$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft File: D697630349B220DF8CC6B12F2E1478386BFA976D.mft (raw, json) Hash identifier: quNQc6pPyDQoIZLlhTssaI/pBr0fXavNtlX1FuVn8AA= Subject key identifier: 36:87:57:D8:67:D7:AB:D6:92:7D:3B:BC:21:A7:23:64:0A:65:0B:D9 Authority key identifier: D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D Certificate issuer: /CN=D697630349B220DF8CC6B12F2E1478386BFA976D Certificate serial: 694CE0A1CE4839BCE3A58DCC5E234C8874BF6087 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 22:56:14 +0000 Manifest this update: Mon 02 Nov 2026 22:51:14 +0000 Manifest next update: Wed 04 Nov 2026 01:50:14 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: 1CtwSZrdYmNAUlXmKjVFOdbMEpxyH9OiC6UXCxpqUZc=) 2: D697630349B220DF8CC6B12F2E1478386BFA976D.crl (hash: pyEZt6CCtqbkUIdy9tf4p485KKV7gi1EQoZFdP9Fm/U=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: CWiHRINpO5Qg8fxSyLkjZNquyJPum3NXHas+YJralQU=) 4: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: 6s/DgpFrpCjXe3mW18eXcfiVavJdVfhHeAPZDvP88Kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 01:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4c:e0:a1:ce:48:39:bc:e3:a5:8d:cc:5e:23:4c:88:74:bf:60:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D697630349B220DF8CC6B12F2E1478386BFA976D Validity Not Before: Nov 2 22:51:14 2026 GMT Not After : Nov 4 01:50:14 2026 GMT Subject: CN=368757D867D7ABD6927D3BBC21A723640A650BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:22:85:f8:d7:66:55:25:8d:97:eb:0f:26: 64:d1:57:bb:9d:f4:b8:9f:b7:f3:f0:d4:12:7d:63: 84:81:73:d2:66:a8:42:ef:1d:79:a3:e9:30:97:ed: 2a:68:95:2a:86:ac:0f:f8:04:2b:63:d6:d4:dd:ac: cf:3c:1f:de:dd:08:d6:57:e1:3c:a3:d1:ec:17:1a: 36:49:31:0d:2b:3a:42:cd:37:5d:1f:fb:3a:3d:2e: aa:50:68:2b:b3:9c:2d:a7:26:b8:ae:d5:a3:c2:9a: 12:52:97:df:34:61:48:0c:67:05:29:14:7c:21:41: cf:3c:e2:9c:ec:1b:33:19:ee:df:4a:8a:3d:11:3a: cf:91:25:69:b2:28:a5:9d:76:bb:ff:e6:aa:88:f8: 54:4f:ae:3b:1d:c5:8b:15:d9:c6:e2:98:44:b3:c0: 58:b6:49:5c:e9:a2:7c:22:44:5e:0e:bf:37:8b:c2: 6d:68:53:fe:0e:4f:60:42:b3:02:d9:48:50:85:65: 76:10:76:83:f9:ce:b8:b2:7c:db:83:29:43:c5:2a: 91:79:09:f1:fb:d9:e0:f3:50:53:b2:2d:10:ef:38: 80:46:d2:30:a6:9c:b0:c1:51:fe:e7:84:0c:b9:1b: fe:a0:35:45:20:1d:3a:4e:e6:98:38:d3:61:67:31: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:87:57:D8:67:D7:AB:D6:92:7D:3B:BC:21:A7:23:64:0A:65:0B:D9 X509v3 Authority Key Identifier: