
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft (raw, json)
Hash identifier: n+KTTLTuPWMI339bfzu49zBmsHlixEni05QkH8yzjrU=
Subject key identifier: 0A:04:83:5D:FC:7C:01:9D:E4:2E:DD:F4:78:FE:85:E0:48:FD:69:5E
Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Certificate serial: 719EE5CED61E5A5D855BDF2D539AF4785246795C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 05:56:16 +0000
Manifest this update: Sat 13 Jun 2026 05:51:16 +0000
Manifest next update: Sun 14 Jun 2026 07:55:16 +0000
Files and hashes: 1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE=)
2: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl (hash: ze/HBLg2gymrqJiuBG6jWF23RFBeEXU+WstYhG2mVTQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9e:e5:ce:d6:1e:5a:5d:85:5b:df:2d:53:9a:f4:78:52:46:79:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549
Validity
Not Before: Jun 13 05:51:16 2026 GMT
Not After : Jun 14 07:55:16 2026 GMT
Subject: CN=0A04835DFC7C019DE42EDDF478FE85E048FD695E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:75:95:7b:af:9b:8b:68:33:2a:6c:26:05:
79:28:5b:40:2a:55:04:18:be:d3:9b:b6:68:6b:b6:
db:53:dd:a5:ac:59:34:6c:4f:29:e4:50:63:fc:89:
b6:ea:e3:0d:0a:1d:73:45:29:db:09:ac:d1:d0:21:
8c:24:df:71:b0:f7:56:55:93:43:dc:44:dc:11:23:
c6:39:f5:43:54:60:d5:ea:ca:1d:19:73:c5:cb:7f:
c3:f5:72:6c:85:00:c7:2e:19:8a:a4:09:bd:a6:98:
d1:c0:50:67:b3:5d:72:85:1a:0f:af:68:c0:08:ae:
d5:ac:5f:09:c6:df:92:5e:d2:cd:f7:e1:0d:25:e6:
c3:1e:ed:b2:14:97:8d:2a:05:35:ca:da:b0:3d:52:
c3:c7:17:d5:61:a3:55:23:89:46:be:22:89:c5:16:
d0:96:0e:ec:7e:3b:0b:b9:c5:53:70:f3:a3:79:cc:
ff:77:df:f4:61:4b:4b:b7:45:33:ab:7b:35:b7:2e:
62:c9:16:03:bd:f3:60:e4:70:76:b2:ff:c1:88:d4:
0e:a8:50:38:ee:86:80:90:5b:b6:88:67:d9:14:df:
25:3b:38:41:f8:0b:78:9c:e0:bf:dc:07:9c:80:06:
45:c7:17:a5:af:68:a1:34:f5:e9:48:9e:37:e0:2d:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:83:5D:FC:7C:01:9D:E4:2E:DD:F4:78:FE:85:E0:48:FD:69:5E
X509v3 Authority Key Identifier:
keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:12:84:25:85:3b:35:b7:a3:ec:69:0d:de:68:86:67:29:54:
69:18:df:9b:55:c4:0a:2c:ec:8c:27:ba:65:db:fd:13:ce:83:
22:78:92:bd:22:0f:78:5d:95:bc:de:f3:7a:a3:09:c4:f8:b3:
a6:f6:b5:12:4f:f9:e7:5e:08:e6:66:ec:8b:0c:ee:6b:31:2d:
05:e3:f4:53:71:b6:67:4b:53:cb:a3:2d:66:7c:68:51:87:1c:
2d:b9:e5:2f:41:06:4e:f3:e0:6d:bb:26:d8:c0:84:57:ae:2e:
ef:d4:6b:54:78:3a:85:48:11:68:ea:e3:43:45:fa:a0:a9:31:
e1:a7:9c:d6:2f:8c:81:14:ef:e5:e2:a0:74:d4:a7:ae:fb:49:
1a:65:dc:e5:50:05:ff:07:99:39:d3:96:a2:d9:49:ba:bb:dc:
d0:17:05:2a:d1:8e:25:0a:37:9d:11:fd:37:4a:41:6c:5f:74:
df:ac:ea:cb:a1:2a:da:e0:2d:95:7a:61:97:cf:ee:87:db:88:
a4:5b:5a:33:e3:e0:c4:39:f7:ff:a8:50:55:49:14:9b:7b:89:
bf:e4:83:3f:0e:bc:34:37:6d:cb:09:c8:87:6c:a9:5a:3c:bc:
2e:cf:a3:08:e9:3b:b9:e4:73:b8:bf:cf:b3:c8:72:ae:a9:bb:
02:d6:52:9e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcZ7lztYeWl2FW98tU5r0eFJGeVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC
RjYxQzU0OTAeFw0yNjA2MTMwNTUxMTZaFw0yNjA2MTQwNzU1MTZaMDMxMTAvBgNV
BAMTKDBBMDQ4MzVERkM3QzAxOURFNDJFRERGNDc4RkU4NUUwNDhGRDY5NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkZHWVe6+bi2gzKmwmBXkoW0Aq
VQQYvtObtmhrtttT3aWsWTRsTynkUGP8ibbq4w0KHXNFKdsJrNHQIYwk33Gw91ZV
k0PcRNwRI8Y59UNUYNXqyh0Zc8XLf8P1cmyFAMcuGYqkCb2mmNHAUGezXXKFGg+v
aMAIrtWsXwnG35Je0s334Q0l5sMe7bIUl40qBTXK2rA9UsPHF9Vho1UjiUa+IonF
FtCWDux+Owu5xVNw86N5zP933/RhS0u3RTOrezW3LmLJFgO982DkcHay/8GI1A6o
UDjuhoCQW7aIZ9kU3yU7OEH4C3ic4L/cB5yABkXHF6WvaKE09elInjfgLYq1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCgSDXfx8AZ3kLt30eP6F4Ej9aV4wHwYDVR0j
BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG
NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD
NTQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz
ZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQz
NzJCRjYxQzU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACwShCWFOzW3o+xpDd5ohmcpVGkY35tVxAos
7IwnumXb/RPOgyJ4kr0iD3hdlbze83qjCcT4s6b2tRJP+edeCOZm7IsM7msxLQXj
9FNxtmdLU8ujLWZ8aFGHHC255S9BBk7z4G27JtjAhFeuLu/Ua1R4OoVIEWjq40NF
+qCpMeGnnNYvjIEU7+XioHTUp677SRpl3OVQBf8HmTnTlqLZSbq73NAXBSrRjiUK
N50R/TdKQWxfdN+s6suhKtrgLZV6YZfP7ofbiKRbWjPj4MQ59/+oUFVJFJt7ib/k
gz8OvDQ3bcsJyIdsqVo8vC7PowjpO7nkc7i/z7PIcq6puwLWUp4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:00 2026 by rpki-client