$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json) Hash identifier: 9/8pbqq9VT5W7yp6CWtmWt2JWSX5WvvOhAkVrOJOOXQ= Subject key identifier: 68:01:44:5B:76:A9:98:7A:1A:CA:B0:7E:D1:B0:CB:82:39:05:48:D3 Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Certificate serial: 3147CCD0811270265673E3DB61D1336ED3B3EB47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:16:05 +0000 Manifest this update: Thu 23 Jul 2026 17:11:05 +0000 Manifest next update: Fri 24 Jul 2026 18:49:05 +0000 Files and hashes: 1: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: Plx2x4O/9/Lvq/KgalbBjv8aMuUeLK0t6hyz1wfGfOg=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:47:cc:d0:81:12:70:26:56:73:e3:db:61:d1:33:6e:d3:b3:eb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Validity Not Before: Jul 23 17:11:05 2026 GMT Not After : Jul 24 18:49:05 2026 GMT Subject: CN=6801445B76A9987A1ACAB07ED1B0CB82390548D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:61:5f:44:19:e9:bb:1e:7b:67:d6:96:29: 21:12:1d:f1:c8:8a:ac:f2:00:55:dd:82:ab:f7:26: 31:5c:8b:c1:79:29:c6:7e:5d:b6:da:48:c9:87:4e: b9:00:e1:6c:7f:04:c8:0d:00:60:4c:e1:80:8f:df: 67:d5:88:bc:8f:8f:f9:5a:4d:03:dc:fa:ba:54:9c: 5e:7f:98:d4:f2:de:ad:d7:b3:39:4e:64:f3:e8:d1: df:1d:28:44:83:39:9e:89:e3:46:ef:e3:7f:64:c7: 29:f6:59:71:0c:b8:04:27:42:c2:87:7c:c8:7b:31: ba:3b:db:1a:dc:04:c5:c4:d9:8c:7e:a2:e2:64:bf: ea:2e:e0:48:e4:79:32:01:c2:85:db:ef:a5:69:ac: 8a:b9:20:f8:df:96:f7:14:46:b1:94:95:d8:3b:ed: 04:2e:fb:f8:2f:d6:3c:da:6f:ed:68:ae:b1:dd:f5: 25:cb:10:0e:53:37:4b:c3:49:d0:25:fa:58:f1:bf: 65:38:c3:7e:6e:6b:0f:2a:d0:4a:fa:be:75:cb:73: 35:ea:05:8a:08:bc:a1:9c:a0:85:a9:23:56:30:df: 73:fa:b6:fb:3d:dc:ee:ea:a4:ca:35:73:14:69:79: b4:a6:b4:24:71:b0:fc:57:17:91:1c:1e:49:7d:86: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:01:44:5B:76:A9:98:7A:1A:CA:B0:7E:D1:B0:CB:82:39:05:48:D3 X509v3 Authority Key Identifier: keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:db:6e:6d:b6:7a:8d:a2:de:e3:df:50:e9:dd:96:16:d0:1a: ab:4b:2e:c3:f3:38:f9:75:8b:c6:ef:1a:17:2b:21:1c:1d:9c: 13:20:1b:c9:7a:30:21:42:a5:df:11:a4:bd:fd:14:ec:60:8a: c2:70:4f:ad:3c:d2:58:35:cf:12:e2:18:52:67:36:b6:75:a1: a3:94:32:78:b5:70:2d:d9:d4:37:91:0c:9c:95:c3:cb:7c:6f: 6c:6e:67:6c:59:13:a4:ac:ed:85:d5:cc:b8:5f:5b:8b:60:db: cd:19:f5:3e:e6:25:cb:4b:87:e9:eb:27:06:c4:90:12:08:8d: 93:cc:61:9e:ad:61:29:90:82:64:ed:93:6f:7a:f0:f0:ba:75: d8:02:a2:94:b6:7c:5c:d1:d0:a2:b5:cf:8d:11:19:e8:c7:a5: b7:be:80:4f:49:42:4a:97:17:d7:c3:65:f6:ff:64:0b:45:07: 31:89:01:bf:1b:3a:5a:de:a9:1c:fa:78:00:7c:90:a9:50:3f: 24:b4:68:d7:4b:0d:5d:6d:a2:d1:dd:dc:9e:c4:a7:f4:b5:e0: 93:5c:7d:34:d4:4b:f3:9a:25:fd:5a:10:ce:04:62:69:bd:5c: 78:3f:42:49:ca:71:b5:51:4a:21:0f:6a:93:0e:7c:86:26:d7: 34:f0:64:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUfM0IEScCZWc+PbYdEzbtOz60cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3 QTBCNjhGQzAeFw0yNjA3MjMxNzExMDVaFw0yNjA3MjQxODQ5MDVaMDMxMTAvBgNV BAMTKDY4MDE0NDVCNzZBOTk4N0ExQUNBQjA3RUQxQjBDQjgyMzkwNTQ4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZN2FfRBnpux57Z9aWKSESHfHI iqzyAFXdgqv3JjFci8F5KcZ+XbbaSMmHTrkA4Wx/BMgNAGBM4YCP32fViLyPj/la TQPc+rpUnF5/mNTy3q3XszlOZPPo0d8dKESDOZ6J40bv439kxyn2WXEMuAQnQsKH fMh7Mbo72xrcBMXE2Yx+ouJkv+ou4EjkeTIBwoXb76VprIq5IPjflvcURrGUldg7 7QQu+/gv1jzab+1orrHd9SXLEA5TN0vDSdAl+ljxv2U4w35uaw8q0Er6vnXLczXq BYoIvKGcoIWpI1Yw33P6tvs93O7qpMo1cxRpebSmtCRxsPxXF5EcHkl9hoEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaAFEW3apmHoayrB+0bDLgjkFSNMwHwYDVR0j BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0 OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2 MUE3QTBCNjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrbbm22eo2i3uPfUOndlhbQGqtLLsPzOPl1 i8bvGhcrIRwdnBMgG8l6MCFCpd8RpL39FOxgisJwT6080lg1zxLiGFJnNrZ1oaOU Mni1cC3Z1DeRDJyVw8t8b2xuZ2xZE6Ss7YXVzLhfW4tg280Z9T7mJctLh+nrJwbE kBIIjZPMYZ6tYSmQgmTtk2968PC6ddgCopS2fFzR0KK1z40RGejHpbe+gE9JQkqX F9fDZfb/ZAtFBzGJAb8bOlreqRz6eAB8kKlQPyS0aNdLDV1totHd3J7Ep/S14JNc fTTUS/OaJf1aEM4EYmm9XHg/QknKcbVRSiEPapMOfIYm1zTwZHs= -----END CERTIFICATE-----Generated at Fri Jul 24 12:53:00 2026 by rpki-client