$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft File: 9970795F3B277481EE73EA3A16E4FA33964C92D3.mft (raw, json) Hash identifier: y1F7pqlCOjYYZ3YH8krqnQ+TgO8I/3FP3twPrIi/bkM= Subject key identifier: A7:3D:52:82:2F:43:2D:BA:C1:FA:F5:D8:68:42:C4:E7:74:B8:61:B7 Authority key identifier: 99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 Certificate issuer: /CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Certificate serial: 045D4AA58A93118427FFC7B9E2F461C3181E9301 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:31:54 +0000 Manifest this update: Mon 21 Sep 2026 20:26:54 +0000 Manifest next update: Tue 22 Sep 2026 23:32:54 +0000 Files and hashes: 1: 9970795F3B277481EE73EA3A16E4FA33964C92D3.crl (hash: Ffh4pCoo97dmYu1/1MYwCqzJNKjDm5ak+5y3jpCv97s=) 2: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: j3C8JrVEuDWGDYTHo2d7ibn1ngIRwCbcuK1vWB38mfI=) 3: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: 5C93GzuwPEwzfZCO761jlr9+kP+U+BLor2EmxZBdJ5Q=) 4: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: 3Da0wSVO79CXcT4/2ct9HlMI+w8ZYFGpqAbvRWk65hU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5d:4a:a5:8a:93:11:84:27:ff:c7:b9:e2:f4:61:c3:18:1e:93:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970795F3B277481EE73EA3A16E4FA33964C92D3 Validity Not Before: Sep 21 20:26:54 2026 GMT Not After : Sep 22 23:32:54 2026 GMT Subject: CN=A73D52822F432DBAC1FAF5D86842C4E774B861B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:18:38:7e:b4:04:e2:18:2b:da:ef:f1:59: 27:ad:0a:db:c2:80:08:cf:c7:77:41:73:f9:da:67: e8:23:52:77:20:a8:79:fb:af:f6:4b:24:43:52:f3: 3a:36:a9:ae:e9:f1:b4:f4:81:35:10:42:83:86:1a: fc:b5:f9:f7:a1:a8:91:60:57:a5:ed:42:66:df:56: 00:71:ae:f2:77:e8:e6:ff:ae:5f:23:4f:05:f8:5e: 83:b5:01:8d:f8:2e:71:65:53:16:ba:e7:94:96:43: 6a:23:2d:3e:2b:ba:94:9c:6a:10:d4:02:4a:3a:a3: 34:48:34:a7:73:9f:0c:d6:c4:86:df:15:9b:0f:44: c6:ca:04:17:db:2c:c8:a9:d3:46:59:b2:e7:53:90: 00:48:1f:e9:98:c1:22:42:3a:8f:24:5a:40:c5:61: dc:01:da:38:59:66:fb:67:d2:f5:ca:93:af:fe:07: d3:93:ff:7d:3c:b2:93:1d:38:6d:bf:a9:6c:f5:35: 85:a0:4d:ae:33:a7:92:59:fb:34:e3:74:2b:4a:f4: dd:ce:f7:53:ad:fb:3c:23:ea:08:c3:6d:33:20:10: b9:29:55:9d:c5:fd:4a:9e:dd:4d:6b:45:7b:8b:c9: 54:d1:33:3c:90:c8:56:9c:58:5e:ff:aa:69:a7:8d: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3D:52:82:2F:43:2D:BA:C1:FA:F5:D8:68:42:C4:E7:74:B8:61:B7 X509v3 Authority Key Identifier: