$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json) Hash identifier: F85cvs6320DkLo/tHFJQHlDNRUQPPMuG/VC50u/3Eqg= Subject key identifier: 4F:FF:61:05:BE:DD:79:C9:84:F2:D6:FC:A5:22:4D:97:11:73:EC:77 Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Certificate serial: 7FDBA75960C6F38705C5793F3081E05ABEBDCD46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:41:17 +0000 Manifest this update: Fri 24 Jul 2026 01:36:17 +0000 Manifest next update: Sat 25 Jul 2026 03:49:17 +0000 Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=) 2: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=) 3: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=) 4: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=) 5: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: OAk42Z8ybaPpDMOBiUzra2sAb42+0DPkoU85j7xFl7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:db:a7:59:60:c6:f3:87:05:c5:79:3f:30:81:e0:5a:be:bd:cd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Validity Not Before: Jul 24 01:36:17 2026 GMT Not After : Jul 25 03:49:17 2026 GMT Subject: CN=4FFF6105BEDD79C984F2D6FCA5224D971173EC77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:bd:72:05:74:a0:0b:45:f5:52:3a:43:c6: 94:77:ea:2c:99:d5:1a:b5:2c:ec:0c:0f:a0:1a:83: e4:52:5c:68:62:3f:2c:a0:74:d7:64:0c:09:34:10: 23:92:af:75:0a:eb:d0:f5:76:ac:24:bc:71:af:86: 14:08:2c:2f:50:08:a9:4a:af:9b:ca:bb:47:ef:70: 03:fa:c1:6c:dd:a6:a0:f5:65:64:01:c6:ac:b7:10: 8e:0e:eb:75:34:fa:4a:b6:04:bd:7e:58:dd:c9:cf: 0d:d9:03:8c:c5:17:e7:36:6e:5e:b5:0d:ca:2b:5c: 55:57:2c:c6:c2:fc:c3:06:ab:e2:37:eb:7f:02:8c: 9a:04:b9:3d:c7:5c:d4:65:a0:48:bd:ed:82:c9:00: f6:71:6b:09:c7:cd:56:db:36:20:e2:03:02:2f:c6: 6e:c0:b0:70:71:20:04:3d:8c:f8:5c:9f:8d:39:63: 34:15:38:9c:01:df:4d:e8:9d:ef:8f:73:62:bd:4c: 9b:c5:66:ff:6c:4b:70:e9:60:cf:d5:d5:42:e4:8c: 6a:f6:99:c5:4d:51:4d:1d:c4:7e:e3:cd:31:b7:30: 1a:54:48:18:51:20:7a:73:0b:2a:5d:ab:26:b4:19: d5:50:7b:fa:c4:a0:c3:0f:46:3d:94:07:02:0f:9d: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FF:61:05:BE:DD:79:C9:84:F2:D6:FC:A5:22:4D:97:11:73:EC:77 X509v3 Authority Key Identifier: keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b9:2b:46:d1:f4:d9:09:89:b8:60:9d:7a:0f:13:05:3b:84: 6f:74:9a:63:28:20:44:54:91:e9:9c:47:83:da:59:0b:e8:f4: 4e:66:59:92:bb:e0:1c:9a:11:c6:50:c9:8d:8c:ef:72:3f:86: 31:ba:f9:70:e9:9b:92:d9:3a:78:f3:ed:9e:cf:95:72:ad:8f: 94:33:65:0e:d6:7b:eb:e5:57:0b:dd:fb:32:db:8f:97:cf:e0: 8e:82:a7:3a:ba:fe:4f:5a:89:13:a5:a3:30:be:8a:ae:fd:d8: 23:ad:ab:ef:64:cc:89:69:b8:2a:aa:83:27:99:74:6d:c7:d6: aa:36:08:fc:69:57:d7:72:ee:46:56:82:10:89:8a:59:8d:db: 15:63:ea:e2:60:98:0c:c1:46:6b:17:5c:61:8e:62:88:45:e3: 64:7f:51:d5:75:0c:f1:e3:03:8d:81:28:2f:48:56:00:19:64: 18:dd:48:85:90:5c:e9:2e:78:cd:97:85:4b:9c:15:bf:ab:84: b5:db:1f:6e:66:5b:08:a5:bb:cd:2f:48:81:8c:33:68:31:76: 5a:44:b6:68:3a:b9:56:56:1c:01:a2:89:4e:d3:0e:ef:51:1b: f9:1b:cd:01:6d:11:64:84:15:ba:1e:ba:20:c7:6a:c6:ae:be: 31:33:b5:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9unWWDG84cFxXk/MIHgWr69zUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVG MTg2MzYzQTAeFw0yNjA3MjQwMTM2MTdaFw0yNjA3MjUwMzQ5MTdaMDMxMTAvBgNV BAMTKDRGRkY2MTA1QkVERDc5Qzk4NEYyRDZGQ0E1MjI0RDk3MTE3M0VDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvL1yBXSgC0X1UjpDxpR36iyZ 1Rq1LOwMD6Aag+RSXGhiPyygdNdkDAk0ECOSr3UK69D1dqwkvHGvhhQILC9QCKlK r5vKu0fvcAP6wWzdpqD1ZWQBxqy3EI4O63U0+kq2BL1+WN3Jzw3ZA4zFF+c2bl61 DcorXFVXLMbC/MMGq+I3638CjJoEuT3HXNRloEi97YLJAPZxawnHzVbbNiDiAwIv xm7AsHBxIAQ9jPhcn405YzQVOJwB303one+Pc2K9TJvFZv9sS3DpYM/V1ULkjGr2 mcVNUU0dxH7jzTG3MBpUSBhRIHpzCypdqya0GdVQe/rEoMMPRj2UBwIPnZ39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT/9hBb7decmE8tb8pSJNlxFz7HcwHwYDVR0j BBgwFoAUaXsMnjZ+k/QqZpXZj7ag9fGGNjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5NzNiZWItNjZiYS00OGJjLTkzNzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUz NjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVGMTg2MzYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTdCMEM5RTM2N0U5M0Y0MkE2Njk1RDk4RkI2QTBGNUYxODYz NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEw RjVGMTg2MzYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO5K0bR9NkJibhgnXoPEwU7hG90mmMoIERU kemcR4PaWQvo9E5mWZK74ByaEcZQyY2M73I/hjG6+XDpm5LZOnjz7Z7PlXKtj5Qz ZQ7We+vlVwvd+zLbj5fP4I6Cpzq6/k9aiROlozC+iq792COtq+9kzIlpuCqqgyeZ dG3H1qo2CPxpV9dy7kZWghCJilmN2xVj6uJgmAzBRmsXXGGOYohF42R/UdV1DPHj A42BKC9IVgAZZBjdSIWQXOkueM2XhUucFb+rhLXbH25mWwilu80vSIGMM2gxdlpE tmg6uVZWHAGiiU7TDu9RG/kbzQFtEWSEFboeuiDHasauvjEztY0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:39:30 2026 by rpki-client