$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json) Hash identifier: SK2X1097cCdhz5QGgVP6s9UBYOO/8MFZ+U7cIDQifbU= Subject key identifier: 3D:E0:60:0C:34:1A:E6:0A:8D:B8:86:A7:EC:82:E0:44:A8:C5:F8:EB Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Certificate serial: 5C6B2EE87AEC5847DB7260BAC40A5523D3B3E691 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:20:15 +0000 Manifest this update: Mon 20 Jul 2026 19:15:15 +0000 Manifest next update: Tue 21 Jul 2026 19:22:15 +0000 Files and hashes: 1: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: CLVBd1ztfrkfAuXDWfyjJFcnvl86bO7Dl7cEpPnZn1E=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6b:2e:e8:7a:ec:58:47:db:72:60:ba:c4:0a:55:23:d3:b3:e6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Validity Not Before: Jul 20 19:15:15 2026 GMT Not After : Jul 21 19:22:15 2026 GMT Subject: CN=3DE0600C341AE60A8DB886A7EC82E044A8C5F8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:55:20:2f:60:14:5c:1f:53:1c:42:90:36: 9d:54:98:17:77:be:4a:6e:3b:a1:6b:ca:b9:05:9f: a9:8e:ba:33:a0:e2:f0:c7:b9:53:eb:41:e7:7c:2a: 65:ae:8b:0e:f4:b2:9d:77:bf:ed:94:5f:d0:10:96: 01:14:3d:8f:1c:b0:8b:b9:c6:27:90:1b:ae:c1:be: 68:d3:81:31:44:9e:75:7e:02:83:e7:1a:d1:86:28: 61:af:8e:0f:c7:f9:c3:84:11:87:03:e4:87:55:d3: da:73:8e:c8:66:80:30:e5:c6:8e:e5:68:b1:91:a9: a8:3b:47:71:8d:af:ec:c2:1a:99:91:cd:81:03:0c: ae:70:c2:02:aa:1e:dd:72:a8:bb:f2:3b:28:5a:d1: 3b:ea:14:32:df:ce:b6:e9:a0:62:2c:9e:b8:9e:8c: 3a:71:89:ab:df:c4:73:98:c2:68:4a:7e:f3:ce:e8: 66:d0:b3:4f:7b:ea:50:a5:18:05:c6:a1:bb:bd:d6: a8:15:86:db:ed:09:ae:21:c8:d7:a6:5d:26:a7:ce: ee:24:14:7f:91:1f:b4:c2:9a:a9:3a:d6:51:fe:72: fc:8f:3a:d3:25:67:54:b6:a1:46:f2:45:78:28:0c: 65:eb:28:e1:eb:69:6a:b2:f1:fa:b8:f9:f0:a3:5e: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:60:0C:34:1A:E6:0A:8D:B8:86:A7:EC:82:E0:44:A8:C5:F8:EB X509v3 Authority Key Identifier: keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:87:7e:56:ea:52:71:7e:bd:41:12:0d:f3:9f:a8:48:5f:d4: 22:08:51:ea:17:8b:ce:9e:fb:1c:09:88:4c:12:ec:e1:02:9e: 61:bf:4b:df:36:68:b4:3e:d6:65:50:db:01:74:b3:59:4a:f5: c5:ce:6b:0c:47:ca:fd:ba:aa:6b:4a:83:0d:06:63:9a:ca:ac: bf:19:60:0c:35:9c:c6:c8:92:29:de:c2:c1:d8:b3:b4:1d:2e: f4:85:d2:47:90:84:13:9e:e7:0b:41:6e:29:73:e9:2d:39:d7: 6b:58:c4:ea:8c:14:64:00:f2:39:c6:3c:01:17:53:f2:d7:13: c4:7c:14:74:0d:30:7c:d9:78:7f:64:bc:97:b2:66:04:25:88: d6:39:e8:08:64:ef:fd:e4:9b:a1:94:fa:58:3b:10:71:69:4b: a5:d9:75:de:51:60:c0:ff:80:5c:4e:bf:8c:5c:91:a3:89:a1: 9a:67:1e:6d:67:c6:4d:ff:7c:37:49:f0:6e:b2:d9:5b:71:0b: bf:1b:2c:53:31:41:ed:86:fe:d6:b7:9b:25:64:87:6b:01:82: c5:b6:17:fd:d5:2e:09:1a:ec:cf:5d:01:57:f3:59:c2:21:21: 83:d1:f4:fa:aa:26:a2:63:e6:12:e2:4f:02:18:8e:56:f9:03: 61:b9:04:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGsu6HrsWEfbcmC6xApVI9Oz5pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3 QTBCNjhGQzAeFw0yNjA3MjAxOTE1MTVaFw0yNjA3MjExOTIyMTVaMDMxMTAvBgNV BAMTKDNERTA2MDBDMzQxQUU2MEE4REI4ODZBN0VDODJFMDQ0QThDNUY4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDFUgL2AUXB9THEKQNp1UmBd3 vkpuO6FryrkFn6mOujOg4vDHuVPrQed8KmWuiw70sp13v+2UX9AQlgEUPY8csIu5 xieQG67BvmjTgTFEnnV+AoPnGtGGKGGvjg/H+cOEEYcD5IdV09pzjshmgDDlxo7l aLGRqag7R3GNr+zCGpmRzYEDDK5wwgKqHt1yqLvyOyha0TvqFDLfzrbpoGIsnrie jDpxiavfxHOYwmhKfvPO6GbQs0976lClGAXGobu91qgVhtvtCa4hyNemXSanzu4k FH+RH7TCmqk61lH+cvyPOtMlZ1S2oUbyRXgoDGXrKOHraWqy8fq4+fCjXqsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeBgDDQa5gqNuIan7ILgRKjF+OswHwYDVR0j BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0 OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2 MUE3QTBCNjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWHflbqUnF+vUESDfOfqEhf1CIIUeoXi86e +xwJiEwS7OECnmG/S982aLQ+1mVQ2wF0s1lK9cXOawxHyv26qmtKgw0GY5rKrL8Z YAw1nMbIkinewsHYs7QdLvSF0keQhBOe5wtBbilz6S0512tYxOqMFGQA8jnGPAEX U/LXE8R8FHQNMHzZeH9kvJeyZgQliNY56Ahk7/3km6GU+lg7EHFpS6XZdd5RYMD/ gFxOv4xckaOJoZpnHm1nxk3/fDdJ8G6y2VtxC78bLFMxQe2G/ta3myVkh2sBgsW2 F/3VLgka7M9dAVfzWcIhIYPR9PqqJqJj5hLiTwIYjlb5A2G5BIY= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:48 2026 by rpki-client