keyid:99:70:79:5F:3B:27:74:81:EE:73:EA:3A:16:E4:FA:33:96:4C:92:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9970795F3B277481EE73EA3A16E4FA33964C92D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/9970795F3B277481EE73EA3A16E4FA33964C92D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:57:96:70:dc:fa:3d:6d:67:31:06:73:45:2a:d2:4f:55:e7: 0b:e5:e4:ac:8e:f3:a1:e6:ed:fb:01:c6:d4:16:68:b0:c7:37: 9c:1f:63:b7:0c:f9:bc:4c:92:e6:af:f7:90:ac:ef:9e:fd:91: 88:62:82:99:f5:84:54:4c:63:b7:de:70:d4:1d:e1:33:65:ff: 54:10:37:82:75:36:3d:4d:f9:57:58:56:26:ae:de:f6:3b:97: d6:35:80:aa:7c:c2:4e:56:49:b8:56:6d:9c:34:7a:92:46:97: 45:37:ae:61:ae:7f:71:6a:04:f0:0a:a7:29:17:dd:e7:5e:f4: 23:63:b2:9e:97:ba:d4:58:c7:cf:ea:36:b5:2e:1e:82:a9:27: 9f:2a:4f:52:e8:76:a4:00:b2:53:3c:a8:8f:80:0e:62:52:e1: 2a:70:72:70:b5:94:70:eb:b7:65:d5:a8:99:2a:f4:57:d9:f0: 99:7d:5a:4f:46:69:13:3f:4b:ef:3d:4e:7f:1e:3a:d8:68:ad: 83:d2:a0:7f:98:41:94:5e:a6:a6:36:15:5a:9a:06:05:19:1a: 02:2d:82:a7:11:ac:30:52:88:cc:3f:ba:b4:c6:85:9f:e2:7d: 56:b0:e4:3f:c3:c8:2e:75:a0:86:be:c1:19:be:88:f8:56:71: b5:c6:27:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBF1KpYqTEYQn/8e54vRhwxgekwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5 NjRDOTJEMzAeFw0yNjA5MjEyMDI2NTRaFw0yNjA5MjIyMzMyNTRaMDMxMTAvBgNV BAMTKEE3M0Q1MjgyMkY0MzJEQkFDMUZBRjVEODY4NDJDNEU3NzRCODYxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6Rg4frQE4hgr2u/xWSetCtvC gAjPx3dBc/naZ+gjUncgqHn7r/ZLJENS8zo2qa7p8bT0gTUQQoOGGvy1+fehqJFg V6XtQmbfVgBxrvJ36Ob/rl8jTwX4XoO1AY34LnFlUxa655SWQ2ojLT4rupScahDU Ako6ozRINKdznwzWxIbfFZsPRMbKBBfbLMip00ZZsudTkABIH+mYwSJCOo8kWkDF YdwB2jhZZvtn0vXKk6/+B9OT/308spMdOG2/qWz1NYWgTa4zp5JZ+zTjdCtK9N3O 91Ot+zwj6gjDbTMgELkpVZ3F/Uqe3U1rRXuLyVTRMzyQyFacWF7/qmmnjUzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpz1Sgi9DLbrB+vXYaELE53S4YbcwHwYDVR0j BBgwFoAUmXB5XzsndIHuc+o6FuT6M5ZMktMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OWExNWItZDVhZS00NWVjLTgwMTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYz QjI3NzQ4MUVFNzNFQTNBMTZFNEZBMzM5NjRDOTJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85OTcwNzk1RjNCMjc3NDgxRUU3M0VBM0ExNkU0RkEzMzk2NEM5 MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvOTk3MDc5NUYzQjI3NzQ4MUVFNzNFQTNBMTZFNEZB MzM5NjRDOTJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVXlnDc+j1tZzEGc0Uq0k9V5wvl5KyO86Hm 7fsBxtQWaLDHN5wfY7cM+bxMkuav95Cs7579kYhigpn1hFRMY7fecNQd4TNl/1QQ N4J1Nj1N+VdYViau3vY7l9Y1gKp8wk5WSbhWbZw0epJGl0U3rmGuf3FqBPAKpykX 3ede9CNjsp6XutRYx8/qNrUuHoKpJ58qT1LodqQAslM8qI+ADmJS4SpwcnC1lHDr t2XVqJkq9FfZ8Jl9Wk9GaRM/S+89Tn8eOthorYPSoH+YQZRepqY2FVqaBgUZGgIt gqcRrDBSiMw/urTGhZ/ifVaw5D/DyC51oIa+wRm+iPhWcbXGJ/I= -----END CERTIFICATE-----Generated at Tue Sep 22 11:01:06 2026 by rpki-client