$ rpki-client -vvf rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft File: C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft (raw, json) Hash identifier: B5qntsrzqHYXxhZQVGEHh9Y4B7hwPRxDCcz92QSOf0k= Subject key identifier: 09:1F:1B:DA:A1:B0:8F:C3:AF:FC:B4:E0:B9:E0:F5:97:EF:23:BA:F7 Authority key identifier: C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C Certificate issuer: /CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Certificate serial: 0761DAC156B2FBC4CBB998A2FFD05F99098D6516 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:18:23 +0000 Manifest this update: Wed 17 Jun 2026 00:13:23 +0000 Manifest next update: Thu 18 Jun 2026 00:38:23 +0000 Files and hashes: 1: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: HBOKPyfvkSQ7CSFKARCluBs77G+6cJdJMfV4/cXPISw=) 2: C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl (hash: a4TZGkc9y/HMmLXqQzeBw68TyBfJonTzolQ46d8k/B0=) 3: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: L1u8e2XMWfhTZprYAXbYQRaFyt6N+m9nwnznZ68xnQo=) 4: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: op7PBlCux7baoU5Dzq/XmCUCefiNctSGk3W+HUFHPCM=) 5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: mers2OvT3I+Z4Z4fI4HUEEp864DNR7CMd7NeZgpck8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:61:da:c1:56:b2:fb:c4:cb:b9:98:a2:ff:d0:5f:99:09:8d:65:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C97B9AA5127BAC47DAF01727DFF25E26F638643C Validity Not Before: Jun 17 00:13:23 2026 GMT Not After : Jun 18 00:38:23 2026 GMT Subject: CN=091F1BDAA1B08FC3AFFCB4E0B9E0F597EF23BAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:3a:df:f9:a0:4e:dc:2c:e4:38:6c:46:25: 2a:d5:bd:43:66:a9:99:06:c3:ed:69:f2:66:87:f7: 24:fa:2f:eb:49:d6:8f:5c:4c:e0:02:91:a4:fb:df: ff:90:e7:eb:42:4b:f0:f0:ad:4a:b7:2d:a5:fa:bb: 6e:58:c7:42:dc:b0:5e:d6:cc:d1:fc:29:8c:7b:d1: 54:3b:63:9e:f5:58:c9:63:f3:c5:68:55:e6:21:39: 45:4b:89:fe:f6:23:f8:52:af:b0:27:a2:4e:e6:e6: db:fe:16:a0:10:b9:c2:db:0a:09:9c:c8:64:6e:5e: 67:dc:c2:04:51:89:82:13:0f:e6:51:87:30:c2:5f: f0:af:9b:4b:df:cd:b7:73:a8:8d:e2:ad:fc:48:70: 54:d6:fc:e3:71:e7:9a:bd:21:c2:3e:7d:f7:a7:ee: e6:62:cb:e3:2a:e7:8f:7a:b4:f1:61:77:03:52:50: 40:69:87:c2:a2:39:f4:89:9a:b6:84:18:c2:15:bd: 0b:18:6a:d1:16:fa:e8:90:f3:fa:c0:58:9b:7b:d0: db:1c:07:89:89:49:11:8e:84:c3:5a:a1:66:15:d7: 38:25:66:31:71:98:b6:f9:18:ca:39:2f:2c:18:2c: eb:82:5a:ff:5f:d8:3a:92:05:49:53:8c:19:62:7b: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1F:1B:DA:A1:B0:8F:C3:AF:FC:B4:E0:B9:E0:F5:97:EF:23:BA:F7 X509v3 Authority Key Identifier: