f9:40:49:3c:24:c0:d7:7e:7f: 9d:b9:94:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxnh+O4/Fv4Qef+CUoP66S+gU4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1 OTc0NUZGMzAeFw0yNjA1MTIyMTI0MTBaFw0yNjA1MTMyMTU4MTBaMDMxMTAvBgNV BAMTKDhERkRFQzRDNkQ0MDI2RUQ4REQ4OTk4NUFFQzg1NzI4MjRBMzY3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIxPbY0SAMsCHURcX3I6YaklEA YZDxsYXGjJGoYzIX5n8a9DZo4blqTCdpYEh5hGS6DF52xX6C6CNL+Yhx3gXZ/QQR v+CPufC97Q22+yoCA9/1Awmu/zPZAeTwWhFNyDaR2pjkFbk3fQaCtID9CQgFfsH2 c58ERUNQ6W2nB8uIaBZVsiOBURDwfuX2r4XB+OxXwcjDkBviQ83HyWAaaGwyyN9O 5seBRr3wItDzX+HVqxh+dfIpqrRE7Xw/5laSqyqEKyVxCKg1kv+/dmxdDVB3QH3U hZE+RrE7W2LTcwS/xjR+OM7mBPnZW45/fGVGA93taVCPo7aknlXggHz7JNPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjf3sTG1AJu2N2JmFrshXKCSjZ2UwHwYDVR0j BBgwFoAUuXsQEwPWUu5cAjSnqABCmVl0X/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkN2Y5ZWItM2MyZC00MWExLTkwODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMw M0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1OTc0NUZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTdCMTAxMzAzRDY1MkVFNUMwMjM0QTdBODAwNDI5OTU5NzQ1 RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQy OTk1OTc0NUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTv9z2cNPtmd/VRvyFdTqUq5tWYGeINsD8d e/C4ZzMyvaSuykTDgIvqGa2VuglNF9K6rR8V9nvd6Fo7Rlzl7HJZ07Jz/lb/WtKG HIa0cYplxtOeNWihZX68XlhcPl4BKsogZDYNTRatrRhoL53KRUPaWolCkt279NQL wWIQEgFBc+3RQ2QxdxQJe9IrsBxbvqgsjkCn3mDNqWA8996pywWONhTMHXGrxMTZ jAE4l9CcPUXow1Y0j06aKj7VXp1I9OunygoPVoy/07MTE7HbnZ+O7MWR1NRJECWw aBebohrZ3wGCPTCg8zhVeT1TKNquKCTS7flASTwkwNd+f525lDE= -----END CERTIFICATE-----Generated at Wed May 13 01:16:59 2026 by rpki-client