$ rpki-client -vvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft File: D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json) Hash identifier: vbc0h7mjB6ScI1JChCeDZVpzUA+lE9BX+iaOKOzdmnU= Subject key identifier: 69:44:6A:1C:2A:DB:22:C2:69:93:1B:04:B4:B2:E9:88:1F:7B:45:C4 Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 2F316EA9D0AF032B4E79298D2246E1E5EA28B268 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:09:39 +0000 Manifest this update: Thu 23 Jul 2026 20:04:39 +0000 Manifest next update: Fri 24 Jul 2026 21:48:39 +0000 Files and hashes: 1: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: qRtDtTL5eJ7pJ72C+F1vMeEyefAr+cYyEnXLQHqGMlo=) 2: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=) 3: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:31:6e:a9:d0:af:03:2b:4e:79:29:8d:22:46:e1:e5:ea:28:b2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: Jul 23 20:04:39 2026 GMT Not After : Jul 24 21:48:39 2026 GMT Subject: CN=69446A1C2ADB22C269931B04B4B2E9881F7B45C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:88:bf:92:ed:0e:b1:9f:92:0e:99:68:04: a6:af:1b:8e:ee:1c:1a:a6:47:87:32:d4:8f:49:c9: c0:3a:ff:39:52:73:8c:fe:60:81:0e:4e:2b:71:e2: 46:dd:3a:5b:ac:a0:b0:5c:96:7c:90:18:39:78:60: f3:e9:41:07:2a:8a:79:76:a3:4d:64:b8:39:a7:a7: 9f:de:61:5d:2d:e8:e9:79:62:ad:30:4e:31:fe:96: 56:79:82:91:1f:79:2a:a5:f6:0a:f9:50:d6:df:de: 6b:ed:70:87:37:05:88:98:dd:0a:4c:cd:54:7d:9a: 7e:58:cb:b5:ab:7e:b0:a2:88:8d:06:9d:77:f8:cc: 63:35:c9:b2:1f:a9:1f:7f:40:37:4b:cc:76:0b:ac: 9e:6f:27:dc:9d:02:2e:73:01:b6:ee:c9:70:4a:a8: 92:b5:98:7b:99:77:f9:87:ef:a9:53:c9:06:4b:6b: bc:64:99:25:47:ec:d8:8d:d6:c2:6f:91:62:17:ca: f2:59:29:b3:af:fb:ef:4b:92:e2:b8:1a:eb:c7:8c: 71:6f:aa:83:9e:b5:c3:1e:eb:67:e7:9a:ab:1a:7f: 9f:a2:9e:bc:65:b5:e7:81:9f:2d:02:41:28:8c:4e: 1f:96:b4:75:31:ee:e9:2f:cb:73:bf:81:da:cd:45: 28:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:44:6A:1C:2A:DB:22:C2:69:93:1B:04:B4:B2:E9:88:1F:7B:45:C4 X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d4:1f:d2:d7:f9:09:99:28:61:af:d0:a9:e7:85:96:75:de: 2a:8f:21:60:9a:38:c4:c5:11:7f:c9:44:b8:5a:e1:43:dd:97: cd:ce:fb:d3:a4:ec:3d:97:ec:b2:d3:7b:83:fb:38:d3:36:83: 31:60:46:d8:2d:0e:ea:57:89:66:d9:14:d1:ad:08:f4:49:aa: c9:6e:08:e3:8f:f6:09:ab:e8:e3:80:e1:6f:67:d1:a0:ff:b9: 83:12:3c:69:ab:87:40:c5:cd:47:96:92:22:c2:14:4d:f5:8a: 65:14:31:c2:75:e7:c6:0b:dc:cb:3a:60:ef:e7:33:fb:da:01: 66:a6:95:5c:35:26:c1:98:c3:ab:3d:57:9d:bb:61:59:c6:64: 25:84:39:eb:c2:66:34:7c:ce:59:82:88:f7:08:c8:8e:6a:cf: f3:cf:5d:d7:16:14:53:21:3c:93:de:ff:af:d3:43:fe:7f:46: f6:7b:35:bc:43:14:8e:17:81:25:c9:65:f1:e2:33:a5:2c:63: 79:04:18:4f:ee:83:45:6e:81:7a:b7:ac:19:87:f4:06:0e:35: ef:a3:51:16:45:0f:bb:a1:f7:fc:8f:48:83:65:e8:2f:74:fb: 3e:d8:30:a8:f6:ea:61:45:66:e7:81:b6:6f:74:ab:8a:ea:c8: d5:9b:1c:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzFuqdCvAytOeSmNIkbh5eoosmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjA3MjMyMDA0MzlaFw0yNjA3MjQyMTQ4MzlaMDMxMTAvBgNV BAMTKDY5NDQ2QTFDMkFEQjIyQzI2OTkzMUIwNEI0QjJFOTg4MUY3QjQ1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFoi/ku0OsZ+SDploBKavG47u HBqmR4cy1I9JycA6/zlSc4z+YIEOTitx4kbdOlusoLBclnyQGDl4YPPpQQcqinl2 o01kuDmnp5/eYV0t6Ol5Yq0wTjH+llZ5gpEfeSql9gr5UNbf3mvtcIc3BYiY3QpM zVR9mn5Yy7WrfrCiiI0GnXf4zGM1ybIfqR9/QDdLzHYLrJ5vJ9ydAi5zAbbuyXBK qJK1mHuZd/mH76lTyQZLa7xkmSVH7NiN1sJvkWIXyvJZKbOv++9LkuK4GuvHjHFv qoOetcMe62fnmqsaf5+inrxlteeBny0CQSiMTh+WtHUx7ukvy3O/gdrNRShBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaURqHCrbIsJpkxsEtLLpiB97RcQwHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4 Mzg2QkZBOTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7UH9LX+QmZKGGv0KnnhZZ13iqPIWCaOMTF EX/JRLha4UPdl83O+9Ok7D2X7LLTe4P7ONM2gzFgRtgtDupXiWbZFNGtCPRJqslu COOP9gmr6OOA4W9n0aD/uYMSPGmrh0DFzUeWkiLCFE31imUUMcJ158YL3Ms6YO/n M/vaAWamlVw1JsGYw6s9V527YVnGZCWEOevCZjR8zlmCiPcIyI5qz/PPXdcWFFMh PJPe/6/TQ/5/RvZ7NbxDFI4XgSXJZfHiM6UsY3kEGE/ug0VugXq3rBmH9AYONe+j URZFD7uh9/yPSINl6C90+z7YMKj26mFFZueBtm90q4rqyNWbHL8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:53 2026 by rpki-client