keyid:D6:97:63:03:49:B2:20:DF:8C:C6:B1:2F:2E:14:78:38:6B:FA:97:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D697630349B220DF8CC6B12F2E1478386BFA976D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/D697630349B220DF8CC6B12F2E1478386BFA976D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5f:76:0c:12:72:a1:ad:e9:44:a2:57:85:f5:20:2d:d3:39: 00:e8:79:22:6b:55:9e:52:16:cd:5a:01:ac:92:04:f3:e8:6b: 12:d6:d6:89:7e:4e:e7:b0:a0:48:0a:d8:ac:5b:4f:c6:ec:5b: e4:0a:5b:e7:ed:83:39:1c:3d:fa:1f:27:05:98:ca:ac:3b:a7: c5:e1:7d:39:fc:65:75:d2:62:d6:e2:34:a7:d6:bf:fe:a6:61: bc:5f:61:13:f5:e5:00:20:c4:ed:d4:21:19:f6:10:14:b6:2c: 4c:4a:0e:dc:0b:2b:91:d9:a5:71:76:ca:a3:af:24:f2:f1:44: 48:55:22:1c:7f:75:13:48:02:0a:bf:e0:02:5f:73:1d:51:60: 76:14:35:75:e1:88:e6:d9:b0:b3:49:d8:5b:7a:1d:d1:47:04: c8:a4:8b:a1:8c:18:98:d4:83:b5:b5:52:de:bc:9a:72:ce:50: f2:38:a9:5e:45:8a:7a:95:41:86:c9:ef:be:5b:cd:5b:29:85: 7d:8d:51:a1:80:f9:9b:f7:03:c5:4d:e1:cd:34:a8:69:9c:ce: eb:df:8b:4d:fd:05:08:ce:67:ce:97:d6:87:75:99:1f:a0:e9: e9:7a:0f:96:48:0b:9d:98:3f:53:56:a3:30:b1:cf:5a:b1:15: 05:57:71:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUzgoc5IObzjpY3MXiNMiHS/YIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2 QkZBOTc2RDAeFw0yNjExMDIyMjUxMTRaFw0yNjExMDQwMTUwMTRaMDMxMTAvBgNV BAMTKDM2ODc1N0Q4NjdEN0FCRDY5MjdEM0JCQzIxQTcyMzY0MEE2NTBCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBiKF+NdmVSWNl+sPJmTRV7ud 9Lift/Pw1BJ9Y4SBc9JmqELvHXmj6TCX7SpolSqGrA/4BCtj1tTdrM88H97dCNZX 4Tyj0ewXGjZJMQ0rOkLNN10f+zo9LqpQaCuznC2nJriu1aPCmhJSl980YUgMZwUp FHwhQc884pzsGzMZ7t9Kij0ROs+RJWmyKKWddrv/5qqI+FRPrjsdxYsV2cbimESz wFi2SVzponwiRF4OvzeLwm1oU/4OT2BCswLZSFCFZXYQdoP5zriyfNuDKUPFKpF5 CfH72eDzUFOyLRDvOIBG0jCmnLDBUf7nhAy5G/6gNUUgHTpO5pg402FnMXSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNodX2GfXq9aSfTu8IacjZAplC9kwHwYDVR0j BBgwFoAU1pdjA0myIN+MxrEvLhR4OGv6l20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE5OGY3ZjgtZTcxNS00Yjc5LWFmMzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0 OUIyMjBERjhDQzZCMTJGMkUxNDc4Mzg2QkZBOTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENjk3NjMwMzQ5QjIyMERGOENDNkIxMkYyRTE0NzgzODZCRkE5 NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvRDY5NzYzMDM0OUIyMjBERjhDQzZCMTJGMkUxNDc4 Mzg2QkZBOTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFfdgwScqGt6USiV4X1IC3TOQDoeSJrVZ5S Fs1aAaySBPPoaxLW1ol+TuewoEgK2KxbT8bsW+QKW+ftgzkcPfofJwWYyqw7p8Xh fTn8ZXXSYtbiNKfWv/6mYbxfYRP15QAgxO3UIRn2EBS2LExKDtwLK5HZpXF2yqOv JPLxREhVIhx/dRNIAgq/4AJfcx1RYHYUNXXhiObZsLNJ2Ft6HdFHBMiki6GMGJjU g7W1Ut68mnLOUPI4qV5FinqVQYbJ775bzVsphX2NUaGA+Zv3A8VN4c00qGmczuvf i039BQjOZ86X1od1mR+g6el6D5ZIC52YP1NWozCxz1qxFQVXcSw= -----END CERTIFICATE-----Generated at Tue Nov 3 15:23:37 2026 by rpki-client