$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft File: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft (raw, json) Hash identifier: vTn0T7uAxIgv+MAZJF19xT/oZcExW5zzx5zZ+FoYSU8= Subject key identifier: 20:9D:2A:82:EE:D0:2D:C2:CC:E4:1C:34:4B:30:E7:DD:54:6A:0D:42 Authority key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 Certificate issuer: /CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Certificate serial: 67C9312AEBF2B8B1BC25D5AD31684CA8D816B530 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft Manifest number: BF Signing time: Mon 21 Sep 2026 23:25:43 +0000 Manifest this update: Mon 21 Sep 2026 23:20:43 +0000 Manifest next update: Wed 23 Sep 2026 02:31:43 +0000 Files and hashes: 1: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl (hash: h5IRv7jvJnnacaW8IGljeArdOC+EbimwnJVefig6GAA=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: +bhA3UYPReYDsrbCyo3nY+2634L/BbsW+oTXhT99PgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c9:31:2a:eb:f2:b8:b1:bc:25:d5:ad:31:68:4c:a8:d8:16:b5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Validity Not Before: Sep 21 23:20:43 2026 GMT Not After : Sep 23 02:31:43 2026 GMT Subject: CN=209D2A82EED02DC2CCE41C344B30E7DD546A0D42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:03:da:cc:cd:84:7c:6c:89:c2:80:77:5c: 4c:1f:d0:72:d1:93:2f:8a:ed:a2:70:b2:ef:3a:9d: 78:bb:c1:bb:c7:ca:12:33:ba:9a:8c:d6:61:01:9c: e7:5c:d3:8c:af:eb:2d:c1:aa:23:7b:48:e4:57:51: b1:99:90:68:19:0d:2a:fd:47:c0:6d:d5:dd:c4:3a: 4e:bd:58:b0:af:c2:26:a9:b5:d8:fa:71:17:44:aa: 71:cb:3a:3a:07:3c:af:72:7d:9e:37:61:3d:31:ca: eb:86:42:e0:9f:95:c2:ed:6b:c3:a7:c5:a6:87:0d: b2:b4:48:e2:35:83:f1:11:ad:43:53:d7:a7:53:5e: ac:a3:d7:d7:e6:fd:d7:6f:01:cf:b9:7a:b3:1c:28: 47:16:6b:10:fb:c4:df:a8:03:83:ab:70:c1:be:ac: 88:e5:89:ca:aa:be:99:66:cc:3d:34:7f:cd:69:ed: a3:2c:85:d8:64:33:32:89:6c:78:0c:95:e8:62:ca: d8:9a:43:90:24:76:08:f6:49:87:f4:fd:cc:36:01: 9e:02:7d:3f:f5:b0:cb:c2:3e:0b:dd:61:c0:52:73: c6:00:23:fc:ec:80:db:f8:b2:9b:d1:a1:c9:29:96: b1:3d:4e:76:d4:50:01:5b:58:27:39:ff:de:43:06: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9D:2A:82:EE:D0:2D:C2:CC:E4:1C:34:4B:30:E7:DD:54:6A:0D:42 X509v3 Authority Key Identifier: keyid:A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ec:e7:30:07:ff:18:3e:c4:ff:72:f9:00:47:51:eb:f1:8e: c5:e7:ec:25:50:d0:ad:65:ae:88:30:5c:22:3a:ce:a5:6c:c2: 4f:97:6c:7a:24:ce:16:53:7f:68:e7:ff:24:56:ca:66:3e:cb: fd:c6:d2:3d:fb:c5:02:c1:c7:f0:72:ed:8c:15:2f:f9:98:26: e0:5f:2a:33:5a:bc:fc:e9:98:dc:45:d6:60:43:f0:f2:c0:6c: b4:cd:c5:a2:6c:cd:39:59:43:fd:66:b9:6d:af:68:55:c3:84: 43:ec:63:9e:5a:6e:3a:56:4f:36:b6:fa:b2:06:d9:66:02:3f: 5e:e0:b2:bb:ea:d9:8f:2a:00:b9:ee:0b:2f:e7:24:54:44:d7: 7b:3f:2d:cc:e5:06:38:43:77:f1:28:7f:57:78:fb:ce:3d:dd: 31:22:9d:31:b0:f6:4c:4e:73:48:0e:01:de:75:aa:a6:88:ce: 3f:0e:19:7d:09:a6:92:5d:a1:23:c3:3a:53:66:22:f9:b2:b7: b2:2d:f9:d8:e6:70:c2:18:43:a4:44:39:5f:12:42:84:a0:4f: 0c:11:6f:67:e8:1f:ba:6d:09:51:2a:40:24:a1:a5:88:a9:96: e4:5b:d4:26:b7:f3:4c:47:54:df:87:f6:7a:2c:c2:9c:ab:1d: 78:b9:83:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8kxKuvyuLG8JdWtMWhMqNgWtTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2QjkxMURC Q0E0RTBFNzAeFw0yNjA5MjEyMzIwNDNaFw0yNjA5MjMwMjMxNDNaMDMxMTAvBgNV BAMTKDIwOUQyQTgyRUVEMDJEQzJDQ0U0MUMzNDRCMzBFN0RENTQ2QTBENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJgPazM2EfGyJwoB3XEwf0HLR ky+K7aJwsu86nXi7wbvHyhIzupqM1mEBnOdc04yv6y3BqiN7SORXUbGZkGgZDSr9 R8Bt1d3EOk69WLCvwiaptdj6cRdEqnHLOjoHPK9yfZ43YT0xyuuGQuCflcLta8On xaaHDbK0SOI1g/ERrUNT16dTXqyj19fm/ddvAc+5erMcKEcWaxD7xN+oA4OrcMG+ rIjlicqqvplmzD00f81p7aMshdhkMzKJbHgMlehiytiaQ5Akdgj2SYf0/cw2AZ4C fT/1sMvCPgvdYcBSc8YAI/zsgNv4spvRockplrE9TnbUUAFbWCc5/95DBjexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJ0qgu7QLcLM5Bw0SzDn3VRqDUIwHwYDVR0j BBgwFoAUqXqZVLMiTxh6YY7y02uRHbyk4OcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVhNzNkMDQtMjE0Zi00NmI4LTk3NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRC MzIyNEYxODdBNjE4RUYyRDM2QjkxMURCQ0E0RTBFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTdBOTk1NEIzMjI0RjE4N0E2MThFRjJEMzZCOTExREJDQTRF MEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvQTk3QTk5NTRCMzIyNEYxODdBNjE4RUYyRDM2Qjkx MURCQ0E0RTBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3s5zAH/xg+xP9y+QBHUevxjsXn7CVQ0K1l rogwXCI6zqVswk+XbHokzhZTf2jn/yRWymY+y/3G0j37xQLBx/By7YwVL/mYJuBf KjNavPzpmNxF1mBD8PLAbLTNxaJszTlZQ/1muW2vaFXDhEPsY55abjpWTza2+rIG 2WYCP17gsrvq2Y8qALnuCy/nJFRE13s/LczlBjhDd/Eof1d4+8493TEinTGw9kxO c0gOAd51qqaIzj8OGX0JppJdoSPDOlNmIvmyt7It+djmcMIYQ6REOV8SQoSgTwwR b2foH7ptCVEqQCShpYipluRb1Ca380xHVN+H9noswpyrHXi5g84= -----END CERTIFICATE-----Generated at Tue Sep 22 12:37:26 2026 by rpki-client