$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json) Hash identifier: 1WJ6HtRrjk2MnWmiE4YHxo/PaN1QCSNKSfV094GEoUg= Subject key identifier: F0:CA:54:5F:72:06:03:58:E5:6C:E2:0D:41:23:61:33:E5:0F:8C:D2 Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Certificate serial: 1B07EC1F860B2DBF1539D66870C683E813081FF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:58:14 +0000 Manifest this update: Tue 12 May 2026 23:53:14 +0000 Manifest next update: Thu 14 May 2026 01:49:14 +0000 Files and hashes: 1: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: X1PdNUiQZk0jUwMdmdymgfxpdcdeqzULOtC8pSbvUys=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:07:ec:1f:86:0b:2d:bf:15:39:d6:68:70:c6:83:e8:13:08:1f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Validity Not Before: May 12 23:53:14 2026 GMT Not After : May 14 01:49:14 2026 GMT Subject: CN=F0CA545F72060358E56CE20D41236133E50F8CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9d:96:57:1b:d2:08:04:83:43:b0:3e:dd:35: b5:c2:96:0f:1c:2f:f1:bf:5b:d1:93:66:e4:9c:c1: 28:f6:8f:56:06:af:de:c5:ea:b7:54:8a:e3:f3:76: 26:6b:c0:dc:48:2e:fa:3e:8f:2e:69:14:c8:c9:67: d0:19:78:3f:f1:ec:2f:7e:0c:a1:43:69:2a:00:ca: 7b:31:b8:60:94:3e:8b:cd:6f:f1:d5:08:a7:5f:6e: 14:dd:7b:9e:56:a4:e6:de:73:0b:48:8a:22:39:6b: 3b:71:be:20:72:09:64:82:bb:5f:e4:ac:5d:ea:a5: 44:7f:d7:de:8d:13:f2:1b:de:0f:a5:8e:57:c0:64: f0:65:5d:0b:bf:4b:92:9d:67:34:72:74:2f:8f:c4: b9:d6:3e:68:1a:4c:47:6f:82:3a:eb:e1:f2:3e:8a: 54:a7:37:3a:66:4f:6c:6c:82:84:a6:8f:5c:38:54: d3:45:06:0c:fe:8a:c7:76:fb:e4:f8:e2:f9:c5:fd: 00:6b:66:d5:7d:2e:d7:a2:12:f4:4b:e1:20:2a:19: b0:83:8f:ac:1a:77:50:99:a1:2f:fb:7b:bd:de:12: 07:11:fe:47:17:0c:cd:58:56:4d:3b:34:c4:25:f0: d6:08:44:12:a7:e5:ed:d0:66:90:13:39:c6:06:b4: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CA:54:5F:72:06:03:58:E5:6C:E2:0D:41:23:61:33:E5:0F:8C:D2 X509v3 Authority Key Identifier: keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ee:22:c6:33:fb:1d:66:04:63:ff:ea:2f:8a:34:66:9c:42: 00:27:e0:0e:00:a0:a1:f8:9f:93:a1:4a:ce:38:46:18:6f:42: a4:95:da:1a:e8:ac:27:a1:d4:24:98:66:14:13:97:65:e9:03: 2b:3c:27:a3:d0:39:67:12:c3:8a:c8:84:58:79:ef:08:5d:eb: 48:33:e0:33:34:f0:a4:93:ec:d6:50:b1:db:a3:81:5f:3b:33: dd:58:88:b8:3d:f6:e7:b9:98:00:77:2d:ff:05:5b:f9:2f:23: 2a:5e:9b:10:fa:90:79:6f:fb:25:d2:02:76:3a:5d:fe:b6:a6: d8:62:17:56:ee:68:f7:13:a6:aa:23:54:29:34:b3:37:19:97: d6:e1:6c:98:9d:01:ca:23:0d:18:7f:f3:ba:a3:34:3b:5f:ed: 66:29:5f:77:6a:1c:8b:6e:68:35:68:c3:10:58:72:b9:54:bf: 00:50:d2:89:da:f8:b3:aa:c9:25:26:a1:63:3e:ce:40:37:89: 08:bc:67:ea:97:4b:8a:6f:b7:84:f1:a0:ba:d7:8d:24:f7:92: dd:9d:d7:4a:56:99:39:ba:68:4f:68:7c:83:50:9b:64:55:8c: 41:a9:7d:e0:4c:df:c3:5b:26:3b:69:81:62:31:43:52:b0:ee: 65:5f:23:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwfsH4YLLb8VOdZocMaD6BMIH/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3 QTBCNjhGQzAeFw0yNjA1MTIyMzUzMTRaFw0yNjA1MTQwMTQ5MTRaMDMxMTAvBgNV BAMTKEYwQ0E1NDVGNzIwNjAzNThFNTZDRTIwRDQxMjM2MTMzRTUwRjhDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgnZZXG9IIBINDsD7dNbXClg8c L/G/W9GTZuScwSj2j1YGr97F6rdUiuPzdiZrwNxILvo+jy5pFMjJZ9AZeD/x7C9+ DKFDaSoAynsxuGCUPovNb/HVCKdfbhTde55WpObecwtIiiI5aztxviByCWSCu1/k rF3qpUR/196NE/Ib3g+ljlfAZPBlXQu/S5KdZzRydC+PxLnWPmgaTEdvgjrr4fI+ ilSnNzpmT2xsgoSmj1w4VNNFBgz+isd2++T44vnF/QBrZtV9LteiEvRL4SAqGbCD j6wad1CZoS/7e73eEgcR/kcXDM1YVk07NMQl8NYIRBKn5e3QZpATOcYGtBFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MpUX3IGA1jlbOINQSNhM+UPjNIwHwYDVR0j BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0 OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2 MUE3QTBCNjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITuIsYz+x1mBGP/6i+KNGacQgAn4A4AoKH4 n5OhSs44RhhvQqSV2hrorCeh1CSYZhQTl2XpAys8J6PQOWcSw4rIhFh57whd60gz 4DM08KST7NZQsdujgV87M91YiLg99ue5mAB3Lf8FW/kvIypemxD6kHlv+yXSAnY6 Xf62pthiF1buaPcTpqojVCk0szcZl9bhbJidAcojDRh/87qjNDtf7WYpX3dqHItu aDVowxBYcrlUvwBQ0ona+LOqySUmoWM+zkA3iQi8Z+qXS4pvt4TxoLrXjST3kt2d 10pWmTm6aE9ofINQm2RVjEGpfeBM38NbJjtpgWIxQ1Kw7mVfI6s= -----END CERTIFICATE-----Generated at Wed May 13 09:47:51 2026 by rpki-client