$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json) Hash identifier: USIozXYXIe9OtE4OUD4Zw+RRgKnOTmwBEKFL9du+GCU= Subject key identifier: 3B:F2:E1:2F:C7:80:83:F5:33:4A:9D:72:CD:09:8D:4C:A3:65:9A:16 Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Certificate serial: 58EF6B87B9C7A6348D8F7B7D3209767E79300035 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 21:32:47 +0000 Manifest this update: Mon 20 Jul 2026 21:27:47 +0000 Manifest next update: Wed 22 Jul 2026 00:34:47 +0000 Files and hashes: 1: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: VADHTEJ8qieX0mxeZpSsOiCXdX9mweeRxTnwHDSQ6wI=) 2: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=) 3: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=) 4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=) 5: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ef:6b:87:b9:c7:a6:34:8d:8f:7b:7d:32:09:76:7e:79:30:00:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A Validity Not Before: Jul 20 21:27:47 2026 GMT Not After : Jul 22 00:34:47 2026 GMT Subject: CN=3BF2E12FC78083F5334A9D72CD098D4CA3659A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:5f:a4:65:9f:bf:9d:77:89:8e:38:18:34: 42:db:8d:65:3a:3e:b6:1f:95:97:0d:b4:be:92:f9: 5e:05:b2:1d:28:3e:37:41:08:e5:87:2a:7e:58:d1: 97:3a:4c:e0:61:de:a9:48:0b:21:d4:34:c7:c0:12: a5:f1:58:93:ab:e3:7b:16:b4:0c:a1:bf:47:b9:eb: 0a:00:ba:21:8c:70:b7:b4:8c:2a:10:77:48:d9:b6: b8:c4:b8:bc:f8:31:28:c0:37:d1:72:30:9c:c0:0e: 7e:17:eb:5f:e1:70:18:16:66:68:b7:ac:f6:7a:38: 39:b9:e2:73:cc:89:5a:e8:42:28:0d:33:e8:d7:b6: ea:68:94:01:61:9e:91:5e:c1:5f:ed:61:5c:06:4b: 79:72:ae:92:bf:48:fe:cf:5c:66:4a:b1:06:c4:97: 06:80:90:43:bc:38:c6:57:72:97:48:73:b7:71:4b: 65:b3:56:96:60:42:f5:4f:09:f1:96:07:0f:00:f6: 6a:5c:c8:c8:cb:d9:99:a0:31:14:f0:39:16:b6:be: 7d:f8:14:54:b0:9c:2a:14:40:f9:92:0b:b0:95:a6: 98:3f:da:ab:fa:d6:1d:15:e1:78:09:52:39:bc:88: 64:8c:ba:1a:8a:c5:cc:13:08:0e:65:8d:4c:d2:c7: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F2:E1:2F:C7:80:83:F5:33:4A:9D:72:CD:09:8D:4C:A3:65:9A:16 X509v3 Authority Key Identifier: keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:6b:57:d8:c1:0e:b6:a6:c7:8a:92:1b:d8:f4:57:b6:08:70: 77:63:f6:5f:28:2b:62:2c:d1:67:bd:9f:8d:01:af:89:4e:7a: f9:f3:2b:7f:0b:97:c9:06:53:91:37:af:b8:1b:46:ee:3f:dd: 4f:d3:74:08:f5:56:91:fe:62:8d:ef:29:c1:5d:e8:c4:97:7d: d2:e3:f7:e8:d0:25:56:cf:74:cf:88:02:25:c7:80:0e:a9:30: b5:6b:f7:e1:f7:74:a6:be:75:99:bc:08:68:55:a3:c6:31:fe: 41:5e:94:4f:5a:10:5c:62:a8:1f:af:07:8e:61:01:a2:56:e1: 78:27:24:91:1f:49:3b:9a:c6:ed:5d:57:7a:c2:a3:e6:e9:26: e9:2b:cb:3b:f7:97:15:4f:e4:3a:93:b3:7c:00:75:a6:17:a9: 4c:e7:f8:3e:db:57:83:6b:0e:69:9d:54:3b:4f:2a:c0:42:04: da:13:4f:98:e6:ea:5d:6e:80:49:22:ad:15:1a:7e:e8:4b:e0: 95:7b:63:7e:10:8b:d1:88:ee:19:a0:f4:89:3e:91:3b:0e:b5: 41:72:b3:e7:87:a9:81:64:7e:31:01:d1:f6:4e:ca:17:9a:9d: 82:74:54:d6:94:e5:47:1d:c3:f1:40:c4:78:86:44:a5:62:26: b1:e3:a0:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWO9rh7nHpjSNj3t9Mgl2fnkwADUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVG MTg2MzYzQTAeFw0yNjA3MjAyMTI3NDdaFw0yNjA3MjIwMDM0NDdaMDMxMTAvBgNV BAMTKDNCRjJFMTJGQzc4MDgzRjUzMzRBOUQ3MkNEMDk4RDRDQTM2NTlBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Pl+kZZ+/nXeJjjgYNELbjWU6 PrYflZcNtL6S+V4Fsh0oPjdBCOWHKn5Y0Zc6TOBh3qlICyHUNMfAEqXxWJOr43sW tAyhv0e56woAuiGMcLe0jCoQd0jZtrjEuLz4MSjAN9FyMJzADn4X61/hcBgWZmi3 rPZ6ODm54nPMiVroQigNM+jXtupolAFhnpFewV/tYVwGS3lyrpK/SP7PXGZKsQbE lwaAkEO8OMZXcpdIc7dxS2WzVpZgQvVPCfGWBw8A9mpcyMjL2ZmgMRTwORa2vn34 FFSwnCoUQPmSC7CVppg/2qv61h0V4XgJUjm8iGSMuhqKxcwTCA5ljUzSx7UnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/LhL8eAg/UzSp1yzQmNTKNlmhYwHwYDVR0j BBgwFoAUaXsMnjZ+k/QqZpXZj7ag9fGGNjowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5NzNiZWItNjZiYS00OGJjLTkzNzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUz NjdFOTNGNDJBNjY5NUQ5OEZCNkEwRjVGMTg2MzYzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OTdCMEM5RTM2N0U5M0Y0MkE2Njk1RDk4RkI2QTBGNUYxODYz NjNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNjk3QjBDOUUzNjdFOTNGNDJBNjY5NUQ5OEZCNkEw RjVGMTg2MzYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdrV9jBDramx4qSG9j0V7YIcHdj9l8oK2Is 0We9n40Br4lOevnzK38Ll8kGU5E3r7gbRu4/3U/TdAj1VpH+Yo3vKcFd6MSXfdLj 9+jQJVbPdM+IAiXHgA6pMLVr9+H3dKa+dZm8CGhVo8Yx/kFelE9aEFxiqB+vB45h AaJW4XgnJJEfSTuaxu1dV3rCo+bpJukryzv3lxVP5DqTs3wAdaYXqUzn+D7bV4Nr DmmdVDtPKsBCBNoTT5jm6l1ugEkirRUafuhL4JV7Y34Qi9GI7hmg9Ik+kTsOtUFy s+eHqYFkfjEB0fZOyheanYJ0VNaU5Ucdw/FAxHiGRKViJrHjoMA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:43:35 2026 by rpki-client