$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft File: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft (raw, json) Hash identifier: Xs7rNNSI4nh7HKbRF7wuhm7yI/n4z+jEODjeWg86xUc= Subject key identifier: 58:C1:10:09:DC:E1:E5:97:45:0E:0A:02:A7:BE:63:43:4B:4F:CA:BE Authority key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A Certificate issuer: /CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Certificate serial: 2E34C3F6EB711BA6C83AF0678441A41967C10C3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:44:54 +0000 Manifest this update: Mon 21 Sep 2026 06:39:54 +0000 Manifest next update: Tue 22 Sep 2026 09:56:54 +0000 Files and hashes: 1: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl (hash: 1trmevWi6SxdjsOtnbONb3w84gjuEFoxv1rn+CtlG0o=) 2: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: sv7PvNJnnZ10opw+lXUbBT0PVWMEcNTxqWez029VNl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:34:c3:f6:eb:71:1b:a6:c8:3a:f0:67:84:41:a4:19:67:c1:0c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Validity Not Before: Sep 21 06:39:54 2026 GMT Not After : Sep 22 09:56:54 2026 GMT Subject: CN=58C11009DCE1E597450E0A02A7BE63434B4FCABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:be:19:19:cd:e6:90:f9:94:58:34:ef:90: bb:fe:c1:be:bf:1d:60:c1:46:7f:dd:22:30:39:61: 2a:84:0f:24:44:fa:36:45:48:2e:73:d8:45:61:70: 87:34:61:a2:c1:8e:c3:c7:a9:fe:16:5b:e9:6b:64: 37:fa:88:b0:c7:d8:00:be:7f:92:bd:d7:b7:c8:bf: c4:60:af:80:25:32:cb:93:19:4b:44:f5:e2:72:09: a0:f6:0b:6b:a0:6f:d3:0e:b5:aa:7c:98:bf:b7:f9: a7:d0:be:2d:57:fd:90:94:6b:ab:70:66:3f:37:19: 60:41:e7:9f:32:60:51:c9:40:f5:bf:10:18:21:f2: fa:25:61:d9:cf:cc:97:78:f4:6d:fb:c4:b4:90:ad: 15:6e:0c:17:6c:30:ef:c0:a4:7f:f4:36:46:fe:cb: f3:48:c5:f8:d3:43:b4:2e:0c:19:73:b2:df:3b:cc: 7b:a3:c9:08:66:42:02:61:9f:c6:83:a7:94:4c:42: b7:ae:74:b2:24:23:c8:b8:7b:b3:c8:f4:4d:cf:25: c1:b3:19:13:86:52:7e:9f:49:ab:72:a7:a1:b7:ae: d5:8c:d0:3e:69:5b:1d:36:49:23:61:d4:b2:cc:54: bc:0c:a3:29:61:a4:b0:0b:46:59:19:7d:3a:17:e4: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C1:10:09:DC:E1:E5:97:45:0E:0A:02:A7:BE:63:43:4B:4F:CA:BE X509v3 Authority Key Identifier: keyid:97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b3:b1:ef:26:a1:76:dc:80:be:9c:a7:4c:5f:66:72:39:09: 33:e2:87:19:40:0d:eb:a1:b4:fd:dc:f4:73:08:56:00:0d:6d: 8b:c7:42:d5:a7:fa:12:7e:31:3e:11:05:80:fa:1f:25:0a:2d: 73:a3:9f:de:5f:0b:4f:5a:5b:1b:47:60:91:96:6d:78:92:4d: 82:7f:af:3a:11:85:53:15:09:60:2e:3b:f0:3e:9d:f4:7f:69: b5:15:1e:fc:2c:29:e6:04:c3:33:20:f7:2a:bb:d9:5b:d8:78: c4:7d:5b:b9:21:81:9f:3a:34:3b:eb:ce:d1:fb:49:c2:20:a1: 3e:8f:7f:97:20:d8:d7:35:47:9c:27:e5:19:5f:8e:48:b2:74: 45:d2:89:f2:08:0a:56:1f:b1:5f:c5:d1:d4:8c:1d:8c:69:3c: 67:d2:d5:ca:69:4d:5d:9a:d7:2d:c8:fb:fa:48:fd:fd:38:ab: 03:53:c5:fc:8e:b5:bd:7b:3c:a4:5c:61:bc:6d:36:45:39:4d: c3:38:2e:93:95:c8:6c:92:13:db:24:e6:65:14:ed:88:55:b0: ef:ac:f1:b2:ee:5a:0c:7b:81:43:a2:11:59:71:68:7b:3a:b1: 61:c9:58:7f:88:9f:25:a5:8b:99:08:43:a1:3e:cf:b7:a9:fd: 6b:c9:b8:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjTD9utxG6bIOvBnhEGkGWfBDDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJDMURB MEIwRDgxQTAeFw0yNjA5MjEwNjM5NTRaFw0yNjA5MjIwOTU2NTRaMDMxMTAvBgNV BAMTKDU4QzExMDA5RENFMUU1OTc0NTBFMEEwMkE3QkU2MzQzNEI0RkNBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ74ZGc3mkPmUWDTvkLv+wb6/ HWDBRn/dIjA5YSqEDyRE+jZFSC5z2EVhcIc0YaLBjsPHqf4WW+lrZDf6iLDH2AC+ f5K917fIv8Rgr4AlMsuTGUtE9eJyCaD2C2ugb9MOtap8mL+3+afQvi1X/ZCUa6tw Zj83GWBB558yYFHJQPW/EBgh8volYdnPzJd49G37xLSQrRVuDBdsMO/ApH/0Nkb+ y/NIxfjTQ7QuDBlzst87zHujyQhmQgJhn8aDp5RMQreudLIkI8i4e7PI9E3PJcGz GROGUn6fSatyp6G3rtWM0D5pWx02SSNh1LLMVLwMoylhpLALRlkZfToX5MlnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWMEQCdzh5ZdFDgoCp75jQ0tPyr4wHwYDVR0j BBgwFoAUl+ssZhpfRW3OKuOnOmS8HaCw2BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3MWZjNmQtYWEzYi00ZWQ3LThmZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYx QTVGNDU2RENFMkFFM0E3M0E2NEJDMURBMEIwRDgxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85N0VCMkM2NjFBNUY0NTZEQ0UyQUUzQTczQTY0QkMxREEwQjBE ODFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvOTdFQjJDNjYxQTVGNDU2RENFMkFFM0E3M0E2NEJD MURBMEIwRDgxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJizse8moXbcgL6cp0xfZnI5CTPihxlADeuh tP3c9HMIVgANbYvHQtWn+hJ+MT4RBYD6HyUKLXOjn95fC09aWxtHYJGWbXiSTYJ/ rzoRhVMVCWAuO/A+nfR/abUVHvwsKeYEwzMg9yq72VvYeMR9W7khgZ86NDvrztH7 ScIgoT6Pf5cg2Nc1R5wn5RlfjkiydEXSifIIClYfsV/F0dSMHYxpPGfS1cppTV2a 1y3I+/pI/f04qwNTxfyOtb17PKRcYbxtNkU5TcM4LpOVyGySE9sk5mUU7YhVsO+s 8bLuWgx7gUOiEVlxaHs6sWHJWH+InyWli5kIQ6E+z7ep/WvJuPE= -----END CERTIFICATE-----Generated at Mon Sep 21 17:38:56 2026 by rpki-client