$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json) Hash identifier: wpBRPSqWieJgZG4d1Ir+O7NalSbMidS029lkxCwt550= Subject key identifier: 8F:70:94:7C:A8:F3:4B:9D:30:8E:E2:5B:4B:58:4C:37:10:F7:F6:BA Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Certificate serial: 7C02C0BDCF91CBE5930A9A481675430EEA356230 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 02:44:02 +0000 Manifest this update: Thu 24 Sep 2026 02:39:02 +0000 Manifest next update: Fri 25 Sep 2026 04:32:02 +0000 Files and hashes: 1: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: WDiaq7qmODlKvjP7+Vlv11xS0gDmXVf81/FhC3R+a6k=) 2: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=) 3: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=) 4: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=) 5: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:02:c0:bd:cf:91:cb:e5:93:0a:9a:48:16:75:43:0e:ea:35:62:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Validity Not Before: Sep 24 02:39:02 2026 GMT Not After : Sep 25 04:32:02 2026 GMT Subject: CN=8F70947CA8F34B9D308EE25B4B584C3710F7F6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:7a:cd:09:55:04:fb:77:8c:fd:a8:7a:4a: 38:88:9b:c3:de:49:e4:99:8b:99:bd:e6:41:5f:de: 28:b9:98:57:97:37:2d:09:8c:fe:63:fc:c7:cd:d8: 87:1a:3c:6b:ec:bd:81:20:af:88:50:aa:a0:4d:37: 98:c8:3a:68:0d:e6:9e:4a:94:3d:f6:5c:ac:5c:fe: 89:20:38:c1:79:6b:eb:98:05:1a:41:d2:b8:48:a0: f5:c2:46:41:58:c0:b0:0d:c2:92:8f:91:b9:fd:eb: 98:56:b2:6c:d8:e7:a0:0b:a0:91:c3:39:37:c1:4e: 1e:8f:07:db:c7:79:a4:39:da:23:89:61:de:5f:2e: 6f:1c:6c:88:ec:c8:6d:56:b3:bb:e4:45:59:6a:e3: d3:dc:72:18:2f:fe:4d:50:35:73:23:42:a1:a3:06: 2f:cb:80:9c:1f:31:3b:49:d9:83:4b:c7:0c:ed:9e: ef:ac:4e:8a:e1:ee:e9:94:01:79:66:50:fb:30:15: 1a:1e:81:a8:81:fd:dc:6c:a7:40:fb:06:94:99:09: 63:4c:8d:5a:ae:ef:7e:f6:b6:5a:99:ae:a1:18:62: c4:85:ff:f5:b5:7d:58:dc:71:1d:7c:42:46:54:0e: c5:c5:e0:1c:26:fa:82:85:86:2d:2e:29:d5:35:22: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:70:94:7C:A8:F3:4B:9D:30:8E:E2:5B:4B:58:4C:37:10:F7:F6:BA X509v3 Authority Key Identifier: keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:61:9e:75:d4:a4:db:8f:74:cc:ca:d3:1f:30:cc:dd:73:1b: 81:89:1f:3c:27:c5:b5:b2:b4:56:09:7f:b1:c3:19:6f:7a:4d: 71:8d:74:a8:e8:6d:65:8a:29:db:e8:de:08:0c:e8:ef:9d:f1: 0f:af:56:70:05:a4:8b:f7:b8:38:c2:eb:13:72:03:08:97:cf: fb:c2:cc:27:75:36:0b:25:d7:84:b2:62:5e:32:d5:ec:6c:a9: a3:df:e3:87:5f:e0:71:03:08:5f:9b:21:ef:12:b6:c7:8d:6e: 43:30:ad:28:09:5b:23:0b:0e:dc:c3:a6:9b:bf:0c:3d:8b:7e: 66:34:d4:58:f0:e4:71:77:c9:82:69:9c:bf:f7:0d:b2:79:bc: 0a:56:01:17:99:7c:2c:4d:f2:4b:7c:5a:71:3f:13:03:a7:35: 11:d1:9e:ec:14:f3:aa:17:88:6e:44:0b:2d:90:71:21:cf:67: f8:f7:8b:1d:f2:75:29:bd:2c:43:70:73:6e:86:db:de:4c:cf: b8:9d:ad:ce:81:69:7e:90:d2:47:37:cf:84:d1:ed:a4:47:44: 70:dd:3e:dd:27:6b:af:dc:52:09:e9:27:f2:79:80:06:59:76: 34:7e:86:ef:a5:c2:4f:60:2f:5b:b1:cf:fc:04:6d:a6:f0:96: c1:8d:f6:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfALAvc+Ry+WTCppIFnVDDuo1YjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVG MTg2MzYzQTAeFw0yNjA5MjQwMjM5MDJaFw0yNjA5MjUwNDMyMDJaMDMxMTAvBgNV BAMTKDhGNzA5NDdDQThGMzRCOUQzMDhFRTI1QjRCNTg0QzM3MTBGN0Y2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmF3rNCVUE+3eM/ah6SjiIm8Pe SeSZi5m95kFf3ii5mFeXNy0JjP5j/MfN2IcaPGvsvYEgr4hQqqBNN5jIOmgN5p5K lD32XKxc/okgOMF5a+uYBRpB0rhIoPXCRkFYwLANwpKPkbn965hWsmzY56ALoJHD OTfBTh6PB9vHeaQ52iOJYd5fLm8cbIjsyG1Ws7vkRVlq49Pcchgv/k1QNXMjQqGj Bi/LgJwfMTtJ2YNLxwztnu+sTorh7umUAXlmUPswFRoegaiB/dxsp0D7BpSZCWNM jVqu7372tlqZrqEYYsSF//W1fVjccR18QkZUDsXF4Bwm+oKFhi0uKdU1IjvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3CUfKjzS50wjuJbS1hMNxD39rowHwYDVR0j BBgwFoAUaXsMnjZ+k/QqZpXZj7ag9fGGNjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5NzNiZWItNjZiYS00OGJjLTkzNzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUz NjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVGMTg2MzYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTdCMEM5RTM2N0U5M0Y0MkE2Njk1RDk4RkI2QTBGNUYxODYz NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEw RjVGMTg2MzYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJhnnXUpNuPdMzK0x8wzN1zG4GJHzwnxbWy tFYJf7HDGW96TXGNdKjobWWKKdvo3ggM6O+d8Q+vVnAFpIv3uDjC6xNyAwiXz/vC zCd1Ngsl14SyYl4y1exsqaPf44df4HEDCF+bIe8StseNbkMwrSgJWyMLDtzDppu/ DD2LfmY01Fjw5HF3yYJpnL/3DbJ5vApWAReZfCxN8kt8WnE/EwOnNRHRnuwU86oX iG5ECy2QcSHPZ/j3ix3ydSm9LENwc26G295Mz7idrc6BaX6Q0kc3z4TR7aRHRHDd Pt0na6/cUgnpJ/J5gAZZdjR+hu+lwk9gL1uxz/wEbabwlsGN9i4= -----END CERTIFICATE-----Generated at Thu Sep 24 12:54:28 2026 by rpki-client