$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft (raw, json) Hash identifier: KaBOhFfK878oRix1qIQD6lGTd3YIGniT2LC7RA1oc0g= Subject key identifier: 12:6C:9D:87:9A:36:A7:CB:FF:DC:65:8C:17:11:0E:D7:0F:3A:83:32 Authority key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Certificate issuer: /CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Certificate serial: 77D03A2C35FC4EEE337EB9C7BCE9D5469B3A145D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:21:22 +0000 Manifest this update: Tue 02 Jun 2026 13:16:22 +0000 Manifest next update: Wed 03 Jun 2026 15:38:22 +0000 Files and hashes: 1: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl (hash: fW2mN6nEA3kV1MqRZ9pXJWuPUTBWirxUK/mFNXnTpbU=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: kwtt7EpQUJbrXcbmgOuUcwcY1a5KWp+ZWsZn+k8BzXA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d0:3a:2c:35:fc:4e:ee:33:7e:b9:c7:bc:e9:d5:46:9b:3a:14:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Validity Not Before: Jun 2 13:16:22 2026 GMT Not After : Jun 3 15:38:22 2026 GMT Subject: CN=126C9D879A36A7CBFFDC658C17110ED70F3A8332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:9d:07:f2:6b:40:fc:e3:89:89:2e:b4:88: 37:c8:1c:e8:ad:8c:58:df:49:94:f6:77:92:df:d7: af:32:8a:6d:d2:d0:8c:d8:29:80:5a:44:60:ea:23: b4:cd:1a:75:79:f0:aa:d2:f2:19:47:d1:90:47:a2: e8:6a:42:6f:b6:db:33:c3:5e:c9:0b:ab:3a:6f:05: 62:9b:13:6a:e1:90:97:c7:5d:65:7c:62:3a:9f:9b: 62:1e:3c:74:88:78:82:26:6b:34:9a:95:dc:5d:84: 9c:93:b7:b1:5c:ad:5d:6c:31:40:38:5a:59:10:36: 13:c1:98:3c:a5:b9:87:06:21:7d:a4:93:10:b6:d5: 51:bd:36:71:eb:af:6f:5c:be:58:d1:d9:2c:aa:c5: 64:c4:cb:45:d0:56:6e:6f:48:a7:5f:98:32:9c:ca: 73:9b:1c:75:f0:29:3b:cf:e2:d8:73:37:0d:ac:e9: d4:d8:53:9c:89:62:66:fc:f8:0a:17:28:92:27:55: 8a:af:73:14:bc:58:b9:12:e4:20:53:1b:ea:c0:27: 93:7f:79:b7:b6:95:98:c9:c9:93:ad:36:20:47:57: df:d6:38:14:c8:0d:4b:35:2b:59:fd:53:9e:ff:e3: 88:99:47:fc:40:cb:63:b3:9b:9b:4b:4f:d1:d9:b8: 26:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6C:9D:87:9A:36:A7:CB:FF:DC:65:8C:17:11:0E:D7:0F:3A:83:32 X509v3 Authority Key Identifier: keyid:19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d0:a2:73:c3:82:08:44:c6:d9:2c:05:2f:cf:a9:3a:60:67: c6:bd:47:fc:26:06:b3:b7:c6:06:f1:23:b9:dc:71:d0:b0:ea: 13:09:1f:71:a4:bb:a7:c9:7f:0d:27:75:a4:b2:1f:15:2d:c5: 0e:d6:b0:50:d1:a6:fe:41:93:7e:71:e5:ab:08:09:21:c7:8e: ac:af:d5:ce:fa:07:35:e4:59:33:29:2e:15:ac:07:5a:55:81: 28:af:28:f4:bc:85:11:26:a2:d6:ae:10:89:57:46:c9:9b:ae: d4:66:99:1a:49:57:12:0c:17:19:21:4e:bf:f4:ff:d4:ed:44: 52:84:e2:67:e5:ed:f2:ed:99:7f:dd:df:39:c5:15:2a:04:7f: c8:11:ca:e6:1d:b2:86:f6:61:e7:5a:ee:c9:73:9d:25:92:a2: 93:73:de:2d:9d:f7:55:32:b6:17:f8:87:3f:57:0a:89:2e:ce: 8f:af:97:cd:32:90:0b:e4:4a:4f:26:ce:bf:ff:e5:37:5c:b2: 32:d9:79:9d:ed:7f:94:c2:49:e2:b7:51:f0:46:9f:c6:80:aa: 05:2f:f4:9a:4d:c5:28:44:4a:fc:b8:3c:29:f8:e3:1f:48:bb: 44:1b:f7:7b:f0:9c:e1:e5:91:dc:a5:b6:fc:a5:b1:3f:0f:5f: 72:24:78:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9A6LDX8Tu4zfrnHvOnVRps6FF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3 QTBCNjhGQzAeFw0yNjA2MDIxMzE2MjJaFw0yNjA2MDMxNTM4MjJaMDMxMTAvBgNV BAMTKDEyNkM5RDg3OUEzNkE3Q0JGRkRDNjU4QzE3MTEwRUQ3MEYzQTgzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZbZ0H8mtA/OOJiS60iDfIHOit jFjfSZT2d5Lf168yim3S0IzYKYBaRGDqI7TNGnV58KrS8hlH0ZBHouhqQm+22zPD XskLqzpvBWKbE2rhkJfHXWV8Yjqfm2IePHSIeIImazSaldxdhJyTt7FcrV1sMUA4 WlkQNhPBmDyluYcGIX2kkxC21VG9NnHrr29cvljR2SyqxWTEy0XQVm5vSKdfmDKc ynObHHXwKTvP4thzNw2s6dTYU5yJYmb8+AoXKJInVYqvcxS8WLkS5CBTG+rAJ5N/ ebe2lZjJyZOtNiBHV9/WOBTIDUs1K1n9U57/44iZR/xAy2Ozm5tLT9HZuCZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEmydh5o2p8v/3GWMFxEO1w86gzIwHwYDVR0j BBgwFoAUGXsdyklbudr1ZarRLl42GnoLaPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNmNzZjNmQtZjg1MC00YzQ5LTg1NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0 OTVCQjlEQUY1NjVBQUQxMkU1RTM2MUE3QTBCNjhGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOTdCMURDQTQ5NUJCOURBRjU2NUFBRDEyRTVFMzYxQTdBMEI2 OEZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvMTk3QjFEQ0E0OTVCQjlEQUY1NjVBQUQxMkU1RTM2 MUE3QTBCNjhGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3QonPDgghExtksBS/PqTpgZ8a9R/wmBrO3 xgbxI7nccdCw6hMJH3Gku6fJfw0ndaSyHxUtxQ7WsFDRpv5Bk35x5asICSHHjqyv 1c76BzXkWTMpLhWsB1pVgSivKPS8hREmotauEIlXRsmbrtRmmRpJVxIMFxkhTr/0 /9TtRFKE4mfl7fLtmX/d3znFFSoEf8gRyuYdsob2Yeda7slznSWSopNz3i2d91Uy thf4hz9XCokuzo+vl80ykAvkSk8mzr//5TdcsjLZeZ3tf5TCSeK3UfBGn8aAqgUv 9JpNxShESvy4PCn44x9Iu0Qb93vwnOHlkdyltvylsT8PX3IkeFA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:47:11 2026 by rpki-client