$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json) Hash identifier: vo/N5KNNtXvpUtUNwLi1/iHi2ZaEuK/FCyu6AIXE3Os= Subject key identifier: BD:61:D3:C1:15:63:B4:2F:E1:43:5E:01:88:BB:B7:96:26:75:4C:6A Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Certificate serial: 3D9FAFAC252E2A8DDFD8E15E297C4D762DD17E17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 12:49:08 +0000 Manifest this update: Wed 04 Nov 2026 12:44:08 +0000 Manifest next update: Thu 05 Nov 2026 13:49:08 +0000 Files and hashes: 1: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=) 2: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: 3XcVnBSMQ/iwnpFwl/iKe8uKer/+CJ//bMoJbhwiba0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9f:af:ac:25:2e:2a:8d:df:d8:e1:5e:29:7c:4d:76:2d:d1:7e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Validity Not Before: Nov 4 12:44:08 2026 GMT Not After : Nov 5 13:49:08 2026 GMT Subject: CN=BD61D3C11563B42FE1435E0188BBB79626754C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:da:6f:81:95:87:cc:47:81:8b:cc:f4:f1: 70:88:f4:9b:e4:00:87:24:14:aa:f4:ec:71:21:8f: 28:81:e1:ae:71:6c:1a:64:3f:6c:00:ce:e2:2a:ac: 35:72:4f:73:dd:de:c3:8c:fa:1d:82:3d:0f:28:87: 98:1d:5d:37:13:bb:ea:42:1d:cb:71:22:ac:84:a5: 4d:5a:db:34:0e:da:68:08:4a:3c:61:aa:c1:94:37: af:87:7f:55:80:ca:a3:f2:a8:2f:c5:19:c4:8d:d4: f9:ff:6e:47:f2:69:bd:4a:49:3b:62:3b:ec:dd:8d: 41:18:0a:4d:7f:2d:cc:a1:48:88:07:f3:5c:9d:86: e9:4e:94:c1:cb:aa:7d:6e:a8:d4:32:d0:1e:22:99: d3:e0:9d:d3:1c:cc:e7:f5:8c:de:22:f1:68:a0:15: 65:01:d3:71:48:d0:dd:0c:b4:a1:99:fd:ac:76:e6: 2c:64:e7:7a:43:65:1d:72:1a:3a:67:27:93:cd:55: 99:4f:c8:e4:93:df:53:b2:f2:8f:fb:bd:4e:31:87: 01:03:f5:f7:ce:9b:43:06:0d:0d:99:69:c3:a7:1a: fc:57:7e:7b:ac:68:d4:06:a1:17:3d:4d:48:db:a8: 45:73:3f:e3:30:21:5c:89:23:e8:be:00:30:3f:04: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:D3:C1:15:63:B4:2F:E1:43:5E:01:88:BB:B7:96:26:75:4C:6A X509v3 Authority Key Identifier: keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a5:7e:10:fc:97:df:cf:fe:80:90:5e:e7:26:a9:7d:5a:5d: f8:3e:50:79:1b:d4:e0:2d:32:c7:aa:46:8d:dc:d4:7a:e7:96: df:30:10:0f:cc:c9:16:03:63:1d:5d:fd:54:01:e7:30:38:f1: f1:32:cf:4c:a4:db:a1:0d:a5:39:bd:0e:a2:33:db:c0:ce:fa: fb:65:75:96:23:ce:31:01:fc:fc:81:77:08:59:22:06:85:75: 11:26:31:a2:de:3e:31:0d:0d:5c:d3:a5:30:10:40:bc:47:69: 6c:32:39:e6:96:b0:d5:2c:f9:67:00:8f:d3:ab:76:e3:bd:23: dd:63:d2:7d:13:2a:73:10:b0:dc:0f:59:62:be:a9:75:1d:0c: f8:2e:a4:a1:38:58:83:bb:6f:0d:a6:12:da:35:3f:4f:f3:fe: 39:aa:bc:3f:81:ea:65:aa:cf:22:ea:e5:1b:16:53:eb:fb:7f: 93:83:7f:b1:78:4e:f9:9b:7d:07:15:81:95:f6:18:46:b8:40: 69:ee:cf:ca:bd:c5:78:83:b6:54:cf:41:19:cd:15:38:4c:b6: 17:7e:e0:b9:b5:e1:e9:55:b3:62:fc:ad:d5:b9:d0:fb:ca:80: 91:9f:bb:84:e7:54:28:70:ed:93:e1:20:12:96:f4:eb:a6:27: fd:a5:3d:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZ+vrCUuKo3f2OFeKXxNdi3RfhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3 QTBCNjhGQzAeFw0yNjExMDQxMjQ0MDhaFw0yNjExMDUxMzQ5MDhaMDMxMTAvBgNV BAMTKEJENjFEM0MxMTU2M0I0MkZFMTQzNUUwMTg4QkJCNzk2MjY3NTRDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWd9pvgZWHzEeBi8z08XCI9Jvk AIckFKr07HEhjyiB4a5xbBpkP2wAzuIqrDVyT3Pd3sOM+h2CPQ8oh5gdXTcTu+pC HctxIqyEpU1a2zQO2mgISjxhqsGUN6+Hf1WAyqPyqC/FGcSN1Pn/bkfyab1KSTti O+zdjUEYCk1/LcyhSIgH81ydhulOlMHLqn1uqNQy0B4imdPgndMczOf1jN4i8Wig FWUB03FI0N0MtKGZ/ax25ixk53pDZR1yGjpnJ5PNVZlPyOST31Oy8o/7vU4xhwED 9ffOm0MGDQ2ZacOnGvxXfnusaNQGoRc9TUjbqEVzP+MwIVyJI+i+ADA/BNIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWHTwRVjtC/hQ14BiLu3liZ1TGowHwYDVR0j BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0 OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2 MUE3QTBCNjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHalfhD8l9/P/oCQXucmqX1aXfg+UHkb1OAt MseqRo3c1Hrnlt8wEA/MyRYDYx1d/VQB5zA48fEyz0yk26ENpTm9DqIz28DO+vtl dZYjzjEB/PyBdwhZIgaFdREmMaLePjENDVzTpTAQQLxHaWwyOeaWsNUs+WcAj9Or duO9I91j0n0TKnMQsNwPWWK+qXUdDPgupKE4WIO7bw2mEto1P0/z/jmqvD+B6mWq zyLq5RsWU+v7f5ODf7F4TvmbfQcVgZX2GEa4QGnuz8q9xXiDtlTPQRnNFThMthd+ 4Lm14elVs2L8rdW50PvKgJGfu4TnVChw7ZPhIBKW9OumJ/2lPfo= -----END CERTIFICATE-----Generated at Thu Nov 5 01:47:06 2026 by rpki-client