keyid:C9:7B:9A:A5:12:7B:AC:47:DA:F0:17:27:DF:F2:5E:26:F6:38:64:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C97B9AA5127BAC47DAF01727DFF25E26F638643C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/C97B9AA5127BAC47DAF01727DFF25E26F638643C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:79:f8:67:21:7c:49:97:e0:63:69:45:5c:74:1e:18:56:5a: 28:e5:e6:a8:0b:c3:ca:b5:38:5f:9a:02:d7:06:54:b5:51:0a: 0d:7f:88:1d:9e:80:ad:83:b9:12:3c:5f:68:b7:20:91:4b:6c: 07:e4:25:35:eb:d8:f8:f1:6f:ec:9d:09:a1:78:e8:14:d5:22: 66:0c:eb:7f:b0:db:91:ed:94:a1:9f:95:42:98:90:f7:dd:c0: 95:77:9a:65:16:57:cd:1c:f7:f4:cb:48:f5:a8:df:ae:5c:01: 60:f5:44:1e:56:f2:13:fd:02:d9:dd:34:05:ff:90:b2:82:a0: fa:f2:67:7a:b7:69:d2:c5:9c:71:6b:1d:34:55:ac:61:b0:28: 08:77:9f:52:73:3e:8a:3f:a8:8c:fe:db:de:3e:3c:ca:57:21: 45:a3:31:bc:7c:3c:5e:57:f2:a3:22:08:1e:b4:f1:b6:d2:69: 8f:31:49:81:0a:14:4c:43:8a:07:42:32:81:87:ed:59:9a:95: 37:f0:40:eb:1b:ca:fd:40:20:1c:ef:ca:5d:fa:b2:ea:37:30: 0b:05:39:02:78:0f:c8:b7:81:69:d9:c6:58:8d:11:bc:07:45: c6:7d:1f:a4:7c:60:51:43:0a:21:af:60:59:49:d0:85:62:48: 7b:7c:59:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2HawVay+8TLuZii/9BfmQmNZRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVFMjZG NjM4NjQzQzAeFw0yNjA2MTcwMDEzMjNaFw0yNjA2MTgwMDM4MjNaMDMxMTAvBgNV BAMTKDA5MUYxQkRBQTFCMDhGQzNBRkZDQjRFMEI5RTBGNTk3RUYyM0JBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpzrf+aBO3CzkOGxGJSrVvUNm qZkGw+1p8maH9yT6L+tJ1o9cTOACkaT73/+Q5+tCS/DwrUq3LaX6u25Yx0LcsF7W zNH8KYx70VQ7Y571WMlj88VoVeYhOUVLif72I/hSr7Anok7m5tv+FqAQucLbCgmc yGRuXmfcwgRRiYITD+ZRhzDCX/Cvm0vfzbdzqI3irfxIcFTW/ONx55q9IcI+ffen 7uZiy+Mq5496tPFhdwNSUEBph8KiOfSJmraEGMIVvQsYatEW+uiQ8/rAWJt70Nsc B4mJSRGOhMNaoWYV1zglZjFxmLb5GMo5LywYLOuCWv9f2DqSBUlTjBlie/8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCR8b2qGwj8Ov/LTgueD1l+8juvcwHwYDVR0j BBgwFoAUyXuapRJ7rEfa8Bcn3/JeJvY4ZDwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM4MDYxZjEtZmEzMC00YmQ2LTgxYTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUx MjdCQUM0N0RBRjAxNzI3REZGMjVFMjZGNjM4NjQzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTdCOUFBNTEyN0JBQzQ3REFGMDE3MjdERkYyNUUyNkY2Mzg2 NDNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvQzk3QjlBQTUxMjdCQUM0N0RBRjAxNzI3REZGMjVF MjZGNjM4NjQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB5+GchfEmX4GNpRVx0HhhWWijl5qgLw8q1 OF+aAtcGVLVRCg1/iB2egK2DuRI8X2i3IJFLbAfkJTXr2Pjxb+ydCaF46BTVImYM 63+w25HtlKGflUKYkPfdwJV3mmUWV80c9/TLSPWo365cAWD1RB5W8hP9AtndNAX/ kLKCoPryZ3q3adLFnHFrHTRVrGGwKAh3n1JzPoo/qIz+294+PMpXIUWjMbx8PF5X 8qMiCB608bbSaY8xSYEKFExDigdCMoGH7VmalTfwQOsbyv1AIBzvyl36suo3MAsF OQJ4D8i3gWnZxliNEbwHRcZ9H6R8YFFDCiGvYFlJ0IViSHt8WdU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:00 2026 by rpki-client