$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft File: B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json) Hash identifier: aOaKv0iJ9IQAoHaOma2Y+MKAeBVjs80aOaVd8IwXJ88= Subject key identifier: 2A:23:9F:41:A9:B2:7F:FC:95:F5:10:8E:0D:49:F7:AB:18:37:D0:D6 Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Certificate issuer: /CN=B97B101303D652EE5C0234A7A800429959745FF3 Certificate serial: 5B138EE1017B84C8E4F22E381EEAAC1A56A9C138 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:44:52 +0000 Manifest this update: Wed 17 Jun 2026 01:39:52 +0000 Manifest next update: Thu 18 Jun 2026 02:59:52 +0000 Files and hashes: 1: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: onrLvKTMuqcZR6D0e0MTe4xu6CIPWmnYuDkCZCGmo9Q=) 2: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:13:8e:e1:01:7b:84:c8:e4:f2:2e:38:1e:ea:ac:1a:56:a9:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3 Validity Not Before: Jun 17 01:39:52 2026 GMT Not After : Jun 18 02:59:52 2026 GMT Subject: CN=2A239F41A9B27FFC95F5108E0D49F7AB1837D0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:b5:5f:32:c0:c2:38:a5:ee:06:b7:01:c7: 7a:63:a9:ab:65:99:aa:5c:09:5d:7d:8a:4e:90:79: 27:f8:cc:af:66:7a:0f:72:23:d8:c3:c0:5e:48:b1: 1e:19:0e:5d:15:86:34:70:b0:59:c4:da:45:bc:4e: a7:b5:c3:50:71:ff:d6:00:22:3d:e4:90:9b:06:7b: 55:a2:3a:e1:aa:5c:3e:c3:6e:e1:73:49:c2:1b:94: aa:73:91:09:42:6b:d2:06:ec:1b:98:d9:7f:73:b2: 44:e2:59:50:af:16:9c:92:d8:4e:1a:5e:ef:21:89: 46:67:01:e1:33:88:d1:a3:65:24:ba:6c:cb:a1:07: 81:46:b0:31:b5:69:12:d1:e3:fe:b1:7f:ae:cc:38: 1a:14:08:19:c4:65:db:48:1b:7d:f9:a2:6c:29:e8: 15:78:e7:15:f4:12:b5:45:e5:35:4a:65:86:cc:8a: d5:28:9a:5f:f7:00:fd:e4:41:84:34:62:24:6b:d7: 06:25:4d:30:fe:b4:c0:83:92:da:3f:d7:4b:fb:2f: 01:9f:9b:ff:38:6b:86:b6:69:e9:72:73:0c:80:83: 3d:ae:bc:29:6b:26:4d:d9:dd:83:12:d3:9d:0d:32: e7:96:dd:d5:b1:43:84:81:fb:bb:4a:dc:4e:24:fd: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:23:9F:41:A9:B2:7F:FC:95:F5:10:8E:0D:49:F7:AB:18:37:D0:D6 X509v3 Authority Key Identifier: keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:66:77:b1:b5:4d:3c:0f:f1:cf:44:07:15:c9:83:4f:18:dd: 89:93:4a:f3:3b:0c:b9:54:0b:c5:1b:07:cd:fc:5c:6c:5f:b9: e8:1a:7b:d9:94:5c:85:b8:13:d0:33:54:ac:e5:b9:3d:36:e3: 30:e0:27:5b:b5:d3:7e:c5:8a:0e:1a:10:b6:71:2c:a8:2c:54: cc:3b:9a:e6:85:df:d9:ec:23:c2:07:cf:b7:ee:1f:5c:4d:f3: 68:b2:cc:6a:a9:45:1f:c1:fd:e0:87:17:a8:ea:f9:ab:e4:ba: 48:91:c8:93:38:68:bf:6c:2b:a9:7c:72:b2:16:6d:02:dc:ea: 63:33:f9:b2:1b:bb:b1:5f:1f:19:28:ce:9e:56:53:9c:48:83: d5:2e:f8:79:65:7e:68:6b:25:c8:8f:24:4e:dc:a1:28:96:1b: 25:b2:e2:f7:dc:fb:c0:6b:a8:f7:f9:ed:59:b3:9c:29:b2:a5: 71:fb:d6:74:68:12:0d:33:37:75:ce:09:4b:13:c3:d5:b1:19: 96:11:96:a0:b0:75:df:9c:bc:33:11:3e:83:06:99:d5:b5:44: c6:c2:04:09:4b:fa:17:0b:89:8d:f6:81:a1:45:80:bd:7b:33: dc:16:1d:ee:d4:3c:80:56:2d:ce:cd:86:66:e2:77:35:7f:2a: 0e:49:52:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxOO4QF7hMjk8i44HuqsGlapwTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1 OTc0NUZGMzAeFw0yNjA2MTcwMTM5NTJaFw0yNjA2MTgwMjU5NTJaMDMxMTAvBgNV BAMTKDJBMjM5RjQxQTlCMjdGRkM5NUY1MTA4RTBENDlGN0FCMTgzN0QwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsK7VfMsDCOKXuBrcBx3pjqatl mapcCV19ik6QeSf4zK9meg9yI9jDwF5IsR4ZDl0VhjRwsFnE2kW8Tqe1w1Bx/9YA Ij3kkJsGe1WiOuGqXD7DbuFzScIblKpzkQlCa9IG7BuY2X9zskTiWVCvFpyS2E4a Xu8hiUZnAeEziNGjZSS6bMuhB4FGsDG1aRLR4/6xf67MOBoUCBnEZdtIG335omwp 6BV45xX0ErVF5TVKZYbMitUoml/3AP3kQYQ0YiRr1wYlTTD+tMCDkto/10v7LwGf m/84a4a2aelycwyAgz2uvClrJk3Z3YMS050NMueW3dWxQ4SB+7tK3E4k/U+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKiOfQamyf/yV9RCODUn3qxg30NYwHwYDVR0j BBgwFoAUuXsQEwPWUu5cAjSnqABCmVl0X/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkN2Y5ZWItM2MyZC00MWExLTkwODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMw M0Q2NTJFRTVDMDIzNEE3QTgwMDQyOTk1OTc0NUZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTdCMTAxMzAzRDY1MkVFNUMwMjM0QTdBODAwNDI5OTU5NzQ1 RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQjk3QjEwMTMwM0Q2NTJFRTVDMDIzNEE3QTgwMDQy OTk1OTc0NUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABmd7G1TTwP8c9EBxXJg08Y3YmTSvM7DLlU C8UbB838XGxfuegae9mUXIW4E9AzVKzluT024zDgJ1u1037Fig4aELZxLKgsVMw7 muaF39nsI8IHz7fuH1xN82iyzGqpRR/B/eCHF6jq+avkukiRyJM4aL9sK6l8crIW bQLc6mMz+bIbu7FfHxkozp5WU5xIg9Uu+HllfmhrJciPJE7coSiWGyWy4vfc+8Br qPf57VmznCmypXH71nRoEg0zN3XOCUsTw9WxGZYRlqCwdd+cvDMRPoMGmdW1RMbC BAlL+hcLiY32gaFFgL17M9wWHe7UPIBWLc7NhmbidzV/Kg5JUmM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:18 2026 by rpki-client