$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json) Hash identifier: BLy3LRSHPe7S9eybQjEw6fNKL8+5P1g78k5LHy+4TRc= Subject key identifier: D2:FC:C8:59:40:23:94:E6:2C:73:3C:C8:B3:F5:00:F9:71:B8:37:53 Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Certificate serial: 42D382A25CD2C45E2210BEA033B0DA4775A2F40F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft Manifest number: CA Signing time: Thu 01 Oct 2026 18:18:25 +0000 Manifest this update: Thu 01 Oct 2026 18:13:25 +0000 Manifest next update: Fri 02 Oct 2026 19:09:25 +0000 Files and hashes: 1: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: 5dVpcktiRD3vbZAaUSS+kUUmcQrMPvKgYEd7S9LFx2o=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 11:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d3:82:a2:5c:d2:c4:5e:22:10:be:a0:33:b0:da:47:75:a2:f4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Validity Not Before: Oct 1 18:13:25 2026 GMT Not After : Oct 2 19:09:25 2026 GMT Subject: CN=D2FCC859402394E62C733CC8B3F500F971B83753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:e6:f5:c3:0b:f5:f5:7e:cf:6b:f2:a7:cd: 12:e5:21:1d:4f:08:89:61:c4:ed:f3:3a:c2:95:87: 08:aa:6d:5d:d6:8e:b8:80:42:51:22:19:1d:7f:32: d2:8f:be:0e:21:ce:31:83:be:55:18:43:06:96:1a: b9:6b:ee:20:1a:79:0e:c5:79:50:97:5b:82:05:87: d8:5c:06:69:4c:66:f5:57:7e:f9:7e:a0:9f:c5:83: f2:13:86:62:a0:5a:b7:52:d0:e4:14:9f:d2:c2:cf: e0:df:ee:f4:91:90:a1:f1:81:c7:b1:0d:e8:ea:0b: 07:99:89:3c:26:d3:b2:55:5b:55:b2:c6:5e:62:5c: 94:a4:81:f9:be:77:6e:33:ca:e2:73:28:91:3b:9f: 17:91:7a:76:87:88:02:7c:76:2d:68:d7:71:21:09: 35:35:3f:5b:cd:ac:19:60:2b:26:12:f2:5b:30:70: 96:29:33:39:bf:ef:08:68:50:bc:b9:24:d5:fe:76: 85:9a:2e:11:60:34:5c:3b:f1:21:36:b8:4e:1c:82: cf:7d:64:2a:7f:a9:9d:78:de:e0:69:cf:c2:3c:ac: 97:7d:3f:1b:d2:e8:e7:d4:a8:32:3f:43:34:ff:be: c1:a5:77:dd:92:f1:36:2c:e5:c4:95:c5:08:d6:0e: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FC:C8:59:40:23:94:E6:2C:73:3C:C8:B3:F5:00:F9:71:B8:37:53 X509v3 Authority Key Identifier: keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cc:3d:ef:d1:6c:8d:35:4b:c8:95:b9:f9:e5:d7:4d:e7:8d: 04:d7:3a:3a:80:b4:00:e1:ad:4e:87:73:d9:fd:d0:10:da:fe: b7:73:e8:d1:fd:a4:7e:ed:40:b8:b0:52:a9:21:6b:0b:87:df: 17:d5:be:27:e3:cf:f7:06:88:b3:30:07:fa:39:52:50:5a:c5: 71:6c:6b:ed:c9:7e:3f:6f:bf:01:2e:69:68:88:a4:cc:d0:5e: a6:85:73:6f:9a:0b:20:43:b9:a7:5e:2d:cb:81:f2:cb:17:be: b6:45:b6:50:79:c9:c0:c0:78:08:ac:9a:ab:4e:45:58:18:36: 79:71:6b:99:af:7f:ce:b5:c1:dc:29:58:fb:44:0c:a7:28:0d: 38:c8:90:05:9c:6d:73:61:54:7b:a6:94:27:4e:fa:63:ff:af: 97:df:02:77:50:b7:01:63:0c:c4:2d:28:97:be:d6:2c:62:9f: c8:d6:47:32:fc:71:ad:8d:ae:29:1f:50:af:bb:75:78:a6:6c: 48:c0:99:6f:33:4d:b0:9a:13:6c:6d:f8:2b:e4:cd:95:32:fa: 06:0a:5d:2a:a9:44:56:7b:a9:04:b6:ff:f6:0c:85:d5:d1:da: 0b:3e:67:f2:20:4f:93:70:fa:71:6b:5f:67:78:55:b3:1d:db: 9a:f6:d3:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtOColzSxF4iEL6gM7DaR3Wi9A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3 QTBCNjhGQzAeFw0yNjEwMDExODEzMjVaFw0yNjEwMDIxOTA5MjVaMDMxMTAvBgNV BAMTKEQyRkNDODU5NDAyMzk0RTYyQzczM0NDOEIzRjUwMEY5NzFCODM3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSub1wwv19X7Pa/KnzRLlIR1P CIlhxO3zOsKVhwiqbV3WjriAQlEiGR1/MtKPvg4hzjGDvlUYQwaWGrlr7iAaeQ7F eVCXW4IFh9hcBmlMZvVXfvl+oJ/Fg/IThmKgWrdS0OQUn9LCz+Df7vSRkKHxgcex DejqCweZiTwm07JVW1Wyxl5iXJSkgfm+d24zyuJzKJE7nxeRenaHiAJ8di1o13Eh CTU1P1vNrBlgKyYS8lswcJYpMzm/7whoULy5JNX+doWaLhFgNFw78SE2uE4cgs99 ZCp/qZ143uBpz8I8rJd9PxvS6OfUqDI/QzT/vsGld92S8TYs5cSVxQjWDlKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vzIWUAjlOYsczzIs/UA+XG4N1MwHwYDVR0j BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0 OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2 MUE3QTBCNjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDMPe/RbI01S8iVufnl103njQTXOjqAtADh rU6Hc9n90BDa/rdz6NH9pH7tQLiwUqkhawuH3xfVvifjz/cGiLMwB/o5UlBaxXFs a+3Jfj9vvwEuaWiIpMzQXqaFc2+aCyBDuadeLcuB8ssXvrZFtlB5ycDAeAismqtO RVgYNnlxa5mvf861wdwpWPtEDKcoDTjIkAWcbXNhVHumlCdO+mP/r5ffAndQtwFj DMQtKJe+1ixin8jWRzL8ca2NrikfUK+7dXimbEjAmW8zTbCaE2xt+CvkzZUy+gYK XSqpRFZ7qQS2//YMhdXR2gs+Z/IgT5Nw+nFrX2d4VbMd25r20zw= -----END CERTIFICATE-----Generated at Fri Oct 2 09:00:02 2026 by rpki-client