$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft File: B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json) Hash identifier: TPxI1Ba/ae1cISuvAcvg3OduqoKv7Y2TzFwWhFi0LsI= Subject key identifier: 49:FD:94:FE:FA:B7:85:12:B5:8C:8C:0B:79:DD:B8:55:18:E9:35:19 Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Certificate issuer: /CN=B97B101303D652EE5C0234A7A800429959745FF3 Certificate serial: 16EE76C90C2378117326332F2FB3969F607D9987 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:46:12 +0000 Manifest this update: Sun 20 Sep 2026 23:41:12 +0000 Manifest next update: Tue 22 Sep 2026 03:31:12 +0000 Files and hashes: 1: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=) 2: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: rZQ5VHWWWd7JqMnvDxds0R63+ontKk8xT1pUCv+4qqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ee:76:c9:0c:23:78:11:73:26:33:2f:2f:b3:96:9f:60:7d:99:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3 Validity Not Before: Sep 20 23:41:12 2026 GMT Not After : Sep 22 03:31:12 2026 GMT Subject: CN=49FD94FEFAB78512B58C8C0B79DDB85518E93519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:a0:6f:24:62:e0:54:4a:bf:2e:76:e8:2d: 94:d1:a3:3c:e8:10:aa:ea:ef:83:5c:f7:cf:89:64: c6:46:10:ec:79:0c:a9:d6:58:3c:dc:cb:34:c2:01: 34:d3:7b:18:64:62:c2:cd:b4:98:99:98:f1:5c:6d: 9c:3e:c0:d7:12:df:73:48:3e:f7:a9:92:8f:a4:c6: c3:d8:61:26:17:b4:66:50:82:47:ed:45:c1:ba:83: ec:30:d7:94:b1:03:30:4e:85:d9:a5:18:04:34:7f: c6:cf:c1:b3:e0:36:ea:62:1f:d6:6e:6c:14:60:8a: a6:d4:4f:43:75:68:14:2f:06:5c:89:9d:a9:c3:33: dd:6c:6b:9f:3a:15:62:53:fd:8d:33:0b:ab:5e:7b: 76:bc:6b:a9:f0:74:67:47:8c:30:df:1e:c5:fb:55: e7:a1:ec:7e:ef:c6:32:3e:9e:dd:b5:ec:82:9d:9e: 5d:55:ea:41:4f:1a:90:dd:52:be:83:3b:0d:4e:bd: b9:ac:28:36:00:b5:ad:09:22:11:8e:aa:97:d4:56: 67:a7:62:a2:fe:c8:c9:a3:40:6d:76:d3:2a:94:ba: 42:ed:e5:22:5c:9c:5d:69:53:df:df:09:07:58:7b: 5a:21:fd:2c:da:b3:99:f1:b6:ef:48:08:2c:f5:30: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FD:94:FE:FA:B7:85:12:B5:8C:8C:0B:79:DD:B8:55:18:E9:35:19 X509v3 Authority Key Identifier: keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:23:49:f8:bb:f4:6d:30:9c:9e:b5:fa:f9:19:0a:a9:b9:3e: 61:9f:78:5a:d8:ef:e8:3e:cf:64:dc:c0:5c:76:31:de:d6:30: 9a:a3:41:6b:51:47:24:77:90:37:43:b7:04:4c:f9:6c:7f:06: d2:54:7d:aa:84:96:49:7f:8f:fd:51:b4:31:a8:76:f2:10:2a: 0a:1e:16:37:45:73:09:41:b3:e7:79:18:0e:88:87:65:84:26: 26:83:00:2a:f2:15:15:0d:ea:11:49:c9:bf:04:ca:c9:ac:72: c2:68:c2:3d:9d:16:93:ba:5b:0d:1e:3e:83:9a:c1:3d:06:13: 23:4b:45:ed:44:ce:f6:2f:51:32:4c:98:46:ce:15:a5:4b:e2: a6:d8:10:03:e5:ac:db:13:da:eb:ae:be:68:69:ef:18:76:1b: 17:20:b4:d3:e0:4a:73:52:e6:b3:de:5e:21:7c:38:fb:ac:79: 2a:86:cc:d7:13:ca:e9:27:d5:ba:20:8b:64:c3:10:60:fe:30: b1:8b:f9:41:8c:34:47:e5:6c:20:b7:40:39:24:e5:34:fd:2b: dd:bb:61:2a:7e:52:fb:a5:ec:ff:f7:a9:38:05:65:c1:29:95: af:31:37:cf:ae:10:37:17:29:5f:3a:23:fc:f0:90:d9:e3:9a: 05:e6:87:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFu52yQwjeBFzJjMvL7OWn2B9mYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1 OTc0NUZGMzAeFw0yNjA5MjAyMzQxMTJaFw0yNjA5MjIwMzMxMTJaMDMxMTAvBgNV BAMTKDQ5RkQ5NEZFRkFCNzg1MTJCNThDOEMwQjc5RERCODU1MThFOTM1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAaBvJGLgVEq/LnboLZTRozzo EKrq74Nc98+JZMZGEOx5DKnWWDzcyzTCATTTexhkYsLNtJiZmPFcbZw+wNcS33NI Pvepko+kxsPYYSYXtGZQgkftRcG6g+ww15SxAzBOhdmlGAQ0f8bPwbPgNupiH9Zu bBRgiqbUT0N1aBQvBlyJnanDM91sa586FWJT/Y0zC6tee3a8a6nwdGdHjDDfHsX7 Veeh7H7vxjI+nt217IKdnl1V6kFPGpDdUr6DOw1OvbmsKDYAta0JIhGOqpfUVmen YqL+yMmjQG120yqUukLt5SJcnF1pU9/fCQdYe1oh/Szas5nxtu9ICCz1MPx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSf2U/vq3hRK1jIwLed24VRjpNRkwHwYDVR0j BBgwFoAUuXsQEwPWUu5cAjSnqABCmVl0X/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkN2Y5ZWItM2MyZC00MWExLTkwODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMw M0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1OTc0NUZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTdCMTAxMzAzRDY1MkVFNUMwMjM0QTdBODAwNDI5OTU5NzQ1 RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQy OTk1OTc0NUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEojSfi79G0wnJ61+vkZCqm5PmGfeFrY7+g+ z2TcwFx2Md7WMJqjQWtRRyR3kDdDtwRM+Wx/BtJUfaqElkl/j/1RtDGodvIQKgoe FjdFcwlBs+d5GA6Ih2WEJiaDACryFRUN6hFJyb8EysmscsJowj2dFpO6Ww0ePoOa wT0GEyNLRe1EzvYvUTJMmEbOFaVL4qbYEAPlrNsT2uuuvmhp7xh2GxcgtNPgSnNS 5rPeXiF8OPuseSqGzNcTyukn1bogi2TDEGD+MLGL+UGMNEflbCC3QDkk5TT9K927 YSp+Uvul7P/3qTgFZcEpla8xN8+uEDcXKV86I/zwkNnjmgXmhzM= -----END CERTIFICATE-----Generated at Mon Sep 21 10:13:04 2026 by rpki-client