$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft File: D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json) Hash identifier: hReptv2jiG5XQ2NFOPLaUa/F0M1T8KVfhR26X6/XD3E= Subject key identifier: E4:C7:F8:0F:73:6D:C2:3E:78:18:5D:D4:F6:5C:A4:35:8E:37:5A:DB Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 69B5148D70D5C10C232A5354D00980C198CAB626 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:06:51 +0000 Manifest this update: Tue 12 May 2026 17:01:51 +0000 Manifest next update: Wed 13 May 2026 20:21:51 +0000 Files and hashes: 1: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: l2wLvhiAc33omdBqzBOzXGKoINEEiy8SDayqZyEgUv4=) 2: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=) 3: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=) 4: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b5:14:8d:70:d5:c1:0c:23:2a:53:54:d0:09:80:c1:98:ca:b6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: May 12 17:01:51 2026 GMT Not After : May 13 20:21:51 2026 GMT Subject: CN=E4C7F80F736DC23E78185DD4F65CA4358E375ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:41:f6:c0:cf:4b:fe:14:ed:ed:52:75:47: dd:77:f2:d6:df:cb:48:b4:5b:d0:59:ed:35:9c:1d: 6c:81:cc:3b:5a:30:9d:bf:46:a7:c2:91:42:75:3b: f7:d6:79:f8:d9:17:1c:42:6f:ed:db:d1:19:42:24: e6:dd:2a:78:34:93:da:a4:e7:a9:d0:94:58:33:92: 28:97:16:45:8d:90:a1:61:05:61:0d:27:42:27:4d: b2:67:37:d4:0e:c7:b4:10:9c:bd:00:e7:b0:53:07: 2f:2f:d0:58:31:03:c4:8c:fd:48:4c:a9:05:86:6c: 4a:6b:d4:97:59:f0:a0:df:65:b6:19:91:ca:65:2d: 90:e5:c0:15:a5:9c:4b:b4:ed:62:dd:b3:dc:61:f3: 80:9c:0d:fa:21:a1:02:74:76:e4:e8:16:3b:ba:55: 68:f4:de:cf:a9:40:dc:71:37:91:47:1a:7f:f8:1c: 29:0e:7b:f5:26:ee:7a:2b:6c:35:8e:16:24:a8:3e: 67:cc:2a:82:96:6f:38:35:ae:60:51:2a:30:07:9d: 35:10:ee:bd:f3:26:89:2e:17:5f:79:9d:7e:55:55: 3b:7b:a1:7f:19:d5:e1:4a:2f:dd:05:0c:d7:e6:a5: eb:c5:4d:e6:ac:cd:d7:b9:46:c2:d4:6b:dd:63:b9: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C7:F8:0F:73:6D:C2:3E:78:18:5D:D4:F6:5C:A4:35:8E:37:5A:DB X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:aa:75:ea:e4:e5:92:8f:62:68:12:9e:7f:89:b7:5c:21:4d: 8b:32:c0:ad:18:45:ee:8c:13:df:47:63:d6:86:3e:a6:22:e9: 47:c9:67:02:5a:31:09:40:fd:2f:65:fb:d4:b2:fc:f2:88:2a: 45:58:1b:07:ce:cd:f1:0c:01:bc:79:cf:f6:72:44:d2:16:fa: 8f:f0:83:7b:0b:bd:6c:d9:dc:7d:34:1c:87:b7:f7:87:98:93: 34:3c:19:43:50:d9:ea:bb:dc:8b:89:c4:3d:95:87:17:2e:60: 5d:6b:8a:89:24:f9:38:81:bf:31:85:d6:d8:31:5b:aa:79:97: 09:19:ab:81:ab:f1:a2:e0:90:e9:16:79:07:76:fc:93:68:c2: be:56:ab:75:cb:31:42:e7:1f:bf:ce:3d:01:3b:99:4e:a3:cd: 93:10:96:89:b4:fe:d9:ef:52:bc:6f:d5:a2:30:20:30:53:36: 68:e6:7e:ff:6d:08:78:f0:4b:f5:0a:aa:16:59:cb:57:7e:67: 2a:81:10:06:e1:35:22:aa:5d:9f:a2:a1:14:6a:9a:21:2c:8d: 6d:42:c6:32:88:da:16:6e:07:aa:68:10:43:73:e6:18:ff:24: f7:78:70:cb:b1:87:7d:9c:71:1d:f9:7a:f1:8f:2e:3d:2b:bb: 85:27:5f:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabUUjXDVwQwjKlNU0AmAwZjKtiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjA1MTIxNzAxNTFaFw0yNjA1MTMyMDIxNTFaMDMxMTAvBgNV BAMTKEU0QzdGODBGNzM2REMyM0U3ODE4NURENEY2NUNBNDM1OEUzNzVBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NUH2wM9L/hTt7VJ1R9138tbf y0i0W9BZ7TWcHWyBzDtaMJ2/RqfCkUJ1O/fWefjZFxxCb+3b0RlCJObdKng0k9qk 56nQlFgzkiiXFkWNkKFhBWENJ0InTbJnN9QOx7QQnL0A57BTBy8v0FgxA8SM/UhM qQWGbEpr1JdZ8KDfZbYZkcplLZDlwBWlnEu07WLds9xh84CcDfohoQJ0duToFju6 VWj03s+pQNxxN5FHGn/4HCkOe/Um7norbDWOFiSoPmfMKoKWbzg1rmBRKjAHnTUQ 7r3zJokuF195nX5VVTt7oX8Z1eFKL90FDNfmpevFTeaszde5RsLUa91jufAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Mf4D3Ntwj54GF3U9lykNY43WtswHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4 Mzg2QkZBOTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeqderk5ZKPYmgSnn+Jt1whTYsywK0YRe6M E99HY9aGPqYi6UfJZwJaMQlA/S9l+9Sy/PKIKkVYGwfOzfEMAbx5z/ZyRNIW+o/w g3sLvWzZ3H00HIe394eYkzQ8GUNQ2eq73IuJxD2VhxcuYF1riokk+TiBvzGF1tgx W6p5lwkZq4Gr8aLgkOkWeQd2/JNowr5Wq3XLMULnH7/OPQE7mU6jzZMQlom0/tnv Urxv1aIwIDBTNmjmfv9tCHjwS/UKqhZZy1d+ZyqBEAbhNSKqXZ+ioRRqmiEsjW1C xjKI2hZuB6poEENz5hj/JPd4cMuxh32ccR35evGPLj0ru4UnXy0= -----END CERTIFICATE-----Generated at Tue May 12 22:12:58 2026 by rpki-client